This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/a87c2b7e-2663-4d68-b25a-5fcf05e07bb4/0/B8E13B8031811FE78FA73151056FBFABEE076814.mft
File:                     B8E13B8031811FE78FA73151056FBFABEE076814.mft (raw, json)
Hash identifier:          tZkH8Q7zeFjTlDTUmDqhhOTlL2LIphfMe2RrRr5fVQs=
Subject key identifier:   A8:61:AD:81:F6:81:66:D0:EE:5F:A7:57:68:E4:A4:53:A0:DE:AC:92
Authority key identifier: B8:E1:3B:80:31:81:1F:E7:8F:A7:31:51:05:6F:BF:AB:EE:07:68:14
Certificate issuer:       /CN=B8E13B8031811FE78FA73151056FBFABEE076814
Certificate serial:       46FDD702725D4E5737CB887897001ED1D49FE8D2
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B8E13B8031811FE78FA73151056FBFABEE076814.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/a87c2b7e-2663-4d68-b25a-5fcf05e07bb4/0/B8E13B8031811FE78FA73151056FBFABEE076814.mft
Manifest number:          53
Signing time:             Fri 05 Dec 2025 20:32:19 +0000
Manifest this update:     Fri 05 Dec 2025 20:27:19 +0000
Manifest next update:     Mon 08 Dec 2025 22:40:19 +0000
Files and hashes:         1: B8E13B8031811FE78FA73151056FBFABEE076814.crl (hash: vTIs2/TNj2JbiEe58KxuellZzg7pRMCwYPuYDz7HR9M=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/a87c2b7e-2663-4d68-b25a-5fcf05e07bb4/0/B8E13B8031811FE78FA73151056FBFABEE076814.crl
                          rsync://repo-rpki.idnic.net/repo/a87c2b7e-2663-4d68-b25a-5fcf05e07bb4/0/B8E13B8031811FE78FA73151056FBFABEE076814.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B8E13B8031811FE78FA73151056FBFABEE076814.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 08 Dec 2025 22:40:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:fd:d7:02:72:5d:4e:57:37:cb:88:78:97:00:1e:d1:d4:9f:e8:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B8E13B8031811FE78FA73151056FBFABEE076814
        Validity
            Not Before: Dec  5 20:27:19 2025 GMT
            Not After : Dec  8 22:40:19 2025 GMT
        Subject: CN=A861AD81F68166D0EE5FA75768E4A453A0DEAC92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:6c:03:7a:b1:44:8b:66:17:56:ea:58:62:c6:
                    70:92:63:4f:1a:b8:a9:10:b0:57:69:ab:4a:22:32:
                    2b:f9:c9:b1:87:af:9b:1a:68:c6:31:b4:90:99:46:
                    38:68:e3:18:35:cc:c4:38:7f:24:ab:52:3b:fa:97:
                    62:58:00:f2:54:6a:ba:a3:64:a8:0b:e7:b5:88:0e:
                    4c:4e:b4:4c:4a:8b:a2:f1:73:4f:96:b9:e2:b6:fd:
                    5d:e8:71:41:3a:cf:f2:18:d2:fa:ad:3a:f0:08:3b:
                    a5:cb:6f:bc:1e:ce:35:21:80:66:00:20:44:32:c6:
                    56:ab:60:c1:ef:36:ff:70:56:f3:4a:8a:a0:40:7c:
                    ff:d8:56:ce:b7:b6:97:3b:d1:f7:03:98:b7:a8:98:
                    24:2d:43:6d:e5:b1:1e:ab:21:ec:48:d4:be:9a:7f:
                    83:12:bb:70:92:5b:54:32:ac:9d:fc:0f:b9:bd:9a:
                    c7:03:c6:d8:87:48:bb:95:40:a0:21:d0:a8:5b:09:
                    47:cb:34:28:65:1d:3c:54:98:09:b5:56:6f:c9:50:
                    f6:51:1a:45:7a:08:d9:3b:3b:30:78:e9:24:7b:34:
                    b1:78:67:db:33:a5:b1:a1:15:a4:4b:b7:58:31:0a:
                    32:d8:cb:5a:39:6d:11:7d:24:92:99:44:e4:f5:45:
                    8c:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:61:AD:81:F6:81:66:D0:EE:5F:A7:57:68:E4:A4:53:A0:DE:AC:92
