This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/cafcbfbb-ba3f-4d53-a04f-14d6f4be0cb1/1/B92F0FB3E141D52ED2A71FA483ED3C6D723F60E2.mft
File:                     B92F0FB3E141D52ED2A71FA483ED3C6D723F60E2.mft (raw, json)
Hash identifier:          OM4NsHgEBR9khJkljiOI23WO/zH6fCNdvv+mfZJmRfM=
Subject key identifier:   51:6D:5D:13:0C:79:AD:A7:79:DF:68:BA:D0:06:E4:A3:05:41:47:F8
Authority key identifier: B9:2F:0F:B3:E1:41:D5:2E:D2:A7:1F:A4:83:ED:3C:6D:72:3F:60:E2
Certificate issuer:       /CN=B92F0FB3E141D52ED2A71FA483ED3C6D723F60E2
Certificate serial:       7CA7B3F89B8885B50F6EFB232335789E68174057
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B92F0FB3E141D52ED2A71FA483ED3C6D723F60E2.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/cafcbfbb-ba3f-4d53-a04f-14d6f4be0cb1/1/B92F0FB3E141D52ED2A71FA483ED3C6D723F60E2.mft
Manifest number:          A6
Signing time:             Thu 04 Dec 2025 15:21:36 +0000
Manifest this update:     Thu 04 Dec 2025 15:16:36 +0000
Manifest next update:     Sun 07 Dec 2025 21:43:36 +0000
Files and hashes:         1: B92F0FB3E141D52ED2A71FA483ED3C6D723F60E2.crl (hash: smXA33XiI/pzEQ2qq5/W1m3dwLTXqcnDqPEQn0WfTr4=)
                          2: 323030313a6466343a363463303a3a2f34382d3438203d3e20313533313430.roa (hash: tCFWfM3xPDNAE6hYqcghBjN3a3o8405nfAZiA3LJhEE=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/cafcbfbb-ba3f-4d53-a04f-14d6f4be0cb1/1/B92F0FB3E141D52ED2A71FA483ED3C6D723F60E2.crl
                          rsync://repo-rpki.idnic.net/repo/cafcbfbb-ba3f-4d53-a04f-14d6f4be0cb1/1/B92F0FB3E141D52ED2A71FA483ED3C6D723F60E2.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B92F0FB3E141D52ED2A71FA483ED3C6D723F60E2.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 07 Dec 2025 21:43:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:a7:b3:f8:9b:88:85:b5:0f:6e:fb:23:23:35:78:9e:68:17:40:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B92F0FB3E141D52ED2A71FA483ED3C6D723F60E2
        Validity
            Not Before: Dec  4 15:16:36 2025 GMT
            Not After : Dec  7 21:43:36 2025 GMT
        Subject: CN=516D5D130C79ADA779DF68BAD006E4A3054147F8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:38:12:4c:63:75:fc:64:01:a1:11:36:ff:25:
                    36:28:e2:e9:30:ce:62:55:04:85:d2:52:a4:92:f0:
                    15:89:e0:cd:92:b5:1b:7b:35:c8:a1:51:23:fd:62:
                    0b:6f:0b:72:94:cb:88:bb:be:43:0d:d8:20:76:5c:
                    c0:d8:73:9c:5e:7d:31:5b:16:fc:06:be:b9:6b:f9:
                    11:f5:3f:d2:22:52:64:75:d2:6e:14:84:50:ef:21:
                    23:e6:75:85:25:e7:58:97:42:f8:c2:85:0e:7e:5d:
                    55:14:0d:34:98:93:94:0d:c1:28:bf:64:9c:dd:8d:
                    e2:12:2f:cf:0c:07:41:89:b2:8e:8e:18:eb:24:e9:
                    4c:9a:32:28:f7:d6:89:18:d2:fb:7d:f9:bf:4c:9c:
                    46:20:78:9b:44:05:0a:46:9a:12:7a:1f:48:d6:d3:
                    cf:93:05:d0:64:3c:b0:50:07:bb:b7:9b:45:5f:d8:
                    93:e9:e9:95:63:71:46:37:1d:85:1d:51:a6:f7:6c:
                    63:d8:78:9b:8e:dc:0a:88:8f:a5:06:13:76:40:7e:
                    29:ba:90:c9:1b:8a:96:6f:3b:82:b6:cc:0a:a8:d7:
                    30:89:ba:93:ed:40:2e:32:6d:55:2a:29:80:4e:b8:
                    c0:c1:24:29:37:f1:52:19:d4:79:2f:f2:e7:fa:ce:
                    e8:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:6D:5D:13:0C:79:AD:A7:79:DF:68:BA:D0:06:E4:A3:05:41:47:F8
            X509v3 Authority Key Identifier:
                keyid:B9:2F:0F:B3:E1:41:D5:2E:D2:A7:1F:A4:83:ED:3C:6D:72:3F:60:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/cafcbfbb-ba3f-4d53-a04f-14d6f4be0cb1/1/B92F0FB3E141D52ED2A71FA483ED3C6D723F60E2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B92F0FB3E141D52ED2A71FA483ED3C6D723F60E2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cafcbfbb-ba3f-4d53-a04f-14d6f4be0cb1/1/B92F0FB3E141D52ED2A71FA483ED3C6D723F60E2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:6d:f9:53:37:b4:38:b9:8b:39:63:76:e0:ff:2a:85:d4:2e:
         42:36:b2:02:e7:6a:03:4c:61:f4:61:b4:0f:78:7b:ec:6a:b4:
         be:14:70:4f:12:09:ad:63:bb:80:03:66:41:70:f8:95:e4:37:
         26:7d:3a:88:e9:60:bf:c2:b2:80:57:4f:fe:ea:15:57:67:94:
         85:cd:8f:bc:c5:42:01:4c:ce:70:73:98:54:e0:45:e1:e7:af:
         ba:76:46:1f:cb:80:f9:ab:4a:78:d0:54:4f:b2:50:49:c5:8b:
         fa:62:db:04:29:c5:39:7e:bb:e0:68:ea:db:b5:00:13:78:af:
         e9:93:27:31:55:69:00:dd:d6:18:d4:04:34:ac:9a:fd:f8:e0:
         9e:b3:33:df:17:b3:50:52:80:9a:4a:56:28:90:b3:b7:1f:af:
         6b:01:11:91:ef:a5:49:be:7c:b4:c3:28:8f:37:d3:35:f1:b3:
         07:3b:ed:a8:57:7d:95:d3:ba:05:4d:83:e9:99:2c:d1:05:65:
         6f:ba:31:41:05:0f:bb:ed:c6:7d:77:97:1a:97:d0:dc:24:7a:
         db:72:70:92:09:7f:82:64:60:d7:81:b6:92:2c:17:b0:84:ee:
         e9:ab:95:81:65:a5:f4:ac:47:34:88:81:c1:d7:2a:37:79:06:
         28:91:cf:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 22:51:10 2025 by rpki-client