This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/58b58aee-e8ee-4287-a2b8-616155c3eec2/0/8BE1F50A90938AE6D4E6D7A6A2A22F003B072ED8.mft
File:                     8BE1F50A90938AE6D4E6D7A6A2A22F003B072ED8.mft (raw, json)
Hash identifier:          oBtwD5SvShPy8UATPj8pQsM4Q1jLQXKWd8nxYc+wDBo=
Subject key identifier:   DD:96:78:13:28:16:22:47:55:61:F9:2C:7B:C7:D6:5F:43:03:B2:DD
Authority key identifier: 8B:E1:F5:0A:90:93:8A:E6:D4:E6:D7:A6:A2:A2:2F:00:3B:07:2E:D8
Certificate issuer:       /CN=8BE1F50A90938AE6D4E6D7A6A2A22F003B072ED8
Certificate serial:       35CA737A6C9E59627FD66B0A037C36501E4FF094
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8BE1F50A90938AE6D4E6D7A6A2A22F003B072ED8.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/58b58aee-e8ee-4287-a2b8-616155c3eec2/0/8BE1F50A90938AE6D4E6D7A6A2A22F003B072ED8.mft
Manifest number:          02FA
Signing time:             Fri 05 Dec 2025 18:51:38 +0000
Manifest this update:     Fri 05 Dec 2025 18:46:38 +0000
Manifest next update:     Mon 08 Dec 2025 21:22:38 +0000
Files and hashes:         1: 8BE1F50A90938AE6D4E6D7A6A2A22F003B072ED8.crl (hash: sNRvexIyXRGR/9PdkkVFGTiA9mixfPo3rHsX4lxVAck=)
                          2: 323430373a363338303a3a2f33322d3430203d3e20313331373133.roa (hash: d3EczDOEKFnJZSi/mXbv6kWPY6oK1SqyadhZuQpb4/8=)
                          3: 3130332e392e3134342e302f32322d3234203d3e20313331373133.roa (hash: DgLKkC/jF8zKIVNdNQyUD9vzgLj84NQLEk3DQtPjHPw=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/58b58aee-e8ee-4287-a2b8-616155c3eec2/0/8BE1F50A90938AE6D4E6D7A6A2A22F003B072ED8.crl
                          rsync://repo-rpki.idnic.net/repo/58b58aee-e8ee-4287-a2b8-616155c3eec2/0/8BE1F50A90938AE6D4E6D7A6A2A22F003B072ED8.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8BE1F50A90938AE6D4E6D7A6A2A22F003B072ED8.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 08 Dec 2025 21:22:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:ca:73:7a:6c:9e:59:62:7f:d6:6b:0a:03:7c:36:50:1e:4f:f0:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8BE1F50A90938AE6D4E6D7A6A2A22F003B072ED8
        Validity
            Not Before: Dec  5 18:46:38 2025 GMT
            Not After : Dec  8 21:22:38 2025 GMT
        Subject: CN=DD967813281622475561F92C7BC7D65F4303B2DD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:2f:20:da:3e:af:fb:6d:2e:da:21:51:91:5a:
                    8d:58:6d:5e:49:ff:b0:d2:76:ff:cf:a1:e3:c0:92:
                    6b:d4:0f:4f:cd:bd:03:10:56:9a:a1:2d:f8:73:69:
                    92:ad:5b:bc:0d:29:dc:05:8f:1b:51:e6:8f:8e:6f:
                    68:80:91:55:42:8f:53:dd:ec:8d:10:94:92:fd:f7:
                    af:ea:06:ee:69:82:0c:c8:9e:98:c4:4c:6e:bc:70:
                    92:95:81:c2:90:2f:b3:06:5b:14:48:8a:8b:6e:eb:
                    9a:a6:37:37:a9:a6:6a:da:e4:89:99:dc:7d:4f:cb:
                    bf:c4:8b:99:e5:0b:8d:90:42:dc:66:5a:bc:ae:a6:
                    dd:e8:6c:18:18:cd:a4:36:c6:4a:4a:b7:d0:e4:13:
                    f9:b3:b4:a9:5b:12:c8:d2:2e:d8:85:ed:cd:9b:3f:
                    a5:8e:fb:e5:cc:0b:9f:48:f6:ac:32:fd:17:ab:44:
                    ed:b8:fb:68:c5:84:eb:68:83:17:8d:35:1a:1e:ad:
                    d1:d4:79:ca:91:8d:bd:7a:8e:55:b7:b0:1b:b9:4d:
                    2f:f8:95:82:35:f2:87:2a:0c:74:22:32:fb:b0:62:
                    27:c5:4e:01:d4:cf:4d:29:b1:2d:f3:73:66:b0:92:
                    da:da:59:4c:c1:87:02:ff:ad:e0:c9:95:e6:cd:49:
                    c5:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:96:78:13:28:16:22:47:55:61:F9:2C:7B:C7:D6:5F:43:03:B2:DD
            X509v3 Authority Key Identifier:
                keyid:8B:E1:F5:0A:90:93:8A:E6:D4:E6:D7:A6:A2:A2:2F:00:3B:07:2E:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/58b58aee-e8ee-4287-a2b8-616155c3eec2/0/8BE1F50A90938AE6D4E6D7A6A2A22F003B072ED8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8BE1F50A90938AE6D4E6D7A6A2A22F003B072ED8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/58b58aee-e8ee-4287-a2b8-616155c3eec2/0/8BE1F50A90938AE6D4E6D7A6A2A22F003B072ED8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:3e:02:2e:2e:48:ba:f3:e4:10:11:2b:7f:4e:a0:1d:75:97:
         e6:26:ee:e1:62:98:b6:b8:76:ed:a0:b6:62:15:2a:a6:ec:93:
         c0:73:b4:59:7e:6f:30:78:d2:10:ae:79:2e:3f:68:67:2b:c4:
         b4:01:af:d2:7b:85:01:4c:49:61:bf:30:fd:2d:2a:b2:70:78:
         4d:fe:01:fc:31:a0:8d:23:54:3d:4b:bd:b4:8b:bf:9b:d4:a7:
         69:3b:3b:88:d6:8d:2a:6c:b7:08:fd:2f:bd:69:ef:17:df:87:
         d8:cb:37:40:a9:60:50:f0:20:2b:3e:d5:0f:e4:7e:8c:f5:34:
         0b:12:e6:3d:6f:ea:1f:a5:ea:2f:f7:38:ad:79:16:57:06:09:
         34:5a:ea:14:cd:b7:8e:ae:cf:b7:c5:1c:98:97:d4:fc:d4:97:
         99:15:74:e5:11:31:23:a6:eb:3a:26:38:f1:ea:54:03:8a:2b:
         34:7e:a0:c9:bb:4d:c5:06:d2:98:38:aa:dd:af:23:1e:35:69:
         c6:d0:3f:98:aa:50:d9:d1:79:c4:5a:f9:1b:82:38:a4:4b:58:
         30:68:9b:3c:14:6d:d5:45:31:39:98:5b:08:d8:aa:67:d1:37:
         0e:92:4f:ab:4b:38:ce:da:05:72:6f:63:24:55:4a:c9:0f:b1:
         59:61:33:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 07:29:38 2025 by rpki-client