This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/26fa9584-6f97-4041-9c8d-8b3959e4f9b3/0/B72535E4EB8B31C6794C4DF31FF53E4E64914C56.mft
File:                     B72535E4EB8B31C6794C4DF31FF53E4E64914C56.mft (raw, json)
Hash identifier:          OiYlYeC1xCJhgFEm8h+r1m68/D5ak6iCIL0Z9fukXOs=
Subject key identifier:   F3:02:D8:AF:5A:39:88:5F:86:9D:3F:5E:0F:11:5B:DB:28:C2:4A:26
Authority key identifier: B7:25:35:E4:EB:8B:31:C6:79:4C:4D:F3:1F:F5:3E:4E:64:91:4C:56
Certificate issuer:       /CN=B72535E4EB8B31C6794C4DF31FF53E4E64914C56
Certificate serial:       2B5EE823DDCAD83911AF04941EF935D15ABC09B2
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B72535E4EB8B31C6794C4DF31FF53E4E64914C56.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/26fa9584-6f97-4041-9c8d-8b3959e4f9b3/0/B72535E4EB8B31C6794C4DF31FF53E4E64914C56.mft
Manifest number:          F8
Signing time:             Sun 07 Dec 2025 03:11:20 +0000
Manifest this update:     Sun 07 Dec 2025 03:06:20 +0000
Manifest next update:     Wed 10 Dec 2025 07:53:20 +0000
Files and hashes:         1: B72535E4EB8B31C6794C4DF31FF53E4E64914C56.crl (hash: sjlNwv+B6zNSSJBIlmcOhOOnbnMIaXSi7rIswR8HCTY=)
                          2: 3135372e36362e35302e302f32332d3234203d3e20313532343338.roa (hash: 0z+OlDe1hua3zv7OtVHMMPyi/MvPOJjdEV9nI71654g=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/26fa9584-6f97-4041-9c8d-8b3959e4f9b3/0/B72535E4EB8B31C6794C4DF31FF53E4E64914C56.crl
                          rsync://repo-rpki.idnic.net/repo/26fa9584-6f97-4041-9c8d-8b3959e4f9b3/0/B72535E4EB8B31C6794C4DF31FF53E4E64914C56.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B72535E4EB8B31C6794C4DF31FF53E4E64914C56.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 09 Dec 2025 06:55:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:5e:e8:23:dd:ca:d8:39:11:af:04:94:1e:f9:35:d1:5a:bc:09:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B72535E4EB8B31C6794C4DF31FF53E4E64914C56
        Validity
            Not Before: Dec  7 03:06:20 2025 GMT
            Not After : Dec 10 07:53:20 2025 GMT
        Subject: CN=F302D8AF5A39885F869D3F5E0F115BDB28C24A26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:56:21:1c:7f:39:7b:22:94:23:2c:b8:b0:d6:
                    ee:9d:60:2a:92:99:94:7e:cc:ed:31:18:5a:de:75:
                    18:42:66:07:56:7e:aa:1d:24:b8:c4:90:40:71:fe:
                    c0:b5:5f:eb:22:72:cb:1c:4a:59:13:9f:5a:d7:21:
                    11:c3:1b:fc:5f:18:fd:6c:be:86:94:34:30:62:a3:
                    1d:76:c5:bc:ab:69:32:67:d5:4b:bc:75:64:60:23:
                    2c:10:e3:cd:76:4e:35:25:8c:92:28:ee:1d:b7:26:
                    a1:73:88:ee:02:5f:55:ef:63:eb:1d:35:6c:95:f1:
                    9b:4d:eb:36:ce:52:5d:81:31:9c:1e:58:cd:46:75:
                    dc:c9:ff:04:ca:60:97:5f:69:04:31:57:b3:de:66:
                    f2:52:c8:02:b1:20:e8:95:20:9c:5e:b9:7d:d3:90:
                    a5:d2:43:25:5d:0a:2d:d0:92:18:ae:6e:0c:c9:de:
                    81:18:2b:f0:8e:e8:6d:bc:ca:7c:e0:5f:95:7b:56:
                    9b:be:18:8d:2d:cf:94:6b:ee:e6:5e:78:3a:50:52:
                    9e:1c:fd:a3:b6:33:f3:a4:1e:ac:20:64:9d:c7:7d:
                    74:e2:02:6a:d2:7c:1f:34:1b:f9:61:c7:50:2c:43:
                    61:d2:d2:ca:a8:9f:2a:9b:8d:a6:42:d0:68:3d:67:
                    39:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:02:D8:AF:5A:39:88:5F:86:9D:3F:5E:0F:11:5B:DB:28:C2:4A:26
            X509v3 Authority Key Identifier:
                keyid:B7:25:35:E4:EB:8B:31:C6:79:4C:4D:F3:1F:F5:3E:4E:64:91:4C:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/26fa9584-6f97-4041-9c8d-8b3959e4f9b3/0/B72535E4EB8B31C6794C4DF31FF53E4E64914C56.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B72535E4EB8B31C6794C4DF31FF53E4E64914C56.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/26fa9584-6f97-4041-9c8d-8b3959e4f9b3/0/B72535E4EB8B31C6794C4DF31FF53E4E64914C56.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:77:ad:fe:85:44:e5:01:51:02:d3:a1:12:8a:6c:23:e2:6d:
         30:f0:a9:73:4d:fe:c6:7c:aa:75:63:1a:4d:38:64:ce:cf:dd:
         e4:6d:01:dc:c9:db:80:4b:a8:a8:6a:2f:9f:39:66:be:cc:75:
         f9:33:c9:66:e0:17:7f:83:f1:04:a7:c1:4f:4a:ab:4d:f9:40:
         df:e6:a5:2a:51:22:ed:28:f4:3c:2d:74:3e:ae:0b:c8:56:cc:
         a5:43:18:39:36:f3:21:6b:59:f2:b0:b5:f1:0d:cb:4c:bd:f9:
         3a:19:fe:0d:1d:82:86:a3:a8:b3:58:6e:4b:e0:c3:12:d8:f0:
         18:78:ae:bc:1b:4e:7b:ec:44:cf:d8:f4:cb:41:83:d6:5b:70:
         65:9b:b3:5b:2b:7d:f3:9a:7b:62:7c:e6:cf:4f:9e:ed:b0:d0:
         4c:5b:20:9d:ad:b9:5f:ef:1f:27:f7:a6:99:2a:8e:41:5d:cd:
         c0:38:a3:bb:44:51:5d:87:18:76:18:b5:ac:16:8e:f3:57:75:
         a2:14:82:46:ed:8e:79:ff:50:d2:07:1f:42:9d:5a:91:9a:a1:
         b1:01:63:98:f2:74:96:14:75:6c:2d:8d:48:a1:e2:97:3f:d1:
         68:c1:22:48:62:e8:e6:66:eb:bb:22:cf:19:c4:2a:ed:d3:16:
         cc:84:76:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 18:49:53 2025 by rpki-client