This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/758db87b-16cd-437a-a5b5-08cb35da97f0/0/8CBCE2EE006256C9A6207949314A7D1FCC415B5A.mft
File:                     8CBCE2EE006256C9A6207949314A7D1FCC415B5A.mft (raw, json)
Hash identifier:          iuyWjK/TatL2mRheD1CfRhDldbR3oM/eLsrmX6u+3yU=
Subject key identifier:   BC:83:EB:D8:5F:CC:B5:58:C3:08:C4:75:5D:AF:9B:F4:2B:9D:A0:6F
Authority key identifier: 8C:BC:E2:EE:00:62:56:C9:A6:20:79:49:31:4A:7D:1F:CC:41:5B:5A
Certificate issuer:       /CN=8CBCE2EE006256C9A6207949314A7D1FCC415B5A
Certificate serial:       4383325C233A177432562FEBB0AF2B6A81E4BB7D
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8CBCE2EE006256C9A6207949314A7D1FCC415B5A.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/758db87b-16cd-437a-a5b5-08cb35da97f0/0/8CBCE2EE006256C9A6207949314A7D1FCC415B5A.mft
Manifest number:          023A
Signing time:             Fri 05 Dec 2025 21:31:33 +0000
Manifest this update:     Fri 05 Dec 2025 21:26:33 +0000
Manifest next update:     Mon 08 Dec 2025 23:43:33 +0000
Files and hashes:         1: 3130332e3138372e3131322e302f32332d3234203d3e20313439373230.roa (hash: tJd9lCwOT2E5aUEAYGLVk9Vox9W7mUTKc82A3hANFMo=)
                          2: 8CBCE2EE006256C9A6207949314A7D1FCC415B5A.crl (hash: RIgzRuuwQI02tY9Pc2N+yDRegWdLXIKCs7B0Q+MwsL4=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/758db87b-16cd-437a-a5b5-08cb35da97f0/0/8CBCE2EE006256C9A6207949314A7D1FCC415B5A.crl
                          rsync://repo-rpki.idnic.net/repo/758db87b-16cd-437a-a5b5-08cb35da97f0/0/8CBCE2EE006256C9A6207949314A7D1FCC415B5A.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8CBCE2EE006256C9A6207949314A7D1FCC415B5A.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 08 Dec 2025 23:43:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:83:32:5c:23:3a:17:74:32:56:2f:eb:b0:af:2b:6a:81:e4:bb:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8CBCE2EE006256C9A6207949314A7D1FCC415B5A
        Validity
            Not Before: Dec  5 21:26:33 2025 GMT
            Not After : Dec  8 23:43:33 2025 GMT
        Subject: CN=BC83EBD85FCCB558C308C4755DAF9BF42B9DA06F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:68:eb:41:32:7d:60:b7:0a:a0:35:c3:db:d2:
                    48:47:54:10:1f:c5:54:eb:de:7c:83:7c:b9:ac:aa:
                    d0:3e:dd:a9:1f:f5:f9:03:37:52:da:97:65:23:b4:
                    5c:48:de:75:1b:23:d8:1c:98:b6:05:e2:57:68:a2:
                    c7:d5:7b:0b:27:c4:8e:a3:45:f5:b3:b2:3d:03:65:
                    4c:75:9c:2e:b8:6f:eb:de:ce:0f:c3:24:2f:a7:32:
                    2a:d6:b0:5d:f8:d8:36:dc:0a:82:fa:d5:54:aa:8a:
                    51:83:89:57:d0:90:1f:63:c7:64:18:92:8a:c9:45:
                    28:fe:1f:25:d5:a3:ee:95:02:a2:c2:62:af:4b:05:
                    e9:cf:ca:7e:73:34:58:da:a3:0e:35:5f:63:c1:ea:
                    07:b4:97:6c:68:5d:3b:18:dd:5d:9c:ab:28:aa:99:
                    46:53:de:2c:c6:cb:9e:82:e1:cc:63:3b:fc:dd:04:
                    6e:9d:fc:46:8a:ac:d0:b7:12:f2:a0:55:fe:eb:c2:
                    7b:fb:b4:19:d4:59:9a:be:31:4f:87:85:31:f3:89:
                    6e:0e:14:44:7e:11:4d:ab:11:9f:a7:a9:3c:fb:c9:
                    dc:e3:52:22:72:73:b4:1b:83:f4:fb:4f:d4:46:5e:
                    b5:12:2f:2c:10:f1:22:90:6d:32:c2:75:3a:90:20:
                    fe:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:83:EB:D8:5F:CC:B5:58:C3:08:C4:75:5D:AF:9B:F4:2B:9D:A0:6F
            X509v3 Authority Key Identifier:
                keyid:8C:BC:E2:EE:00:62:56:C9:A6:20:79:49:31:4A:7D:1F:CC:41:5B:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/758db87b-16cd-437a-a5b5-08cb35da97f0/0/8CBCE2EE006256C9A6207949314A7D1FCC415B5A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8CBCE2EE006256C9A6207949314A7D1FCC415B5A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/758db87b-16cd-437a-a5b5-08cb35da97f0/0/8CBCE2EE006256C9A6207949314A7D1FCC415B5A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:aa:6d:13:e9:70:f3:4f:84:df:7b:85:9a:51:20:53:cc:ed:
         0f:5a:df:e3:8e:11:a1:e1:d5:bb:df:41:d0:ec:b8:f7:6e:20:
         08:7c:c6:3a:e4:40:1c:9d:ad:69:32:11:0a:50:f3:0a:bd:e4:
         f5:b9:a2:8e:6e:ac:32:67:07:33:26:75:a1:a4:26:10:50:f9:
         24:63:5f:b0:6e:81:05:55:66:3e:65:9e:92:70:be:e2:3e:5c:
         72:89:36:37:ef:6e:8e:93:99:43:a3:7b:9d:9b:ca:31:eb:f4:
         6f:c8:01:f6:d1:a7:16:0a:b0:7a:81:6e:78:99:9b:9a:c9:1d:
         13:32:f3:fe:52:9f:d2:88:26:d6:aa:97:07:13:4f:a2:93:88:
         ec:6a:66:5f:25:a4:d3:18:f9:09:15:cc:96:e4:ec:02:73:9a:
         72:01:2b:f9:dd:8d:2e:ec:72:ff:0c:5a:56:99:b4:98:e0:de:
         c2:5d:7a:24:8e:79:fb:6b:f8:d8:90:1e:12:b2:77:b1:ad:f9:
         42:38:bd:0c:0c:42:60:54:02:82:39:61:a6:0b:0c:11:d8:ec:
         de:ab:05:43:e7:fe:3b:66:fe:1d:89:a2:13:5c:8b:aa:ee:f6:
         02:37:76:b1:71:8e:82:91:40:ff:e6:c7:44:e7:78:d0:97:67:
         5d:e1:8d:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 22:52:09 2025 by rpki-client