This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/d93eb8f6-bb6c-4ea7-86df-b243c5164d22/0/B11A6EBA7C0F020930473FB7FAFC2D9C97E4982D.mft
File:                     B11A6EBA7C0F020930473FB7FAFC2D9C97E4982D.mft (raw, json)
Hash identifier:          cpEk2YFdYII1QMutwIVkDu2GjpQv1e7Snuo4Z7SfcLk=
Subject key identifier:   70:CE:B7:53:77:E3:1D:7D:45:C6:D8:BC:C3:74:97:27:DA:42:C9:E4
Authority key identifier: B1:1A:6E:BA:7C:0F:02:09:30:47:3F:B7:FA:FC:2D:9C:97:E4:98:2D
Certificate issuer:       /CN=B11A6EBA7C0F020930473FB7FAFC2D9C97E4982D
Certificate serial:       5C5E0DC60D10B9ABC6F359063371C19A7F9EFA38
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B11A6EBA7C0F020930473FB7FAFC2D9C97E4982D.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/d93eb8f6-bb6c-4ea7-86df-b243c5164d22/0/B11A6EBA7C0F020930473FB7FAFC2D9C97E4982D.mft
Manifest number:          0540
Signing time:             Fri 05 Dec 2025 22:02:09 +0000
Manifest this update:     Fri 05 Dec 2025 21:57:09 +0000
Manifest next update:     Tue 09 Dec 2025 03:23:09 +0000
Files and hashes:         1: 32372e302e3139382e302f32342d3234203d3e20313338313138.roa (hash: MMkB+mYw9fGjubHcr3S3RTRAdY7MvLNuzUgjIii6Fis=)
                          2: B11A6EBA7C0F020930473FB7FAFC2D9C97E4982D.crl (hash: npvCbxuBMTF2KSyhoiArHj43mWvnDzqNXg8x6QrMle0=)
                          3: 3130332e3232392e3136322e302f32342d3234203d3e20313338313138.roa (hash: 8cifjhYzuAjNoyrAY06aaQInEhEBLt9qHUL65hosVi4=)
                          4: 32372e302e3139362e302f32322d3234203d3e203539323838.roa (hash: RNWDlcxD4hGN5htL+zEva85XMaiHyQP7jUNJ4v1dxa8=)
                          5: 3130332e3232392e3136302e302f32322d3234203d3e203539323838.roa (hash: i48IqlSbYMMK+v7SGCXzplkE2cHzSzt1Yn2nChsSsLc=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/d93eb8f6-bb6c-4ea7-86df-b243c5164d22/0/B11A6EBA7C0F020930473FB7FAFC2D9C97E4982D.crl
                          rsync://repo-rpki.idnic.net/repo/d93eb8f6-bb6c-4ea7-86df-b243c5164d22/0/B11A6EBA7C0F020930473FB7FAFC2D9C97E4982D.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B11A6EBA7C0F020930473FB7FAFC2D9C97E4982D.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 09 Dec 2025 03:23:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:5e:0d:c6:0d:10:b9:ab:c6:f3:59:06:33:71:c1:9a:7f:9e:fa:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B11A6EBA7C0F020930473FB7FAFC2D9C97E4982D
        Validity
            Not Before: Dec  5 21:57:09 2025 GMT
            Not After : Dec  9 03:23:09 2025 GMT
        Subject: CN=70CEB75377E31D7D45C6D8BCC3749727DA42C9E4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:6b:c8:af:98:05:b2:13:07:aa:7b:c3:a5:96:
                    ff:ba:aa:35:fa:92:af:ab:fb:ef:fc:56:a5:72:0d:
                    c7:80:08:84:f9:77:6a:d2:62:7c:1a:95:3f:bd:45:
                    a9:b9:bb:90:57:26:2f:78:93:d8:f0:56:55:36:d0:
                    d6:48:1b:14:58:b1:90:49:03:a5:f2:b0:d6:09:f2:
                    98:af:e4:b7:14:aa:f1:da:15:95:ee:09:e8:b8:c8:
                    9f:e6:4a:4f:65:46:50:85:5f:68:0a:c4:59:39:51:
                    87:c6:44:ab:f0:b9:b1:5e:f7:bb:7f:cc:bb:7c:97:
                    5b:18:0b:a8:cb:9d:52:c4:9e:12:84:10:32:24:6a:
                    e5:ae:8b:61:50:5b:54:16:7d:35:db:4d:2d:2b:d5:
                    a7:5e:65:97:95:e8:77:60:9f:e0:28:1e:11:dc:37:
                    c6:a5:6d:c7:9e:89:e8:37:97:f2:df:08:4e:23:bf:
                    78:98:76:77:c9:a7:3a:16:bb:25:ce:4d:6d:02:62:
                    c3:1c:7b:01:de:35:4b:0f:0e:9f:84:16:01:9f:84:
                    40:64:d0:26:78:d0:5e:cc:b1:3e:b3:7c:9d:1e:14:
                    75:3e:c2:00:d1:cb:8e:e2:c5:c5:c9:40:7a:4b:b0:
                    fe:5f:4c:dc:59:e1:29:41:b2:0c:e3:62:ad:ad:fb:
                    d1:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:CE:B7:53:77:E3:1D:7D:45:C6:D8:BC:C3:74:97:27:DA:42:C9:E4
            X509v3 Authority Key Identifier:
                keyid:B1:1A:6E:BA:7C:0F:02:09:30:47:3F:B7:FA:FC:2D:9C:97:E4:98:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/d93eb8f6-bb6c-4ea7-86df-b243c5164d22/0/B11A6EBA7C0F020930473FB7FAFC2D9C97E4982D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B11A6EBA7C0F020930473FB7FAFC2D9C97E4982D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d93eb8f6-bb6c-4ea7-86df-b243c5164d22/0/B11A6EBA7C0F020930473FB7FAFC2D9C97E4982D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:20:53:48:d9:44:c5:69:75:4a:33:c8:a5:49:23:84:1a:85:
         36:cc:82:46:92:10:a6:94:bc:75:fd:46:f9:a4:d5:31:39:03:
         6c:90:d1:ef:99:16:9a:2c:71:1e:ab:77:d4:7d:5d:a2:4d:9f:
         9f:6a:7d:67:5f:00:f6:0d:65:d8:e4:9a:44:6c:63:da:b6:90:
         da:29:8a:3b:95:5a:8c:c1:f6:91:91:b6:57:b5:7a:6b:ca:6c:
         6d:8d:86:b3:1f:17:1e:6e:64:91:81:fd:eb:d8:b6:58:95:bc:
         61:49:0f:db:ae:18:8b:9f:32:a2:ce:b4:e1:32:ed:93:d2:16:
         b3:b9:bf:f3:a9:45:b8:c1:ea:a8:e2:67:de:42:b3:94:8b:52:
         df:b5:05:76:ef:e2:f4:64:62:5d:04:de:ba:67:8d:7d:65:75:
         c9:57:55:d0:db:f8:91:f3:50:98:0e:85:9a:ef:6a:a6:04:b4:
         1c:d7:50:55:df:3d:a1:ba:7e:7e:ab:3f:9b:dd:5a:50:c5:e6:
         97:31:b9:f0:85:62:d8:c1:a5:42:1d:12:f4:54:16:2f:a0:54:
         98:3f:b3:7a:6b:0f:ac:a6:10:bd:76:e2:75:77:60:b8:cb:4f:
         0b:b9:a1:c5:b2:43:b9:7c:c2:a4:c4:e8:22:f1:00:7f:6c:56:
         90:4c:0b:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 22:51:58 2025 by rpki-client