This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/17216425-6aa3-4429-b175-86901bb0cb1f/0/B247FB55BE5739FCE4EBBD20B84542267C15D192.mft
File:                     B247FB55BE5739FCE4EBBD20B84542267C15D192.mft (raw, json)
Hash identifier:          GRT1qZRlaxRvP1TTdgnoHjz2NYNDyT5bx3PgTAt8qK8=
Subject key identifier:   B1:99:53:9D:C5:16:13:A8:86:65:DB:B3:90:BC:C2:F4:69:38:96:34
Authority key identifier: B2:47:FB:55:BE:57:39:FC:E4:EB:BD:20:B8:45:42:26:7C:15:D1:92
Certificate issuer:       /CN=B247FB55BE5739FCE4EBBD20B84542267C15D192
Certificate serial:       7AA20F135786707730EAC431EBE636B4A76BB87E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B247FB55BE5739FCE4EBBD20B84542267C15D192.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/17216425-6aa3-4429-b175-86901bb0cb1f/0/B247FB55BE5739FCE4EBBD20B84542267C15D192.mft
Manifest number:          02B4
Signing time:             Sat 13 Dec 2025 08:21:24 +0000
Manifest this update:     Sat 13 Dec 2025 08:16:24 +0000
Manifest next update:     Tue 16 Dec 2025 13:50:24 +0000
Files and hashes:         1: 3130332e3137362e39382e302f32332d3234203d3e20313439333434.roa (hash: 9BKuqPMpOCYVLDkVIwaFy+U4SgMn8wYu59t+XyUcQfg=)
                          2: 3130332e3137362e39392e302f32342d3234203d3e20313439333434.roa (hash: 1SXRbeE4Zo2BpgZYkA81FPjpBzqJO4ahWylO9ct7G/4=)
                          3: B247FB55BE5739FCE4EBBD20B84542267C15D192.crl (hash: Wm+DPcRfbU41FYNspD+F6GP01dFVCcURp60RLMuDN+s=)
                          4: 3130332e3137362e39382e302f32342d3234203d3e20313439333434.roa (hash: EI6CAFKMozCEfiPKGQcvscTjTfj7/nkyBcwcx/XBDg8=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/17216425-6aa3-4429-b175-86901bb0cb1f/0/B247FB55BE5739FCE4EBBD20B84542267C15D192.crl
                          rsync://repo-rpki.idnic.net/repo/17216425-6aa3-4429-b175-86901bb0cb1f/0/B247FB55BE5739FCE4EBBD20B84542267C15D192.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B247FB55BE5739FCE4EBBD20B84542267C15D192.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 16 Dec 2025 13:50:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:a2:0f:13:57:86:70:77:30:ea:c4:31:eb:e6:36:b4:a7:6b:b8:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B247FB55BE5739FCE4EBBD20B84542267C15D192
        Validity
            Not Before: Dec 13 08:16:24 2025 GMT
            Not After : Dec 16 13:50:24 2025 GMT
        Subject: CN=B199539DC51613A88665DBB390BCC2F469389634
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:d9:96:66:47:2e:4e:84:58:f0:6c:91:42:a5:
                    40:88:68:3b:8a:43:04:6e:0c:eb:b9:dc:cb:a1:ff:
                    bd:62:dd:83:41:23:1b:34:b9:fd:0d:c6:75:7d:17:
                    74:e8:d8:0a:49:5d:e3:d0:62:05:a7:9b:40:5c:2a:
                    3b:46:d8:7a:03:39:75:58:cd:27:df:82:f2:da:39:
                    1c:ab:09:01:f5:ff:87:c6:d3:30:d1:03:da:63:53:
                    e1:77:ec:25:86:19:e6:3f:ee:34:1c:79:eb:ef:9c:
                    0c:5e:5b:0e:8b:b8:7a:13:8d:e5:65:0e:b1:ef:09:
                    c3:d7:02:0b:37:27:79:53:56:93:a2:47:34:0f:a2:
                    b9:d7:39:bd:e7:f5:19:bf:24:69:d1:b6:1a:28:22:
                    74:1b:c0:86:d3:6c:30:8b:d0:fb:d7:70:ef:75:e3:
                    a9:93:1c:eb:53:92:64:dd:31:27:3a:d0:7a:66:76:
                    0c:ea:9a:cd:4a:fb:d5:96:22:ec:2c:7c:54:9c:36:
                    45:6d:5f:66:c2:93:b5:de:d5:40:2d:b5:7d:f1:ae:
                    72:42:2d:ee:a4:c4:80:38:be:d6:78:1d:f7:74:4f:
                    09:1c:f7:aa:67:0c:61:69:37:34:cd:57:cd:d8:ad:
                    5a:9b:66:ba:26:68:4f:42:89:b9:7a:d9:2e:f3:bf:
                    68:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:99:53:9D:C5:16:13:A8:86:65:DB:B3:90:BC:C2:F4:69:38:96:34
            X509v3 Authority Key Identifier:
                keyid:B2:47:FB:55:BE:57:39:FC:E4:EB:BD:20:B8:45:42:26:7C:15:D1:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/17216425-6aa3-4429-b175-86901bb0cb1f/0/B247FB55BE5739FCE4EBBD20B84542267C15D192.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B247FB55BE5739FCE4EBBD20B84542267C15D192.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/17216425-6aa3-4429-b175-86901bb0cb1f/0/B247FB55BE5739FCE4EBBD20B84542267C15D192.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:51:1d:37:87:85:7c:78:13:5b:33:3a:e9:c5:d0:72:46:bc:
         2b:35:19:d4:45:45:f1:21:58:75:65:af:b2:52:4b:62:e8:ee:
         80:70:f5:2d:c8:c9:74:e9:6f:34:5e:1c:9a:7c:9d:b3:ca:1a:
         13:96:b1:d3:0a:9f:00:6b:9f:9e:b1:16:68:93:e0:ed:9c:67:
         a7:d3:a6:ef:60:78:8d:63:ab:20:8c:0b:57:9c:45:b6:0c:d1:
         0f:b7:59:71:87:4b:6c:75:35:c4:7d:7b:89:07:24:4d:b2:01:
         dd:ac:06:ae:26:78:ca:b6:ae:c6:a9:97:69:34:3d:9a:83:da:
         79:cc:d3:09:22:2f:37:0d:9f:b0:76:49:64:8a:4b:6e:42:95:
         03:e5:d6:4c:68:41:82:33:58:44:0a:9d:ef:fd:e0:58:0b:23:
         2b:6f:f6:7f:c9:9d:bb:10:f5:1f:ad:6a:c3:f5:fc:a1:b7:f1:
         b1:72:97:41:0b:e0:0d:15:c7:49:ff:ce:91:26:6c:15:f8:ef:
         80:4e:e4:5b:6b:6d:d7:6a:be:3d:04:5e:19:d0:6e:92:ec:66:
         6b:60:f6:71:06:07:a1:00:7a:34:80:78:d1:eb:8f:5e:b5:09:
         ba:19:13:88:72:82:4a:cc:90:d5:77:b8:e1:1f:41:80:ab:d2:
         e3:8a:c6:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 14 23:19:03 2025 by rpki-client