This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/d7dd2519-3078-47d3-9e86-48fd3bde76c8/1/A8E6492B5EFE9362C2CCDB1C25DA022A2E157782.mft
File:                     A8E6492B5EFE9362C2CCDB1C25DA022A2E157782.mft (raw, json)
Hash identifier:          jfKVLpU8CqBTqaVq859/96PP8DwalJSiuQRTOMUVAYU=
Subject key identifier:   11:90:8E:FB:B7:52:C1:38:49:7C:67:9E:DC:A7:F3:76:72:81:19:9A
Authority key identifier: A8:E6:49:2B:5E:FE:93:62:C2:CC:DB:1C:25:DA:02:2A:2E:15:77:82
Certificate issuer:       /CN=A8E6492B5EFE9362C2CCDB1C25DA022A2E157782
Certificate serial:       11CE12D86F37B5478CA4F7443C81215AAA8BEA40
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A8E6492B5EFE9362C2CCDB1C25DA022A2E157782.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/d7dd2519-3078-47d3-9e86-48fd3bde76c8/1/A8E6492B5EFE9362C2CCDB1C25DA022A2E157782.mft
Manifest number:          AC
Signing time:             Sun 07 Dec 2025 00:20:49 +0000
Manifest this update:     Sun 07 Dec 2025 00:15:49 +0000
Manifest next update:     Wed 10 Dec 2025 06:27:49 +0000
Files and hashes:         1: 323030313a6466333a643163303a3a2f34382d3438203d3e20313532373538.roa (hash: +4jn9yUTCERVA3g9fI3ooLPb8eRAkmcilsOk4E3ZshQ=)
                          2: A8E6492B5EFE9362C2CCDB1C25DA022A2E157782.crl (hash: aeW9D4IBFQDXKoiP3q5Y8PqCTw/HCtlY59OJ7TGdDfQ=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/d7dd2519-3078-47d3-9e86-48fd3bde76c8/1/A8E6492B5EFE9362C2CCDB1C25DA022A2E157782.crl
                          rsync://repo-rpki.idnic.net/repo/d7dd2519-3078-47d3-9e86-48fd3bde76c8/1/A8E6492B5EFE9362C2CCDB1C25DA022A2E157782.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A8E6492B5EFE9362C2CCDB1C25DA022A2E157782.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 09 Dec 2025 15:57:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:ce:12:d8:6f:37:b5:47:8c:a4:f7:44:3c:81:21:5a:aa:8b:ea:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A8E6492B5EFE9362C2CCDB1C25DA022A2E157782
        Validity
            Not Before: Dec  7 00:15:49 2025 GMT
            Not After : Dec 10 06:27:49 2025 GMT
        Subject: CN=11908EFBB752C138497C679EDCA7F3767281199A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:fc:b3:17:2b:b8:a5:f7:60:ce:35:1f:5b:87:
                    ae:02:57:47:25:61:68:18:79:3e:f7:9d:59:a2:7f:
                    e7:02:94:f4:51:8f:ae:c9:49:94:38:00:a4:72:d4:
                    39:02:10:0e:5c:c4:14:f1:b2:2b:7b:a6:9d:89:22:
                    13:a3:76:bb:6c:e2:b7:cf:53:d2:c5:76:17:4d:60:
                    3d:1d:f2:e0:3f:5a:32:ae:64:fa:ba:58:72:ae:cf:
                    9e:b8:6f:0d:df:02:f2:62:50:8e:a0:b0:ec:5e:81:
                    fb:d8:cd:14:d4:aa:5e:85:33:3a:78:1b:c3:d5:d4:
                    8c:9a:fc:2a:82:cd:5f:1b:bc:3c:8a:31:ab:bf:f3:
                    00:dd:4a:bf:a7:f9:ed:38:78:84:6a:91:b1:b2:fe:
                    1b:78:8a:bb:f7:7b:42:53:43:1f:c3:7f:3f:29:39:
                    a2:ef:16:d0:06:35:23:46:e4:78:e0:0b:93:0c:10:
                    ae:ef:38:bc:60:e1:b8:2e:cc:c4:a1:7e:3f:0f:3e:
                    93:a5:25:3a:b5:ca:9f:85:0f:c4:ef:a8:96:d6:8f:
                    eb:36:ac:02:4c:a5:36:36:74:6d:3d:22:b3:35:75:
                    69:7c:36:6d:17:29:2c:88:7c:ff:08:de:5b:3e:b4:
                    6b:46:a3:f2:34:75:04:58:40:49:60:69:26:71:84:
                    6c:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:90:8E:FB:B7:52:C1:38:49:7C:67:9E:DC:A7:F3:76:72:81:19:9A
            X509v3 Authority Key Identifier:
                keyid:A8:E6:49:2B:5E:FE:93:62:C2:CC:DB:1C:25:DA:02:2A:2E:15:77:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/d7dd2519-3078-47d3-9e86-48fd3bde76c8/1/A8E6492B5EFE9362C2CCDB1C25DA022A2E157782.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A8E6492B5EFE9362C2CCDB1C25DA022A2E157782.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d7dd2519-3078-47d3-9e86-48fd3bde76c8/1/A8E6492B5EFE9362C2CCDB1C25DA022A2E157782.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:17:84:02:6a:76:91:f1:4a:7a:a4:eb:76:37:44:39:44:76:
         db:a2:58:ea:3e:63:0a:7b:5f:ee:f2:9f:07:95:d4:8e:a7:08:
         b4:21:91:00:34:e3:e0:22:5a:30:c0:a5:d3:5d:eb:4f:65:cb:
         74:04:12:96:39:73:bd:43:e7:aa:7d:36:3c:e1:51:39:a1:87:
         09:80:f6:fc:0f:38:4a:d7:c0:d2:21:69:58:b5:da:30:9e:70:
         b5:ca:0e:fe:d7:10:21:75:8a:d4:42:97:22:4a:fc:db:e3:99:
         75:6c:a6:26:26:b1:61:b2:08:0d:da:a5:68:39:d8:0a:ac:c2:
         29:d3:ee:fb:3a:78:61:bc:48:1c:95:55:bf:d4:8f:50:c5:06:
         69:83:d7:d0:33:9f:d5:cb:83:6e:60:76:90:c4:bd:6a:54:ce:
         08:73:93:f9:83:f0:c0:04:a6:e3:f9:dd:fd:0f:5b:43:f5:ca:
         ae:79:f9:2a:5b:bb:76:66:94:3b:37:b9:14:e9:de:9a:a5:e1:
         22:02:9c:ae:cc:dd:fa:2f:5a:46:8f:e6:c5:f7:a3:51:d6:22:
         2f:3f:3a:51:d6:89:51:d8:02:ef:7d:ce:b2:54:93:65:91:4b:
         e6:09:36:a7:b1:28:dc:a3:d1:99:86:7f:84:b3:9a:f3:b6:6a:
         b3:d9:8f:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 03:36:09 2025 by rpki-client