This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/6da0cdd9-7f31-4f1f-ab09-a60cc0859cda/0/2244AB179BDE031980D325EEBEAFEC994CA8B419.mft
File:                     2244AB179BDE031980D325EEBEAFEC994CA8B419.mft (raw, json)
Hash identifier:          /p/dcwnvIqICU7/IJGUgRz1NROAjGv2JUD4H9Ch9Q1A=
Subject key identifier:   10:FE:17:92:F6:31:53:57:40:D6:1A:76:21:FF:B3:98:6C:50:64:01
Authority key identifier: 22:44:AB:17:9B:DE:03:19:80:D3:25:EE:BE:AF:EC:99:4C:A8:B4:19
Certificate issuer:       /CN=2244AB179BDE031980D325EEBEAFEC994CA8B419
Certificate serial:       2C5ED357992536F581D6B3AB39B8E3F29AE44C73
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2244AB179BDE031980D325EEBEAFEC994CA8B419.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/6da0cdd9-7f31-4f1f-ab09-a60cc0859cda/0/2244AB179BDE031980D325EEBEAFEC994CA8B419.mft
Manifest number:          CF
Signing time:             Wed 03 Dec 2025 05:31:02 +0000
Manifest this update:     Wed 03 Dec 2025 05:26:02 +0000
Manifest next update:     Sat 06 Dec 2025 07:11:02 +0000
Files and hashes:         1: 2244AB179BDE031980D325EEBEAFEC994CA8B419.crl (hash: MLQiMnn9QorH6uamoRlVkYlj7LK1EEppyZV7llgk9Og=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/6da0cdd9-7f31-4f1f-ab09-a60cc0859cda/0/2244AB179BDE031980D325EEBEAFEC994CA8B419.crl
                          rsync://repo-rpki.idnic.net/repo/6da0cdd9-7f31-4f1f-ab09-a60cc0859cda/0/2244AB179BDE031980D325EEBEAFEC994CA8B419.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2244AB179BDE031980D325EEBEAFEC994CA8B419.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 06 Dec 2025 07:11:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:5e:d3:57:99:25:36:f5:81:d6:b3:ab:39:b8:e3:f2:9a:e4:4c:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2244AB179BDE031980D325EEBEAFEC994CA8B419
        Validity
            Not Before: Dec  3 05:26:02 2025 GMT
            Not After : Dec  6 07:11:02 2025 GMT
        Subject: CN=10FE1792F631535740D61A7621FFB3986C506401
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:15:21:7d:46:c7:7e:24:19:c7:c1:82:8d:c1:
                    87:20:0f:5a:95:e9:81:c5:21:9f:5e:d7:ab:ab:c2:
                    f6:f0:df:6b:61:d1:cd:71:ac:b0:0a:dd:89:c7:45:
                    45:ba:a5:ab:11:8b:4d:ce:f8:cc:b5:a9:8e:76:95:
                    68:7e:06:a9:bd:65:9d:98:50:d1:1d:f8:b0:1d:6f:
                    e1:90:d4:c5:7a:f4:55:54:fc:b4:84:b6:3c:fe:dd:
                    e0:d7:5c:48:23:05:ae:eb:d8:dd:c6:87:f2:65:ab:
                    ca:18:cb:c6:e6:5b:c8:6c:16:fc:ec:ad:2d:56:14:
                    91:05:6a:f7:5e:45:8b:77:45:88:72:e8:6e:c9:29:
                    a1:da:a0:54:bc:d7:54:0c:27:d1:60:48:8c:c4:f7:
                    db:1d:e7:f5:35:ac:58:5f:6f:13:3b:e0:61:c1:6c:
                    a0:76:a1:07:15:1d:58:29:b1:4a:e1:49:04:4f:52:
                    3b:2e:19:f7:e7:1e:ba:f7:f8:f5:d8:80:3c:f8:cc:
                    3a:41:d3:55:2f:87:ea:49:42:7e:99:14:39:98:93:
                    32:d0:51:dd:85:17:ef:a6:6d:56:b4:42:0b:f8:7e:
                    a1:1f:5b:f5:db:f1:6b:f8:6f:82:30:9f:70:2a:ad:
                    e1:8d:62:20:9a:08:47:b7:ad:67:a6:fb:6b:62:fc:
                    77:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:FE:17:92:F6:31:53:57:40:D6:1A:76:21:FF:B3:98:6C:50:64:01
