This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/f56d0b78-7e81-4a8c-a875-95522b467938/0/466C942AFFDB262DABF7B65D913F3E9E92C9A0C6.mft
File:                     466C942AFFDB262DABF7B65D913F3E9E92C9A0C6.mft (raw, json)
Hash identifier:          I99YEnRToE26ALMHqr+68pOoQl+fJTPpArWJt3e+xNM=
Subject key identifier:   77:A0:A6:F4:ED:85:9B:50:DB:EB:03:E2:23:10:06:09:A0:B0:B8:D3
Authority key identifier: 46:6C:94:2A:FF:DB:26:2D:AB:F7:B6:5D:91:3F:3E:9E:92:C9:A0:C6
Certificate issuer:       /CN=466C942AFFDB262DABF7B65D913F3E9E92C9A0C6
Certificate serial:       5AC18BF68C468388A01605BEDAEF3346B59F067F
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/466C942AFFDB262DABF7B65D913F3E9E92C9A0C6.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/f56d0b78-7e81-4a8c-a875-95522b467938/0/466C942AFFDB262DABF7B65D913F3E9E92C9A0C6.mft
Manifest number:          0216
Signing time:             Tue 02 Dec 2025 10:42:24 +0000
Manifest this update:     Tue 02 Dec 2025 10:37:24 +0000
Manifest next update:     Fri 05 Dec 2025 22:38:24 +0000
Files and hashes:         1: 3130332e3138352e3131302e302f32332d3233203d3e20313439383832.roa (hash: ud1p/krhRE3733a1j5mqZ8KrI1sOH5O1a7m3DIDez2o=)
                          2: 3130332e3138352e3131312e302f32342d3234203d3e20313439383832.roa (hash: k33UC/S59fL9YnbENocJ8tvAJ1sRtIu7ddJOWvA5ll8=)
                          3: 3130332e3138352e3131302e302f32342d3234203d3e20313439383832.roa (hash: 1BptPYQTBVQCwnCGCAmQpdkJZuT5jDyDH1mIYb86asQ=)
                          4: 466C942AFFDB262DABF7B65D913F3E9E92C9A0C6.crl (hash: vBMrsvXvjFh6Ee7nAdUnFEIVkV1Awp5uq421Wkw5Axo=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/f56d0b78-7e81-4a8c-a875-95522b467938/0/466C942AFFDB262DABF7B65D913F3E9E92C9A0C6.crl
                          rsync://repo-rpki.idnic.net/repo/f56d0b78-7e81-4a8c-a875-95522b467938/0/466C942AFFDB262DABF7B65D913F3E9E92C9A0C6.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/466C942AFFDB262DABF7B65D913F3E9E92C9A0C6.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 05 Dec 2025 22:38:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:c1:8b:f6:8c:46:83:88:a0:16:05:be:da:ef:33:46:b5:9f:06:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=466C942AFFDB262DABF7B65D913F3E9E92C9A0C6
        Validity
            Not Before: Dec  2 10:37:24 2025 GMT
            Not After : Dec  5 22:38:24 2025 GMT
        Subject: CN=77A0A6F4ED859B50DBEB03E223100609A0B0B8D3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:f9:ee:3e:b0:dc:12:07:48:38:46:8e:7f:bf:
                    86:0d:a8:a1:1c:67:a2:83:17:51:20:f8:66:f0:f6:
                    75:06:8a:fe:e6:ba:92:2d:f2:9a:f4:d2:ac:f5:93:
                    3e:4e:77:89:2e:4e:2f:88:35:9b:80:17:d1:25:b2:
                    ef:99:be:09:9a:f5:28:79:17:d3:ba:72:89:e4:ae:
                    39:36:42:9c:39:e1:23:18:9c:67:60:77:f3:07:3e:
                    08:36:0b:b8:3a:6e:ac:d5:58:0b:25:3c:b5:65:df:
                    e1:75:ec:70:a9:19:10:a2:ae:83:01:7a:a9:bf:74:
                    cb:01:7b:cd:d3:9c:55:75:5a:7a:d0:b6:8c:3c:cf:
                    a7:d1:f2:14:ab:98:11:bd:04:09:c7:02:eb:c5:81:
                    1d:fb:5b:e8:7e:e7:67:c8:90:90:74:1f:99:03:b2:
                    67:11:99:bb:4e:c0:9f:44:a1:62:92:2e:ea:d3:e3:
                    90:45:41:b4:36:fc:71:6e:19:84:44:aa:b6:a3:1d:
                    e6:94:8f:be:92:ff:73:c6:9e:1c:7a:88:0e:fb:78:
                    ef:46:b1:05:a3:ba:bc:c5:d3:ad:2e:f6:c5:e5:29:
                    4e:1b:0e:c8:f0:27:d4:bd:c0:97:c7:92:2b:41:16:
                    80:24:94:40:a5:81:1f:b5:13:20:30:53:76:3a:a4:
                    f7:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:A0:A6:F4:ED:85:9B:50:DB:EB:03:E2:23:10:06:09:A0:B0:B8:D3
            X509v3 Authority Key Identifier:
                keyid:46:6C:94:2A:FF:DB:26:2D:AB:F7:B6:5D:91:3F:3E:9E:92:C9:A0:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/f56d0b78-7e81-4a8c-a875-95522b467938/0/466C942AFFDB262DABF7B65D913F3E9E92C9A0C6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/466C942AFFDB262DABF7B65D913F3E9E92C9A0C6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f56d0b78-7e81-4a8c-a875-95522b467938/0/466C942AFFDB262DABF7B65D913F3E9E92C9A0C6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:13:16:f7:8d:e6:6d:e6:01:bc:a8:de:37:b4:50:00:1f:4c:
         8a:9b:52:9d:d3:ba:52:21:7f:64:e3:a3:b5:bb:82:b3:45:eb:
         fc:d0:82:5c:d7:5c:b0:c8:8f:bb:da:bc:22:d5:18:44:9e:50:
         c7:a7:b5:96:83:c4:83:06:cb:61:81:76:0e:c5:92:17:56:64:
         67:c3:b8:1c:b6:bc:9b:7b:51:a5:25:53:40:58:13:04:a1:c3:
         ac:dd:5b:65:27:74:ea:03:e4:19:43:0b:9d:f6:a2:c9:73:7d:
         f9:fe:7e:4a:2a:32:a8:73:7f:61:a2:a6:ee:79:81:6b:7f:cd:
         17:d7:d9:c9:2e:ad:cd:3c:c8:10:66:96:94:d7:4b:fb:ad:94:
         9b:28:29:8f:f3:b3:57:51:6b:a1:91:33:27:55:15:55:8a:d0:
         b4:3b:6d:89:c4:3d:73:20:ba:b4:b3:d7:41:d6:d6:65:3a:fc:
         a9:1b:ef:1d:4a:e2:59:b3:f5:8c:89:6f:b9:7c:fe:9c:e4:fd:
         94:cd:16:2d:fe:78:f4:bd:46:b0:cc:3a:dd:60:29:6c:79:7d:
         46:98:13:25:65:66:0a:e6:d7:c6:72:03:aa:1e:8c:72:6d:2b:
         c7:77:4d:4d:5a:a1:e4:1d:1b:c0:f6:50:6a:69:e5:51:49:f8:
         f8:5d:86:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 14:44:05 2025 by rpki-client