This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/f1eed09c-6068-407a-b0a6-59b7d0b87855/0/07479445ACFB5044B3A1BCAAD626072CABEA5C10.mft
File:                     07479445ACFB5044B3A1BCAAD626072CABEA5C10.mft (raw, json)
Hash identifier:          Wq3KvosDLxF9TDKEwWk+/y21orW3q2+P0xU4ueL7VB8=
Subject key identifier:   28:78:6B:22:7F:84:81:85:79:A5:A8:8D:2D:4F:45:98:17:F3:2B:98
Authority key identifier: 07:47:94:45:AC:FB:50:44:B3:A1:BC:AA:D6:26:07:2C:AB:EA:5C:10
Certificate issuer:       /CN=07479445ACFB5044B3A1BCAAD626072CABEA5C10
Certificate serial:       20A72D700D7C1BDE884F85E239D2B47EDFDD0171
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/07479445ACFB5044B3A1BCAAD626072CABEA5C10.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/f1eed09c-6068-407a-b0a6-59b7d0b87855/0/07479445ACFB5044B3A1BCAAD626072CABEA5C10.mft
Manifest number:          03C4
Signing time:             Mon 01 Dec 2025 14:50:39 +0000
Manifest this update:     Mon 01 Dec 2025 14:45:39 +0000
Manifest next update:     Thu 04 Dec 2025 23:35:39 +0000
Files and hashes:         1: 3130332e3136302e3133362e302f32342d3234203d3e20313431353838.roa (hash: oUBWXXStIDyPZSiCAParv1979xKJJMQyaI/tmorNEfQ=)
                          2: 07479445ACFB5044B3A1BCAAD626072CABEA5C10.crl (hash: mUCZ5+L4Nb/9We5SChUmSc4Zo785LMZCwyMcYFcEh1s=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/f1eed09c-6068-407a-b0a6-59b7d0b87855/0/07479445ACFB5044B3A1BCAAD626072CABEA5C10.crl
                          rsync://repo-rpki.idnic.net/repo/f1eed09c-6068-407a-b0a6-59b7d0b87855/0/07479445ACFB5044B3A1BCAAD626072CABEA5C10.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/07479445ACFB5044B3A1BCAAD626072CABEA5C10.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 04 Dec 2025 23:35:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:a7:2d:70:0d:7c:1b:de:88:4f:85:e2:39:d2:b4:7e:df:dd:01:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07479445ACFB5044B3A1BCAAD626072CABEA5C10
        Validity
            Not Before: Dec  1 14:45:39 2025 GMT
            Not After : Dec  4 23:35:39 2025 GMT
        Subject: CN=28786B227F84818579A5A88D2D4F459817F32B98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:b4:fd:48:04:c2:d3:2c:52:2f:79:6f:c7:87:
                    1c:cc:07:02:ba:63:91:1a:24:fa:fd:1e:a3:6e:08:
                    43:0b:36:88:b6:b7:1a:55:44:46:cd:6e:47:d3:91:
                    8c:93:2f:10:b6:aa:e8:16:81:74:a9:37:f2:c5:9a:
                    4d:01:83:01:f3:24:2f:39:8e:ac:d7:d9:cc:fd:70:
                    65:28:e6:db:2a:e2:8b:ed:9c:68:f2:d1:fc:ca:8e:
                    76:0a:36:e5:08:53:21:f3:f9:f5:15:a1:7d:ec:6e:
                    62:5d:70:e1:51:f3:91:6c:49:88:65:96:01:66:aa:
                    b9:02:40:8c:f1:83:29:9b:c7:12:72:e5:81:dc:4b:
                    45:7e:c5:3f:04:99:e9:88:5a:d0:30:4f:14:15:5a:
                    b5:f9:07:2b:e1:b9:2a:6f:35:a2:52:4f:04:fa:d3:
                    a7:13:c5:62:2b:6f:73:9d:d7:69:b4:4a:bb:4d:a2:
                    79:37:f7:a1:aa:36:19:1e:9b:79:a1:6f:54:d0:53:
                    73:4a:42:0c:13:a6:15:3e:70:a8:a4:a5:e1:9a:e2:
                    94:b4:1f:a8:19:1f:b6:33:6b:6c:03:f5:c9:39:e1:
                    dd:4d:47:bb:1f:a7:4d:2a:fc:54:02:88:87:1a:02:
                    a8:a9:82:5f:c6:70:06:f1:55:4c:25:b8:b3:cb:12:
                    1a:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:78:6B:22:7F:84:81:85:79:A5:A8:8D:2D:4F:45:98:17:F3:2B:98
            X509v3 Authority Key Identifier:
                keyid:07:47:94:45:AC:FB:50:44:B3:A1:BC:AA:D6:26:07:2C:AB:EA:5C:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/f1eed09c-6068-407a-b0a6-59b7d0b87855/0/07479445ACFB5044B3A1BCAAD626072CABEA5C10.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/07479445ACFB5044B3A1BCAAD626072CABEA5C10.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f1eed09c-6068-407a-b0a6-59b7d0b87855/0/07479445ACFB5044B3A1BCAAD626072CABEA5C10.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:0e:b9:fd:c0:38:01:eb:dd:4f:dc:1c:6f:5b:18:b4:87:96:
         7c:3e:e9:b9:5a:18:90:49:63:0a:59:77:18:6f:75:0a:8e:1c:
         54:df:17:21:45:51:19:93:ff:b2:01:a5:3c:86:23:0f:f2:2f:
         bf:78:ff:60:35:6e:ba:ae:c8:17:5d:83:48:0e:b2:0d:64:cb:
         ab:10:34:c6:b2:9c:21:bf:08:95:15:e8:40:2e:42:38:bd:d2:
         ca:53:67:c9:bf:18:88:cc:ac:2e:c3:98:fb:4c:a5:06:a7:7c:
         04:7b:de:e2:37:cf:37:5b:61:28:aa:45:2c:42:9c:b9:9e:a3:
         b2:00:b0:02:6e:b0:0f:70:b4:fe:5f:67:e1:9b:d8:4c:83:56:
         fd:b4:0a:89:3c:07:64:0a:56:75:30:33:fc:df:2b:82:db:1c:
         ad:17:1e:81:33:94:31:d7:75:6f:16:be:ed:06:b8:87:e2:4b:
         e2:6b:c4:3d:d0:0b:6f:8e:c1:78:93:f0:6b:0e:58:3c:7f:18:
         5d:f6:5b:1a:4f:b0:aa:ea:f0:d0:23:97:9b:ce:c9:63:59:15:
         4a:9d:e8:f3:23:e1:91:c5:b9:22:7f:9f:25:ad:6c:61:70:ec:
         f6:b2:52:a1:37:be:50:d1:99:be:f8:4d:64:86:26:13:8e:a8:
         e6:ff:ef:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 13:56:46 2025 by rpki-client