This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/c846f422-c302-4462-b584-700e9346ca09/0/B2B2F42BF1978AD094186480A7DA0086FD7C2919.mft
File:                     B2B2F42BF1978AD094186480A7DA0086FD7C2919.mft (raw, json)
Hash identifier:          Ibq9DDt+uEsIv0/UF9/JrYKxS60q7cEQgiGh0oYy5/4=
Subject key identifier:   82:23:CC:DC:0D:7D:89:18:AC:97:F8:D4:47:D3:08:BE:2E:FD:32:44
Authority key identifier: B2:B2:F4:2B:F1:97:8A:D0:94:18:64:80:A7:DA:00:86:FD:7C:29:19
Certificate issuer:       /CN=B2B2F42BF1978AD094186480A7DA0086FD7C2919
Certificate serial:       7AEB6E89E27721C88653AA037DF0A373005190FD
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2B2F42BF1978AD094186480A7DA0086FD7C2919.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/c846f422-c302-4462-b584-700e9346ca09/0/B2B2F42BF1978AD094186480A7DA0086FD7C2919.mft
Manifest number:          01CB
Signing time:             Fri 05 Dec 2025 19:01:39 +0000
Manifest this update:     Fri 05 Dec 2025 18:56:39 +0000
Manifest next update:     Mon 08 Dec 2025 23:55:39 +0000
Files and hashes:         1: 3130332e32332e39382e302f32342d3234203d3e20313530323435.roa (hash: zfWwMyIyfYFsLYce6cLTwp+3PWwf0vu9ehqN4lOZ8SU=)
                          2: 3130332e32332e39392e302f32342d3234203d3e20313530323435.roa (hash: 7tXNJtByPVAUWKN7rPTJrICa1r391Ty+571rFNCuCe4=)
                          3: 3130332e32332e39382e302f32332d3233203d3e20313530323435.roa (hash: 4vMfmSE2Nr1Jh9euWzmJY0IXJeyMyzfrb4vovMJmB9A=)
                          4: 323030313a6466313a653034303a3a2f34382d3438203d3e20313530323435.roa (hash: gtOr9NwzW8Aa7fZGd03VkoCWA9Dhf88Ryc02CpBSPGY=)
                          5: B2B2F42BF1978AD094186480A7DA0086FD7C2919.crl (hash: t6/BuSfKA+5VgJh6mWHdT7Y1U3XBKk3Ooz3UJcU8Lvk=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/c846f422-c302-4462-b584-700e9346ca09/0/B2B2F42BF1978AD094186480A7DA0086FD7C2919.crl
                          rsync://repo-rpki.idnic.net/repo/c846f422-c302-4462-b584-700e9346ca09/0/B2B2F42BF1978AD094186480A7DA0086FD7C2919.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2B2F42BF1978AD094186480A7DA0086FD7C2919.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 08 Dec 2025 23:55:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:eb:6e:89:e2:77:21:c8:86:53:aa:03:7d:f0:a3:73:00:51:90:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B2B2F42BF1978AD094186480A7DA0086FD7C2919
        Validity
            Not Before: Dec  5 18:56:39 2025 GMT
            Not After : Dec  8 23:55:39 2025 GMT
        Subject: CN=8223CCDC0D7D8918AC97F8D447D308BE2EFD3244
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:f1:77:27:fa:74:7a:d1:ae:d5:d8:a7:d9:1d:
                    4c:b8:58:3d:03:e0:ba:16:b0:e5:fd:1c:cd:cf:c8:
                    fa:2d:b5:44:12:86:4e:6d:e5:92:bb:f5:58:db:e8:
                    b2:cf:e5:7a:23:6c:ed:4a:f2:f0:69:7d:11:d9:af:
                    f7:5b:6d:be:60:da:54:dc:15:7f:97:ae:f0:22:c0:
                    0f:f4:ad:3e:e9:e6:a2:f5:52:77:15:14:da:26:f5:
                    04:17:2d:6a:52:bf:c9:f3:e6:ce:17:ea:43:2c:39:
                    c4:81:2b:1b:69:d2:89:d7:d8:e5:88:6e:36:65:09:
                    9a:68:4a:55:28:0d:91:51:fe:34:06:70:8f:2a:54:
                    9f:b9:14:75:cb:34:8c:c7:80:0c:e0:5e:5b:ed:10:
                    34:e9:c8:44:51:f4:75:71:3f:e7:4d:66:0c:4a:bc:
                    68:64:80:21:06:96:87:c4:5c:e4:f8:5a:3f:a8:7c:
                    cc:39:e4:25:6d:51:9d:aa:5f:eb:27:1f:db:07:bd:
                    12:d5:28:d8:70:88:56:01:2b:35:78:0a:c4:91:f2:
                    e7:11:1b:31:f4:ef:b0:4f:5b:0b:e9:98:b2:d9:9f:
                    db:00:a0:ff:ec:5c:b2:a7:cd:90:40:29:f1:40:35:
                    2c:16:f3:0b:da:2d:cb:40:57:e1:8a:ce:66:77:97:
                    36:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:23:CC:DC:0D:7D:89:18:AC:97:F8:D4:47:D3:08:BE:2E:FD:32:44
            X509v3 Authority Key Identifier:
                keyid:B2:B2:F4:2B:F1:97:8A:D0:94:18:64:80:A7:DA:00:86:FD:7C:29:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/c846f422-c302-4462-b584-700e9346ca09/0/B2B2F42BF1978AD094186480A7DA0086FD7C2919.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2B2F42BF1978AD094186480A7DA0086FD7C2919.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c846f422-c302-4462-b584-700e9346ca09/0/B2B2F42BF1978AD094186480A7DA0086FD7C2919.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:83:4b:a9:ab:c8:83:ea:ff:40:76:cd:44:64:2b:9d:a2:3f:
         d0:2f:d2:4b:5e:f3:45:f9:62:12:76:32:14:52:e7:8e:b0:cd:
         d7:95:75:19:a0:88:62:fc:d5:24:9c:3a:cd:4b:a4:22:e3:f1:
         93:d2:43:da:ba:ae:29:94:bf:51:e4:f0:0b:6b:91:a1:0d:05:
         b4:a9:7f:58:dd:18:d5:e4:ac:1a:29:5d:14:ac:72:1b:7c:a3:
         6a:14:59:b4:0e:a9:c1:b1:60:af:88:a9:2e:95:68:1c:8e:25:
         f4:af:0d:35:f8:14:b3:da:f9:3b:31:5d:78:7d:99:40:68:54:
         a2:10:80:72:be:b5:26:6c:37:98:c7:18:29:09:0d:32:a8:ed:
         ab:d3:3c:d5:99:61:02:1e:6b:f2:0a:4e:56:07:98:f6:33:71:
         48:2d:5a:53:cc:7d:25:db:65:bc:f5:fa:b9:a8:d2:fd:95:54:
         30:e4:be:44:c1:f8:b3:a6:74:c5:4e:29:a8:7f:74:69:62:73:
         4b:fc:99:ff:41:ea:f5:22:4f:35:ea:44:11:f9:0e:9a:ff:71:
         e6:42:ca:89:83:5d:b8:bf:39:ca:19:6a:4a:98:74:9d:e0:ee:
         d0:2c:19:5a:ee:fa:8f:9e:c5:7d:be:f8:b2:51:de:a9:f2:66:
         a6:84:d5:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 00:50:18 2025 by rpki-client