This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/15bae30c-b363-407b-a0ab-3154eb309ae9/0/2A2E185B12379871494114828D5D5D713982E469.mft
File:                     2A2E185B12379871494114828D5D5D713982E469.mft (raw, json)
Hash identifier:          9loXKInLcx3M6r9AUyd9pch3/Igk1frfYV2UEzz3cfg=
Subject key identifier:   7A:40:79:16:00:99:09:7D:DF:2D:D7:3B:11:07:26:E8:08:25:24:0F
Authority key identifier: 2A:2E:18:5B:12:37:98:71:49:41:14:82:8D:5D:5D:71:39:82:E4:69
Certificate issuer:       /CN=2A2E185B12379871494114828D5D5D713982E469
Certificate serial:       271948D85B78A2E51DC26C4AFB02EB8BF8DFD80A
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2A2E185B12379871494114828D5D5D713982E469.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/15bae30c-b363-407b-a0ab-3154eb309ae9/0/2A2E185B12379871494114828D5D5D713982E469.mft
Manifest number:          0129
Signing time:             Sat 06 Dec 2025 14:50:50 +0000
Manifest this update:     Sat 06 Dec 2025 14:45:50 +0000
Manifest next update:     Wed 10 Dec 2025 01:03:50 +0000
Files and hashes:         1: 3135372e32302e32342e302f32342d3234203d3e203633353036.roa (hash: V+YjkhbIydkZ+oGTevb+ipQYCKYryW/Ib0ruhbJynjY=)
                          2: 2A2E185B12379871494114828D5D5D713982E469.crl (hash: UwilZN/BbPm5Fy/25/3QJBpnbkNUE0A5HVG/mANc7zg=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/15bae30c-b363-407b-a0ab-3154eb309ae9/0/2A2E185B12379871494114828D5D5D713982E469.crl
                          rsync://repo-rpki.idnic.net/repo/15bae30c-b363-407b-a0ab-3154eb309ae9/0/2A2E185B12379871494114828D5D5D713982E469.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2A2E185B12379871494114828D5D5D713982E469.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 09 Dec 2025 06:55:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:19:48:d8:5b:78:a2:e5:1d:c2:6c:4a:fb:02:eb:8b:f8:df:d8:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A2E185B12379871494114828D5D5D713982E469
        Validity
            Not Before: Dec  6 14:45:50 2025 GMT
            Not After : Dec 10 01:03:50 2025 GMT
        Subject: CN=7A4079160099097DDF2DD73B110726E80825240F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:8a:00:b7:c5:c2:04:4e:0a:44:9f:91:c7:90:
                    a3:17:4b:c0:6f:23:2f:a2:3b:a7:ff:0a:0e:80:9f:
                    23:1c:2f:1a:05:dc:a2:6c:df:bf:f4:98:67:7a:2e:
                    67:79:ef:e4:5b:48:55:74:2e:7c:49:c4:50:2e:35:
                    3c:c3:e3:23:9d:83:ef:83:a0:a3:c0:ea:84:f3:69:
                    08:af:0b:78:60:6a:ec:28:9e:c4:eb:19:36:26:b5:
                    07:a5:f8:de:b1:24:fb:3b:0e:bd:8d:7d:3b:46:fe:
                    63:17:73:a1:af:52:e9:c0:40:c5:29:0f:a6:45:3c:
                    d9:1a:32:ae:83:b0:5c:51:aa:13:4b:b2:7e:7a:7a:
                    b8:5f:00:73:f0:3a:b3:5d:2c:ad:62:21:5b:a3:34:
                    c1:3e:22:f5:25:7e:4d:5c:ca:e1:ce:35:72:6d:61:
                    0b:45:c6:c8:9d:55:0d:ee:94:33:9c:8d:39:e4:bf:
                    c6:e4:d0:d8:7b:21:7d:b4:73:fa:3a:6d:37:79:6a:
                    5c:cf:51:20:b9:c1:d1:b7:bc:98:57:27:9c:b6:68:
                    2a:91:5e:33:6f:10:10:c7:c4:75:1f:13:56:ed:fc:
                    91:5a:4f:d1:c2:14:13:d9:71:9a:8a:9c:4f:d5:4e:
                    93:07:a5:97:0f:24:7f:f3:b1:40:f9:45:27:23:da:
                    ad:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:40:79:16:00:99:09:7D:DF:2D:D7:3B:11:07:26:E8:08:25:24:0F
            X509v3 Authority Key Identifier:
                keyid:2A:2E:18:5B:12:37:98:71:49:41:14:82:8D:5D:5D:71:39:82:E4:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/15bae30c-b363-407b-a0ab-3154eb309ae9/0/2A2E185B12379871494114828D5D5D713982E469.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2A2E185B12379871494114828D5D5D713982E469.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/15bae30c-b363-407b-a0ab-3154eb309ae9/0/2A2E185B12379871494114828D5D5D713982E469.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:18:bc:88:a1:0f:53:1f:4e:43:90:31:5a:89:ac:06:06:1f:
         09:b4:b2:f2:c5:02:24:9d:e3:8c:7a:17:88:3b:72:c3:85:91:
         3b:96:1a:bd:12:db:f7:e0:e7:7d:34:f7:20:ea:ad:3a:96:a6:
         4a:e8:43:22:c7:ff:64:73:b0:92:fe:8f:0c:b9:93:cb:b5:e9:
         43:63:58:cf:4c:d1:68:0d:3f:8c:05:2b:65:0d:0d:fc:a9:36:
         4b:db:a0:dd:4c:b7:0d:0e:35:cb:dd:d3:a5:bb:15:a8:b1:86:
         c1:18:9b:8e:89:5c:8b:1e:30:d4:79:a5:03:28:85:85:ad:e2:
         cd:ee:b5:f8:89:aa:6e:9a:57:df:31:81:1b:c4:42:3d:1e:84:
         fd:2b:8c:92:b6:ea:fc:c8:44:78:4a:65:e1:d3:b3:23:cc:f7:
         cb:1e:49:4a:72:88:15:4c:dc:6b:ac:68:62:b0:98:96:53:6c:
         2b:7a:da:b3:22:53:f0:0f:c6:9d:33:ad:b1:6e:f5:27:61:4e:
         02:83:44:e1:ab:c8:a6:5b:92:22:95:4a:11:ee:e0:44:fc:84:
         4a:a2:06:96:43:39:46:35:e7:16:ac:89:ba:36:34:d2:f6:82:
         07:7e:76:21:5b:86:95:cb:2a:d9:4c:4c:5d:d2:e4:5d:ee:fc:
         45:ef:89:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 18:24:59 2025 by rpki-client