This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/4a48b222-6ded-428a-888f-10454b0880c2/0/81498B85C0E2937290B9B2119B132DEADBB24A5C.mft
File:                     81498B85C0E2937290B9B2119B132DEADBB24A5C.mft (raw, json)
Hash identifier:          Lr6GA9xREemHjrf0XHpdS9dlm7tjovr4F5lbZRKTgBI=
Subject key identifier:   67:0E:A8:D8:61:6F:90:77:6D:FC:D7:D5:77:A4:44:27:2B:8C:2F:45
Authority key identifier: 81:49:8B:85:C0:E2:93:72:90:B9:B2:11:9B:13:2D:EA:DB:B2:4A:5C
Certificate issuer:       /CN=81498B85C0E2937290B9B2119B132DEADBB24A5C
Certificate serial:       0A3F3C8E4F42C97B04D2B58CA5F030FDA8C1195B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/81498B85C0E2937290B9B2119B132DEADBB24A5C.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/4a48b222-6ded-428a-888f-10454b0880c2/0/81498B85C0E2937290B9B2119B132DEADBB24A5C.mft
Manifest number:          0219
Signing time:             Thu 04 Dec 2025 23:20:58 +0000
Manifest this update:     Thu 04 Dec 2025 23:15:58 +0000
Manifest next update:     Mon 08 Dec 2025 07:37:58 +0000
Files and hashes:         1: 3130332e3135392e3232342e302f32332d3234203d3e20313431313437.roa (hash: 49uJeHF+k8HvLvLuvnXcFDfrAZMvN78Q5XdfyLfe2TU=)
                          2: 81498B85C0E2937290B9B2119B132DEADBB24A5C.crl (hash: 0H96qBVfFPh7DE4J/bssBQ/legmYK4xjfT4/G87YF6Q=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/4a48b222-6ded-428a-888f-10454b0880c2/0/81498B85C0E2937290B9B2119B132DEADBB24A5C.crl
                          rsync://repo-rpki.idnic.net/repo/4a48b222-6ded-428a-888f-10454b0880c2/0/81498B85C0E2937290B9B2119B132DEADBB24A5C.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/81498B85C0E2937290B9B2119B132DEADBB24A5C.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 08 Dec 2025 07:37:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:3f:3c:8e:4f:42:c9:7b:04:d2:b5:8c:a5:f0:30:fd:a8:c1:19:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81498B85C0E2937290B9B2119B132DEADBB24A5C
        Validity
            Not Before: Dec  4 23:15:58 2025 GMT
            Not After : Dec  8 07:37:58 2025 GMT
        Subject: CN=670EA8D8616F90776DFCD7D577A444272B8C2F45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:16:a6:b3:bf:8d:88:c9:d7:35:ce:1b:7e:a7:
                    cd:48:74:3b:27:f5:51:23:2f:2a:51:a1:1a:dc:c9:
                    66:9e:50:fd:10:85:7a:3c:f1:10:d5:f9:b4:86:09:
                    24:4d:5b:f5:c3:99:16:a6:ea:34:c3:00:e8:21:ba:
                    3b:1a:79:17:e2:ee:cf:ba:c9:ca:98:94:14:ca:1a:
                    a1:d2:e9:26:b6:39:24:21:be:9e:ea:4a:c7:ac:bf:
                    26:f6:a7:1c:fb:9e:a6:17:2f:df:56:7f:46:08:14:
                    db:12:65:8d:50:b3:01:78:2d:45:4f:e5:e7:40:58:
                    15:0d:f0:02:12:02:89:62:4e:d4:96:02:af:a2:1c:
                    11:06:49:db:50:a0:b0:e8:97:4e:70:b1:12:4a:48:
                    4d:26:ef:d0:06:44:04:4a:48:54:c3:cc:8e:09:5f:
                    ac:a2:37:78:90:24:38:7b:5f:f1:1a:96:cf:21:a6:
                    aa:0a:fe:aa:65:06:4e:f2:bb:4b:c0:b1:b0:15:d1:
                    8a:b6:6e:53:f9:dd:c8:e4:2b:b1:79:8f:11:de:33:
                    30:e4:16:3d:ac:ea:b0:ce:6a:2e:63:b6:fd:2f:51:
                    5b:bb:d6:c8:ca:97:c0:e0:93:d8:3e:14:09:cc:78:
                    cb:e1:2c:50:36:98:71:cf:30:bd:95:4a:b0:64:04:
                    ed:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:0E:A8:D8:61:6F:90:77:6D:FC:D7:D5:77:A4:44:27:2B:8C:2F:45
            X509v3 Authority Key Identifier:
                keyid:81:49:8B:85:C0:E2:93:72:90:B9:B2:11:9B:13:2D:EA:DB:B2:4A:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/4a48b222-6ded-428a-888f-10454b0880c2/0/81498B85C0E2937290B9B2119B132DEADBB24A5C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/81498B85C0E2937290B9B2119B132DEADBB24A5C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4a48b222-6ded-428a-888f-10454b0880c2/0/81498B85C0E2937290B9B2119B132DEADBB24A5C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:11:0a:40:a4:cd:9b:21:46:f7:8b:3a:35:15:d6:a0:61:3f:
         cd:e7:92:1d:a6:2d:9b:f6:27:1e:24:be:40:9a:6f:a2:b2:66:
         86:49:30:b3:ff:db:d2:4f:9d:d2:82:8e:1a:6d:b4:21:80:72:
         b2:f2:7b:52:4c:c6:b6:54:ad:b5:20:50:f1:39:45:00:8d:3d:
         3b:74:b4:e7:19:cf:c3:a3:af:b7:8c:24:bf:53:96:34:4a:15:
         a7:de:58:35:af:6e:5e:da:43:e5:3f:d7:f6:c4:6e:6b:ff:8d:
         ce:da:e4:47:a5:0b:52:19:16:88:3a:8d:45:ba:c4:3c:eb:0f:
         c0:bb:44:8d:4c:ed:19:e9:2e:d7:bf:bb:3b:06:61:be:d9:16:
         84:31:e9:51:6a:21:e3:4a:3c:61:8f:8f:0f:45:a0:e9:cc:db:
         80:90:39:47:cf:38:68:4e:16:9e:ea:ab:45:82:ab:eb:45:9f:
         58:ab:54:f4:0a:90:21:d9:46:9d:f5:2f:5d:fa:89:05:c5:e6:
         85:49:54:f3:87:43:45:c2:c5:6e:df:a2:5c:11:f4:d6:ad:3a:
         b3:63:c5:d2:07:03:a9:10:1b:76:35:a0:2a:37:5c:01:f3:20:
         d4:c1:13:10:04:c2:de:d2:1e:7c:da:cc:b5:cc:cd:3d:02:67:
         4e:ec:59:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 05:36:07 2025 by rpki-client