This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/8b36e88d-d573-4cbb-b460-a0b969aa84d5/0/B3263D687D5BDFB2FB4E802AB3B003FCFD266B5C.mft
File:                     B3263D687D5BDFB2FB4E802AB3B003FCFD266B5C.mft (raw, json)
Hash identifier:          gmB4k8IimN5T+YMOU+xiadCWh94CaSm3nZXhwblc7b0=
Subject key identifier:   A8:2F:48:92:E9:D0:51:29:E1:1C:6C:26:7E:B1:8F:CF:AB:59:E5:3E
Authority key identifier: B3:26:3D:68:7D:5B:DF:B2:FB:4E:80:2A:B3:B0:03:FC:FD:26:6B:5C
Certificate issuer:       /CN=B3263D687D5BDFB2FB4E802AB3B003FCFD266B5C
Certificate serial:       30F71B82C6EEFBF900AEB1788CF0A1BAEEA70E2E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B3263D687D5BDFB2FB4E802AB3B003FCFD266B5C.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/8b36e88d-d573-4cbb-b460-a0b969aa84d5/0/B3263D687D5BDFB2FB4E802AB3B003FCFD266B5C.mft
Manifest number:          053B
Signing time:             Sat 06 Dec 2025 18:31:03 +0000
Manifest this update:     Sat 06 Dec 2025 18:26:03 +0000
Manifest next update:     Wed 10 Dec 2025 04:51:03 +0000
Files and hashes:         1: 323430343a366434303a3a2f33322d3438203d3e20313338383130.roa (hash: f1EdJawAFE33t1rxrdKPcs3d9VEItcNJb2cJ7vIPk2M=)
                          2: 3130332e3133342e3232312e302f32342d3234203d3e20313338383130.roa (hash: cmv59nNsRTRKeMV0c4HuiujTHOVfbugS8maMc0aBwq0=)
                          3: 3130332e3133342e3232302e302f32342d3234203d3e20313338383130.roa (hash: B9YgdbWic7qXvAvHz1n/3UtrpjolL03glGipzRrFEzY=)
                          4: 3130332e3133342e3232332e302f32342d3234203d3e203435333035.roa (hash: dZSB/gSxOY7UKqB6f6AoUZuRdwpTE/RXX5o4gj8yNrA=)
                          5: 3130332e3133342e3232302e302f32322d3234203d3e20313338383130.roa (hash: XcqISTFOM7Q9TbfcoALleQWh8kdaQumXVURloov1uL4=)
                          6: 3130332e3133342e3232322e302f32342d3234203d3e20313338383130.roa (hash: 3PZFIN0jiG1liVNOYS5bc8JkLCWSH93e9B5ZRAydDG8=)
                          7: B3263D687D5BDFB2FB4E802AB3B003FCFD266B5C.crl (hash: AMQN9g7//TXDuAn9NNx+HucpOxF2/abY/Q1hgmOK12U=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/8b36e88d-d573-4cbb-b460-a0b969aa84d5/0/B3263D687D5BDFB2FB4E802AB3B003FCFD266B5C.crl
                          rsync://repo-rpki.idnic.net/repo/8b36e88d-d573-4cbb-b460-a0b969aa84d5/0/B3263D687D5BDFB2FB4E802AB3B003FCFD266B5C.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B3263D687D5BDFB2FB4E802AB3B003FCFD266B5C.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 09 Dec 2025 15:57:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:f7:1b:82:c6:ee:fb:f9:00:ae:b1:78:8c:f0:a1:ba:ee:a7:0e:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B3263D687D5BDFB2FB4E802AB3B003FCFD266B5C
        Validity
            Not Before: Dec  6 18:26:03 2025 GMT
            Not After : Dec 10 04:51:03 2025 GMT
