This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/1/1E64BF65051052D913D7DB8C4512F615E3FAB9B2.mft
File:                     1E64BF65051052D913D7DB8C4512F615E3FAB9B2.mft (raw, json)
Hash identifier:          DNPobFKL9uItQcGMw1A5OayaAoNg515PvPVRMKlKuAk=
Subject key identifier:   DB:E7:2A:85:AF:44:F3:C1:45:2B:A7:53:E5:1C:3C:A8:13:A0:0B:30
Authority key identifier: 1E:64:BF:65:05:10:52:D9:13:D7:DB:8C:45:12:F6:15:E3:FA:B9:B2
Certificate issuer:       /CN=1E64BF65051052D913D7DB8C4512F615E3FAB9B2
Certificate serial:       034B38752940AF271E53E36BAD2E79D439952A34
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1E64BF65051052D913D7DB8C4512F615E3FAB9B2.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/1/1E64BF65051052D913D7DB8C4512F615E3FAB9B2.mft
Manifest number:          F2
Signing time:             Wed 03 Dec 2025 08:51:11 +0000
Manifest this update:     Wed 03 Dec 2025 08:46:11 +0000
Manifest next update:     Sat 06 Dec 2025 12:15:11 +0000
Files and hashes:         1: 1E64BF65051052D913D7DB8C4512F615E3FAB9B2.crl (hash: lefrwOabQU10d0NZgStVGpYKJwJPe6RM8jE+OrXv3Qo=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/1/1E64BF65051052D913D7DB8C4512F615E3FAB9B2.crl
                          rsync://repo-rpki.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/1/1E64BF65051052D913D7DB8C4512F615E3FAB9B2.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1E64BF65051052D913D7DB8C4512F615E3FAB9B2.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 06 Dec 2025 12:15:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:4b:38:75:29:40:af:27:1e:53:e3:6b:ad:2e:79:d4:39:95:2a:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1E64BF65051052D913D7DB8C4512F615E3FAB9B2
        Validity
            Not Before: Dec  3 08:46:11 2025 GMT
            Not After : Dec  6 12:15:11 2025 GMT
        Subject: CN=DBE72A85AF44F3C1452BA753E51C3CA813A00B30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:34:64:a6:46:90:fa:ca:d9:f9:66:af:1c:0f:
                    bc:ff:b6:38:a6:11:88:7d:75:26:5d:6e:3f:b3:a1:
                    47:01:7e:61:e2:5f:47:b9:5d:3b:8f:37:3d:73:5b:
                    0d:b2:37:21:60:79:bd:e2:21:ad:26:1d:7f:8c:e2:
                    ff:52:d6:d4:1a:9e:6b:66:93:71:10:b6:6e:6f:d0:
                    a6:5b:1a:5d:90:af:42:e1:f7:70:1f:2b:34:7d:b8:
                    96:9a:42:fd:76:da:e6:5d:27:5b:12:f8:46:ff:76:
                    14:8b:18:da:b5:91:2e:8c:4b:52:48:50:7d:55:e4:
                    52:55:f7:7b:1d:88:b3:dd:ac:ee:a7:5a:70:8b:b7:
                    fa:31:14:48:ee:38:4b:57:67:2e:60:a6:84:3f:bc:
                    25:1e:67:30:a7:3b:31:fd:5f:54:c3:00:e1:06:f6:
                    56:ab:5c:7f:3d:20:14:63:72:88:88:39:67:0d:06:
                    70:6f:75:36:33:26:a6:d3:24:73:79:0c:78:22:93:
                    98:a9:7d:29:c2:96:44:c1:e3:37:8c:32:37:a0:61:
                    7d:91:4d:34:e3:72:b7:cf:63:4d:8f:52:26:de:3e:
                    68:c4:7c:c7:5f:8d:c2:c0:89:e0:bb:45:86:fa:07:
                    51:13:6c:75:11:7b:38:38:b3:f1:1f:a8:27:8c:eb:
                    a0:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:E7:2A:85:AF:44:F3:C1:45:2B:A7:53:E5:1C:3C:A8:13:A0:0B:30
            X509v3 Authority Key Identifier:
                keyid:1E:64:BF:65:05:10:52:D9:13:D7:DB:8C:45:12:F6:15:E3:FA:B9:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/1/1E64BF65051052D913D7DB8C4512F615E3FAB9B2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1E64BF65051052D913D7DB8C4512F615E3FAB9B2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/1/1E64BF65051052D913D7DB8C4512F615E3FAB9B2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c5:31:52:0a:a0:8e:57:9a:1e:2c:f5:3a:d7:1a:bd:20:6f:17:
         8a:d2:fa:7e:0c:4c:80:9a:ec:8f:fc:fd:f7:29:92:56:8f:9d:
         77:7a:54:16:fb:cd:01:81:1e:5d:a2:76:ba:e6:45:86:6c:e5:
         5d:cf:91:ca:8a:2e:37:f9:9e:44:6e:71:fa:4d:f3:02:cb:be:
         1f:18:78:e1:7e:c7:d2:71:51:4a:65:09:34:4c:87:c7:29:95:
         39:b1:c9:1a:06:42:36:6c:48:3a:64:e0:8b:8e:29:cd:de:19:
         24:53:4a:72:72:74:3e:c1:c9:6c:32:22:e4:37:1a:9e:ab:a5:
         48:87:c9:25:77:73:f9:ff:5d:d3:59:25:3c:dd:7e:ff:19:83:
         8c:f6:a2:52:7a:08:35:3f:23:9b:9e:3e:7c:c3:bf:a7:07:16:
         3a:55:f2:ae:86:4e:2d:9e:6a:8b:fd:13:6b:e9:88:0f:f3:5d:
         56:3a:f4:62:35:b0:4d:a6:61:96:3f:15:37:b4:7e:e6:b5:ff:
         11:dd:69:c6:f3:60:58:ba:95:59:e5:61:b9:13:24:b8:df:b9:
         e6:4f:62:e2:00:b4:3c:da:3e:45:61:dc:04:4b:01:dc:f2:be:
         c6:8a:17:aa:2f:ed:14:37:55:63:ca:b0:fd:ae:c8:78:99:bb:
         9f:10:84:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 16:40:16 2025 by rpki-client