This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/a85477ce-0717-47c0-8766-8b9bec0c086c/0/44430FD6ABCAB254BAE7AEF86E5F5D777FCC8045.mft
File:                     44430FD6ABCAB254BAE7AEF86E5F5D777FCC8045.mft (raw, json)
Hash identifier:          xxCM0u5a5Ka2oifPtdeXSmdLcHr4JMFQI/ARxewqbPc=
Subject key identifier:   D6:01:07:50:12:EF:C0:C0:06:31:6C:70:A0:E2:F0:FA:86:B9:C5:9E
Authority key identifier: 44:43:0F:D6:AB:CA:B2:54:BA:E7:AE:F8:6E:5F:5D:77:7F:CC:80:45
Certificate issuer:       /CN=44430FD6ABCAB254BAE7AEF86E5F5D777FCC8045
Certificate serial:       676F598F2DF09CF4DC4F0444584130B840808160
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44430FD6ABCAB254BAE7AEF86E5F5D777FCC8045.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/a85477ce-0717-47c0-8766-8b9bec0c086c/0/44430FD6ABCAB254BAE7AEF86E5F5D777FCC8045.mft
Manifest number:          04E6
Signing time:             Mon 01 Dec 2025 20:40:55 +0000
Manifest this update:     Mon 01 Dec 2025 20:35:55 +0000
Manifest next update:     Fri 05 Dec 2025 08:03:55 +0000
Files and hashes:         1: 44430FD6ABCAB254BAE7AEF86E5F5D777FCC8045.crl (hash: gZ/47btYmAwNaKTb4QuVPehADmDq/9ekijz8mc4RaPo=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/a85477ce-0717-47c0-8766-8b9bec0c086c/0/44430FD6ABCAB254BAE7AEF86E5F5D777FCC8045.crl
                          rsync://repo-rpki.idnic.net/repo/a85477ce-0717-47c0-8766-8b9bec0c086c/0/44430FD6ABCAB254BAE7AEF86E5F5D777FCC8045.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44430FD6ABCAB254BAE7AEF86E5F5D777FCC8045.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 05 Dec 2025 08:03:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:6f:59:8f:2d:f0:9c:f4:dc:4f:04:44:58:41:30:b8:40:80:81:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44430FD6ABCAB254BAE7AEF86E5F5D777FCC8045
        Validity
            Not Before: Dec  1 20:35:55 2025 GMT
            Not After : Dec  5 08:03:55 2025 GMT
        Subject: CN=D601075012EFC0C006316C70A0E2F0FA86B9C59E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:e7:62:f8:63:26:9c:1a:8c:58:87:40:ab:3b:
                    39:6e:3d:0d:31:c4:9c:e8:86:27:83:e3:41:ca:7e:
                    ee:77:ff:d5:80:b6:cd:bd:1c:ed:5d:ff:eb:f1:ff:
                    35:1a:d3:96:8b:08:84:48:23:c8:95:6d:dc:0d:c4:
                    98:5a:18:75:a3:91:46:92:e8:06:41:d2:d6:05:57:
                    e4:a7:09:b5:04:dc:f6:12:4f:e2:7b:43:23:80:f8:
                    71:5b:87:d7:a5:d8:62:9e:83:a9:44:ba:52:5e:79:
                    02:68:52:47:93:11:97:8b:06:ec:a7:b6:bc:39:e7:
                    a1:a2:6e:ae:ed:bb:3a:00:68:75:27:93:43:c0:1a:
                    a4:fa:69:65:79:c7:96:3d:3f:63:f1:6d:d5:26:4e:
                    cc:f2:67:6b:b6:a5:42:a8:1c:da:12:e4:27:44:22:
                    62:f6:01:7b:d7:82:93:66:1b:9f:c9:9b:78:cb:98:
                    82:91:2f:b2:cc:bf:6d:bf:65:3b:3a:ba:42:93:07:
                    86:48:59:f8:08:49:a5:14:df:c1:b0:39:f5:83:83:
                    93:8f:f5:e7:cf:24:d2:94:d9:56:f0:4e:90:a0:ff:
                    4f:e7:7b:b1:42:40:f9:cc:94:e2:9c:32:65:6c:5a:
                    26:cc:29:ef:1c:0b:d3:12:2d:e9:1f:2b:13:b5:58:
                    33:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:01:07:50:12:EF:C0:C0:06:31:6C:70:A0:E2:F0:FA:86:B9:C5:9E
            X509v3 Authority Key Identifier:
                keyid:44:43:0F:D6:AB:CA:B2:54:BA:E7:AE:F8:6E:5F:5D:77:7F:CC:80:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/a85477ce-0717-47c0-8766-8b9bec0c086c/0/44430FD6ABCAB254BAE7AEF86E5F5D777FCC8045.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44430FD6ABCAB254BAE7AEF86E5F5D777FCC8045.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a85477ce-0717-47c0-8766-8b9bec0c086c/0/44430FD6ABCAB254BAE7AEF86E5F5D777FCC8045.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:db:ac:3f:56:f3:94:ca:89:d6:c7:9a:b0:48:9d:4f:97:78:
         c8:85:6c:1d:98:d7:47:0f:67:3c:e3:e3:ed:0b:85:da:41:ee:
         60:29:2f:59:d9:09:b7:0f:19:73:23:68:0f:be:89:e8:a4:de:
         68:17:c1:24:71:ae:90:c4:17:69:66:b6:df:5b:c1:a5:36:1a:
         a3:40:98:a8:41:aa:d2:8f:6e:7d:05:13:74:80:b0:56:e7:30:
         21:7a:0d:78:19:ec:cd:3e:a7:6d:61:92:65:74:57:db:80:32:
         62:84:66:30:35:4e:2d:bb:4b:8f:11:49:e7:65:8e:ed:ba:d1:
         97:23:e7:e7:d9:76:69:a1:ff:31:73:99:a9:26:6b:79:a6:4e:
         4d:39:56:e7:e9:12:e9:32:a0:a1:ff:19:72:51:ba:7f:74:31:
         48:07:4f:37:b5:25:cb:52:23:14:ba:56:e9:70:f4:47:a8:04:
         5e:2b:2c:dc:e3:bf:4d:60:41:a1:b1:fb:be:eb:d2:c6:66:9e:
         3c:fc:b5:92:74:58:ae:ff:81:f0:b4:97:c1:00:2d:4b:67:24:
         9e:de:17:82:03:75:55:76:fe:08:76:be:01:3f:3c:76:1a:9c:
         bf:5f:53:d8:a1:25:a8:9b:19:a9:6c:b7:50:8b:78:83:ec:28:
         46:45:c7:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 14:41:52 2025 by rpki-client