This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/c81af021-1c01-4a2e-b5d3-c1bbb1650c43/0/0FBAD92F48DF15477E4DD93CDC7A5277FE93A8EB.mft
File:                     0FBAD92F48DF15477E4DD93CDC7A5277FE93A8EB.mft (raw, json)
Hash identifier:          T/Q/urxLv+cTuapNqQ+Z71AS4Qm5JRd4Re1poYVLFPA=
Subject key identifier:   EC:55:55:93:90:CD:31:BB:9E:AA:2A:A3:61:81:A0:C6:25:01:46:91
Authority key identifier: 0F:BA:D9:2F:48:DF:15:47:7E:4D:D9:3C:DC:7A:52:77:FE:93:A8:EB
Certificate issuer:       /CN=0FBAD92F48DF15477E4DD93CDC7A5277FE93A8EB
Certificate serial:       518F1B5E505DB12B313DBB8CBF7B66358B77B653
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0FBAD92F48DF15477E4DD93CDC7A5277FE93A8EB.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/c81af021-1c01-4a2e-b5d3-c1bbb1650c43/0/0FBAD92F48DF15477E4DD93CDC7A5277FE93A8EB.mft
Manifest number:          BB
Signing time:             Fri 05 Dec 2025 17:51:09 +0000
Manifest this update:     Fri 05 Dec 2025 17:46:09 +0000
Manifest next update:     Tue 09 Dec 2025 05:05:09 +0000
Files and hashes:         1: 0FBAD92F48DF15477E4DD93CDC7A5277FE93A8EB.crl (hash: PSPnZm9zhuIY0u8qDkB56xCPXNSA7cCrph1EWrG6BGE=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/c81af021-1c01-4a2e-b5d3-c1bbb1650c43/0/0FBAD92F48DF15477E4DD93CDC7A5277FE93A8EB.crl
                          rsync://repo-rpki.idnic.net/repo/c81af021-1c01-4a2e-b5d3-c1bbb1650c43/0/0FBAD92F48DF15477E4DD93CDC7A5277FE93A8EB.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0FBAD92F48DF15477E4DD93CDC7A5277FE93A8EB.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 09 Dec 2025 05:05:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:8f:1b:5e:50:5d:b1:2b:31:3d:bb:8c:bf:7b:66:35:8b:77:b6:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0FBAD92F48DF15477E4DD93CDC7A5277FE93A8EB
        Validity
            Not Before: Dec  5 17:46:09 2025 GMT
            Not After : Dec  9 05:05:09 2025 GMT
        Subject: CN=EC55559390CD31BB9EAA2AA36181A0C625014691
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:8a:9d:5f:9b:e6:15:bb:0c:59:8d:8f:75:e0:
                    65:60:38:2b:02:60:e9:40:2a:31:73:44:11:83:d4:
                    66:0a:e9:54:64:31:ef:31:ab:95:6b:47:90:a3:c3:
                    5d:6a:0f:e0:a4:6f:1a:60:f4:20:4b:e8:e8:dd:d4:
                    24:0e:ca:d4:72:43:f0:e7:20:b7:78:12:0b:e5:73:
                    3d:2f:32:7c:7e:ae:bd:3c:2e:ed:da:d7:f0:e3:9e:
                    1d:d1:2b:33:37:9d:32:9e:8b:c3:59:a1:9e:c0:35:
                    00:f5:3a:9a:cb:54:bc:ec:f1:d2:35:32:cd:13:5f:
                    b9:76:02:87:1a:79:98:02:ff:87:4e:b2:1d:3f:6c:
                    ac:2f:00:c2:99:de:39:9f:60:9b:03:90:c9:49:60:
                    58:92:ae:0b:37:56:22:6b:ad:ae:42:25:e3:6f:7b:
                    55:e1:ec:2c:78:eb:f9:73:60:bb:fa:82:94:44:ac:
                    c0:00:70:ce:e3:2a:52:c8:f4:42:6f:07:41:bf:7b:
                    d2:dc:bc:93:9d:b1:0c:93:93:9b:6a:d1:c0:14:e7:
                    ad:87:cf:04:84:2d:60:54:af:f5:02:19:9c:9b:3a:
                    18:85:00:bc:79:d7:bd:eb:48:cf:e1:db:0d:7d:08:
                    f3:9b:cd:78:73:f3:75:94:37:58:d3:8f:3f:da:e7:
                    7e:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:55:55:93:90:CD:31:BB:9E:AA:2A:A3:61:81:A0:C6:25:01:46:91
            X509v3 Authority Key Identifier:
                keyid:0F:BA:D9:2F:48:DF:15:47:7E:4D:D9:3C:DC:7A:52:77:FE:93:A8:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/c81af021-1c01-4a2e-b5d3-c1bbb1650c43/0/0FBAD92F48DF15477E4DD93CDC7A5277FE93A8EB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0FBAD92F48DF15477E4DD93CDC7A5277FE93A8EB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c81af021-1c01-4a2e-b5d3-c1bbb1650c43/0/0FBAD92F48DF15477E4DD93CDC7A5277FE93A8EB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:68:5d:78:b4:48:7b:44:59:bf:f7:fa:41:df:bc:3f:b2:48:
         a2:44:dc:54:c6:0a:dd:38:56:5e:8a:7d:c2:a1:b3:fd:ac:ff:
         d9:a6:3a:94:e8:ce:97:71:62:e7:cd:a6:6c:2e:aa:f5:4a:f9:
         a6:14:bb:9e:84:9d:e9:99:de:3a:78:61:ca:f8:65:ea:4d:7e:
         86:bb:e1:fc:94:b5:e6:02:0f:3a:63:ac:86:79:45:64:38:87:
         0a:c3:10:7c:9c:4a:5d:05:b3:af:6a:11:31:b3:0e:02:94:9e:
         c4:19:3f:b9:5c:28:f3:48:66:31:37:e2:51:16:a5:d9:cc:07:
         48:f4:65:0a:c0:95:8c:35:0d:a5:27:9c:c4:68:d5:4e:05:0a:
         df:d1:bb:da:aa:8c:f9:3a:05:68:2f:ab:ff:40:de:81:26:29:
         65:d4:cd:55:e4:37:70:d8:98:0c:15:ad:a6:b8:ff:e5:04:5b:
         74:bf:02:b2:ed:36:85:6b:c2:25:11:68:56:ea:f6:c4:17:39:
         ea:43:e2:49:35:6a:3b:5d:36:5a:82:57:08:51:1a:5f:c2:3e:
         db:65:62:ab:88:40:14:98:7f:89:4b:4a:2e:7c:81:66:b0:07:
         e5:23:2b:db:26:5b:93:74:8c:f4:1a:9c:4f:83:64:6c:e3:91:
         75:73:63:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 22:51:54 2025 by rpki-client