This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/9a0129a8-27e8-4046-8989-865b257ea6ca/0/A64957715E7DCEEC3A7D4C3176CC97ED8E5DB31A.mft
File:                     A64957715E7DCEEC3A7D4C3176CC97ED8E5DB31A.mft (raw, json)
Hash identifier:          HSGGYt/mMV+P7gdExp50H9V5W/EsomrLpeuSeEi6Guw=
Subject key identifier:   F1:29:3D:D9:EF:F6:85:01:04:99:4C:33:87:34:00:34:AD:EC:AD:33
Authority key identifier: A6:49:57:71:5E:7D:CE:EC:3A:7D:4C:31:76:CC:97:ED:8E:5D:B3:1A
Certificate issuer:       /CN=A64957715E7DCEEC3A7D4C3176CC97ED8E5DB31A
Certificate serial:       7BE25BE6E44795BE5903685E9D66AA4F800E5FC6
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A64957715E7DCEEC3A7D4C3176CC97ED8E5DB31A.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/9a0129a8-27e8-4046-8989-865b257ea6ca/0/A64957715E7DCEEC3A7D4C3176CC97ED8E5DB31A.mft
Manifest number:          01B5
Signing time:             Wed 03 Dec 2025 09:32:18 +0000
Manifest this update:     Wed 03 Dec 2025 09:27:18 +0000
Manifest next update:     Sat 06 Dec 2025 13:06:18 +0000
Files and hashes:         1: A64957715E7DCEEC3A7D4C3176CC97ED8E5DB31A.crl (hash: pTtJe/gLUXK92lsf6+ErifuvJFxe3zYjgNnDkUXgnyU=)
                          2: 3130332e3230332e39302e302f32342d3234203d3e20313530393236.roa (hash: lH+IV1VjfExz6EgaEksT/6x5pW3sOfiOZbcnKLG8hUk=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/9a0129a8-27e8-4046-8989-865b257ea6ca/0/A64957715E7DCEEC3A7D4C3176CC97ED8E5DB31A.crl
                          rsync://repo-rpki.idnic.net/repo/9a0129a8-27e8-4046-8989-865b257ea6ca/0/A64957715E7DCEEC3A7D4C3176CC97ED8E5DB31A.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A64957715E7DCEEC3A7D4C3176CC97ED8E5DB31A.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 06 Dec 2025 12:07:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:e2:5b:e6:e4:47:95:be:59:03:68:5e:9d:66:aa:4f:80:0e:5f:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A64957715E7DCEEC3A7D4C3176CC97ED8E5DB31A
        Validity
            Not Before: Dec  3 09:27:18 2025 GMT
            Not After : Dec  6 13:06:18 2025 GMT
        Subject: CN=F1293DD9EFF6850104994C3387340034ADECAD33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:19:74:89:e4:13:55:2e:33:f5:52:3b:88:7e:
                    e0:d5:25:cb:e5:0d:01:4b:56:42:fc:5c:48:5d:a3:
                    61:74:a8:f6:5d:7d:7c:49:21:e1:28:45:23:e5:05:
                    b3:cc:a8:39:65:ea:65:8e:e3:ab:d5:d6:91:0f:0a:
                    eb:f8:44:c3:7e:a6:9e:4f:c3:77:f6:03:53:1b:95:
                    f8:db:41:4e:c7:61:73:18:90:4a:c9:f0:01:95:b7:
                    c5:42:fe:b9:10:f5:70:8d:46:b2:48:fa:2c:d5:a7:
                    5c:56:ff:f1:55:e1:70:c3:26:30:f6:72:47:e5:e9:
                    aa:6d:f5:86:36:66:53:f3:a3:66:54:eb:40:92:ab:
                    e9:f4:da:2b:37:18:3a:0d:03:50:5e:ef:64:78:a5:
                    ae:e9:c7:ee:38:c5:d7:78:fc:05:89:93:cf:72:34:
                    f1:6e:42:31:5e:a1:94:63:26:92:ef:b5:94:48:7a:
                    6a:c4:fe:80:5b:68:cc:92:8b:63:5d:5e:a6:8e:80:
                    86:0a:e7:c1:dc:85:68:d2:6b:87:4f:ba:3c:8f:b5:
                    a9:6d:d4:aa:7d:2a:34:65:d0:35:8b:50:83:5f:92:
                    02:10:b6:39:2e:81:d0:d8:b3:7f:68:6b:44:85:e2:
                    cf:78:58:c4:2e:f4:85:e1:b7:14:41:1b:26:e2:1c:
                    7f:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:29:3D:D9:EF:F6:85:01:04:99:4C:33:87:34:00:34:AD:EC:AD:33
            X509v3 Authority Key Identifier:
                keyid:A6:49:57:71:5E:7D:CE:EC:3A:7D:4C:31:76:CC:97:ED:8E:5D:B3:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/9a0129a8-27e8-4046-8989-865b257ea6ca/0/A64957715E7DCEEC3A7D4C3176CC97ED8E5DB31A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A64957715E7DCEEC3A7D4C3176CC97ED8E5DB31A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9a0129a8-27e8-4046-8989-865b257ea6ca/0/A64957715E7DCEEC3A7D4C3176CC97ED8E5DB31A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:14:2b:d8:0d:82:13:36:5b:6b:c4:18:b4:0f:b1:ce:06:7d:
         d5:3d:01:a0:6c:57:c3:00:14:bb:e3:4f:13:19:db:77:6d:9a:
         19:71:bf:eb:02:75:f0:95:f1:52:bc:d0:4b:54:ae:b8:52:6a:
         fa:01:75:f8:b2:29:a2:9f:7c:a7:bc:3f:c0:3c:b4:f3:cf:1b:
         6a:3a:aa:d4:0b:25:97:3c:5a:02:14:73:2c:3c:ee:8f:96:11:
         30:c5:50:d7:cb:21:bb:17:0c:82:4e:c2:bb:2c:cc:e5:35:3f:
         de:7a:ba:f6:ee:9b:f8:85:c5:66:56:bf:e1:52:a4:33:ed:a8:
         b7:82:bc:7e:86:1e:ac:33:1c:3f:e9:3f:39:1f:14:14:5f:a9:
         c2:1a:38:a1:6f:ce:06:83:3a:a8:f0:5a:45:27:41:95:fd:fa:
         97:b6:9f:4f:d8:57:f5:01:8a:90:53:c8:e2:ca:d1:be:cd:0d:
         58:d2:87:86:55:40:c7:5d:3b:e0:b0:04:10:d4:9d:10:08:1d:
         cc:e1:65:28:e7:41:fa:73:65:80:a5:3f:a9:67:a5:de:79:88:
         99:3f:f8:ad:79:df:92:25:9f:55:cc:60:14:89:df:86:7d:d0:
         d1:e6:49:45:31:54:1a:61:b2:87:9f:d3:8a:8c:e7:62:93:00:
         0e:3f:bc:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 13:57:04 2025 by rpki-client