This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/5124b4b5-7813-46cd-9db4-a3cd585e0ed4/0/BEE36AB8351AFE80F1B0CE8F12AA40089829BB6F.mft
File:                     BEE36AB8351AFE80F1B0CE8F12AA40089829BB6F.mft (raw, json)
Hash identifier:          pk48xc8pCfrnC69jLpE05XW3CQe2Ltt+znuRpifdVz0=
Subject key identifier:   00:3E:73:CE:83:4C:0D:D7:98:54:53:F7:75:A4:4A:FD:99:5C:2F:ED
Authority key identifier: BE:E3:6A:B8:35:1A:FE:80:F1:B0:CE:8F:12:AA:40:08:98:29:BB:6F
Certificate issuer:       /CN=BEE36AB8351AFE80F1B0CE8F12AA40089829BB6F
Certificate serial:       07580893F44107045B64D4CE4B25E37D37B78A14
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BEE36AB8351AFE80F1B0CE8F12AA40089829BB6F.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/5124b4b5-7813-46cd-9db4-a3cd585e0ed4/0/BEE36AB8351AFE80F1B0CE8F12AA40089829BB6F.mft
Manifest number:          01E3
Signing time:             Thu 04 Dec 2025 11:41:45 +0000
Manifest this update:     Thu 04 Dec 2025 11:36:45 +0000
Manifest next update:     Sun 07 Dec 2025 23:18:45 +0000
Files and hashes:         1: BEE36AB8351AFE80F1B0CE8F12AA40089829BB6F.crl (hash: BGbm6osLRn0vPVDPeHXgPX1lapA1QjbD5a5z+mdPpho=)
                          2: 3130332e34332e32362e302f32332d3233203d3e20313530323832.roa (hash: ex+21fBaSyiItm2OS+YOTqm89deCqSKEYL8AQYAgtY0=)
                          3: 3130332e34332e32362e302f32342d3234203d3e20313530323832.roa (hash: 8mtJt2S7FnH2XqMpaERqdd8mg9cEUzD1SQhfJKt7rjM=)
                          4: 3130332e34332e32372e302f32342d3234203d3e20313530323832.roa (hash: BlULhi+TctVeKV8dE0CflZMYmvk41Sd1spCHrO2rX3k=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/5124b4b5-7813-46cd-9db4-a3cd585e0ed4/0/BEE36AB8351AFE80F1B0CE8F12AA40089829BB6F.crl
                          rsync://repo-rpki.idnic.net/repo/5124b4b5-7813-46cd-9db4-a3cd585e0ed4/0/BEE36AB8351AFE80F1B0CE8F12AA40089829BB6F.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BEE36AB8351AFE80F1B0CE8F12AA40089829BB6F.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 07 Dec 2025 23:18:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:58:08:93:f4:41:07:04:5b:64:d4:ce:4b:25:e3:7d:37:b7:8a:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BEE36AB8351AFE80F1B0CE8F12AA40089829BB6F
        Validity
            Not Before: Dec  4 11:36:45 2025 GMT
            Not After : Dec  7 23:18:45 2025 GMT
        Subject: CN=003E73CE834C0DD7985453F775A44AFD995C2FED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:8c:b2:1d:42:08:5a:59:9f:e4:89:38:65:c3:
                    07:08:08:f3:2f:ff:4f:05:1d:aa:00:78:9b:03:28:
                    e6:77:37:b2:0e:bd:16:7a:59:1c:2b:75:e3:09:ef:
                    d9:cc:88:0a:24:ff:60:6f:53:a5:5d:fb:27:df:b5:
                    c8:43:95:bd:9a:25:de:5f:dd:84:dc:25:7f:3c:70:
                    3c:eb:0c:39:ba:d7:55:d5:8e:a6:82:15:a4:2e:58:
                    ab:92:64:34:64:6b:d6:17:0e:1a:fa:50:53:b3:25:
                    a4:5e:18:ec:c2:39:94:68:6b:22:18:c8:bb:e8:5c:
                    0e:86:29:31:25:a3:cd:45:d8:aa:61:4a:0e:e4:7b:
                    14:bc:80:70:42:fc:57:88:7a:07:cb:93:09:6f:1d:
                    4e:87:1e:3e:2c:7b:64:af:9c:cb:f5:66:c4:c7:4a:
                    53:b7:78:54:a8:b2:1e:be:45:1b:01:b0:9f:51:4c:
                    3b:d0:20:6e:20:8b:8d:68:53:d2:53:e0:79:93:e6:
                    c1:7c:51:dc:31:2e:da:9a:86:fc:36:84:79:48:d0:
                    11:6e:0a:ee:f4:3e:b3:7c:e2:c1:ef:ff:c4:c0:5b:
                    fc:7b:24:a4:b2:48:3c:7f:d3:10:f2:8e:b9:72:bf:
                    c0:fc:45:06:fc:d0:0c:50:8a:8e:a4:43:12:dc:d1:
                    8f:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:3E:73:CE:83:4C:0D:D7:98:54:53:F7:75:A4:4A:FD:99:5C:2F:ED
            X509v3 Authority Key Identifier:
                keyid:BE:E3:6A:B8:35:1A:FE:80:F1:B0:CE:8F:12:AA:40:08:98:29:BB:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/5124b4b5-7813-46cd-9db4-a3cd585e0ed4/0/BEE36AB8351AFE80F1B0CE8F12AA40089829BB6F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BEE36AB8351AFE80F1B0CE8F12AA40089829BB6F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5124b4b5-7813-46cd-9db4-a3cd585e0ed4/0/BEE36AB8351AFE80F1B0CE8F12AA40089829BB6F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bf:9b:be:ed:c9:10:ed:0d:7d:83:df:1d:68:9d:96:ef:d3:b1:
         08:e5:90:86:34:26:7e:0f:f4:2e:27:6e:55:15:52:a3:b1:06:
         d5:39:05:d2:17:69:25:7a:4f:2d:8c:74:9e:22:ed:69:59:28:
         3e:79:b7:51:32:b9:99:bd:7b:2b:20:8c:61:84:67:a5:95:7a:
         32:05:ec:52:2c:8a:8f:02:17:f1:5a:8b:e0:e1:4c:e8:6f:14:
         d7:a3:81:77:14:a0:df:56:8a:2e:24:43:78:e4:3b:28:73:e9:
         27:0e:4c:72:b6:7b:3f:7f:0d:a8:16:f2:69:11:93:1d:20:67:
         af:aa:43:63:6c:c1:ec:da:37:6a:08:ef:42:3f:fc:28:84:3a:
         e7:18:00:9e:c8:6e:03:69:d3:ca:b2:89:5a:b5:39:4b:d0:00:
         32:93:85:ad:65:19:97:d3:21:fc:c1:88:1b:8e:1c:0a:1e:32:
         1f:a7:79:26:1b:02:8e:03:4b:b7:94:53:8e:2d:16:51:aa:30:
         a3:af:2f:97:bc:25:82:77:07:3c:ed:e8:8e:c0:a2:48:62:c6:
         77:57:e2:46:d1:b5:20:ad:56:74:ac:ec:95:f6:eb:a5:67:51:
         d2:80:82:fa:6a:4a:04:74:82:c0:b8:76:3c:23:d1:b5:a2:2a:
         f1:67:43:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 22:54:24 2025 by rpki-client