This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/0f7d2894-c077-421c-bc1d-37d6f9d9897d/0/B0D673B78DBE219F1EEEF056E3E49FB6D58A5550.mft
File:                     B0D673B78DBE219F1EEEF056E3E49FB6D58A5550.mft (raw, json)
Hash identifier:          IxF2h8ht2/VWJvrlNdU4xMgVkCt1mXOV/T/cwXAS394=
Subject key identifier:   B1:11:50:B9:E3:01:61:D8:25:84:01:A2:CA:FF:05:5D:CC:C6:38:0F
Authority key identifier: B0:D6:73:B7:8D:BE:21:9F:1E:EE:F0:56:E3:E4:9F:B6:D5:8A:55:50
Certificate issuer:       /CN=B0D673B78DBE219F1EEEF056E3E49FB6D58A5550
Certificate serial:       48909FC70A7ACD06CD01A5E49BC5B59DB56E00E1
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B0D673B78DBE219F1EEEF056E3E49FB6D58A5550.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/0f7d2894-c077-421c-bc1d-37d6f9d9897d/0/B0D673B78DBE219F1EEEF056E3E49FB6D58A5550.mft
Manifest number:          F3
Signing time:             Sat 06 Dec 2025 16:50:55 +0000
Manifest this update:     Sat 06 Dec 2025 16:45:55 +0000
Manifest next update:     Tue 09 Dec 2025 19:59:55 +0000
Files and hashes:         1: B0D673B78DBE219F1EEEF056E3E49FB6D58A5550.crl (hash: 5Pw2LDruCYOKIpkBI+trN1x40xwA8g5vCVGI6Mz+Shg=)
                          2: 3136302e32322e32322e302f32332d3234203d3e20313532383032.roa (hash: 1cb+dRF1cCmzlK2LUqHDHTpgVi9SG86amprY/lPnWU4=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/0f7d2894-c077-421c-bc1d-37d6f9d9897d/0/B0D673B78DBE219F1EEEF056E3E49FB6D58A5550.crl
                          rsync://repo-rpki.idnic.net/repo/0f7d2894-c077-421c-bc1d-37d6f9d9897d/0/B0D673B78DBE219F1EEEF056E3E49FB6D58A5550.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B0D673B78DBE219F1EEEF056E3E49FB6D58A5550.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 09 Dec 2025 06:55:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:90:9f:c7:0a:7a:cd:06:cd:01:a5:e4:9b:c5:b5:9d:b5:6e:00:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B0D673B78DBE219F1EEEF056E3E49FB6D58A5550
        Validity
            Not Before: Dec  6 16:45:55 2025 GMT
            Not After : Dec  9 19:59:55 2025 GMT
        Subject: CN=B11150B9E30161D8258401A2CAFF055DCCC6380F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:39:e2:18:aa:61:0c:f6:cd:75:cb:df:d5:ff:
                    23:3b:9e:02:f2:0b:13:89:df:21:71:51:38:8c:a1:
                    3e:d6:0d:90:b8:1a:68:ac:79:3d:84:c3:99:9e:c5:
                    13:18:86:9c:a4:b5:18:5b:e7:a9:6d:27:cf:ca:fb:
                    e7:57:5e:e5:9a:e1:2a:4d:93:03:c3:2f:7d:6a:ff:
                    41:b1:fd:2b:35:a4:91:d1:e1:18:af:81:e3:57:ab:
                    c0:c3:61:a5:58:93:b1:19:d1:b0:e5:bc:92:81:2d:
                    6b:7a:2a:16:35:02:c6:27:ee:84:c6:06:54:ff:9b:
                    98:f4:25:ea:81:7f:ae:07:72:14:41:32:05:0f:3b:
                    eb:c2:f9:a4:54:66:75:20:6f:cd:2b:36:40:b6:5e:
                    ac:0b:dd:21:b4:3a:52:de:b0:fd:1e:88:26:a5:ec:
                    61:d7:ba:b8:69:6c:10:95:14:4a:5f:2d:a2:51:85:
                    f8:bd:9c:82:5a:34:62:37:29:55:8b:de:9f:00:88:
                    2a:05:3a:f1:35:cd:5c:7c:51:72:08:5d:da:5f:78:
                    48:65:e8:ca:0c:c2:97:e9:d2:ab:26:24:50:35:37:
                    72:33:74:af:7d:2d:26:d7:dc:64:07:f3:de:49:88:
                    13:f6:70:01:45:46:d3:9f:54:bd:c9:fd:d1:01:a2:
                    e0:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:11:50:B9:E3:01:61:D8:25:84:01:A2:CA:FF:05:5D:CC:C6:38:0F
            X509v3 Authority Key Identifier:
                keyid:B0:D6:73:B7:8D:BE:21:9F:1E:EE:F0:56:E3:E4:9F:B6:D5:8A:55:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/0f7d2894-c077-421c-bc1d-37d6f9d9897d/0/B0D673B78DBE219F1EEEF056E3E49FB6D58A5550.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B0D673B78DBE219F1EEEF056E3E49FB6D58A5550.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0f7d2894-c077-421c-bc1d-37d6f9d9897d/0/B0D673B78DBE219F1EEEF056E3E49FB6D58A5550.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:63:fa:bc:11:5c:6d:83:7d:db:17:61:6f:f0:87:5e:57:8c:
         a8:d3:3d:a1:26:c8:0a:ac:27:a8:84:c7:9a:f4:c8:3c:07:4b:
         e5:95:fd:a9:89:00:9f:7b:9d:14:5e:37:73:c8:95:2a:9d:90:
         dd:c1:dc:53:14:37:fe:e1:d2:f0:63:67:1a:d7:1c:a1:b0:ce:
         fa:b4:64:51:a8:ab:85:86:44:bb:a0:4e:06:db:27:f8:13:fb:
         95:c9:29:45:00:e4:c4:36:77:81:a7:a8:50:c4:4f:3a:d6:ef:
         7b:1f:cb:8b:5b:c9:23:71:37:83:ad:c7:ac:b4:e8:72:ed:e7:
         0a:3e:90:57:bd:2c:cf:14:e3:d3:a6:01:94:f1:12:e9:b5:1f:
         29:93:2d:f8:58:2a:a9:97:73:1d:d2:3c:ca:2b:ae:10:6e:d5:
         76:25:96:55:5c:9b:92:49:21:85:ce:b2:6c:54:03:70:62:89:
         a6:1e:b5:3d:a7:47:57:d9:82:2e:cb:cd:fe:57:ab:fb:d8:4c:
         0c:19:90:99:96:7a:a6:f4:2c:17:ba:70:11:28:70:7e:e2:ed:
         0a:a8:69:25:37:46:f5:e2:14:a7:8b:ca:4e:3f:de:b7:08:29:
         f4:05:cb:28:07:1d:74:dd:17:5f:b9:40:f8:d2:89:a2:36:79:
         20:3b:7a:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 18:46:18 2025 by rpki-client