This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/8dcf4067-a69d-4908-bee8-b4655bdc15f8/0/B197F427572524588487CFDB163A9E512FAE4DF2.mft
File:                     B197F427572524588487CFDB163A9E512FAE4DF2.mft (raw, json)
Hash identifier:          upe9hJYD0qSuYDPQpCpz7/B/PV/GDVGivUvZZiHb+Ms=
Subject key identifier:   73:9F:CA:F7:DF:FF:AC:A6:48:6E:2D:04:7B:FC:0F:F8:7D:6D:3C:F9
Authority key identifier: B1:97:F4:27:57:25:24:58:84:87:CF:DB:16:3A:9E:51:2F:AE:4D:F2
Certificate issuer:       /CN=B197F427572524588487CFDB163A9E512FAE4DF2
Certificate serial:       7F9C91C8E2B11B3780429E6EA1069C7AF77E5B2E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B197F427572524588487CFDB163A9E512FAE4DF2.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/8dcf4067-a69d-4908-bee8-b4655bdc15f8/0/B197F427572524588487CFDB163A9E512FAE4DF2.mft
Manifest number:          024F
Signing time:             Sat 06 Dec 2025 22:41:27 +0000
Manifest this update:     Sat 06 Dec 2025 22:36:27 +0000
Manifest next update:     Wed 10 Dec 2025 07:27:27 +0000
Files and hashes:         1: B197F427572524588487CFDB163A9E512FAE4DF2.crl (hash: 4hxSlbaCqhBxCNjgeIvxSY+aI6DAFgumUhh+8ixwqW0=)
                          2: 323430363a346563303a3a2f33322d3332203d3e20313430343735.roa (hash: sqH8mgq0fr+XiznMLTzogmtodA1+q341U0FlkHOzY5k=)
                          3: 3130332e3135332e3234372e302f32342d3234203d3e20313430343735.roa (hash: IlIKis9hrjcqU4gajZ2m+r4qTrp6BInf4S11M61jB+A=)
                          4: 3130332e3135332e3234362e302f32342d3234203d3e20313430343735.roa (hash: BU1Q0ryHM0MlXG1Q7vZvhi4oAbOwc3sWBEiOeckA5Ms=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/8dcf4067-a69d-4908-bee8-b4655bdc15f8/0/B197F427572524588487CFDB163A9E512FAE4DF2.crl
                          rsync://repo-rpki.idnic.net/repo/8dcf4067-a69d-4908-bee8-b4655bdc15f8/0/B197F427572524588487CFDB163A9E512FAE4DF2.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B197F427572524588487CFDB163A9E512FAE4DF2.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 09 Dec 2025 15:57:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:9c:91:c8:e2:b1:1b:37:80:42:9e:6e:a1:06:9c:7a:f7:7e:5b:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B197F427572524588487CFDB163A9E512FAE4DF2
        Validity
            Not Before: Dec  6 22:36:27 2025 GMT
            Not After : Dec 10 07:27:27 2025 GMT
        Subject: CN=739FCAF7DFFFACA6486E2D047BFC0FF87D6D3CF9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:7d:2b:05:8f:2d:bb:73:89:09:f9:85:a1:62:
                    e1:58:9d:14:20:dc:53:6d:de:18:00:75:28:d9:d6:
                    1f:5e:10:ac:17:03:9d:2b:93:41:c4:cf:af:b1:b2:
                    b9:17:7f:16:d4:e0:38:f0:4a:5a:d4:a3:f5:8f:4a:
                    77:77:17:14:06:62:d0:a7:25:c1:75:90:5b:35:fd:
                    28:38:a4:87:f1:b9:43:f0:3d:f4:96:6d:79:7b:7d:
                    f3:36:d0:d1:d0:f7:a5:5a:90:21:c4:3b:d5:8e:83:
                    d4:75:15:c8:72:75:ff:4c:f6:a9:6d:cb:ab:dc:b4:
                    75:05:50:b2:32:3f:31:e3:b8:49:a3:fe:f0:e0:77:
                    29:08:14:f3:d5:ee:07:ef:76:25:cf:9e:d4:89:d2:
                    02:d7:d6:2a:c3:cd:19:bc:89:54:ca:1f:d3:e8:31:
                    d2:c4:d4:c6:b0:47:26:f9:9a:92:96:83:ee:0d:a9:
                    86:c1:65:c0:af:73:39:5d:67:63:d6:c7:bf:ae:d2:
                    66:19:40:d0:b7:90:e0:8a:02:27:4b:26:17:12:0b:
                    e0:51:98:40:64:e0:02:c7:e4:c9:aa:72:45:ae:19:
                    f1:be:e9:3f:8f:6c:47:a1:5b:f4:88:c0:f4:66:04:
                    7c:e8:72:a0:89:ef:4d:95:97:2e:95:b7:7a:22:2b:
                    29:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:9F:CA:F7:DF:FF:AC:A6:48:6E:2D:04:7B:FC:0F:F8:7D:6D:3C:F9
            X509v3 Authority Key Identifier:
                keyid:B1:97:F4:27:57:25:24:58:84:87:CF:DB:16:3A:9E:51:2F:AE:4D:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/8dcf4067-a69d-4908-bee8-b4655bdc15f8/0/B197F427572524588487CFDB163A9E512FAE4DF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B197F427572524588487CFDB163A9E512FAE4DF2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8dcf4067-a69d-4908-bee8-b4655bdc15f8/0/B197F427572524588487CFDB163A9E512FAE4DF2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:15:42:69:e8:57:12:24:c8:f4:38:d3:9e:5c:c3:41:b7:00:
         eb:71:58:66:2a:de:a0:ed:e3:e6:29:8f:96:40:c1:39:9d:ec:
         9a:e2:9f:80:68:36:6d:e3:1c:53:77:cd:ca:f8:70:a4:98:a9:
         48:78:14:0f:a7:11:8a:00:e8:41:18:7d:b8:1b:84:20:4b:e7:
         0a:af:72:2c:f6:97:35:89:0c:4f:16:68:cb:2b:99:21:35:70:
         32:29:64:ac:f7:9a:50:df:35:ac:0e:8b:26:fd:6a:fd:f5:fd:
         54:b5:8e:75:84:1c:c9:49:52:b8:5e:1c:c9:26:58:6d:4f:c8:
         b7:7a:62:cf:72:fb:c4:6d:af:1f:49:c7:34:ac:16:77:ca:52:
         47:91:14:fa:d6:b7:2e:79:c7:9f:2e:70:64:cd:ae:04:54:6d:
         d3:a9:f9:6c:17:dc:6b:38:7f:9d:97:d7:bc:ed:a0:23:30:8d:
         02:39:25:f0:6d:72:a8:82:a7:89:1a:48:2e:6e:59:3d:38:dc:
         62:8f:f5:ff:d5:4f:4b:9f:c9:d2:49:1d:63:e6:8c:64:42:e6:
         aa:19:6d:d9:79:e2:ef:7d:5d:52:48:2c:25:04:fe:63:2d:dd:
         15:53:ca:c5:52:fe:80:d9:0f:ce:26:0a:10:fd:1b:cf:d9:13:
         12:ec:85:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 03:59:32 2025 by rpki-client