This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/ee7257bb-2195-4fd7-bcc5-9019ab49dba5/0/F694BC9CF5B570CC62014EB8B877448A76680AEF.mft
File:                     F694BC9CF5B570CC62014EB8B877448A76680AEF.mft (raw, json)
Hash identifier:          f53NLSe4uzFsEsQht88hCA/tBT+GZmGou6dH7jyuMQ8=
Subject key identifier:   42:65:F2:32:F3:F6:9B:9F:A2:16:83:8F:AC:C4:73:F1:97:4D:D3:9A
Authority key identifier: F6:94:BC:9C:F5:B5:70:CC:62:01:4E:B8:B8:77:44:8A:76:68:0A:EF
Certificate issuer:       /CN=F694BC9CF5B570CC62014EB8B877448A76680AEF
Certificate serial:       36794105EBDDD0D7A151C8D3304BE980D48FE192
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F694BC9CF5B570CC62014EB8B877448A76680AEF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/ee7257bb-2195-4fd7-bcc5-9019ab49dba5/0/F694BC9CF5B570CC62014EB8B877448A76680AEF.mft
Manifest number:          E4
Signing time:             Sun 07 Dec 2025 02:12:30 +0000
Manifest this update:     Sun 07 Dec 2025 02:07:30 +0000
Manifest next update:     Wed 10 Dec 2025 03:26:30 +0000
Files and hashes:         1: F694BC9CF5B570CC62014EB8B877448A76680AEF.crl (hash: 6V25dAgmI1BokQKmdgmWh3DvZN0KMHWNfkBjtH08XpE=)
                          2: 3135372e31352e32372e302f32342d3234203d3e20313532333835.roa (hash: Olb5UAH0bGOuP1xREu1ehDMuAwFsYaccHtg3tVn/tDU=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/ee7257bb-2195-4fd7-bcc5-9019ab49dba5/0/F694BC9CF5B570CC62014EB8B877448A76680AEF.crl
                          rsync://repo-rpki.idnic.net/repo/ee7257bb-2195-4fd7-bcc5-9019ab49dba5/0/F694BC9CF5B570CC62014EB8B877448A76680AEF.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F694BC9CF5B570CC62014EB8B877448A76680AEF.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 09 Dec 2025 06:55:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:79:41:05:eb:dd:d0:d7:a1:51:c8:d3:30:4b:e9:80:d4:8f:e1:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F694BC9CF5B570CC62014EB8B877448A76680AEF
        Validity
            Not Before: Dec  7 02:07:30 2025 GMT
            Not After : Dec 10 03:26:30 2025 GMT
        Subject: CN=4265F232F3F69B9FA216838FACC473F1974DD39A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:68:cf:5c:25:af:21:47:1f:a8:89:44:47:d3:
                    f8:cd:26:12:91:79:ab:27:8e:e5:2c:cc:7b:08:78:
                    55:95:ad:cc:00:5a:4c:cb:af:ff:34:2f:42:2d:28:
                    01:99:29:c8:49:1a:55:03:c2:5b:9e:a4:ea:7c:c6:
                    f7:61:bc:34:c9:65:e1:9f:55:c0:da:ef:89:0c:b2:
                    4f:6f:37:b1:15:fe:e0:93:5a:2d:f5:58:a1:f3:06:
                    f0:1b:5a:ab:ec:53:17:7b:e0:90:30:f0:20:6a:31:
                    84:ae:d7:08:68:12:58:df:d6:ff:08:b5:2e:04:bb:
                    5c:13:4b:4d:fe:61:b0:a7:80:70:69:05:ef:0d:6d:
                    61:a7:0f:85:2a:ef:57:b3:52:65:c0:3e:6e:c2:e4:
                    d3:c5:3b:ac:bf:38:c2:1d:35:45:ba:2f:de:ef:42:
                    a3:97:d2:ba:aa:dd:11:57:6d:d3:32:75:7c:71:12:
                    38:a9:41:1a:d2:37:30:6c:a6:32:e9:39:fc:93:4a:
                    e6:78:b3:25:1e:34:b2:6a:7a:a2:99:61:24:18:d1:
                    83:6f:5e:34:98:1c:b0:62:a3:b1:62:ca:f9:1f:ae:
                    d4:33:de:9f:90:fe:0c:3b:ea:ef:b0:71:4a:f7:99:
                    87:52:b8:0a:f9:6a:5f:56:e8:95:cc:46:27:05:b7:
                    e9:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:65:F2:32:F3:F6:9B:9F:A2:16:83:8F:AC:C4:73:F1:97:4D:D3:9A
            X509v3 Authority Key Identifier:
                keyid:F6:94:BC:9C:F5:B5:70:CC:62:01:4E:B8:B8:77:44:8A:76:68:0A:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/ee7257bb-2195-4fd7-bcc5-9019ab49dba5/0/F694BC9CF5B570CC62014EB8B877448A76680AEF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F694BC9CF5B570CC62014EB8B877448A76680AEF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ee7257bb-2195-4fd7-bcc5-9019ab49dba5/0/F694BC9CF5B570CC62014EB8B877448A76680AEF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:14:b7:e1:68:49:60:f9:19:8e:88:56:7a:cc:f8:90:8c:e2:
         bb:10:a6:81:b0:8d:ac:17:0c:b8:63:23:19:5a:ff:a9:ce:19:
         bb:3e:7e:43:a8:23:55:40:fa:aa:aa:b3:de:d3:e1:81:1a:07:
         05:eb:24:e7:18:f3:21:0b:b0:55:a1:83:48:ef:94:88:08:4a:
         8e:fc:4e:8c:d6:98:e3:7f:e7:29:23:e0:b9:21:f8:10:81:ce:
         6d:f7:22:d9:8e:49:2f:db:47:69:32:a6:79:13:90:cb:e4:1c:
         37:0b:3c:dc:08:f4:ff:69:05:70:44:68:b1:f4:52:ff:8f:12:
         f8:d1:b8:4f:f6:f2:3c:de:ec:be:8f:3c:96:af:64:f0:42:4c:
         b9:71:72:99:3a:11:e5:75:07:a2:9e:b4:1d:6e:9b:61:8b:8c:
         68:ed:c1:12:25:33:0d:56:4a:54:24:c1:9a:91:61:7b:f2:c7:
         32:0c:e0:cf:a9:45:91:05:d4:9c:1b:fe:af:04:4d:2f:fd:f9:
         39:d9:5d:d3:60:63:45:23:9f:92:14:a1:b8:75:ad:da:4f:84:
         94:6e:e0:e3:3d:56:ab:e1:5b:3a:3d:50:88:01:c2:0b:f5:0b:
         d7:c7:24:fd:a6:cf:59:d7:57:2b:3f:ed:4b:27:d6:d5:b2:16:
         f6:0a:52:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 18:56:11 2025 by rpki-client