        Subject: CN=A82F4892E9D05129E11C6C267EB18FCFAB59E53E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:08:0c:dc:3e:a1:d8:35:56:d8:dc:8a:4a:f8:
                    42:b0:f8:31:7c:b2:eb:08:8e:f2:52:ad:f7:57:c9:
                    e8:be:ab:ea:13:99:eb:23:77:e6:ce:fb:62:5b:5d:
                    e5:44:54:4d:1b:e0:3b:a7:2e:55:06:7e:67:88:a5:
                    e2:80:8a:0b:64:93:a9:da:5d:6a:84:13:07:dd:72:
                    2d:5e:ec:02:61:56:f9:ed:6e:81:82:2d:26:b3:d0:
                    a2:70:a8:fe:1b:db:46:e9:06:fb:4c:7b:57:0c:d9:
                    c4:d1:80:eb:85:c9:f1:0d:d8:83:a2:3c:6e:b6:4c:
                    af:34:37:46:94:12:a5:0c:ea:6c:54:e0:f1:e7:80:
                    83:c9:dc:3d:12:d1:0b:ab:8b:51:2a:56:86:bb:77:
                    f7:70:6c:2e:12:9b:4b:03:fb:38:d6:b2:f2:39:0f:
                    ab:1d:48:85:9d:1a:ee:cf:cd:51:c1:fd:33:31:84:
                    28:de:1a:40:78:a9:94:86:fc:a4:86:c3:26:da:83:
                    3b:d3:27:2c:c1:ff:58:62:5a:45:19:e0:36:2a:f6:
                    fd:87:67:ff:07:62:00:3e:d4:18:0a:6f:99:57:26:
                    a6:6e:fd:bf:84:0c:03:e9:62:c5:e2:bb:98:a3:05:
                    70:bc:fd:99:87:8e:0e:62:5e:61:cc:22:9e:c5:23:
                    f6:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:2F:48:92:E9:D0:51:29:E1:1C:6C:26:7E:B1:8F:CF:AB:59:E5:3E
            X509v3 Authority Key Identifier:
                keyid:B3:26:3D:68:7D:5B:DF:B2:FB:4E:80:2A:B3:B0:03:FC:FD:26:6B:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/8b36e88d-d573-4cbb-b460-a0b969aa84d5/0/B3263D687D5BDFB2FB4E802AB3B003FCFD266B5C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B3263D687D5BDFB2FB4E802AB3B003FCFD266B5C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8b36e88d-d573-4cbb-b460-a0b969aa84d5/0/B3263D687D5BDFB2FB4E802AB3B003FCFD266B5C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:0e:76:46:69:75:4b:d3:44:5a:cf:30:6c:0b:c5:00:07:c4:
         d9:6f:b2:a1:85:28:72:a8:8b:26:9d:c2:00:65:b3:4b:fa:3b:
         2e:ad:be:cf:54:c7:f1:c4:be:31:70:93:50:2d:8d:5f:d0:a3:
         3d:65:5f:08:c8:8f:ff:dc:cf:82:a6:1b:46:3e:0f:a8:d7:c4:
         bd:1b:dc:17:ac:4b:36:fc:1f:36:f8:f7:e5:9c:ea:69:02:fb:
         c5:71:b5:76:5d:e2:f8:ed:31:37:08:26:2d:af:19:e2:95:6a:
         f5:36:ed:cd:41:10:c0:39:eb:7e:5f:33:9c:88:ba:ff:8c:e5:
         b9:97:7c:0f:74:e0:7a:6e:9f:54:f1:c7:24:1a:08:8f:22:8d:
         40:99:bd:88:10:5e:d0:76:a3:7f:b7:2f:f2:24:09:ea:9b:8a:
         f6:e5:5b:2c:d6:a1:92:0c:17:8b:d3:a3:43:37:cb:6a:86:b1:
         cf:57:51:a8:75:ef:ec:54:1d:af:17:b1:20:14:a7:86:73:70:
         8e:bf:0d:3c:21:04:97:6f:0d:90:40:90:84:47:76:5d:84:d9:
         9b:13:ed:3b:0c:fb:ce:47:dc:b2:f9:c1:2b:00:4a:a2:38:3d:
         c8:dd:63:a0:36:e2:05:5c:5e:61:82:0b:9d:e5:37:ea:d4:5d:
         07:b0:86:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 00:48:37 2025 by rpki-client