This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/7776f2e5-dfbd-4f7f-8b3d-7b970d541b8f/0/AEFE27D29E7A975983A240B53A6F71C785F7E9A6.mft
File:                     AEFE27D29E7A975983A240B53A6F71C785F7E9A6.mft (raw, json)
Hash identifier:          xtaywa+7LNVXHEinvsMhh1Ss+jXtv4nj1oQ1o61mo1s=
Subject key identifier:   FB:57:E7:4E:27:A9:0C:55:CD:EA:65:50:F3:83:92:1F:59:60:84:34
Authority key identifier: AE:FE:27:D2:9E:7A:97:59:83:A2:40:B5:3A:6F:71:C7:85:F7:E9:A6
Certificate issuer:       /CN=AEFE27D29E7A975983A240B53A6F71C785F7E9A6
Certificate serial:       39D95291D4D3C099D8D7E78AA5192226E1AE166D
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AEFE27D29E7A975983A240B53A6F71C785F7E9A6.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/7776f2e5-dfbd-4f7f-8b3d-7b970d541b8f/0/AEFE27D29E7A975983A240B53A6F71C785F7E9A6.mft
Manifest number:          0265
Signing time:             Wed 03 Dec 2025 05:10:05 +0000
Manifest this update:     Wed 03 Dec 2025 05:05:05 +0000
Manifest next update:     Sat 06 Dec 2025 11:32:05 +0000
Files and hashes:         1: 3130332e3134372e3231392e302f32342d3234203d3e20313339393739.roa (hash: 6/L9OB0QhOR5SC/rJGv7qWwyRwcieoK2AORJh70ewMo=)
                          2: AEFE27D29E7A975983A240B53A6F71C785F7E9A6.crl (hash: P2ajKIGiexl2jHgqMclPdQqLyhVS5Q/ZOqsNRfR0VwU=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/7776f2e5-dfbd-4f7f-8b3d-7b970d541b8f/0/AEFE27D29E7A975983A240B53A6F71C785F7E9A6.crl
                          rsync://repo-rpki.idnic.net/repo/7776f2e5-dfbd-4f7f-8b3d-7b970d541b8f/0/AEFE27D29E7A975983A240B53A6F71C785F7E9A6.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AEFE27D29E7A975983A240B53A6F71C785F7E9A6.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 06 Dec 2025 11:32:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:d9:52:91:d4:d3:c0:99:d8:d7:e7:8a:a5:19:22:26:e1:ae:16:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AEFE27D29E7A975983A240B53A6F71C785F7E9A6
        Validity
            Not Before: Dec  3 05:05:05 2025 GMT
            Not After : Dec  6 11:32:05 2025 GMT
        Subject: CN=FB57E74E27A90C55CDEA6550F383921F59608434
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:03:42:59:df:ca:8e:e2:27:51:21:00:9a:47:
                    75:95:67:da:b3:64:d6:44:fc:49:1c:ac:e8:1d:4d:
                    c0:33:c6:c8:a2:a7:3a:f5:fc:0a:a2:df:f6:98:16:
                    5d:e7:c8:ed:94:bd:d1:4c:93:e5:86:51:ee:22:59:
                    d0:63:24:a0:f8:73:ed:1a:33:61:85:f0:03:d1:a3:
                    49:c8:33:02:92:24:9b:f6:68:31:41:09:0c:7d:e4:
                    c1:c8:07:60:e2:c4:cb:d2:05:89:e3:a4:0c:11:42:
                    e3:da:22:c8:5e:36:a6:47:d6:56:fa:44:c9:29:40:
                    9e:e0:da:c4:1d:b3:e1:4c:d6:31:31:ab:03:34:b6:
                    40:45:4f:e1:3d:03:8a:73:f8:93:5b:aa:75:e9:8b:
                    82:30:45:c2:5f:12:30:aa:26:40:81:6f:d5:18:7d:
                    30:cd:8c:3a:cd:55:b4:35:e6:10:83:2b:b7:b2:5e:
                    cb:fa:e9:d6:4f:bc:4a:63:ca:2b:a0:c4:5c:db:aa:
                    2a:7c:39:c8:7a:a2:81:bc:ab:36:39:f6:80:6f:2b:
                    9a:f7:47:d7:72:82:b7:32:d8:5c:7b:ad:e9:14:45:
                    7e:06:a3:2d:10:79:93:65:9a:b7:11:59:e2:90:6d:
                    a7:09:3a:9b:f2:7b:6d:48:f2:6a:27:e3:c6:96:68:
                    6b:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:57:E7:4E:27:A9:0C:55:CD:EA:65:50:F3:83:92:1F:59:60:84:34
            X509v3 Authority Key Identifier:
                keyid:AE:FE:27:D2:9E:7A:97:59:83:A2:40:B5:3A:6F:71:C7:85:F7:E9:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/7776f2e5-dfbd-4f7f-8b3d-7b970d541b8f/0/AEFE27D29E7A975983A240B53A6F71C785F7E9A6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AEFE27D29E7A975983A240B53A6F71C785F7E9A6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7776f2e5-dfbd-4f7f-8b3d-7b970d541b8f/0/AEFE27D29E7A975983A240B53A6F71C785F7E9A6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:73:01:60:1a:d5:0f:a4:51:af:38:7d:dd:ff:87:19:e8:2f:
         f2:54:ba:32:fd:5b:74:d6:b2:6d:88:d9:67:d2:e7:57:73:f1:
         4b:6d:2c:a3:90:05:17:89:77:0e:ef:9f:14:1d:f8:60:13:68:
         2c:1e:da:de:3f:51:83:c5:c6:aa:5d:6e:9f:14:04:2a:30:7f:
         ce:fe:af:4e:ec:dc:ff:03:c2:d3:57:bf:7a:24:22:b9:bb:2d:
         83:86:00:b3:8e:8b:c4:6f:6a:3a:90:a5:95:21:42:91:be:96:
         0f:b3:a3:25:bd:01:4a:35:75:f9:81:db:94:96:54:3f:77:8f:
         d2:81:96:bc:92:d3:d0:ec:fc:f2:b5:41:d3:3b:ec:de:21:12:
         2a:bc:68:91:2a:42:7b:11:c0:d9:f4:68:6e:a4:61:47:e7:8b:
         83:e9:31:8d:fa:8a:6e:06:24:51:55:7a:23:2c:b8:5b:5f:d7:
         83:6b:75:97:9a:af:c5:6d:c9:87:e7:3f:71:d9:2d:fb:4f:00:
         df:c1:70:97:61:e7:9d:2f:33:09:4b:34:b8:c4:63:4e:a5:4b:
         9a:f5:b5:8d:d2:15:9b:5c:e5:b7:6f:06:f3:7d:e3:c6:7e:42:
         5f:b2:65:52:2e:bf:15:45:48:14:b5:17:ec:dd:04:fb:8b:9f:
         21:78:1f:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 14:42:50 2025 by rpki-client