This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/fae4cd96-cfc1-4577-ad3f-7983c0523c10/0/7C33921B29322EBAAC6645FC4B920923F5E49E1A.mft
File:                     7C33921B29322EBAAC6645FC4B920923F5E49E1A.mft (raw, json)
Hash identifier:          +JiKSKWRtvJ9Me3bwiBdv435dJ8vzIh3ANwY4mvnjhM=
Subject key identifier:   E6:B9:1C:D8:9D:B3:13:D6:5B:FD:C4:F2:54:C2:78:5C:27:1C:F2:CC
Authority key identifier: 7C:33:92:1B:29:32:2E:BA:AC:66:45:FC:4B:92:09:23:F5:E4:9E:1A
Certificate issuer:       /CN=7C33921B29322EBAAC6645FC4B920923F5E49E1A
Certificate serial:       611215FC1330A22010CE0B551C1BEA539FD690C0
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7C33921B29322EBAAC6645FC4B920923F5E49E1A.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/fae4cd96-cfc1-4577-ad3f-7983c0523c10/0/7C33921B29322EBAAC6645FC4B920923F5E49E1A.mft
Manifest number:          0141
Signing time:             Tue 02 Dec 2025 18:41:36 +0000
Manifest this update:     Tue 02 Dec 2025 18:36:36 +0000
Manifest next update:     Sat 06 Dec 2025 04:28:36 +0000
Files and hashes:         1: 7C33921B29322EBAAC6645FC4B920923F5E49E1A.crl (hash: scls7C55gxeSPYXffcifa7nuci/WJWRpTboWSjm/W/w=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/fae4cd96-cfc1-4577-ad3f-7983c0523c10/0/7C33921B29322EBAAC6645FC4B920923F5E49E1A.crl
                          rsync://repo-rpki.idnic.net/repo/fae4cd96-cfc1-4577-ad3f-7983c0523c10/0/7C33921B29322EBAAC6645FC4B920923F5E49E1A.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7C33921B29322EBAAC6645FC4B920923F5E49E1A.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 06 Dec 2025 04:28:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:12:15:fc:13:30:a2:20:10:ce:0b:55:1c:1b:ea:53:9f:d6:90:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7C33921B29322EBAAC6645FC4B920923F5E49E1A
        Validity
            Not Before: Dec  2 18:36:36 2025 GMT
            Not After : Dec  6 04:28:36 2025 GMT
        Subject: CN=E6B91CD89DB313D65BFDC4F254C2785C271CF2CC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:31:47:56:bf:9f:d2:cc:c2:47:86:e1:15:56:
                    b2:1c:d5:18:1f:4a:3b:8a:1d:a4:8c:88:5d:2b:84:
                    9c:de:03:16:fa:9c:df:6e:53:7b:8b:61:2f:1f:92:
                    45:17:bb:9c:2c:d2:98:fb:67:01:73:b0:0d:63:f1:
                    69:bc:d5:2f:56:23:04:42:99:6a:cc:bc:11:04:88:
                    0b:e7:fe:74:b0:08:74:e4:9d:1d:6e:5e:50:e8:0a:
                    3e:ea:16:ca:d2:6d:63:d6:64:cd:b3:15:77:4e:76:
                    4f:84:5b:f5:24:b7:7b:d0:9b:1e:f3:c2:b9:f6:2b:
                    4e:bc:33:86:83:33:53:6f:c9:96:60:66:47:96:25:
                    db:7f:80:9e:0a:54:8b:3d:ad:33:34:8c:99:29:85:
                    61:a4:26:e8:25:f2:b6:f9:0c:a1:39:b3:00:af:fa:
                    9f:42:3d:2f:54:f5:58:fb:8a:79:1b:3b:8e:99:a6:
                    09:67:bc:0b:8a:f2:11:07:4b:58:d4:12:0f:67:ad:
                    54:b5:88:86:0e:e4:da:51:f3:f7:0f:4d:f4:56:f1:
                    7d:85:92:47:cb:ac:f8:52:96:b8:0c:08:15:51:ae:
                    0e:81:64:b0:cb:88:f9:fb:0d:fc:61:ce:a1:ec:01:
                    08:ec:55:72:ee:5e:16:6c:02:03:21:3b:4b:8f:5d:
                    9d:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:B9:1C:D8:9D:B3:13:D6:5B:FD:C4:F2:54:C2:78:5C:27:1C:F2:CC
            X509v3 Authority Key Identifier:
                keyid:7C:33:92:1B:29:32:2E:BA:AC:66:45:FC:4B:92:09:23:F5:E4:9E:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/fae4cd96-cfc1-4577-ad3f-7983c0523c10/0/7C33921B29322EBAAC6645FC4B920923F5E49E1A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7C33921B29322EBAAC6645FC4B920923F5E49E1A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fae4cd96-cfc1-4577-ad3f-7983c0523c10/0/7C33921B29322EBAAC6645FC4B920923F5E49E1A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:1f:85:5b:06:db:65:f3:93:19:7d:d5:da:e8:80:15:22:bb:
         68:34:ac:b2:bd:aa:78:3e:f4:8c:4e:0a:b2:36:14:ba:91:2b:
         26:30:53:1b:f7:36:a9:99:b7:c4:95:e0:31:89:85:d3:98:57:
         3d:41:61:ed:06:18:a3:bc:68:cd:52:d5:11:62:76:15:be:71:
         25:bb:87:c2:c4:b1:e7:c4:96:56:f0:75:87:ff:5d:6a:22:ee:
         fc:6f:71:8f:34:81:b5:f3:e3:51:1c:07:a3:06:ef:ba:4d:1d:
         98:e6:b4:ad:d8:50:22:43:da:44:81:02:db:69:ef:df:bf:4a:
         50:fb:a0:0e:77:7a:92:d0:a0:10:7b:d6:a8:4f:e0:2c:81:a8:
         b8:6a:6c:45:e7:bc:c9:ee:14:59:58:46:fc:57:cd:83:73:d8:
         60:e3:af:1e:8b:e8:8c:8c:d2:bf:99:c1:fc:07:29:ec:69:e2:
         58:6c:fd:6a:4a:bd:7e:b0:ab:ec:77:c3:b9:c1:05:20:fe:50:
         23:d0:95:92:87:75:1f:e8:94:e2:5e:00:af:c5:f6:51:73:5b:
         6d:e8:3c:cd:11:0c:77:34:83:c6:1f:4a:1b:f2:0f:83:f3:72:
         c6:65:66:49:43:fc:4a:a2:91:a8:3c:73:74:6b:25:eb:d9:96:
         4f:c4:b0:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 14:13:39 2025 by rpki-client