This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/836fd551-6aba-4222-8a26-986346825b38/0/C8175E7E9E15E565FE697292A37E14BFE067CAF7.mft
File:                     C8175E7E9E15E565FE697292A37E14BFE067CAF7.mft (raw, json)
Hash identifier:          Con/as5UV0PhLAZ10X/2VcZAJse6InPyMEEFHW+CZKM=
Subject key identifier:   0F:09:BA:57:54:12:26:8C:EC:51:7F:17:8C:F3:63:87:FB:B0:0B:BC
Authority key identifier: C8:17:5E:7E:9E:15:E5:65:FE:69:72:92:A3:7E:14:BF:E0:67:CA:F7
Certificate issuer:       /CN=C8175E7E9E15E565FE697292A37E14BFE067CAF7
Certificate serial:       2E1612D8E30C151A6638D8EDCB622E982DC99361
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8175E7E9E15E565FE697292A37E14BFE067CAF7.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/836fd551-6aba-4222-8a26-986346825b38/0/C8175E7E9E15E565FE697292A37E14BFE067CAF7.mft
Manifest number:          01A6
Signing time:             Sat 06 Dec 2025 04:50:02 +0000
Manifest this update:     Sat 06 Dec 2025 04:45:02 +0000
Manifest next update:     Tue 09 Dec 2025 07:48:02 +0000
Files and hashes:         1: C8175E7E9E15E565FE697292A37E14BFE067CAF7.crl (hash: 75TUKBTiG6QyVCGXj/S5kZIbNQt4M5fLFpHuff4dXM0=)
                          2: 3130332e3135382e31332e302f32342d3234203d3e20313338303839.roa (hash: M+WZc7qSf2CmAB/JGuGAm2J24ap4dhEUP+j6m1qwiAs=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/836fd551-6aba-4222-8a26-986346825b38/0/C8175E7E9E15E565FE697292A37E14BFE067CAF7.crl
                          rsync://repo-rpki.idnic.net/repo/836fd551-6aba-4222-8a26-986346825b38/0/C8175E7E9E15E565FE697292A37E14BFE067CAF7.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8175E7E9E15E565FE697292A37E14BFE067CAF7.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 09 Dec 2025 07:48:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:16:12:d8:e3:0c:15:1a:66:38:d8:ed:cb:62:2e:98:2d:c9:93:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C8175E7E9E15E565FE697292A37E14BFE067CAF7
        Validity
            Not Before: Dec  6 04:45:02 2025 GMT
            Not After : Dec  9 07:48:02 2025 GMT
        Subject: CN=0F09BA575412268CEC517F178CF36387FBB00BBC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:24:1b:c8:e3:f6:3d:e5:56:bf:3a:b7:80:9d:
                    b5:9c:14:63:d3:4c:07:97:79:dc:64:11:e7:2b:f9:
                    23:c5:97:38:45:a8:d0:aa:fa:ee:d9:ee:e1:b4:c0:
                    f5:56:ae:01:38:ee:17:fa:43:3e:70:55:06:94:8f:
                    ce:ed:90:01:cf:f5:54:c6:c6:9a:fe:de:c4:8a:d5:
                    09:a4:03:d1:7b:50:6f:82:8b:f8:9c:09:84:2f:6b:
                    56:6f:2f:31:4d:f1:de:9e:26:18:13:6a:34:88:a2:
                    9a:73:ac:9b:77:ce:e2:9f:d6:9c:93:84:2e:f4:af:
                    b5:35:58:44:80:5e:eb:69:8f:54:32:17:b0:b1:af:
                    b1:2d:6a:a7:63:82:25:74:fd:6b:21:40:0a:c3:93:
                    90:0d:33:50:f0:45:6d:43:31:78:2e:99:44:3c:4b:
                    f1:4a:e0:93:12:c1:5b:7d:8c:5b:bb:15:15:d1:95:
                    f0:27:0a:cf:b4:30:17:28:51:1c:cf:67:b2:1d:5f:
                    44:03:2b:e2:f4:19:79:84:43:4c:a2:87:99:6e:c2:
                    62:62:e3:a2:50:85:c4:cc:43:5f:40:37:12:e7:ac:
                    f6:fd:39:47:be:49:bd:53:a5:5d:fb:e8:3a:0e:22:
                    c8:9c:20:a8:70:4b:83:df:95:fd:23:90:b3:7f:03:
                    ef:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:09:BA:57:54:12:26:8C:EC:51:7F:17:8C:F3:63:87:FB:B0:0B:BC
            X509v3 Authority Key Identifier:
                keyid:C8:17:5E:7E:9E:15:E5:65:FE:69:72:92:A3:7E:14:BF:E0:67:CA:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/836fd551-6aba-4222-8a26-986346825b38/0/C8175E7E9E15E565FE697292A37E14BFE067CAF7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8175E7E9E15E565FE697292A37E14BFE067CAF7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/836fd551-6aba-4222-8a26-986346825b38/0/C8175E7E9E15E565FE697292A37E14BFE067CAF7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:c5:47:05:63:c7:bc:ce:8b:9a:78:43:fb:e7:8d:d6:ae:f8:
         1f:6a:e1:62:fa:92:48:57:d4:2f:ce:d0:4f:c9:9d:41:c9:c7:
         94:d1:7a:2d:dc:2d:d2:12:4c:45:14:6f:62:3c:92:1b:b7:13:
         0c:41:24:a7:1c:16:5b:e1:91:84:74:eb:00:f6:85:0f:0d:d3:
         ca:14:72:68:30:75:c3:c6:e0:1a:f1:2a:de:e8:96:4e:c0:52:
         40:50:2d:9c:f1:0a:d2:b0:69:50:76:0f:2f:98:aa:e8:52:91:
         3d:68:e9:47:d8:9b:1a:83:bc:e3:b0:8b:63:c8:70:4a:c6:53:
         d1:b6:dd:f7:05:b4:aa:ac:1f:3b:50:f4:7e:e8:25:dc:df:c8:
         4c:af:36:99:c4:bc:39:8c:77:79:d9:84:08:6c:ec:8a:2c:17:
         62:ab:48:7e:c9:01:4c:aa:2c:5f:2f:55:8b:7e:fb:b4:a7:aa:
         2d:da:a1:b0:dd:b5:75:17:be:d0:c5:00:1e:5e:53:3f:e2:56:
         7c:a0:25:f4:b0:a4:39:57:03:99:d3:5e:76:d7:66:69:6a:7f:
         74:0e:59:31:6e:7f:17:78:67:8a:82:06:78:e9:ed:ce:c4:48:
         a2:69:0f:41:06:4a:79:1c:98:89:b2:ec:7f:03:f9:77:ba:36:
         29:05:ad:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 18:24:52 2025 by rpki-client