This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/b2a0a771-62d2-4238-a406-7999f224849c/0/B2BCF7264F89246583B384F354CB350DF3B6AADB.mft
File:                     B2BCF7264F89246583B384F354CB350DF3B6AADB.mft (raw, json)
Hash identifier:          mLoq+88CgXESvrnpc6WEjlZhuKVJDkzjY1bnNjECuJo=
Subject key identifier:   AB:97:0A:24:CF:05:79:65:B6:19:EB:A7:B8:44:A5:F4:CD:64:95:6A
Authority key identifier: B2:BC:F7:26:4F:89:24:65:83:B3:84:F3:54:CB:35:0D:F3:B6:AA:DB
Certificate issuer:       /CN=B2BCF7264F89246583B384F354CB350DF3B6AADB
Certificate serial:       68BBEF9CAE472A8C920424515EB7818978AB1773
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2BCF7264F89246583B384F354CB350DF3B6AADB.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/b2a0a771-62d2-4238-a406-7999f224849c/0/B2BCF7264F89246583B384F354CB350DF3B6AADB.mft
Manifest number:          052C
Signing time:             Fri 05 Dec 2025 03:12:10 +0000
Manifest this update:     Fri 05 Dec 2025 03:07:10 +0000
Manifest next update:     Mon 08 Dec 2025 11:39:10 +0000
Files and hashes:         1: B2BCF7264F89246583B384F354CB350DF3B6AADB.crl (hash: 0wTln2agp+jnwf9ES23ABnMEfcKHg5cNJaGlP3cvjWQ=)
                          2: 3230322e34372e39302e302f32332d3234203d3e203436303230.roa (hash: f31WSeSw8w1qVqSz7UZlMp3AZocd9nv655saAh7fViI=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/b2a0a771-62d2-4238-a406-7999f224849c/0/B2BCF7264F89246583B384F354CB350DF3B6AADB.crl
                          rsync://repo-rpki.idnic.net/repo/b2a0a771-62d2-4238-a406-7999f224849c/0/B2BCF7264F89246583B384F354CB350DF3B6AADB.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2BCF7264F89246583B384F354CB350DF3B6AADB.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 08 Dec 2025 11:39:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:bb:ef:9c:ae:47:2a:8c:92:04:24:51:5e:b7:81:89:78:ab:17:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B2BCF7264F89246583B384F354CB350DF3B6AADB
        Validity
            Not Before: Dec  5 03:07:10 2025 GMT
            Not After : Dec  8 11:39:10 2025 GMT
        Subject: CN=AB970A24CF057965B619EBA7B844A5F4CD64956A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:41:2c:ce:f5:ed:05:c6:f6:41:ce:a6:6e:cf:
                    c1:8b:26:39:8e:a1:33:46:18:7e:35:57:5c:e9:e4:
                    2e:62:8f:1c:c1:e9:f0:d2:6a:f9:41:18:21:8d:b5:
                    05:1a:b0:60:fa:ee:69:16:98:77:ba:2e:72:9b:22:
                    1c:55:b2:fa:76:98:fe:60:a0:e8:da:2e:14:64:5a:
                    1c:18:d7:fa:8d:1c:a5:89:50:9c:de:0c:c1:42:6e:
                    24:24:23:44:97:05:eb:43:f1:5b:3b:54:56:c9:10:
                    0e:98:4e:86:9c:d6:45:68:a9:31:5c:b8:ec:e8:65:
                    16:4d:5e:6f:d0:c4:63:b7:f3:ad:5f:68:95:5a:1a:
                    db:c9:bb:69:21:fa:ae:34:03:3c:65:8b:b9:af:78:
                    4f:a2:35:6a:f5:4c:36:eb:8b:cc:da:99:8d:92:bd:
                    80:9d:85:1c:d2:30:c7:0a:fd:fe:c7:08:23:ea:31:
                    c6:db:ee:1b:ba:64:c1:e9:9f:37:bf:d0:f9:f0:43:
                    f5:3c:5e:bf:2c:e6:f6:e5:8a:ab:ff:9b:e3:85:ea:
                    2b:42:ea:be:53:f9:63:9c:a6:2c:13:b0:d7:bc:d9:
                    a3:64:b2:28:cb:4d:4e:36:48:90:bb:f5:1e:a7:0b:
                    4b:04:6f:8f:7c:7a:a6:72:b1:3d:e7:ce:23:95:8b:
                    14:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:97:0A:24:CF:05:79:65:B6:19:EB:A7:B8:44:A5:F4:CD:64:95:6A
            X509v3 Authority Key Identifier:
                keyid:B2:BC:F7:26:4F:89:24:65:83:B3:84:F3:54:CB:35:0D:F3:B6:AA:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/b2a0a771-62d2-4238-a406-7999f224849c/0/B2BCF7264F89246583B384F354CB350DF3B6AADB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2BCF7264F89246583B384F354CB350DF3B6AADB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b2a0a771-62d2-4238-a406-7999f224849c/0/B2BCF7264F89246583B384F354CB350DF3B6AADB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:24:65:04:d1:8d:ab:33:3d:d1:a1:97:24:ef:6a:f9:54:42:
         fe:34:9e:97:cc:a6:ab:9c:d4:58:92:1e:90:39:39:44:0f:0e:
         d1:3d:b7:0b:f6:02:c5:ef:17:ef:36:f7:7c:0e:01:30:fa:cc:
         ff:d9:84:25:fe:f3:70:ae:b3:3f:8e:17:1d:eb:86:9e:9b:3d:
         3c:47:5e:f1:c0:34:24:26:ed:49:c9:e8:e9:89:4a:72:bd:8e:
         33:74:20:69:59:a6:83:28:1d:93:9b:22:e3:df:4d:49:31:91:
         8a:c0:ac:59:57:44:c9:40:af:2b:ab:68:27:fe:ed:08:bf:d7:
         25:57:3a:91:34:3e:1b:b6:b6:0b:a0:4f:28:7f:3e:45:64:0d:
         38:3b:6d:0b:3b:85:8a:50:1a:a6:27:93:1c:eb:b7:c1:54:3f:
         8f:32:b3:36:78:5f:d9:ff:ed:4c:38:4a:13:f8:e8:c3:82:42:
         33:21:f2:7f:38:b9:88:91:df:98:ad:16:82:80:a9:c3:c1:6b:
         a7:8e:d3:ab:1e:22:d2:33:1e:40:0c:cf:c3:68:3b:a8:48:15:
         e5:2c:22:fd:b7:c0:34:7c:c5:55:ab:f4:40:f5:97:49:bf:56:
         fe:a0:8e:ed:81:85:45:16:58:4b:87:df:f8:3d:65:32:5c:9d:
         d2:34:ed:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 02:54:51 2025 by rpki-client