This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/9b733dcf-9f5e-4775-9ce7-9dd525b44b86/0/4538753AD01FB91D7B028CC53F5AEC24AD6CD082.mft
File:                     4538753AD01FB91D7B028CC53F5AEC24AD6CD082.mft (raw, json)
Hash identifier:          GnDBLQdfvYpsoIBalASf7pmO7/4Ssvwv71EMLDH04iQ=
Subject key identifier:   0B:4B:79:1B:70:7C:2E:18:BB:13:0A:A9:8F:67:B4:EE:C3:0D:1A:F1
Authority key identifier: 45:38:75:3A:D0:1F:B9:1D:7B:02:8C:C5:3F:5A:EC:24:AD:6C:D0:82
Certificate issuer:       /CN=4538753AD01FB91D7B028CC53F5AEC24AD6CD082
Certificate serial:       693E7ECFE2224D7F376322E35DBE450348E7B60E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/4538753AD01FB91D7B028CC53F5AEC24AD6CD082.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/9b733dcf-9f5e-4775-9ce7-9dd525b44b86/0/4538753AD01FB91D7B028CC53F5AEC24AD6CD082.mft
Manifest number:          E6
Signing time:             Mon 15 Dec 2025 01:42:27 +0000
Manifest this update:     Mon 15 Dec 2025 01:37:27 +0000
Manifest next update:     Thu 18 Dec 2025 07:21:27 +0000
Files and hashes:         1: 3135372e36362e3137342e302f32332d3234203d3e20313532373439.roa (hash: 5hBop//FL91nh6eglb7Afoy10VVM0UIJy8JFCFrZk+s=)
                          2: 4538753AD01FB91D7B028CC53F5AEC24AD6CD082.crl (hash: 8ApBcREqNirQlQpii4AIaSZ5EXM/I/SpFp+Gpj3v3Qs=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/9b733dcf-9f5e-4775-9ce7-9dd525b44b86/0/4538753AD01FB91D7B028CC53F5AEC24AD6CD082.crl
                          rsync://repo-rpki.idnic.net/repo/9b733dcf-9f5e-4775-9ce7-9dd525b44b86/0/4538753AD01FB91D7B028CC53F5AEC24AD6CD082.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/4538753AD01FB91D7B028CC53F5AEC24AD6CD082.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 18 Dec 2025 07:21:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:3e:7e:cf:e2:22:4d:7f:37:63:22:e3:5d:be:45:03:48:e7:b6:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4538753AD01FB91D7B028CC53F5AEC24AD6CD082
        Validity
            Not Before: Dec 15 01:37:27 2025 GMT
            Not After : Dec 18 07:21:27 2025 GMT
        Subject: CN=0B4B791B707C2E18BB130AA98F67B4EEC30D1AF1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:77:54:95:14:18:ac:ae:2b:5b:b5:06:82:8a:
                    72:b0:aa:6d:5f:b1:6e:d6:77:63:49:bb:2e:33:a8:
                    5b:bc:44:5a:c3:09:30:bf:ed:d2:93:e4:40:e5:c8:
                    80:86:a6:c4:f3:a1:86:21:a0:c0:6f:6b:2a:6d:ce:
                    59:91:78:d6:f4:b2:42:16:50:57:f4:31:18:05:f2:
                    41:f9:f5:32:64:40:0b:32:54:8a:74:ee:d3:e4:e6:
                    73:1c:ac:43:ec:1e:73:7b:1f:5f:cf:92:dd:94:f7:
                    35:2d:03:7a:4a:a4:51:87:a6:9a:39:2f:94:0a:83:
                    0c:fa:c7:d4:78:31:74:81:de:52:12:7a:1c:ec:bc:
                    39:85:3f:ca:f5:07:8e:3a:a0:05:f1:b1:00:9a:a8:
                    46:7f:62:cb:e6:52:8c:ee:6b:2b:76:a2:c7:66:05:
                    21:42:3c:f5:1c:52:82:2b:4f:29:51:11:2e:08:91:
                    e8:11:1b:0a:46:fa:92:84:40:b2:d5:71:06:f0:23:
                    1d:3f:b8:3f:57:3f:03:3e:fe:63:aa:fc:f2:26:f7:
                    cc:5f:18:51:dc:9e:23:74:d4:92:81:4e:ad:0b:f7:
                    36:4b:f7:ff:b6:2d:53:cb:a3:75:67:56:60:b2:fd:
                    a7:65:a4:fc:d0:16:48:fe:2d:b2:07:ce:05:ac:db:
                    12:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:4B:79:1B:70:7C:2E:18:BB:13:0A:A9:8F:67:B4:EE:C3:0D:1A:F1
            X509v3 Authority Key Identifier:
                keyid:45:38:75:3A:D0:1F:B9:1D:7B:02:8C:C5:3F:5A:EC:24:AD:6C:D0:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/9b733dcf-9f5e-4775-9ce7-9dd525b44b86/0/4538753AD01FB91D7B028CC53F5AEC24AD6CD082.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/4538753AD01FB91D7B028CC53F5AEC24AD6CD082.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9b733dcf-9f5e-4775-9ce7-9dd525b44b86/0/4538753AD01FB91D7B028CC53F5AEC24AD6CD082.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:3e:82:d3:4c:e7:a2:aa:85:26:61:ad:a5:a6:c2:d9:20:19:
         e7:69:ab:b9:ab:6b:1d:60:d8:11:04:39:a0:1c:f5:9c:d7:b9:
         52:fb:f1:72:d4:a2:6b:13:71:0e:42:53:a8:e5:89:51:a1:5e:
         1d:35:8e:ca:75:ae:70:e4:9c:61:db:e6:40:d6:69:01:0d:0a:
         f6:0e:6e:b5:ac:bd:0c:85:2e:97:4a:13:c0:9d:aa:ac:29:d5:
         8d:32:b2:8f:a4:4d:a1:4c:60:12:d0:e7:76:25:2c:03:09:52:
         ab:04:53:db:d0:af:36:3f:2b:27:62:ed:88:f3:04:58:c0:4b:
         f1:a4:bc:9e:fe:e8:d1:f4:e9:f4:c2:85:15:e9:a5:47:ca:f8:
         dd:f2:a3:e7:ff:fe:fa:5f:50:f6:a1:ad:cc:95:d3:5c:db:b9:
         1a:ad:32:e1:48:80:67:32:6d:58:cd:c8:b7:f1:8a:a1:22:a2:
         e3:c2:a0:30:30:61:f1:d0:b5:e7:7b:6c:5d:d5:29:7b:62:42:
         f2:23:70:50:66:dc:89:ff:3d:67:19:9e:01:3e:2a:d3:b4:89:
         c9:ac:c5:55:c1:ea:83:d1:48:20:77:a1:86:5a:96:04:25:f6:
         fe:2d:ce:78:b2:e9:13:da:2d:98:ad:40:38:65:56:ad:4f:a1:
         ee:41:52:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 15 14:50:00 2025 by rpki-client