This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/d916411f-78ca-4916-8919-37c1d99efbd8/0/2566F4DF5C09FFA8E4F4D6999941B9ABA2B7228B.mft
File:                     2566F4DF5C09FFA8E4F4D6999941B9ABA2B7228B.mft (raw, json)
Hash identifier:          8sqU+uzmNGCLgTL++4dvMzZCfe3R4xZv8pODWRhIU4w=
Subject key identifier:   44:CD:0D:56:6A:C4:1E:4B:D0:70:FA:8A:F4:93:D7:75:6B:4E:A7:05
Authority key identifier: 25:66:F4:DF:5C:09:FF:A8:E4:F4:D6:99:99:41:B9:AB:A2:B7:22:8B
Certificate issuer:       /CN=2566F4DF5C09FFA8E4F4D6999941B9ABA2B7228B
Certificate serial:       759E2E928EE7153D28247E994C95BD73EB343DA1
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2566F4DF5C09FFA8E4F4D6999941B9ABA2B7228B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/d916411f-78ca-4916-8919-37c1d99efbd8/0/2566F4DF5C09FFA8E4F4D6999941B9ABA2B7228B.mft
Manifest number:          0131
Signing time:             Wed 03 Dec 2025 13:02:10 +0000
Manifest this update:     Wed 03 Dec 2025 12:57:10 +0000
Manifest next update:     Sat 06 Dec 2025 17:35:10 +0000
Files and hashes:         1: 2566F4DF5C09FFA8E4F4D6999941B9ABA2B7228B.crl (hash: Y2uLPi7SaYpYlTijmnc4omMyMsFh379moj0aN1W4N5E=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/d916411f-78ca-4916-8919-37c1d99efbd8/0/2566F4DF5C09FFA8E4F4D6999941B9ABA2B7228B.crl
                          rsync://repo-rpki.idnic.net/repo/d916411f-78ca-4916-8919-37c1d99efbd8/0/2566F4DF5C09FFA8E4F4D6999941B9ABA2B7228B.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2566F4DF5C09FFA8E4F4D6999941B9ABA2B7228B.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 06 Dec 2025 12:07:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:9e:2e:92:8e:e7:15:3d:28:24:7e:99:4c:95:bd:73:eb:34:3d:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2566F4DF5C09FFA8E4F4D6999941B9ABA2B7228B
        Validity
            Not Before: Dec  3 12:57:10 2025 GMT
            Not After : Dec  6 17:35:10 2025 GMT
        Subject: CN=44CD0D566AC41E4BD070FA8AF493D7756B4EA705
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:3c:2c:88:bf:b1:ea:4a:fa:61:75:35:2c:7e:
                    fc:d1:09:b8:f2:01:22:6e:d9:fc:8d:11:b4:a9:64:
                    41:74:a1:7b:47:44:4b:71:b6:e5:c3:4a:a8:5c:96:
                    0b:40:3c:af:a0:70:d9:4b:3d:c7:3a:36:9b:c5:52:
                    9e:31:0e:d4:7b:3e:9b:f3:3d:0b:b2:38:64:68:b8:
                    5b:b1:a9:00:81:05:8e:08:39:11:f3:70:82:bf:f2:
                    da:af:e4:9f:80:5e:87:a1:e5:d9:f4:4e:0d:8e:a7:
                    2c:da:66:23:ae:7a:b9:d1:63:55:b0:71:12:45:cb:
                    a9:98:7f:0d:b8:6d:81:96:db:e0:ce:67:34:80:af:
                    26:0b:52:ad:0f:ef:b4:a7:dd:c3:24:3e:1f:f2:53:
                    2e:f2:e4:23:63:2f:d2:c1:ca:fe:ce:d8:3c:61:33:
                    d0:bd:44:48:47:cc:06:1c:f5:05:38:90:0a:01:bd:
                    65:74:07:91:cf:25:b5:38:ed:4c:1f:f7:d0:71:8b:
                    4c:8a:f3:47:10:b7:8e:73:e4:3c:be:5d:1b:c8:94:
                    60:66:08:3b:d9:9e:b4:c4:f5:bf:05:44:f5:d0:34:
                    c8:57:7e:b6:6d:a1:f7:94:83:07:49:e4:30:ad:0c:
                    f7:18:a2:a7:5b:5e:88:7f:c8:43:09:49:24:68:e6:
                    03:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:CD:0D:56:6A:C4:1E:4B:D0:70:FA:8A:F4:93:D7:75:6B:4E:A7:05
            X509v3 Authority Key Identifier:
                keyid:25:66:F4:DF:5C:09:FF:A8:E4:F4:D6:99:99:41:B9:AB:A2:B7:22:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/d916411f-78ca-4916-8919-37c1d99efbd8/0/2566F4DF5C09FFA8E4F4D6999941B9ABA2B7228B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2566F4DF5C09FFA8E4F4D6999941B9ABA2B7228B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d916411f-78ca-4916-8919-37c1d99efbd8/0/2566F4DF5C09FFA8E4F4D6999941B9ABA2B7228B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:7e:41:0f:79:2a:0c:18:08:0c:d7:6b:80:5b:b7:e0:86:a3:
         64:d7:e1:98:1c:7a:2b:cf:3e:66:e6:e2:98:e6:fe:e0:b9:e9:
         f7:70:d5:17:7d:c6:58:2c:fb:1f:7d:47:17:f0:f9:43:76:71:
         a5:84:65:f2:b9:22:20:5f:c4:96:e2:9a:90:a7:f9:e5:ba:20:
         d4:d5:d1:57:e4:16:2b:05:4c:1d:43:06:ae:72:e6:74:0a:ce:
         f6:86:98:f7:cc:2e:e8:bd:6f:4a:46:22:7a:84:76:8b:0f:b6:
         b4:2e:e3:02:9e:30:b9:4d:bc:18:c3:f4:59:d2:c1:d7:c7:7e:
         8e:af:19:20:9e:23:be:f5:77:e6:55:93:9c:27:dc:81:43:9d:
         8b:e8:6c:83:93:e8:74:e1:42:ba:fb:19:2b:e5:5d:76:b3:ce:
         cc:bb:be:92:c7:ec:2d:82:94:61:2b:1b:73:b1:ec:9f:6c:2b:
         92:7e:53:73:33:9c:a7:e4:7d:19:cf:b1:b6:e9:e0:25:7a:be:
         ee:33:80:5e:f5:01:2f:ac:82:2d:98:ed:2f:82:53:27:91:06:
         2d:47:0f:0d:3b:8d:bb:9e:54:d0:c3:6c:be:d2:da:83:3c:39:
         41:91:aa:7a:20:da:20:9d:2e:9b:9a:44:12:9c:14:7e:a9:69:
         99:99:bc:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 14:45:29 2025 by rpki-client