            X509v3 Authority Key Identifier:
                keyid:B8:E1:3B:80:31:81:1F:E7:8F:A7:31:51:05:6F:BF:AB:EE:07:68:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/a87c2b7e-2663-4d68-b25a-5fcf05e07bb4/0/B8E13B8031811FE78FA73151056FBFABEE076814.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B8E13B8031811FE78FA73151056FBFABEE076814.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a87c2b7e-2663-4d68-b25a-5fcf05e07bb4/0/B8E13B8031811FE78FA73151056FBFABEE076814.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:c7:bc:21:03:88:f2:15:1f:8f:58:5c:8c:6a:c2:f3:1c:de:
         16:5c:3b:b9:5d:ba:26:1d:05:10:35:41:25:33:6c:76:37:73:
         39:4f:3e:d6:02:f8:6c:6c:63:4a:08:f5:32:a0:46:9a:f3:4d:
         40:a7:33:d2:09:38:be:ed:37:4e:08:16:84:f5:96:49:17:98:
         bc:aa:17:64:d4:a4:d3:c0:5e:75:50:e9:1c:b3:df:a5:bf:96:
         17:99:e2:16:74:27:e4:43:00:ce:31:c1:ac:09:0c:18:20:d2:
         d5:51:06:0b:fc:d1:c8:6c:de:86:84:11:ac:05:c9:a7:d1:65:
         c5:31:f0:5b:83:89:35:ed:66:9d:52:9a:9e:b2:5d:4d:d4:f9:
         73:26:91:51:14:ac:6d:fd:79:aa:aa:98:b7:97:27:13:c6:e3:
         15:04:95:73:6c:00:7d:b4:8f:80:a2:28:b7:03:7a:82:47:62:
         77:c9:33:ba:b9:e0:11:c8:a5:46:39:9c:d2:24:01:66:98:20:
         77:f1:5a:36:14:8f:67:de:ee:c2:0b:81:6b:33:7b:53:4c:1a:
         5d:ba:bd:7b:cd:96:e8:db:4a:f9:c3:1e:84:b7:a2:0e:7f:20:
         5b:c3:6d:90:ea:1a:72:b8:b8:5d:a0:02:e4:a4:de:62:02:03:
         3f:2d:0a:fb
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIURv3XAnJdTlc3y4h4lwAe0dSf6NIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjhFMTNCODAzMTgxMUZFNzhGQTczMTUxMDU2RkJGQUJF
RTA3NjgxNDAeFw0yNTEyMDUyMDI3MTlaFw0yNTEyMDgyMjQwMTlaMDMxMTAvBgNV
BAMTKEE4NjFBRDgxRjY4MTY2RDBFRTVGQTc1NzY4RTRBNDUzQTBERUFDOTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYbAN6sUSLZhdW6lhixnCSY08a
uKkQsFdpq0oiMiv5ybGHr5saaMYxtJCZRjho4xg1zMQ4fySrUjv6l2JYAPJUarqj
ZKgL57WIDkxOtExKi6Lxc0+WueK2/V3ocUE6z/IY0vqtOvAIO6XLb7wezjUhgGYA
IEQyxlarYMHvNv9wVvNKiqBAfP/YVs63tpc70fcDmLeomCQtQ23lsR6rIexI1L6a
f4MSu3CSW1QyrJ38D7m9mscDxtiHSLuVQKAh0KhbCUfLNChlHTxUmAm1Vm/JUPZR
GkV6CNk7OzB46SR7NLF4Z9szpbGhFaRLt1gxCjLYy1o5bRF9JJKZROT1RYz5AgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUqGGtgfaBZtDuX6dXaOSkU6DerJIwHwYDVR0j
BBgwFoAUuOE7gDGBH+ePpzFRBW+/q+4HaBQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h
ODdjMmI3ZS0yNjYzLTRkNjgtYjI1YS01ZmNmMDVlMDdiYjQvMC9COEUxM0I4MDMx
ODExRkU3OEZBNzMxNTEwNTZGQkZBQkVFMDc2ODE0LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQjhFMTNCODAzMTgxMUZFNzhGQTczMTUxMDU2RkJGQUJFRTA3
NjgxNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTg3YzJiN2UtMjY2My00ZDY4LWIy
NWEtNWZjZjA1ZTA3YmI0LzAvQjhFMTNCODAzMTgxMUZFNzhGQTczMTUxMDU2RkJG
QUJFRTA3NjgxNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAEnHvCEDiPIVH49YXIxqwvMc3hZcO7lduiYd
BRA1QSUzbHY3czlPPtYC+GxsY0oI9TKgRprzTUCnM9IJOL7tN04IFoT1lkkXmLyq
F2TUpNPAXnVQ6Ryz36W/lheZ4hZ0J+RDAM4xwawJDBgg0tVRBgv80chs3oaEEawF
yafRZcUx8FuDiTXtZp1Smp6yXU3U+XMmkVEUrG39eaqqmLeXJxPG4xUElXNsAH20
j4CiKLcDeoJHYnfJM7q54BHIpUY5nNIkAWaYIHfxWjYUj2fe7sILgWsze1NMGl26
vXvNlujbSvnDHoS3og5/IFvDbZDqGnK4uF2gAuSk3mICAz8tCvs=
-----END CERTIFICATE-----
Generated at Sun Dec 7 00:14:13 2025 by rpki-client