This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/2bc65b8c-39e9-478d-8742-c535b61bae59/0/82EE517606C76902159E8886F875EF96B0327C72.mft
File:                     82EE517606C76902159E8886F875EF96B0327C72.mft (raw, json)
Hash identifier:          KKdBr5K3wLJgPRDF7dmyErfjlkc94eh7wo8IyUXDc28=
Subject key identifier:   D1:6D:92:CE:AE:65:11:F0:D5:48:6E:B3:61:96:25:FB:1A:D9:EE:59
Authority key identifier: 82:EE:51:76:06:C7:69:02:15:9E:88:86:F8:75:EF:96:B0:32:7C:72
Certificate issuer:       /CN=82EE517606C76902159E8886F875EF96B0327C72
Certificate serial:       6E78A1A97BEABC4A0F2117B007578EF071220D15
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82EE517606C76902159E8886F875EF96B0327C72.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/2bc65b8c-39e9-478d-8742-c535b61bae59/0/82EE517606C76902159E8886F875EF96B0327C72.mft
Manifest number:          0499
Signing time:             Fri 05 Dec 2025 13:22:18 +0000
Manifest this update:     Fri 05 Dec 2025 13:17:18 +0000
Manifest next update:     Mon 08 Dec 2025 23:28:18 +0000
Files and hashes:         1: 82EE517606C76902159E8886F875EF96B0327C72.crl (hash: wciFxJ2EXah9DlHXU+deYtvXd0Sth1qEZkLjN7Ev/I4=)
                          2: 3130332e3135372e32342e302f32342d3234203d3e20313431313035.roa (hash: FVu5gfgONBZ7sWK+LAVs/QfdHmaFroCRqFvOUkdZviM=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/2bc65b8c-39e9-478d-8742-c535b61bae59/0/82EE517606C76902159E8886F875EF96B0327C72.crl
                          rsync://repo-rpki.idnic.net/repo/2bc65b8c-39e9-478d-8742-c535b61bae59/0/82EE517606C76902159E8886F875EF96B0327C72.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82EE517606C76902159E8886F875EF96B0327C72.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 08 Dec 2025 23:28:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:78:a1:a9:7b:ea:bc:4a:0f:21:17:b0:07:57:8e:f0:71:22:0d:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82EE517606C76902159E8886F875EF96B0327C72
        Validity
            Not Before: Dec  5 13:17:18 2025 GMT
            Not After : Dec  8 23:28:18 2025 GMT
        Subject: CN=D16D92CEAE6511F0D5486EB3619625FB1AD9EE59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:c8:b3:dc:10:c8:a7:aa:e1:44:63:ad:a4:7d:
                    14:21:70:9c:d4:45:cb:77:dd:4c:78:87:d1:4e:82:
                    16:76:3c:01:3f:db:a2:3a:13:8d:b5:24:b0:c2:af:
                    5f:c3:4f:e1:b0:87:00:32:76:bd:ff:62:43:b9:68:
                    c9:7d:62:17:46:10:39:6a:42:76:97:96:7c:0f:e0:
                    b4:d2:ec:49:ff:e1:74:0e:1c:0a:71:4f:bd:17:d3:
                    ed:b5:ff:1c:5c:f5:f0:45:f2:c7:aa:ae:69:c0:26:
                    3b:9d:dd:c0:97:13:c5:eb:78:7d:d4:5b:f4:7a:10:
                    db:f7:3f:08:3a:a3:69:b8:56:37:1d:8e:34:8a:2d:
                    99:d5:b7:63:d7:9f:22:ed:3f:87:9d:83:fb:e6:c8:
                    fa:5c:82:a3:85:55:5e:b3:b6:1f:e7:2a:c9:d8:83:
                    4e:e0:37:dc:f2:67:8b:b5:14:97:54:a7:de:d8:d1:
                    45:a1:cf:35:5c:a4:4e:14:49:5b:d5:64:5f:7b:aa:
                    71:d8:f3:fe:28:de:be:13:ac:27:bf:7b:f8:af:a7:
                    86:30:04:64:98:5c:ae:a8:0b:57:60:7c:0f:bf:3c:
                    66:9c:1d:67:ab:6c:8b:84:10:0c:8e:54:7f:9a:b2:
                    64:6d:96:1a:e9:30:be:43:2d:c6:b9:c2:26:2f:f6:
                    ad:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:6D:92:CE:AE:65:11:F0:D5:48:6E:B3:61:96:25:FB:1A:D9:EE:59
            X509v3 Authority Key Identifier:
                keyid:82:EE:51:76:06:C7:69:02:15:9E:88:86:F8:75:EF:96:B0:32:7C:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/2bc65b8c-39e9-478d-8742-c535b61bae59/0/82EE517606C76902159E8886F875EF96B0327C72.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82EE517606C76902159E8886F875EF96B0327C72.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2bc65b8c-39e9-478d-8742-c535b61bae59/0/82EE517606C76902159E8886F875EF96B0327C72.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bd:61:f4:7a:0e:6e:71:15:4b:66:98:d9:fa:be:f8:95:43:6b:
         9e:f4:6d:ed:7e:43:92:55:c2:41:da:f5:af:44:e1:77:38:28:
         1b:61:06:c0:d0:44:6d:42:fa:7a:a9:6e:da:e1:6e:da:00:33:
         1a:a8:2b:d9:59:46:b6:d6:6a:3f:22:06:88:34:3b:df:24:11:
         c3:64:b1:2d:54:97:db:f9:7d:78:bb:d9:51:82:d0:df:b6:5c:
         4d:77:f4:c6:9e:45:29:d8:e7:6d:39:e5:29:06:87:29:5a:cd:
         6b:3e:40:77:99:ba:08:cf:e1:ba:31:68:77:d7:8d:f1:f5:1a:
         65:a7:25:c8:da:01:ba:b0:a5:9c:ce:e5:f8:3c:f6:06:97:d4:
         64:e7:47:8e:89:3c:48:a2:22:d4:31:5b:f6:cf:34:be:e5:3f:
         d4:25:71:6e:72:1c:31:7f:33:23:70:6e:e6:00:51:81:38:73:
         a6:5b:85:da:da:69:34:c1:f8:3c:60:72:56:dc:30:5d:66:78:
         7d:8d:89:24:5b:fa:af:51:fa:3d:6b:36:1f:41:00:6d:93:24:
         77:88:1e:d5:b0:8e:15:37:99:6c:f4:21:97:c4:2a:1f:bb:2d:
         df:2b:ff:d7:d5:5f:23:02:bc:65:e6:df:8a:22:e4:4a:a4:6b:
         8c:3f:c8:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 04:34:28 2025 by rpki-client