This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/c647a6a2-1ad0-46c7-9cad-58bbd71fb5a4/0/BC18FDA249B3BD56020648E83F0B24DDBF1E66E5.mft
File:                     BC18FDA249B3BD56020648E83F0B24DDBF1E66E5.mft (raw, json)
Hash identifier:          +bsS5avOSjFSYNjk7ZmG0rjRjs+hj3JFkARN2KVKLv4=
Subject key identifier:   13:AE:77:E2:B9:E7:5E:DD:5A:8F:5D:AD:CB:4A:6D:75:01:4E:A4:64
Authority key identifier: BC:18:FD:A2:49:B3:BD:56:02:06:48:E8:3F:0B:24:DD:BF:1E:66:E5
Certificate issuer:       /CN=BC18FDA249B3BD56020648E83F0B24DDBF1E66E5
Certificate serial:       61C477A292F9AD0829B8C7B3F9E7633B1A4EF0E2
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BC18FDA249B3BD56020648E83F0B24DDBF1E66E5.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/c647a6a2-1ad0-46c7-9cad-58bbd71fb5a4/0/BC18FDA249B3BD56020648E83F0B24DDBF1E66E5.mft
Manifest number:          0496
Signing time:             Sat 06 Dec 2025 20:52:11 +0000
Manifest this update:     Sat 06 Dec 2025 20:47:11 +0000
Manifest next update:     Tue 09 Dec 2025 23:04:11 +0000
Files and hashes:         1: 3130332e3136302e3136342e302f32342d3234203d3e203538343935.roa (hash: 16HQZb88y83aHIsJXjQBx7+/lMzUX78B/OozTUnK7s4=)
                          2: BC18FDA249B3BD56020648E83F0B24DDBF1E66E5.crl (hash: +YGqfXrRQ+vNlxX7BO+LpXbkCTXX9wihmA/f0ShmESA=)
                          3: 3130332e3136302e3136352e302f32342d3234203d3e203538343935.roa (hash: oT7jsoB/MSX7oA3hAjR9cy0JPZ1LVJx++z9THEGgY48=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/c647a6a2-1ad0-46c7-9cad-58bbd71fb5a4/0/BC18FDA249B3BD56020648E83F0B24DDBF1E66E5.crl
                          rsync://repo-rpki.idnic.net/repo/c647a6a2-1ad0-46c7-9cad-58bbd71fb5a4/0/BC18FDA249B3BD56020648E83F0B24DDBF1E66E5.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BC18FDA249B3BD56020648E83F0B24DDBF1E66E5.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 09 Dec 2025 15:57:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:c4:77:a2:92:f9:ad:08:29:b8:c7:b3:f9:e7:63:3b:1a:4e:f0:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BC18FDA249B3BD56020648E83F0B24DDBF1E66E5
        Validity
            Not Before: Dec  6 20:47:11 2025 GMT
            Not After : Dec  9 23:04:11 2025 GMT
        Subject: CN=13AE77E2B9E75EDD5A8F5DADCB4A6D75014EA464
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:ef:ff:5a:88:79:3b:54:cc:28:eb:94:ae:cb:
                    15:f9:b9:01:4e:68:f0:51:ba:54:6c:a7:a8:c5:0b:
                    4b:d0:65:f0:ed:43:42:04:3a:03:41:9d:92:c9:e5:
                    b4:d8:91:65:65:19:03:ab:a6:9b:f4:ad:4d:c2:13:
                    26:20:ca:81:fc:2b:c0:5d:4d:3c:18:59:64:fb:ce:
                    28:e9:ff:46:84:46:1f:52:93:f8:0b:8c:59:1a:42:
                    b1:5c:db:82:4c:60:e5:93:5b:c3:73:30:ba:bb:86:
                    ae:dd:6d:97:dc:04:c1:f6:39:e9:d0:6a:25:9f:3b:
                    8a:13:50:40:69:98:47:d0:48:33:5a:c9:c6:15:c3:
                    06:1f:25:04:23:cb:3c:47:b5:05:08:86:65:5e:f6:
                    a9:68:fe:eb:41:0e:89:a0:68:4a:f7:49:20:1f:77:
                    61:fe:b4:ce:1c:2a:30:6c:01:b7:e5:89:9e:92:52:
                    04:48:c2:61:df:88:44:af:b2:e7:65:11:bb:f8:90:
                    9a:71:a0:c0:68:a2:31:6c:cc:7c:e8:24:64:5b:ed:
                    a5:08:2d:5c:11:a7:4b:25:3c:5d:e3:1c:af:64:19:
                    f8:b0:f9:23:a3:56:93:9b:87:27:e3:70:d9:a4:c4:
                    24:c8:d2:24:91:06:e0:42:0f:6b:bb:53:ba:81:0a:
                    79:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:AE:77:E2:B9:E7:5E:DD:5A:8F:5D:AD:CB:4A:6D:75:01:4E:A4:64
            X509v3 Authority Key Identifier:
                keyid:BC:18:FD:A2:49:B3:BD:56:02:06:48:E8:3F:0B:24:DD:BF:1E:66:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/c647a6a2-1ad0-46c7-9cad-58bbd71fb5a4/0/BC18FDA249B3BD56020648E83F0B24DDBF1E66E5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BC18FDA249B3BD56020648E83F0B24DDBF1E66E5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c647a6a2-1ad0-46c7-9cad-58bbd71fb5a4/0/BC18FDA249B3BD56020648E83F0B24DDBF1E66E5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         be:b2:b4:9f:1b:5e:76:e6:85:ff:c0:ae:94:fb:e7:9b:c5:69:
         b0:dc:d2:a8:e0:95:0f:27:7e:43:77:17:7f:85:15:fe:18:22:
         81:32:bf:cd:4f:32:8e:38:7e:a5:1e:f3:17:d0:cb:c0:f5:4b:
         66:15:bf:85:3e:34:6a:bc:eb:14:b4:fd:fb:a0:35:14:25:79:
         6f:03:0c:aa:98:23:ae:a2:f3:d1:d1:eb:e7:59:e4:ca:12:2e:
         41:fe:98:76:01:b5:ad:df:6a:e0:de:47:71:16:25:d8:7a:94:
         14:22:45:68:a3:60:c3:39:51:1d:4f:0e:08:47:a6:6b:70:d5:
         f4:67:aa:32:d7:c7:ea:d4:20:8a:57:4d:35:95:27:5f:09:8b:
         3d:30:0f:29:16:1f:1f:19:7a:dd:a9:17:0a:e6:60:4d:94:4f:
         e5:84:16:fd:8d:fe:50:06:38:1b:38:6a:6f:4a:1d:7b:7b:be:
         a1:97:59:d6:e0:86:68:f3:d6:3a:f7:7c:ba:14:f9:47:34:f8:
         df:44:87:87:8b:a5:59:07:08:5f:ca:8c:9b:40:ee:ad:bc:f4:
         08:b3:49:6f:49:21:4e:10:de:fd:d8:ed:f6:fa:88:b5:56:c1:
         1d:53:29:85:70:fe:f6:37:95:98:61:8f:04:31:75:b2:ea:63:
         c5:b7:cf:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 02:09:08 2025 by rpki-client