This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/05593445-a25d-48e0-abc2-ab05e0650655/0/B10FCCE02720E964D29342E0F3BDFC679A4D7BD6.mft
File:                     B10FCCE02720E964D29342E0F3BDFC679A4D7BD6.mft (raw, json)
Hash identifier:          oH3YpcMSLFif4Ma4TLnzY64NdXHWyJgroj8cWFYD+Oo=
Subject key identifier:   B8:7E:94:89:51:68:DD:AE:28:28:C0:58:94:FF:9A:A2:CB:8E:0B:09
Authority key identifier: B1:0F:CC:E0:27:20:E9:64:D2:93:42:E0:F3:BD:FC:67:9A:4D:7B:D6
Certificate issuer:       /CN=B10FCCE02720E964D29342E0F3BDFC679A4D7BD6
Certificate serial:       10C42C199414B62C23D81A2F44E45418CBFC7588
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B10FCCE02720E964D29342E0F3BDFC679A4D7BD6.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/05593445-a25d-48e0-abc2-ab05e0650655/0/B10FCCE02720E964D29342E0F3BDFC679A4D7BD6.mft
Manifest number:          0135
Signing time:             Fri 19 Dec 2025 18:22:18 +0000
Manifest this update:     Fri 19 Dec 2025 18:17:18 +0000
Manifest next update:     Tue 23 Dec 2025 01:19:18 +0000
Files and hashes:         1: 3130332e3134372e3234352e302f32342d3234203d3e20313339393733.roa (hash: rlPU/iIgYoRNsLv+c0V6Y8ev4dELtmVNbR6X//tRgJc=)
                          2: B10FCCE02720E964D29342E0F3BDFC679A4D7BD6.crl (hash: M6LDszSEEmEnNMVMAveJPlh2Dttw2MF5EVzZ9Or9PUA=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/05593445-a25d-48e0-abc2-ab05e0650655/0/B10FCCE02720E964D29342E0F3BDFC679A4D7BD6.crl
                          rsync://repo-rpki.idnic.net/repo/05593445-a25d-48e0-abc2-ab05e0650655/0/B10FCCE02720E964D29342E0F3BDFC679A4D7BD6.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B10FCCE02720E964D29342E0F3BDFC679A4D7BD6.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 23 Dec 2025 01:19:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:c4:2c:19:94:14:b6:2c:23:d8:1a:2f:44:e4:54:18:cb:fc:75:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B10FCCE02720E964D29342E0F3BDFC679A4D7BD6
        Validity
            Not Before: Dec 19 18:17:18 2025 GMT
            Not After : Dec 23 01:19:18 2025 GMT
        Subject: CN=B87E94895168DDAE2828C05894FF9AA2CB8E0B09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:a9:a2:7a:f8:32:74:e2:3a:29:e5:8c:58:63:
                    ed:a2:d6:f7:37:8e:35:0e:5a:65:19:ab:97:90:de:
                    d1:63:88:16:c2:f6:6d:f5:a4:dc:d4:50:21:b2:c3:
                    5f:f0:78:ce:f3:5e:43:4f:01:36:8f:f2:77:69:50:
                    d2:f4:a5:d5:db:9b:d5:c1:fd:ae:b9:f6:a2:ee:6b:
                    e2:2c:2d:b7:67:c7:e0:42:7d:07:07:72:fe:6d:d3:
                    2b:ac:59:90:88:a4:02:d7:4b:51:ae:33:b4:69:d6:
                    83:0c:48:7d:83:0f:95:36:d5:43:ac:57:88:3f:26:
                    1d:a2:c6:6b:2c:20:65:7f:f1:2c:a5:3d:19:1a:92:
                    9f:1a:9d:5c:e8:04:26:96:f4:89:09:9f:69:9d:ac:
                    ab:78:0c:30:dd:c6:84:8f:cb:79:bc:11:1c:bd:9a:
                    0c:d6:d8:0a:61:fe:7f:7a:7e:e3:a1:59:80:70:76:
                    7b:12:fa:36:e4:f7:e6:d1:f8:fc:44:6f:c9:2d:f2:
                    ba:60:e2:e7:0a:3c:5f:72:63:b4:ca:8a:cd:60:b7:
                    36:07:ce:41:d5:2f:2b:4e:3b:7c:29:1b:fb:c4:0c:
                    73:30:20:6c:23:17:4b:0b:52:0a:46:c5:47:c4:0d:
                    f6:71:df:e8:e4:ab:e2:8f:ec:8b:6e:db:26:c3:19:
                    22:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:7E:94:89:51:68:DD:AE:28:28:C0:58:94:FF:9A:A2:CB:8E:0B:09
            X509v3 Authority Key Identifier:
                keyid:B1:0F:CC:E0:27:20:E9:64:D2:93:42:E0:F3:BD:FC:67:9A:4D:7B:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/05593445-a25d-48e0-abc2-ab05e0650655/0/B10FCCE02720E964D29342E0F3BDFC679A4D7BD6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B10FCCE02720E964D29342E0F3BDFC679A4D7BD6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/05593445-a25d-48e0-abc2-ab05e0650655/0/B10FCCE02720E964D29342E0F3BDFC679A4D7BD6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:96:81:28:a0:4f:f2:18:20:1b:7d:46:49:03:00:2f:d7:76:
         3f:54:41:76:4d:fb:ed:f4:fd:6b:49:14:e7:5e:4c:78:e9:d7:
         f8:0c:14:22:11:dc:25:b3:ec:5f:bc:01:42:df:43:18:b6:e4:
         df:80:db:9c:be:23:d1:b8:13:24:c7:1b:1a:ef:99:47:83:d9:
         df:fe:c8:15:89:50:7f:ed:32:9a:09:00:06:85:a6:06:8f:c3:
         e3:f5:d6:c0:01:6e:ad:aa:d7:48:61:e4:bc:e3:66:99:42:de:
         6e:cc:55:1a:15:75:a1:c0:b5:03:cc:3b:6d:7b:a0:3f:53:80:
         14:52:1e:c3:67:4b:bf:f5:5f:61:1f:92:1a:63:c1:3a:14:09:
         48:b8:55:20:97:42:76:97:05:9e:dc:37:1c:3f:09:97:c7:aa:
         a3:fd:ff:36:69:83:2b:94:80:02:07:02:80:44:a3:76:f1:12:
         2b:96:67:5e:86:4d:42:bc:2b:50:aa:eb:92:67:35:b5:65:62:
         c8:72:9c:49:0f:a8:f2:cc:95:91:10:94:e3:d4:14:ea:cb:2d:
         c2:85:e5:a8:bd:c8:d7:12:b5:b9:17:77:0f:9b:8c:d5:b6:d0:
         c8:51:a6:a5:10:42:44:c8:86:54:b2:4f:c2:58:64:0d:31:dc:
         4d:b9:dd:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 17:17:35 2025 by rpki-client