This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/f04e97d3-71c3-4d0a-8b04-7088fe382bc3/0/082F7822D1C63E1ED5DA833913215FE68925FF6E.mft
File:                     082F7822D1C63E1ED5DA833913215FE68925FF6E.mft (raw, json)
Hash identifier:          d91b6/7aqi+ZYC5XTMLhSBSPv/e6R659bHwzvKx+74w=
Subject key identifier:   7A:B4:07:0C:95:66:05:18:2D:63:27:BB:00:98:B6:3B:22:CC:F6:05
Authority key identifier: 08:2F:78:22:D1:C6:3E:1E:D5:DA:83:39:13:21:5F:E6:89:25:FF:6E
Certificate issuer:       /CN=082F7822D1C63E1ED5DA833913215FE68925FF6E
Certificate serial:       23CF241533A8B7CF25A619794E956F94DBAE2CEF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/082F7822D1C63E1ED5DA833913215FE68925FF6E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/f04e97d3-71c3-4d0a-8b04-7088fe382bc3/0/082F7822D1C63E1ED5DA833913215FE68925FF6E.mft
Manifest number:          0368
Signing time:             Fri 05 Dec 2025 15:50:40 +0000
Manifest this update:     Fri 05 Dec 2025 15:45:40 +0000
Manifest next update:     Tue 09 Dec 2025 01:18:40 +0000
Files and hashes:         1: 3130332e3137322e3131382e302f32332d3234203d3e20313432333935.roa (hash: HP+xeHwMe/Q1Tf4Xq/63+A27OrwucM8iR00HxSt8dQE=)
                          2: 082F7822D1C63E1ED5DA833913215FE68925FF6E.crl (hash: B9GJyIblYopw1QvlEmHYONr+HZhqzuiJJYEOOUjt/q4=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/f04e97d3-71c3-4d0a-8b04-7088fe382bc3/0/082F7822D1C63E1ED5DA833913215FE68925FF6E.crl
                          rsync://repo-rpki.idnic.net/repo/f04e97d3-71c3-4d0a-8b04-7088fe382bc3/0/082F7822D1C63E1ED5DA833913215FE68925FF6E.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/082F7822D1C63E1ED5DA833913215FE68925FF6E.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 09 Dec 2025 01:18:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:cf:24:15:33:a8:b7:cf:25:a6:19:79:4e:95:6f:94:db:ae:2c:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=082F7822D1C63E1ED5DA833913215FE68925FF6E
        Validity
            Not Before: Dec  5 15:45:40 2025 GMT
            Not After : Dec  9 01:18:40 2025 GMT
        Subject: CN=7AB4070C956605182D6327BB0098B63B22CCF605
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:48:00:28:79:3e:9a:33:e5:f8:01:2c:f2:4a:
                    9c:a5:88:37:6e:cb:d7:83:07:8c:ac:02:4f:7b:f2:
                    7d:21:5f:6b:60:69:80:f3:bc:19:6a:0f:25:27:5f:
                    40:eb:28:97:16:70:f3:e9:bc:fd:09:5b:31:9d:34:
                    7f:53:95:79:b8:d4:3e:bd:c2:a9:ea:f7:d1:95:e3:
                    92:ae:c1:18:a2:66:6d:f6:b1:2e:c3:f2:af:ee:60:
                    b6:1d:f1:6a:17:60:39:0d:c1:62:5d:ae:63:47:61:
                    50:53:3b:b9:53:38:ba:14:47:9c:c1:de:db:05:42:
                    3c:05:e0:80:0f:37:98:f5:38:c2:dc:99:45:68:d8:
                    27:0a:94:b9:e9:d0:85:fc:73:ca:63:36:b0:10:44:
                    f7:24:64:29:72:bc:37:ae:11:c7:32:c1:bc:99:06:
                    75:cb:27:d8:1d:f1:36:30:a7:11:fe:b6:db:a7:81:
                    6e:f6:5f:1c:f9:77:51:62:c0:c8:a0:ab:d5:11:2c:
                    f2:72:ee:51:1b:b0:49:65:5c:37:11:bc:d3:68:81:
                    c7:a6:b2:35:e5:17:bd:21:d4:19:c2:35:d6:65:3a:
                    28:2b:6e:5d:c2:6a:23:d9:3e:15:2d:1c:9c:75:4e:
                    73:0f:54:68:5b:79:cb:1b:27:66:cc:f3:2b:34:67:
                    1f:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:B4:07:0C:95:66:05:18:2D:63:27:BB:00:98:B6:3B:22:CC:F6:05
            X509v3 Authority Key Identifier:
                keyid:08:2F:78:22:D1:C6:3E:1E:D5:DA:83:39:13:21:5F:E6:89:25:FF:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/f04e97d3-71c3-4d0a-8b04-7088fe382bc3/0/082F7822D1C63E1ED5DA833913215FE68925FF6E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/082F7822D1C63E1ED5DA833913215FE68925FF6E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f04e97d3-71c3-4d0a-8b04-7088fe382bc3/0/082F7822D1C63E1ED5DA833913215FE68925FF6E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:d1:0e:6b:e2:85:89:0f:3c:3b:5b:f4:59:2a:85:68:2b:be:
         0e:6f:ab:d7:ce:6f:9c:47:75:15:84:df:6a:23:8c:ae:cb:cf:
         33:90:5f:92:be:11:ce:c3:6c:14:25:19:19:db:77:e7:c9:c1:
         d8:fe:d6:4a:55:71:32:43:7c:3d:ba:00:77:7e:49:c1:ea:22:
         20:13:35:ff:10:38:4a:6a:c3:2c:07:b4:1c:41:55:14:d8:cc:
         59:27:12:b7:56:93:76:b9:45:c6:77:7a:37:30:e0:64:bf:10:
         5e:77:10:8b:9c:f4:6e:1f:21:db:50:91:da:6e:a1:ae:de:89:
         0e:df:0c:17:4b:df:af:4b:61:97:80:d8:3d:f2:0e:16:45:31:
         f5:39:7a:f6:2d:07:d9:e3:6c:a4:be:62:da:82:a4:5b:31:ff:
         48:4b:6a:88:25:cb:1e:b9:a0:66:58:8b:31:e6:78:f4:04:f9:
         ba:53:e4:48:2f:86:26:6f:5f:f7:ae:b4:13:f3:8b:82:6e:b0:
         22:aa:38:6b:7e:c0:bf:90:fc:90:fa:f4:ea:d3:e9:b1:95:1d:
         aa:55:9a:72:fd:a2:44:fd:c5:2b:6d:7e:39:b9:3d:4e:e3:fd:
         42:d5:f8:93:db:7d:16:6d:e4:69:87:69:5f:44:ab:40:f0:e1:
         4b:04:6e:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 06:20:58 2025 by rpki-client