This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/3c9941a4-28d2-47d1-91e7-acab59084462/0/B16C4772F3D77045BBA997F94CEACA9E0DCC2865.mft
File:                     B16C4772F3D77045BBA997F94CEACA9E0DCC2865.mft (raw, json)
Hash identifier:          kaAqqzQ1AF3FqMX19lHZoD0FaY5dOMtVWEMt2O+Hwjk=
Subject key identifier:   AE:D4:E2:56:E3:0B:9C:5D:2E:89:8F:6E:19:1A:D3:B6:C2:5A:C6:6F
Authority key identifier: B1:6C:47:72:F3:D7:70:45:BB:A9:97:F9:4C:EA:CA:9E:0D:CC:28:65
Certificate issuer:       /CN=B16C4772F3D77045BBA997F94CEACA9E0DCC2865
Certificate serial:       7D4AA36D9E9BC27EF4C4FDE1990DCABC55BD622F
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B16C4772F3D77045BBA997F94CEACA9E0DCC2865.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3c9941a4-28d2-47d1-91e7-acab59084462/0/B16C4772F3D77045BBA997F94CEACA9E0DCC2865.mft
Manifest number:          014B
Signing time:             Fri 05 Dec 2025 22:22:04 +0000
Manifest this update:     Fri 05 Dec 2025 22:17:04 +0000
Manifest next update:     Tue 09 Dec 2025 06:10:04 +0000
Files and hashes:         1: B16C4772F3D77045BBA997F94CEACA9E0DCC2865.crl (hash: uWP6HbKcuvMWwThCXjIbWSL8l2TvJhUtsgOk6FIyfiI=)
                          2: 3138302e3133312e3132392e302f32342d3234203d3e20313532303238.roa (hash: IK3NBrk/iQNskIBya+kx1CnPloRzYziR32FnB/WUNZ4=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/3c9941a4-28d2-47d1-91e7-acab59084462/0/B16C4772F3D77045BBA997F94CEACA9E0DCC2865.crl
                          rsync://repo-rpki.idnic.net/repo/3c9941a4-28d2-47d1-91e7-acab59084462/0/B16C4772F3D77045BBA997F94CEACA9E0DCC2865.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B16C4772F3D77045BBA997F94CEACA9E0DCC2865.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 09 Dec 2025 06:10:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:4a:a3:6d:9e:9b:c2:7e:f4:c4:fd:e1:99:0d:ca:bc:55:bd:62:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B16C4772F3D77045BBA997F94CEACA9E0DCC2865
        Validity
            Not Before: Dec  5 22:17:04 2025 GMT
            Not After : Dec  9 06:10:04 2025 GMT
        Subject: CN=AED4E256E30B9C5D2E898F6E191AD3B6C25AC66F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:16:45:6c:1e:26:26:67:ce:db:15:b7:af:e8:
                    42:23:af:f3:68:17:5b:f8:12:31:01:54:53:25:af:
                    41:03:39:6e:fd:89:b8:19:b3:6b:a8:1d:d1:2d:57:
                    b3:e3:c4:78:4e:fe:46:79:cf:79:f1:11:20:f9:4b:
                    b1:87:e5:0c:bd:26:48:e2:40:23:f7:a8:0f:6b:94:
                    fc:99:f6:d5:a9:94:8c:1f:cb:14:a5:e3:02:7b:69:
                    bb:0c:e7:76:f0:b7:6a:7f:ec:78:18:7d:2f:da:97:
                    73:37:0e:80:de:13:18:ad:a5:ae:2b:93:50:55:d7:
                    d7:28:3e:b1:d3:fe:bc:b7:94:0d:34:54:f6:af:77:
                    ec:f1:57:4b:dc:e2:0a:e7:12:42:7e:f9:89:18:62:
                    0e:19:e1:cd:5c:4e:0b:18:80:39:3c:d0:6a:79:8a:
                    94:e5:f9:cc:7a:46:6c:86:d1:ba:77:c4:ff:7e:3a:
                    1e:a0:4b:62:5c:df:e2:34:10:c1:56:d5:09:30:85:
                    08:6c:21:20:54:08:21:f7:25:d6:58:d6:fc:a1:33:
                    dd:1a:d0:6f:a6:ad:85:2c:e4:67:33:d3:49:32:d0:
                    61:29:1e:93:46:6d:78:d9:63:6c:20:8a:fe:3d:07:
                    b0:e1:1b:4b:3c:5a:91:a4:27:3f:e0:c1:d6:ff:01:
                    91:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:D4:E2:56:E3:0B:9C:5D:2E:89:8F:6E:19:1A:D3:B6:C2:5A:C6:6F
            X509v3 Authority Key Identifier:
                keyid:B1:6C:47:72:F3:D7:70:45:BB:A9:97:F9:4C:EA:CA:9E:0D:CC:28:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3c9941a4-28d2-47d1-91e7-acab59084462/0/B16C4772F3D77045BBA997F94CEACA9E0DCC2865.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B16C4772F3D77045BBA997F94CEACA9E0DCC2865.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3c9941a4-28d2-47d1-91e7-acab59084462/0/B16C4772F3D77045BBA997F94CEACA9E0DCC2865.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:95:fc:6c:9c:96:2a:de:b4:a8:ce:eb:c7:e3:9b:4f:0c:eb:
         fb:4c:7b:a2:93:63:3d:69:f6:ea:6d:3d:87:5a:58:d0:01:10:
         d0:16:48:95:11:51:fb:63:e2:60:8e:47:b0:dc:08:d7:e2:86:
         47:f0:78:02:9d:49:f8:d1:89:29:2e:ef:8d:f3:11:c5:2d:34:
         2f:26:6c:65:d4:e4:ac:f9:a7:a5:0c:50:9d:4d:23:bf:f2:31:
         c0:1d:fd:76:0f:71:91:21:d4:ab:ca:b9:70:b8:da:85:5a:c2:
         0c:41:33:a2:61:91:20:4a:1e:e4:fd:9f:47:dd:f7:d9:4c:d1:
         be:c2:5f:83:33:3b:7a:6a:3a:7d:36:38:53:bc:b6:48:a7:35:
         13:c8:fd:b5:51:77:b9:05:88:97:55:3c:cd:d0:63:14:1e:8b:
         ee:05:d9:6e:ce:c8:a6:71:c4:21:44:6c:db:cc:c2:ca:0c:89:
         dd:9d:6c:34:6d:35:9c:f3:db:09:8a:29:ab:db:78:17:d7:c3:
         83:79:96:47:72:56:71:cf:d2:06:bc:a9:1d:3f:c5:02:e4:a2:
         a3:1b:63:1d:81:95:68:e2:ca:73:d6:5e:5f:d7:36:88:e5:fb:
         90:9a:4e:6d:50:30:f1:b8:4d:7d:ca:8d:0f:8a:2f:cd:ea:88:
         ca:33:5f:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 23:51:26 2025 by rpki-client