This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/3360f078-8a20-48d1-82b8-e1f50a155201/0/B93759B19E4C1F8FFB6E9D1E2E674E4E317D7E94.mft
File:                     B93759B19E4C1F8FFB6E9D1E2E674E4E317D7E94.mft (raw, json)
Hash identifier:          4nugC9q5eKeaMG54iUfRX3EgkN5pTRmb/cQcqVAKXY8=
Subject key identifier:   85:65:38:1D:F2:FF:5A:82:8A:2E:EA:FE:5D:37:15:01:87:31:B7:A7
Authority key identifier: B9:37:59:B1:9E:4C:1F:8F:FB:6E:9D:1E:2E:67:4E:4E:31:7D:7E:94
Certificate issuer:       /CN=B93759B19E4C1F8FFB6E9D1E2E674E4E317D7E94
Certificate serial:       07FD347BF01DB497A615D5F0D757BD326C8AB7C9
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B93759B19E4C1F8FFB6E9D1E2E674E4E317D7E94.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3360f078-8a20-48d1-82b8-e1f50a155201/0/B93759B19E4C1F8FFB6E9D1E2E674E4E317D7E94.mft
Manifest number:          0223
Signing time:             Fri 05 Dec 2025 16:42:24 +0000
Manifest this update:     Fri 05 Dec 2025 16:37:24 +0000
Manifest next update:     Mon 08 Dec 2025 20:48:24 +0000
Files and hashes:         1: B93759B19E4C1F8FFB6E9D1E2E674E4E317D7E94.crl (hash: yiMZihAou8EWQlS8Frew9/ua0KacPL6Ss/DGNhpdV0M=)
                          2: 3130332e3135302e3135382e302f32342d3234203d3e20313430333937.roa (hash: XFDD1vzbK3fH2oVTZT7/I8pF/szQ/Q1UsEfrzMZOTGI=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/3360f078-8a20-48d1-82b8-e1f50a155201/0/B93759B19E4C1F8FFB6E9D1E2E674E4E317D7E94.crl
                          rsync://repo-rpki.idnic.net/repo/3360f078-8a20-48d1-82b8-e1f50a155201/0/B93759B19E4C1F8FFB6E9D1E2E674E4E317D7E94.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B93759B19E4C1F8FFB6E9D1E2E674E4E317D7E94.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 08 Dec 2025 20:48:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:fd:34:7b:f0:1d:b4:97:a6:15:d5:f0:d7:57:bd:32:6c:8a:b7:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B93759B19E4C1F8FFB6E9D1E2E674E4E317D7E94
        Validity
            Not Before: Dec  5 16:37:24 2025 GMT
            Not After : Dec  8 20:48:24 2025 GMT
        Subject: CN=8565381DF2FF5A828A2EEAFE5D3715018731B7A7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:06:b7:1d:cf:76:e9:97:51:21:b0:28:54:8f:
                    b2:cd:6c:a4:19:c1:72:3a:5c:e2:58:4e:7f:bf:dd:
                    7d:f0:cb:42:84:a8:c8:50:32:d7:0b:9c:ff:32:33:
                    5e:17:e7:ad:68:eb:ff:6d:f3:b2:62:9c:a9:e3:9a:
                    66:b2:bd:49:33:14:d6:ea:dc:5c:36:3b:38:14:5c:
                    ff:0a:1c:a1:83:17:9e:63:9c:00:ac:fc:d7:f1:bd:
                    f2:8a:60:c1:f7:96:3a:de:9f:f8:74:29:1a:55:68:
                    60:f4:9d:cf:4e:43:d1:1b:7a:c9:39:af:a7:b7:08:
                    49:07:c4:6f:85:e4:24:67:2c:13:de:94:1c:1b:f5:
                    32:27:85:01:5b:dd:59:bc:29:fc:f6:cd:cd:3e:c3:
                    57:d0:9a:81:0c:25:e4:81:19:05:80:9c:d8:67:bd:
                    ce:a6:93:18:a0:f6:e0:02:f4:16:6d:33:6a:de:77:
                    f0:42:f7:ba:59:8c:ee:9d:e0:b8:1a:67:bb:ba:8a:
                    b6:7c:52:56:17:b1:58:96:ef:d8:14:03:50:4f:4e:
                    0a:9b:6a:1a:bc:34:b0:c8:dc:c5:b2:50:fe:34:26:
                    4a:c9:0a:cd:5f:1d:65:37:bb:3a:48:91:b8:4b:fa:
                    c1:be:80:b2:97:aa:e1:f1:82:85:5a:e6:61:9a:b1:
                    0f:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:65:38:1D:F2:FF:5A:82:8A:2E:EA:FE:5D:37:15:01:87:31:B7:A7
            X509v3 Authority Key Identifier:
                keyid:B9:37:59:B1:9E:4C:1F:8F:FB:6E:9D:1E:2E:67:4E:4E:31:7D:7E:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3360f078-8a20-48d1-82b8-e1f50a155201/0/B93759B19E4C1F8FFB6E9D1E2E674E4E317D7E94.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B93759B19E4C1F8FFB6E9D1E2E674E4E317D7E94.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3360f078-8a20-48d1-82b8-e1f50a155201/0/B93759B19E4C1F8FFB6E9D1E2E674E4E317D7E94.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:e9:f9:0f:9d:73:72:df:01:10:22:5c:79:a0:7b:5b:50:c7:
         97:aa:7f:89:4a:5d:25:59:2e:d0:71:fa:bc:8c:1e:4c:53:77:
         70:2e:e6:da:37:d5:a0:38:cd:ea:c4:31:ab:33:14:02:7b:12:
         7f:0c:dd:10:f6:82:c3:03:a7:7d:b7:4f:d4:55:93:2d:06:c0:
         ac:a5:ee:a8:d8:6d:d2:9f:c8:c9:93:64:50:62:17:7f:f8:4b:
         ee:97:43:76:28:5e:23:62:bc:8b:00:fe:a3:99:f4:be:e2:6a:
         ad:b9:89:49:73:12:e2:cf:83:8c:06:51:87:12:fc:10:88:23:
         cb:0d:94:1a:90:f5:e9:3a:00:be:72:13:6e:f2:02:99:c6:23:
         60:d1:77:7b:c3:2a:79:fc:24:f2:6a:dd:5f:33:74:01:6d:4b:
         6b:a4:aa:fb:c7:0d:0b:ce:b5:96:38:8c:3a:5a:fa:76:8b:0e:
         05:4c:31:58:18:47:da:b1:82:37:11:96:06:a6:c6:55:34:fa:
         94:b3:55:a4:03:7b:dc:d2:83:20:62:bb:4d:4d:ab:56:eb:b2:
         c4:a2:0d:13:72:10:e8:15:be:10:15:73:1f:49:90:71:16:c7:
         10:1b:89:5c:1a:9b:0a:9b:fa:d4:29:34:21:b7:02:84:d1:2c:
         9e:9a:09:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 00:14:06 2025 by rpki-client