This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/0e31c69a-b792-40a4-a144-234b5a1dde52/0/82EABF24EF91106C28ACF9483B2EF11B2EA5319D.mft
File:                     82EABF24EF91106C28ACF9483B2EF11B2EA5319D.mft (raw, json)
Hash identifier:          J2FhCLTfDYvOaTkCALft9AAfcxR8bz8VTxQQsrvjkqs=
Subject key identifier:   57:24:08:F8:3F:F0:C0:A5:E4:32:ED:BE:20:CA:7A:7B:02:49:8B:65
Authority key identifier: 82:EA:BF:24:EF:91:10:6C:28:AC:F9:48:3B:2E:F1:1B:2E:A5:31:9D
Certificate issuer:       /CN=82EABF24EF91106C28ACF9483B2EF11B2EA5319D
Certificate serial:       7E1A85D624CFE125E94C39BF786328F3172AC7F4
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82EABF24EF91106C28ACF9483B2EF11B2EA5319D.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/0e31c69a-b792-40a4-a144-234b5a1dde52/0/82EABF24EF91106C28ACF9483B2EF11B2EA5319D.mft
Manifest number:          A9
Signing time:             Sat 06 Dec 2025 07:00:52 +0000
Manifest this update:     Sat 06 Dec 2025 06:55:52 +0000
Manifest next update:     Tue 09 Dec 2025 12:30:52 +0000
Files and hashes:         1: 3130332e3137322e34332e302f32342d3234203d3e20313432333835.roa (hash: kJKEjz2D3G1RJer7Y7hYkLjIkHGT1MOdybvh9xHf4rg=)
                          2: 82EABF24EF91106C28ACF9483B2EF11B2EA5319D.crl (hash: FW8J0S6EX7fm77oCayV+ziRrAHLi/Q1CzZvD9l78xp8=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/0e31c69a-b792-40a4-a144-234b5a1dde52/0/82EABF24EF91106C28ACF9483B2EF11B2EA5319D.crl
                          rsync://repo-rpki.idnic.net/repo/0e31c69a-b792-40a4-a144-234b5a1dde52/0/82EABF24EF91106C28ACF9483B2EF11B2EA5319D.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82EABF24EF91106C28ACF9483B2EF11B2EA5319D.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 09 Dec 2025 12:30:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:1a:85:d6:24:cf:e1:25:e9:4c:39:bf:78:63:28:f3:17:2a:c7:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82EABF24EF91106C28ACF9483B2EF11B2EA5319D
        Validity
            Not Before: Dec  6 06:55:52 2025 GMT
            Not After : Dec  9 12:30:52 2025 GMT
        Subject: CN=572408F83FF0C0A5E432EDBE20CA7A7B02498B65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:91:ab:16:68:72:bc:31:74:de:f5:fa:9f:fc:
                    2f:b4:24:bb:18:21:d0:e8:7f:71:14:ca:6c:6b:56:
                    66:be:a8:73:e9:f2:c0:fd:89:20:c0:20:5e:73:f1:
                    9a:fd:65:dd:7e:3c:b0:07:11:5d:55:bf:86:7a:9f:
                    7d:22:c3:7b:38:20:e0:54:6e:0d:18:1f:0c:e8:e9:
                    45:b5:e9:1d:e6:5d:bd:05:65:79:00:49:eb:56:67:
                    0f:53:17:ba:31:33:07:b3:f1:48:a1:f1:51:85:c6:
                    b2:16:32:e4:f7:4a:e3:78:ff:34:63:23:3b:95:5a:
                    d2:a4:8a:71:41:0c:23:98:5e:44:c4:7e:9f:b5:eb:
                    ec:8c:df:90:62:8d:55:92:fe:47:99:43:c5:3b:96:
                    ea:42:08:22:1c:89:15:9b:6e:f4:86:ca:c0:e8:68:
                    19:b4:47:c1:5e:6d:45:78:fb:57:23:19:58:4c:d9:
                    98:9b:28:83:e2:18:4f:1f:4c:a2:4c:5b:df:f2:54:
                    59:b3:62:a5:21:5d:55:6a:52:7d:b5:71:25:51:81:
                    00:0c:ed:27:53:72:16:90:04:9a:99:62:34:f1:12:
                    75:7f:98:3c:91:c8:d2:6c:c9:c7:eb:d7:78:07:ca:
                    6e:9a:62:55:62:73:68:76:26:17:cd:23:39:7d:06:
                    82:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:24:08:F8:3F:F0:C0:A5:E4:32:ED:BE:20:CA:7A:7B:02:49:8B:65
            X509v3 Authority Key Identifier:
                keyid:82:EA:BF:24:EF:91:10:6C:28:AC:F9:48:3B:2E:F1:1B:2E:A5:31:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/0e31c69a-b792-40a4-a144-234b5a1dde52/0/82EABF24EF91106C28ACF9483B2EF11B2EA5319D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82EABF24EF91106C28ACF9483B2EF11B2EA5319D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0e31c69a-b792-40a4-a144-234b5a1dde52/0/82EABF24EF91106C28ACF9483B2EF11B2EA5319D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:ce:5c:0a:47:5d:ee:97:cc:85:f4:95:90:5f:a4:6a:b4:94:
         64:fe:47:0e:de:f6:ad:eb:3b:05:bb:9d:d3:98:f8:50:32:f8:
         38:c5:08:2f:2c:d2:66:ea:52:b1:db:cf:82:80:3f:e2:96:ed:
         73:11:23:53:cb:17:84:c3:77:cc:78:d2:f9:07:cf:e4:82:ff:
         ca:9a:bf:41:b5:41:09:ce:35:45:b5:88:a6:d5:82:6f:12:9b:
         24:4e:74:b2:83:3f:66:d8:1f:5d:b0:7a:99:f6:38:81:02:73:
         7b:7e:c9:bd:39:3a:56:23:5f:8f:12:d1:e6:df:3f:88:a0:ce:
         85:33:c5:fe:3c:4f:ad:d7:2d:a2:34:36:5e:81:17:84:64:b4:
         fd:ad:31:36:d6:74:45:0d:e8:ed:f6:11:9e:d1:c8:88:ed:9b:
         0b:3a:5c:92:3c:39:36:80:9c:c6:41:8d:1c:95:4b:24:1a:ca:
         19:7d:cf:0c:1d:ad:fe:99:35:d2:3f:c0:88:4c:6e:d7:ac:f8:
         c4:fd:6f:fa:a7:f0:82:a0:e9:fc:32:c3:e1:ae:88:fd:37:a9:
         53:d1:ee:37:88:91:79:ac:be:4e:30:84:7f:0d:39:29:ed:55:
         92:07:fa:b4:99:96:c8:c3:ac:9c:2f:63:61:a2:f6:bf:46:5e:
         e0:5f:0c:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 04:57:43 2025 by rpki-client