This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/506cd155-b53f-4146-a17c-7f1375eca24a/0/A8ACDEBC6EB4FF09A48B38FEB17CC145AA5E9F36.mft
File:                     A8ACDEBC6EB4FF09A48B38FEB17CC145AA5E9F36.mft (raw, json)
Hash identifier:          NVt/xf7BumK+WH1cBwjqnn2RgGthEOPFPWHz38KmC/w=
Subject key identifier:   AA:3C:8F:21:4B:86:0F:43:0B:D8:38:9F:FB:06:4A:20:8E:94:C5:2A
Authority key identifier: A8:AC:DE:BC:6E:B4:FF:09:A4:8B:38:FE:B1:7C:C1:45:AA:5E:9F:36
Certificate issuer:       /CN=A8ACDEBC6EB4FF09A48B38FEB17CC145AA5E9F36
Certificate serial:       6B7CC4135341F5C00E2487F8991CDB087B44E64A
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A8ACDEBC6EB4FF09A48B38FEB17CC145AA5E9F36.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/506cd155-b53f-4146-a17c-7f1375eca24a/0/A8ACDEBC6EB4FF09A48B38FEB17CC145AA5E9F36.mft
Manifest number:          052F
Signing time:             Fri 05 Dec 2025 13:30:02 +0000
Manifest this update:     Fri 05 Dec 2025 13:25:02 +0000
Manifest next update:     Mon 08 Dec 2025 17:40:02 +0000
Files and hashes:         1: 3130332e37392e39362e302f32342d3234203d3e203634333038.roa (hash: wGapFjIoWrukGBmT8iRgZP0dNhbzHUcz+UdRp6Wb0WM=)
                          2: A8ACDEBC6EB4FF09A48B38FEB17CC145AA5E9F36.crl (hash: ZmZLtU723UQUeEsd3H+FWR5Do4qPDpInWZQ+9+VYkXc=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/506cd155-b53f-4146-a17c-7f1375eca24a/0/A8ACDEBC6EB4FF09A48B38FEB17CC145AA5E9F36.crl
                          rsync://repo-rpki.idnic.net/repo/506cd155-b53f-4146-a17c-7f1375eca24a/0/A8ACDEBC6EB4FF09A48B38FEB17CC145AA5E9F36.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A8ACDEBC6EB4FF09A48B38FEB17CC145AA5E9F36.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 08 Dec 2025 17:40:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:7c:c4:13:53:41:f5:c0:0e:24:87:f8:99:1c:db:08:7b:44:e6:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A8ACDEBC6EB4FF09A48B38FEB17CC145AA5E9F36
        Validity
            Not Before: Dec  5 13:25:02 2025 GMT
            Not After : Dec  8 17:40:02 2025 GMT
        Subject: CN=AA3C8F214B860F430BD8389FFB064A208E94C52A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:9a:2a:26:57:6a:2e:44:ce:46:f3:e0:0f:3a:
                    b0:0a:22:96:94:b0:df:a1:99:0b:44:49:3d:86:15:
                    4d:ac:d3:a6:f5:4a:42:86:67:82:6d:3d:bb:42:8d:
                    c9:5c:b8:82:c6:2e:75:b5:3f:db:c6:cb:07:cf:68:
                    eb:34:5a:a5:90:df:e0:0c:57:e1:55:0c:33:e9:cc:
                    b6:e5:e9:4a:9c:a6:9c:6b:43:b6:a6:cc:8f:f5:11:
                    bd:3f:1b:33:aa:09:36:45:79:a9:20:19:08:fe:f4:
                    6b:cb:ca:18:a4:ef:f7:ed:5b:68:bb:fb:1e:24:3c:
                    fa:e2:3c:87:2d:71:da:de:e8:d4:75:ea:c0:a0:eb:
                    0b:8b:0d:25:8c:96:0c:01:f9:62:6d:9f:cd:98:63:
                    3e:2a:87:ae:ee:cc:fe:4c:b1:7d:cc:2f:72:f0:f2:
                    93:fc:17:e5:31:fc:55:3c:ea:d9:0c:1a:ee:e8:37:
                    cb:3d:66:35:d3:62:75:a6:9e:34:1f:a5:82:00:d5:
                    d3:67:6d:4f:43:f4:9a:26:78:39:d1:7c:3b:99:93:
                    ab:02:46:a4:b4:8c:43:71:65:b6:ef:c0:55:a6:d1:
                    de:0a:64:1d:9d:e1:61:0f:df:62:a2:c1:20:3e:1b:
                    e5:8b:fa:39:1f:eb:ef:a8:19:2c:11:a0:19:8a:fc:
                    bf:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:3C:8F:21:4B:86:0F:43:0B:D8:38:9F:FB:06:4A:20:8E:94:C5:2A
            X509v3 Authority Key Identifier:
                keyid:A8:AC:DE:BC:6E:B4:FF:09:A4:8B:38:FE:B1:7C:C1:45:AA:5E:9F:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/506cd155-b53f-4146-a17c-7f1375eca24a/0/A8ACDEBC6EB4FF09A48B38FEB17CC145AA5E9F36.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A8ACDEBC6EB4FF09A48B38FEB17CC145AA5E9F36.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/506cd155-b53f-4146-a17c-7f1375eca24a/0/A8ACDEBC6EB4FF09A48B38FEB17CC145AA5E9F36.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:ef:78:93:bb:60:33:fb:dd:73:e4:fe:0c:93:f0:5c:b5:e7:
         14:1d:d5:b8:e4:07:9a:4e:3a:6a:5d:8c:42:77:39:e1:91:fe:
         28:e5:9f:7b:fb:79:ef:17:b8:01:6d:7c:ce:3b:dc:2f:33:75:
         92:0a:65:9c:35:4b:0b:9e:b2:e5:ce:d5:69:93:21:d5:fb:3e:
         cd:f8:32:e4:78:c9:3c:df:e4:b1:84:af:1b:d3:ee:66:eb:8b:
         e8:a7:c6:31:59:0b:96:e0:d0:1e:7f:3d:01:63:46:01:28:23:
         5c:98:10:74:0f:cc:0a:b1:92:34:02:c2:f5:dd:89:93:c9:32:
         3c:81:ea:6f:0f:c6:8e:21:13:9a:40:da:f0:b5:79:bd:7c:a5:
         90:be:50:c2:29:fc:55:89:97:1d:fa:e4:12:6c:1b:2d:54:c7:
         1d:a6:a7:7a:f6:fd:ff:f2:e1:b7:95:fc:e1:76:fc:8c:0c:11:
         16:17:0a:6a:48:7c:44:f6:b5:cc:4f:6f:cb:a7:93:72:0c:d7:
         2f:e5:25:ec:05:78:96:2b:15:65:41:01:91:d7:c5:70:d3:34:
         d6:32:3d:84:7e:23:86:ec:fa:0c:2c:92:c0:36:ab:e0:b2:36:
         e3:29:2d:30:ef:6b:34:88:ea:59:6e:9c:c7:de:52:2e:12:ca:
         5c:74:67:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 07:22:05 2025 by rpki-client