This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/6c4e1669-68f7-4a39-acc0-57c7187b6cb7/0/F2A96B013D78D9DD2AD046F90529AB07E832FD44.mft
File:                     F2A96B013D78D9DD2AD046F90529AB07E832FD44.mft (raw, json)
Hash identifier:          axZPMzoPkAqzgRQt8/uTmT+NeRV9viBQZpPcJzb4+pw=
Subject key identifier:   47:47:25:49:AD:53:ED:B1:87:9D:81:B5:52:72:06:D1:DC:9E:9B:B5
Authority key identifier: F2:A9:6B:01:3D:78:D9:DD:2A:D0:46:F9:05:29:AB:07:E8:32:FD:44
Certificate issuer:       /CN=F2A96B013D78D9DD2AD046F90529AB07E832FD44
Certificate serial:       654749B496D9C60E83253D08B43EF1D3667D2274
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F2A96B013D78D9DD2AD046F90529AB07E832FD44.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/6c4e1669-68f7-4a39-acc0-57c7187b6cb7/0/F2A96B013D78D9DD2AD046F90529AB07E832FD44.mft
Manifest number:          01B3
Signing time:             Wed 03 Dec 2025 09:32:08 +0000
Manifest this update:     Wed 03 Dec 2025 09:27:08 +0000
Manifest next update:     Sat 06 Dec 2025 17:53:08 +0000
Files and hashes:         1: F2A96B013D78D9DD2AD046F90529AB07E832FD44.crl (hash: 3VMaibWFpQ19wObSCOZDMUqyEuZpT5mRPQc0FT7VGxE=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/6c4e1669-68f7-4a39-acc0-57c7187b6cb7/0/F2A96B013D78D9DD2AD046F90529AB07E832FD44.crl
                          rsync://repo-rpki.idnic.net/repo/6c4e1669-68f7-4a39-acc0-57c7187b6cb7/0/F2A96B013D78D9DD2AD046F90529AB07E832FD44.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F2A96B013D78D9DD2AD046F90529AB07E832FD44.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 06 Dec 2025 12:07:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:47:49:b4:96:d9:c6:0e:83:25:3d:08:b4:3e:f1:d3:66:7d:22:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F2A96B013D78D9DD2AD046F90529AB07E832FD44
        Validity
            Not Before: Dec  3 09:27:08 2025 GMT
            Not After : Dec  6 17:53:08 2025 GMT
        Subject: CN=47472549AD53EDB1879D81B5527206D1DC9E9BB5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:91:83:9a:6d:ec:c5:55:4c:86:b7:b8:0c:48:
                    23:d5:61:94:f8:4a:f3:9d:12:ef:7d:ea:c9:10:7a:
                    31:52:af:f2:8d:69:f4:4c:a6:b9:f8:3f:4e:65:d6:
                    96:44:fc:c0:cd:98:23:f3:f3:b6:6f:e2:93:26:0e:
                    62:b4:57:e9:f3:65:9b:5f:6a:eb:f3:2d:57:7d:fe:
                    f4:55:71:a8:9e:93:7f:05:dd:2e:9a:e5:a5:68:ad:
                    ea:f8:69:77:38:fc:63:38:b2:5d:f5:3f:ae:62:a9:
                    5e:1d:68:3f:3f:e1:ce:91:8d:0f:81:73:10:d3:a0:
                    c0:e7:73:16:45:4d:e4:b3:f4:4d:07:3c:7d:72:6a:
                    55:eb:2d:e1:00:28:c1:78:ef:04:58:ca:5b:d7:5c:
                    32:88:45:29:a7:83:0e:ad:3e:ba:24:0a:44:7c:f9:
                    ba:da:1d:7b:d2:0a:26:7f:a6:5f:84:64:9c:43:d3:
                    36:cd:ac:19:6e:7b:d2:d6:d7:10:a5:21:94:64:e8:
                    75:55:9c:90:a6:f0:9b:a8:0a:e3:8d:05:49:1b:0b:
                    ed:6a:27:dd:56:0c:25:cf:6e:42:91:4f:8d:b8:31:
                    79:cc:36:70:f9:19:2b:76:95:09:a2:6b:4e:e4:29:
                    ee:76:8b:33:21:25:90:27:f0:d0:4d:5a:b1:a7:e0:
                    15:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:47:25:49:AD:53:ED:B1:87:9D:81:B5:52:72:06:D1:DC:9E:9B:B5
            X509v3 Authority Key Identifier:
                keyid:F2:A9:6B:01:3D:78:D9:DD:2A:D0:46:F9:05:29:AB:07:E8:32:FD:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/6c4e1669-68f7-4a39-acc0-57c7187b6cb7/0/F2A96B013D78D9DD2AD046F90529AB07E832FD44.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F2A96B013D78D9DD2AD046F90529AB07E832FD44.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6c4e1669-68f7-4a39-acc0-57c7187b6cb7/0/F2A96B013D78D9DD2AD046F90529AB07E832FD44.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:d9:3b:f2:e6:10:66:94:a8:4c:ee:ac:0b:12:c8:98:e4:af:
         45:49:25:e8:35:5e:b9:30:32:c0:9d:b8:c2:e3:c7:06:5a:c1:
         db:7f:70:d6:2a:f1:08:31:37:fc:ba:b7:6d:90:9f:d2:77:d3:
         6c:70:bf:f6:f3:24:a8:4e:af:7d:40:bf:64:41:e2:c3:73:91:
         04:40:39:6d:01:e1:60:9e:3d:d6:37:e9:a8:2d:cc:da:a9:28:
         d5:e0:29:ad:19:56:16:4f:6b:a4:06:e2:e0:2f:9f:52:23:1f:
         23:c5:d4:c1:1e:3f:e4:3f:25:fc:32:f0:fd:23:6b:0b:ed:24:
         ed:20:98:cd:9e:49:61:19:09:f4:8c:39:21:e7:bb:e6:85:f6:
         02:5f:c9:90:b2:72:20:df:19:b7:cf:51:c1:fd:cb:9c:c2:f1:
         57:3c:9d:c4:3d:69:73:3e:d7:72:9f:f2:0e:06:7c:23:5a:89:
         b4:07:34:ae:4a:41:68:7a:64:63:37:0c:cb:7e:79:99:25:33:
         43:da:e9:4f:9e:44:e8:36:16:df:7d:e2:3c:6a:44:25:f9:ba:
         b7:17:8f:fd:18:61:c9:e3:38:dd:53:bc:2d:2e:6e:d5:be:96:
         84:3c:b6:6c:18:b7:31:f9:e5:3b:9c:3a:71:c9:86:8e:76:fa:
         26:be:91:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 14:42:46 2025 by rpki-client