            X509v3 Authority Key Identifier:
                keyid:22:44:AB:17:9B:DE:03:19:80:D3:25:EE:BE:AF:EC:99:4C:A8:B4:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/6da0cdd9-7f31-4f1f-ab09-a60cc0859cda/0/2244AB179BDE031980D325EEBEAFEC994CA8B419.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2244AB179BDE031980D325EEBEAFEC994CA8B419.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6da0cdd9-7f31-4f1f-ab09-a60cc0859cda/0/2244AB179BDE031980D325EEBEAFEC994CA8B419.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:af:36:90:a8:14:c9:10:63:34:8e:91:d7:ed:ff:d0:61:fd:
         f1:9f:0f:d0:b1:71:ea:b0:fe:a6:f8:ea:65:c4:53:38:e3:6b:
         51:ba:ab:21:d1:af:7d:d7:a4:b6:11:e8:73:f4:06:8a:13:d9:
         f9:a7:a2:43:64:a1:03:d6:81:4a:af:8f:5f:6b:be:22:02:fc:
         df:5c:8f:ad:ad:4f:3d:93:04:e2:88:fb:63:1d:8c:30:90:fe:
         7f:d3:50:18:29:44:95:57:66:59:f9:70:22:fa:7a:b1:53:94:
         70:6e:05:f5:97:7b:8c:59:58:90:f6:9b:b8:cd:b0:5f:da:fe:
         52:25:bc:9b:78:82:12:8e:45:07:6d:c0:cf:26:38:56:2c:39:
         c0:61:26:fc:dd:f6:62:ae:2e:c6:d3:96:4f:3e:70:7a:fb:ec:
         c2:86:d8:e3:9d:cd:91:3c:ea:28:a4:b4:dd:6b:af:e4:f0:65:
         d3:cf:9d:42:25:54:1c:7c:9a:b9:d4:32:84:47:e5:8c:b4:4c:
         5e:0e:e5:c7:db:90:b6:e9:11:b1:c1:9b:32:19:b4:8d:79:8d:
         0e:06:fa:22:52:24:ce:c8:8a:01:85:bb:77:f1:60:8f:77:39:
         83:74:1e:ff:f2:74:e9:16:dc:c6:00:ea:97:70:4e:84:59:3d:
         cb:15:c2:be
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIULF7TV5klNvWB1rOrObjj8prkTHMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjI0NEFCMTc5QkRFMDMxOTgwRDMyNUVFQkVBRkVDOTk0
Q0E4QjQxOTAeFw0yNTEyMDMwNTI2MDJaFw0yNTEyMDYwNzExMDJaMDMxMTAvBgNV
BAMTKDEwRkUxNzkyRjYzMTUzNTc0MEQ2MUE3NjIxRkZCMzk4NkM1MDY0MDEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCSFSF9Rsd+JBnHwYKNwYcgD1qV
6YHFIZ9e16urwvbw32th0c1xrLAK3YnHRUW6pasRi03O+My1qY52lWh+Bqm9ZZ2Y
UNEd+LAdb+GQ1MV69FVU/LSEtjz+3eDXXEgjBa7r2N3Gh/Jlq8oYy8bmW8hsFvzs
rS1WFJEFavdeRYt3RYhy6G7JKaHaoFS811QMJ9FgSIzE99sd5/U1rFhfbxM74GHB
bKB2oQcVHVgpsUrhSQRPUjsuGffnHrr3+PXYgDz4zDpB01Uvh+pJQn6ZFDmYkzLQ
Ud2FF++mbVa0Qgv4fqEfW/Xb8Wv4b4Iwn3AqreGNYiCaCEe3rWem+2ti/HeNAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUEP4XkvYxU1dA1hp2If+zmGxQZAEwHwYDVR0j
BBgwFoAUIkSrF5veAxmA0yXuvq/smUyotBkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82
ZGEwY2RkOS03ZjMxLTRmMWYtYWIwOS1hNjBjYzA4NTljZGEvMC8yMjQ0QUIxNzlC
REUwMzE5ODBEMzI1RUVCRUFGRUM5OTRDQThCNDE5LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMjI0NEFCMTc5QkRFMDMxOTgwRDMyNUVFQkVBRkVDOTk0Q0E4
QjQxOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmRhMGNkZDktN2YzMS00ZjFmLWFi
MDktYTYwY2MwODU5Y2RhLzAvMjI0NEFCMTc5QkRFMDMxOTgwRDMyNUVFQkVBRkVD
OTk0Q0E4QjQxOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBALCvNpCoFMkQYzSOkdft/9Bh/fGfD9Cxceqw
/qb46mXEUzjja1G6qyHRr33XpLYR6HP0BooT2fmnokNkoQPWgUqvj19rviIC/N9c
j62tTz2TBOKI+2MdjDCQ/n/TUBgpRJVXZln5cCL6erFTlHBuBfWXe4xZWJD2m7jN
sF/a/lIlvJt4ghKORQdtwM8mOFYsOcBhJvzd9mKuLsbTlk8+cHr77MKG2OOdzZE8
6iiktN1rr+TwZdPPnUIlVBx8mrnUMoRH5Yy0TF4O5cfbkLbpEbHBmzIZtI15jQ4G
+iJSJM7IigGFu3fxYI93OYN0Hv/ydOkW3MYA6pdwToRZPcsVwr4=
-----END CERTIFICATE-----
Generated at Wed Dec 3 13:58:06 2025 by rpki-client