This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/f668854a-3f24-40b1-80cd-e636aa7e8b1c/0/2B1530AD20AC1F2F7F2EA2EBAAE707D0E128A1DC.mft
File:                     2B1530AD20AC1F2F7F2EA2EBAAE707D0E128A1DC.mft (raw, json)
Hash identifier:          zXiOU/RcFQpgXa49n3f3Zf7327IlyeQ11d7Pwj2McMs=
Subject key identifier:   94:81:1F:14:10:D8:41:F4:10:BE:96:2E:D6:CB:79:EA:1B:5E:A1:8E
Authority key identifier: 2B:15:30:AD:20:AC:1F:2F:7F:2E:A2:EB:AA:E7:07:D0:E1:28:A1:DC
Certificate issuer:       /CN=2B1530AD20AC1F2F7F2EA2EBAAE707D0E128A1DC
Certificate serial:       0C36E6425125B01995553D38D7A3BFE61951E3F7
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2B1530AD20AC1F2F7F2EA2EBAAE707D0E128A1DC.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/f668854a-3f24-40b1-80cd-e636aa7e8b1c/0/2B1530AD20AC1F2F7F2EA2EBAAE707D0E128A1DC.mft
Manifest number:          034F
Signing time:             Fri 05 Dec 2025 10:02:27 +0000
Manifest this update:     Fri 05 Dec 2025 09:57:27 +0000
Manifest next update:     Mon 08 Dec 2025 20:44:27 +0000
Files and hashes:         1: 2B1530AD20AC1F2F7F2EA2EBAAE707D0E128A1DC.crl (hash: L5m4z9F3TlZdHzXaPSMo57HGjSKRmNm9Hh7Emg1HFR4=)
                          2: 3130332e3137322e31372e302f32342d3234203d3e20313432333831.roa (hash: VSwmKbWt2mj/4Xnvw/p95KrSyYtbtzdvXf2hu0E4abA=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/f668854a-3f24-40b1-80cd-e636aa7e8b1c/0/2B1530AD20AC1F2F7F2EA2EBAAE707D0E128A1DC.crl
                          rsync://repo-rpki.idnic.net/repo/f668854a-3f24-40b1-80cd-e636aa7e8b1c/0/2B1530AD20AC1F2F7F2EA2EBAAE707D0E128A1DC.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2B1530AD20AC1F2F7F2EA2EBAAE707D0E128A1DC.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 08 Dec 2025 20:44:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:36:e6:42:51:25:b0:19:95:55:3d:38:d7:a3:bf:e6:19:51:e3:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2B1530AD20AC1F2F7F2EA2EBAAE707D0E128A1DC
        Validity
            Not Before: Dec  5 09:57:27 2025 GMT
            Not After : Dec  8 20:44:27 2025 GMT
        Subject: CN=94811F1410D841F410BE962ED6CB79EA1B5EA18E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:d0:ff:2d:22:37:b2:62:02:56:aa:ca:31:79:
                    c2:92:3a:4c:91:d9:1f:14:8d:ab:f5:bc:df:ba:eb:
                    71:76:48:9f:22:8a:04:fc:56:bd:a2:dc:c6:03:46:
                    f7:d4:86:58:a0:d0:68:4b:af:ea:2f:c4:3e:b3:77:
                    23:ce:aa:7d:4e:22:5c:44:f3:86:2a:03:7f:95:1a:
                    b5:81:b2:9a:7b:e6:66:dc:dd:91:aa:ec:de:a0:94:
                    27:28:c3:93:65:59:80:3b:1b:34:40:03:df:40:24:
                    22:89:f5:ef:27:c9:0d:20:f1:72:c1:c7:f0:6e:b6:
                    f8:25:b3:32:b4:49:59:da:7a:cf:c4:da:e2:fd:c7:
                    40:1f:13:0d:54:c8:a0:49:5e:27:0e:12:f4:9a:14:
                    19:ad:c1:24:60:53:07:8d:a5:51:fe:70:ae:84:ba:
                    2d:9b:cf:ab:25:4f:eb:26:80:8f:72:c4:ca:82:4a:
                    00:97:8c:e9:16:f2:4a:02:ff:f6:4d:b5:80:1b:c8:
                    24:f8:df:d2:30:75:34:93:7c:3b:0b:43:ff:c9:74:
                    a2:ba:c1:68:8b:b0:c9:e2:3e:4d:c5:c7:3f:8a:bd:
                    11:70:e8:6e:ee:52:27:23:dd:71:a8:62:65:fc:70:
                    3e:23:a8:1f:58:38:e1:38:ad:10:6d:b3:1b:66:42:
                    9a:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:81:1F:14:10:D8:41:F4:10:BE:96:2E:D6:CB:79:EA:1B:5E:A1:8E
            X509v3 Authority Key Identifier:
                keyid:2B:15:30:AD:20:AC:1F:2F:7F:2E:A2:EB:AA:E7:07:D0:E1:28:A1:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/f668854a-3f24-40b1-80cd-e636aa7e8b1c/0/2B1530AD20AC1F2F7F2EA2EBAAE707D0E128A1DC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2B1530AD20AC1F2F7F2EA2EBAAE707D0E128A1DC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f668854a-3f24-40b1-80cd-e636aa7e8b1c/0/2B1530AD20AC1F2F7F2EA2EBAAE707D0E128A1DC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:cc:b3:1e:61:8a:e9:5d:15:6e:17:2b:68:18:13:95:7b:2c:
         bd:83:ba:59:89:e8:26:3e:4f:51:1b:9f:f5:d0:dd:30:b0:5c:
         b3:82:6b:62:55:ed:d5:e8:0e:43:16:24:7c:f3:b0:75:4c:eb:
         7d:fb:d3:64:a3:5c:16:45:29:c4:e5:b3:82:8a:d5:48:f2:a2:
         c6:2b:60:fb:6e:e1:1c:b2:fe:26:57:9c:c8:51:f1:0f:be:cb:
         95:91:1d:8d:4b:e1:4e:5d:f3:61:64:a9:46:18:fd:44:44:1e:
         b9:e6:0f:9e:6c:22:3e:ef:ed:be:1e:69:3e:55:94:4b:e4:96:
         4d:49:fc:65:a5:72:89:90:56:80:68:67:75:7b:ea:c3:dd:dd:
         1f:ea:a6:be:ed:02:ea:ae:a7:24:8c:3d:94:ad:1d:46:8c:0c:
         b3:b0:0b:8a:74:a9:99:14:b3:e9:9d:f5:16:df:60:81:3c:ff:
         08:b4:9e:dd:f6:34:aa:83:d1:c9:ee:7f:9d:50:d1:d9:1a:19:
         9c:bb:2f:04:b3:8c:57:1f:be:17:3c:57:7b:81:54:3c:46:bc:
         bb:28:58:29:27:33:78:ae:33:26:52:f1:66:29:ae:57:28:bb:
         38:9f:4c:66:9c:9a:e8:0a:a1:6e:d0:4c:ef:a5:43:26:1a:22:
         9a:f1:ea:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 22:50:55 2025 by rpki-client