This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/ab88d2ca-229b-4aac-9b5c-42c15105bb82/0/4ED16B9231905A1C7A353DF749BF99487E69E313.mft
File:                     4ED16B9231905A1C7A353DF749BF99487E69E313.mft (raw, json)
Hash identifier:          ZuuXHxMKesuvTypqBR7JDQ0dGq1azVjQ0ZWV0JtabkM=
Subject key identifier:   A6:DD:09:E9:F1:91:C7:22:C3:68:C2:DC:04:A1:D1:4F:3F:6E:CE:0F
Authority key identifier: 4E:D1:6B:92:31:90:5A:1C:7A:35:3D:F7:49:BF:99:48:7E:69:E3:13
Certificate issuer:       /CN=4ED16B9231905A1C7A353DF749BF99487E69E313
Certificate serial:       59D842F6FE25001C36B4DFB0A5FE6FD8461BEE2F
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/4ED16B9231905A1C7A353DF749BF99487E69E313.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/ab88d2ca-229b-4aac-9b5c-42c15105bb82/0/4ED16B9231905A1C7A353DF749BF99487E69E313.mft
Manifest number:          0113
Signing time:             Sun 07 Dec 2025 08:51:30 +0000
Manifest this update:     Sun 07 Dec 2025 08:46:30 +0000
Manifest next update:     Wed 10 Dec 2025 10:01:30 +0000
Files and hashes:         1: 3135372e32302e3130302e302f32342d3234203d3e20313532343235.roa (hash: bm0cLaD/jg5NiXGndb/98PNppE3HSK9OAR2k8wtE41Y=)
                          2: 4ED16B9231905A1C7A353DF749BF99487E69E313.crl (hash: 4xiUc+sOUOiGlOA711V6p69dHVnVDA/E2itGxSa665g=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/ab88d2ca-229b-4aac-9b5c-42c15105bb82/0/4ED16B9231905A1C7A353DF749BF99487E69E313.crl
                          rsync://repo-rpki.idnic.net/repo/ab88d2ca-229b-4aac-9b5c-42c15105bb82/0/4ED16B9231905A1C7A353DF749BF99487E69E313.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/4ED16B9231905A1C7A353DF749BF99487E69E313.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 09 Dec 2025 06:55:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:d8:42:f6:fe:25:00:1c:36:b4:df:b0:a5:fe:6f:d8:46:1b:ee:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ED16B9231905A1C7A353DF749BF99487E69E313
        Validity
            Not Before: Dec  7 08:46:30 2025 GMT
            Not After : Dec 10 10:01:30 2025 GMT
        Subject: CN=A6DD09E9F191C722C368C2DC04A1D14F3F6ECE0F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:58:51:7d:26:23:7f:7f:cf:66:7f:96:4a:2f:
                    23:97:f5:f7:fb:27:3e:33:41:89:05:62:a6:e1:21:
                    24:88:e4:c3:fc:43:59:98:18:f8:f7:85:73:e7:fd:
                    d1:49:e0:83:5c:a6:6f:39:c3:5f:25:e8:39:2e:04:
                    02:d5:47:77:e2:af:f2:05:3c:1f:90:22:ff:17:9b:
                    e0:8f:ab:58:56:ab:88:b3:06:86:61:3d:05:1a:66:
                    30:40:71:ac:cf:a1:44:54:68:02:d3:14:80:a9:61:
                    1f:e3:70:a5:09:65:12:0b:96:a7:75:03:3b:b4:3f:
                    20:50:80:af:12:5c:22:89:3c:ef:9a:98:ac:a5:87:
                    15:53:42:38:19:91:0e:a9:7e:32:8b:a0:9e:9f:60:
                    9e:29:bd:82:d4:5e:4f:98:07:91:d0:a7:e7:bc:ba:
                    a0:9d:6d:03:fd:01:f1:6b:4c:ca:34:e8:ef:9e:1b:
                    48:7a:02:a7:23:9f:8c:9b:77:65:fc:2c:d4:41:25:
                    f9:80:d3:25:43:d4:92:62:92:44:a5:36:e0:8b:ee:
                    d6:78:a5:ac:53:c3:16:f8:58:ff:0a:c9:d3:99:a8:
                    53:83:34:ce:33:a8:b1:ed:38:33:94:2c:03:c5:73:
                    d3:1e:52:d8:27:cb:2b:1b:47:d6:89:80:43:b7:c6:
                    d2:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:DD:09:E9:F1:91:C7:22:C3:68:C2:DC:04:A1:D1:4F:3F:6E:CE:0F
            X509v3 Authority Key Identifier:
                keyid:4E:D1:6B:92:31:90:5A:1C:7A:35:3D:F7:49:BF:99:48:7E:69:E3:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/ab88d2ca-229b-4aac-9b5c-42c15105bb82/0/4ED16B9231905A1C7A353DF749BF99487E69E313.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/4ED16B9231905A1C7A353DF749BF99487E69E313.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ab88d2ca-229b-4aac-9b5c-42c15105bb82/0/4ED16B9231905A1C7A353DF749BF99487E69E313.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:5c:d5:74:a3:02:46:db:55:41:e5:94:72:11:91:90:62:55:
         b8:af:b0:07:11:7a:e8:37:11:7b:d8:82:37:ce:5d:4b:5f:43:
         f0:31:89:c3:61:a4:fb:48:52:4a:42:3d:35:da:7c:2a:2d:77:
         bc:78:1b:ec:f5:d2:ee:a5:78:31:87:4a:ae:23:fd:1d:45:01:
         17:d2:3d:ae:7b:28:0c:5f:29:98:7f:16:d8:03:ad:11:cf:fc:
         42:70:e5:57:92:2c:08:bd:fd:9e:a0:f2:2d:dd:b0:70:0d:1c:
         51:3b:e1:7d:d9:f4:22:31:fb:12:d4:09:b4:78:b4:b4:18:47:
         06:5b:1e:f2:83:7c:a3:ff:dc:c6:61:ac:e2:5f:85:81:07:15:
         25:36:e7:d3:c4:e2:53:f9:3d:7c:18:19:c5:09:79:cc:43:89:
         b9:14:ef:dd:2f:17:3d:45:ba:f0:7d:c8:56:a8:7b:89:aa:81:
         71:6e:a4:73:98:b6:38:e5:6c:bf:1f:95:f2:d7:6f:f4:dc:b1:
         a5:90:43:0b:73:d4:81:48:a0:34:39:43:d5:51:61:82:3e:55:
         9e:40:d9:b1:c2:db:32:e3:71:66:4e:55:a0:c4:57:bb:1a:5f:
         2c:ce:39:6a:be:eb:f3:23:57:19:83:13:1d:04:4f:4f:fd:19:
         f3:2e:0d:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 18:53:52 2025 by rpki-client