This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/864c3155-c8ff-4207-a2dc-51e005530b52/0/B94F48BCAB6D8B0A28B3955504975C159FAC076A.mft
File:                     B94F48BCAB6D8B0A28B3955504975C159FAC076A.mft (raw, json)
Hash identifier:          6RVeIISzIz95ZYLVErmj1w5r7hdBizQMiZCIF+3ALwg=
Subject key identifier:   0F:F1:B4:D8:85:7A:FE:09:BF:E4:9D:CA:0B:5C:E3:86:5A:1B:A1:4E
Authority key identifier: B9:4F:48:BC:AB:6D:8B:0A:28:B3:95:55:04:97:5C:15:9F:AC:07:6A
Certificate issuer:       /CN=B94F48BCAB6D8B0A28B3955504975C159FAC076A
Certificate serial:       430E8F9626E6016D47714C310C0B6B4F737465E2
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B94F48BCAB6D8B0A28B3955504975C159FAC076A.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/864c3155-c8ff-4207-a2dc-51e005530b52/0/B94F48BCAB6D8B0A28B3955504975C159FAC076A.mft
Manifest number:          052B
Signing time:             Fri 05 Dec 2025 20:31:22 +0000
Manifest this update:     Fri 05 Dec 2025 20:26:22 +0000
Manifest next update:     Tue 09 Dec 2025 05:12:22 +0000
Files and hashes:         1: B94F48BCAB6D8B0A28B3955504975C159FAC076A.crl (hash: PvbnAfxNm+6H3a4itthu6fNxE5VGnUWEh6Extob9Jcc=)
                          2: 3130332e3131392e3133392e302f32342d3234203d3e20313337333831.roa (hash: NXiX7VHYL2V/PG5eFGBukXkPCYGw4lMLoRT1ir2CDOE=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/864c3155-c8ff-4207-a2dc-51e005530b52/0/B94F48BCAB6D8B0A28B3955504975C159FAC076A.crl
                          rsync://repo-rpki.idnic.net/repo/864c3155-c8ff-4207-a2dc-51e005530b52/0/B94F48BCAB6D8B0A28B3955504975C159FAC076A.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B94F48BCAB6D8B0A28B3955504975C159FAC076A.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 09 Dec 2025 05:12:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:0e:8f:96:26:e6:01:6d:47:71:4c:31:0c:0b:6b:4f:73:74:65:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B94F48BCAB6D8B0A28B3955504975C159FAC076A
        Validity
            Not Before: Dec  5 20:26:22 2025 GMT
            Not After : Dec  9 05:12:22 2025 GMT
        Subject: CN=0FF1B4D8857AFE09BFE49DCA0B5CE3865A1BA14E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:be:58:1a:12:3c:34:48:34:8d:43:cf:ba:e4:
                    f7:5e:bb:0f:47:d7:4f:af:1d:b9:69:71:94:88:e4:
                    13:2a:5d:7f:dd:15:47:df:5d:9e:b7:17:63:da:a6:
                    9e:2a:d8:2a:aa:21:95:5a:37:94:7e:7b:d8:35:5b:
                    62:00:dd:21:d2:5f:76:e7:e6:84:f0:0f:ab:b6:20:
                    fb:35:d0:9b:c6:e9:2d:ad:a1:38:ef:31:18:b7:b2:
                    b1:54:2d:73:88:4b:2d:9c:b1:84:21:32:0f:98:4a:
                    09:80:ed:4f:1f:88:97:58:4c:b7:98:e5:2c:cf:8d:
                    d5:c5:ea:da:07:56:e1:e3:90:0b:63:bd:f4:60:53:
                    f5:de:3f:94:7e:01:ef:8a:25:89:28:08:01:4c:ad:
                    c3:a6:20:eb:f8:6a:a6:66:29:00:22:4a:b8:a8:56:
                    46:ec:4a:b3:7a:e6:b9:5e:f1:2b:7f:de:11:a5:8e:
                    37:ee:e0:5d:60:1e:b7:bd:56:2d:84:21:5d:b1:07:
                    01:39:d1:ce:b4:75:72:d3:ea:49:89:13:7e:e6:41:
                    4f:55:e3:ae:b1:02:c1:a3:51:48:07:c3:77:4f:9b:
                    d4:2d:57:a0:fa:55:a1:30:45:4a:28:e0:3d:0b:2e:
                    b2:36:fd:2c:76:b1:00:85:25:38:75:ff:5f:4e:1b:
                    7b:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:F1:B4:D8:85:7A:FE:09:BF:E4:9D:CA:0B:5C:E3:86:5A:1B:A1:4E
            X509v3 Authority Key Identifier:
                keyid:B9:4F:48:BC:AB:6D:8B:0A:28:B3:95:55:04:97:5C:15:9F:AC:07:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/864c3155-c8ff-4207-a2dc-51e005530b52/0/B94F48BCAB6D8B0A28B3955504975C159FAC076A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B94F48BCAB6D8B0A28B3955504975C159FAC076A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/864c3155-c8ff-4207-a2dc-51e005530b52/0/B94F48BCAB6D8B0A28B3955504975C159FAC076A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ed:b0:e7:f0:a0:bd:84:22:59:bc:76:f3:d5:c1:8e:dd:d0:f7:
         f7:80:34:83:4e:11:8a:6a:f2:04:19:d7:b7:8e:b9:24:de:68:
         20:04:1d:bf:b8:14:9d:6d:5c:01:3f:ff:94:f4:c5:78:5a:79:
         14:f1:32:5b:09:7c:fb:9e:75:61:a6:35:da:a9:62:3d:72:50:
         33:33:57:f9:13:47:6b:d6:67:93:a9:25:94:78:6c:5e:12:c0:
         3b:d3:4f:e2:f8:f8:31:37:2b:a0:56:3a:1d:3a:d6:31:5a:37:
         f7:87:03:5f:0c:db:59:3c:fd:71:f5:44:67:92:0d:0f:2f:4d:
         84:d2:93:e7:32:0f:bc:d3:16:e5:29:a9:d7:74:60:6c:6f:e9:
         13:b9:72:6a:2e:18:13:c4:4f:8b:04:0c:22:53:6c:bf:49:e7:
         f2:83:31:1f:5e:d3:b7:3e:5a:d9:d2:43:28:c4:95:bc:da:b3:
         a5:34:55:8a:e8:4f:a8:4b:84:54:32:57:c9:1e:4d:7e:d1:86:
         c7:d6:1e:5b:44:fb:7e:15:80:d5:ee:98:01:04:33:a6:f8:b0:
         32:32:07:a9:e1:6f:f7:56:50:c7:58:ef:83:91:90:02:77:7b:
         46:12:1b:6d:29:17:3d:56:0b:18:20:77:69:f8:ef:99:8a:f2:
         53:78:6b:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 07:49:15 2025 by rpki-client