This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/dfee82b7-c182-4e83-897c-e00f3ce1b0d2/0/08E555759AA0C18576364C83261B6CEA4BCF0CCB.mft
File:                     08E555759AA0C18576364C83261B6CEA4BCF0CCB.mft (raw, json)
Hash identifier:          vqeEPYlwHVkKSShFolNn0dj1uxAKB/J/HX8q6hifmRc=
Subject key identifier:   FA:8A:52:89:C0:F4:42:BE:5C:A5:C8:2E:E7:F5:38:CD:CB:82:A7:65
Authority key identifier: 08:E5:55:75:9A:A0:C1:85:76:36:4C:83:26:1B:6C:EA:4B:CF:0C:CB
Certificate issuer:       /CN=08E555759AA0C18576364C83261B6CEA4BCF0CCB
Certificate serial:       1A2B5D736263BF9C6ED29C7C1D185D654B428CC8
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/08E555759AA0C18576364C83261B6CEA4BCF0CCB.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/dfee82b7-c182-4e83-897c-e00f3ce1b0d2/0/08E555759AA0C18576364C83261B6CEA4BCF0CCB.mft
Manifest number:          0212
Signing time:             Sat 06 Dec 2025 09:52:23 +0000
Manifest this update:     Sat 06 Dec 2025 09:47:23 +0000
Manifest next update:     Tue 09 Dec 2025 18:52:23 +0000
Files and hashes:         1: 08E555759AA0C18576364C83261B6CEA4BCF0CCB.crl (hash: dIPO2RjOGkvcfLXMlDzf0dqs0CnLr83eTAuD8VYbYEU=)
                          2: 3130332e3232392e3138342e302f32342d3234203d3e2039333431.roa (hash: wfRjzL8bQ7dLLloZedRWystpfn4vijpj4SNcPfcqhxI=)
                          3: 3130332e3232392e3138352e302f32342d3234203d3e2039333431.roa (hash: bYUXew86UoI4/31WSjYGIt5ZDZ5ojqbj3fo7ufpNm20=)
                          4: 3130332e3232392e3138342e302f32332d3233203d3e2039333431.roa (hash: 7OzNX15Yuahy0/8eEN1/yzezZR+83/JHbFFyRpwzwPM=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/dfee82b7-c182-4e83-897c-e00f3ce1b0d2/0/08E555759AA0C18576364C83261B6CEA4BCF0CCB.crl
                          rsync://repo-rpki.idnic.net/repo/dfee82b7-c182-4e83-897c-e00f3ce1b0d2/0/08E555759AA0C18576364C83261B6CEA4BCF0CCB.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/08E555759AA0C18576364C83261B6CEA4BCF0CCB.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 09 Dec 2025 15:57:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:2b:5d:73:62:63:bf:9c:6e:d2:9c:7c:1d:18:5d:65:4b:42:8c:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08E555759AA0C18576364C83261B6CEA4BCF0CCB
        Validity
            Not Before: Dec  6 09:47:23 2025 GMT
            Not After : Dec  9 18:52:23 2025 GMT
        Subject: CN=FA8A5289C0F442BE5CA5C82EE7F538CDCB82A765
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:fe:ee:43:16:86:77:7c:95:ef:ad:39:f8:cd:
                    24:eb:85:0d:5b:46:67:90:54:79:7c:02:d7:0c:a7:
                    a9:54:15:df:fb:ca:13:fd:7b:3c:f7:76:88:db:44:
                    d5:fd:fc:2f:cf:e1:65:25:e6:c1:d9:30:e2:4e:2a:
                    25:ac:b9:84:b9:39:d4:af:3b:85:ac:0b:ef:2b:b0:
                    af:d1:94:d7:c1:d2:e7:70:e9:6b:e9:e3:2b:9f:5d:
                    9a:d7:a3:99:95:2c:67:73:ce:4f:65:fd:97:fc:47:
                    af:c5:90:1b:d9:26:c3:f0:91:d8:37:42:b3:08:f7:
                    cd:a9:2e:0a:78:e8:1a:6d:fc:84:1a:eb:de:94:61:
                    cc:7d:c6:27:a0:b1:f5:f7:2d:25:2f:76:16:92:06:
                    f9:71:cd:94:8d:94:d3:bc:f7:27:4f:f2:3b:02:25:
                    b6:15:a5:a1:91:73:2e:e3:78:ab:47:7b:b2:14:07:
                    5b:9b:49:c5:7b:ac:5c:6e:74:66:e0:58:15:97:98:
                    2f:e9:df:b8:38:90:67:74:34:47:89:e4:03:89:9f:
                    52:e4:d1:8e:5b:4a:c5:91:d8:49:a8:e2:db:c8:a1:
                    a1:a9:b7:ae:ef:df:bf:8c:bf:6e:fe:35:ed:e4:f5:
                    62:d5:e0:e7:fa:79:16:e3:fd:ab:31:3a:a6:22:bb:
                    c4:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:8A:52:89:C0:F4:42:BE:5C:A5:C8:2E:E7:F5:38:CD:CB:82:A7:65
            X509v3 Authority Key Identifier:
                keyid:08:E5:55:75:9A:A0:C1:85:76:36:4C:83:26:1B:6C:EA:4B:CF:0C:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/dfee82b7-c182-4e83-897c-e00f3ce1b0d2/0/08E555759AA0C18576364C83261B6CEA4BCF0CCB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/08E555759AA0C18576364C83261B6CEA4BCF0CCB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dfee82b7-c182-4e83-897c-e00f3ce1b0d2/0/08E555759AA0C18576364C83261B6CEA4BCF0CCB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:57:2d:6d:c7:12:21:f0:33:f8:a9:8c:bb:54:30:ec:2b:27:
         2e:f4:88:0b:5a:0f:08:f3:ec:97:ad:35:ee:5c:97:73:af:db:
         e8:3f:c0:7a:7e:d5:08:b3:f5:20:79:54:a0:6c:18:da:61:49:
         91:31:d5:23:46:3b:6e:c6:2c:18:7d:5e:26:7e:5f:18:b9:2d:
         1f:8c:c3:b4:6d:3d:46:2a:de:df:22:9b:2a:cc:0d:46:ea:9e:
         f1:92:7c:91:14:d5:aa:44:79:db:d1:0a:51:b3:d1:ed:54:9c:
         78:c0:14:86:82:91:db:8b:a6:a4:eb:8a:92:ef:74:1e:d0:94:
         2b:83:01:00:14:b8:a8:3c:c8:e7:79:17:56:18:91:ed:fc:47:
         00:9a:3e:b3:4c:29:64:16:cb:68:cd:84:6a:98:6b:e9:20:15:
         81:4b:3b:e8:7c:ba:49:92:09:c1:48:1a:ba:0c:02:31:d1:65:
         2b:5b:9f:c8:b2:ba:eb:0e:e4:d2:37:5b:1d:83:2e:37:c3:d2:
         7e:1c:d9:38:d0:98:02:b0:f8:db:29:15:fc:3e:52:45:49:11:
         de:f7:f1:36:03:78:25:be:3f:94:c6:5c:15:dd:de:0d:1e:9f:
         3c:f7:42:59:42:92:e5:c8:09:42:d6:72:75:cc:7e:eb:8a:7b:
         8e:97:d7:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 02:07:30 2025 by rpki-client