This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/2d234d50-67e1-419c-85ba-64ba8c111225/0/81C94BE998ECBDD2EF897BFE8E8E51B874C0A652.mft
File:                     81C94BE998ECBDD2EF897BFE8E8E51B874C0A652.mft (raw, json)
Hash identifier:          msfVWpK3QUnwA2eT9mGzUxh5Y+PpbATua37sqVTvSj0=
Subject key identifier:   C8:C4:57:06:F1:C9:D9:4F:A1:55:A0:DF:4D:49:B8:CA:29:5B:B7:9B
Authority key identifier: 81:C9:4B:E9:98:EC:BD:D2:EF:89:7B:FE:8E:8E:51:B8:74:C0:A6:52
Certificate issuer:       /CN=81C94BE998ECBDD2EF897BFE8E8E51B874C0A652
Certificate serial:       4B9F13EB13B5D500AD083BFB342FA693254728AD
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/81C94BE998ECBDD2EF897BFE8E8E51B874C0A652.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/2d234d50-67e1-419c-85ba-64ba8c111225/0/81C94BE998ECBDD2EF897BFE8E8E51B874C0A652.mft
Manifest number:          02EF
Signing time:             Mon 01 Dec 2025 03:52:33 +0000
Manifest this update:     Mon 01 Dec 2025 03:47:33 +0000
Manifest next update:     Thu 04 Dec 2025 12:48:33 +0000
Files and hashes:         1: 81C94BE998ECBDD2EF897BFE8E8E51B874C0A652.crl (hash: gwwXmN039aQpmw6aC8zhQpyCOP+r3A9QvgFjGzXxTt8=)
                          2: 3130332e3136332e38302e302f32332d3233203d3e20313431363734.roa (hash: aeR78T4SgFq62LUVaHNT0OWQnz8U1jUNL74Pz+jaUQ8=)
                          3: 3130332e3136332e38302e302f32342d3234203d3e20313431363734.roa (hash: yyP1s7Drm4K7i/5vyWhbMeYMvkp/vo6vSFKCXgZUuLI=)
                          4: 3130332e3136332e38312e302f32342d3234203d3e20313431363734.roa (hash: 39I2VRz2Pwheop/Q/95GW6wOO98caUDbgzZuoNjlDio=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/2d234d50-67e1-419c-85ba-64ba8c111225/0/81C94BE998ECBDD2EF897BFE8E8E51B874C0A652.crl
                          rsync://repo-rpki.idnic.net/repo/2d234d50-67e1-419c-85ba-64ba8c111225/0/81C94BE998ECBDD2EF897BFE8E8E51B874C0A652.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/81C94BE998ECBDD2EF897BFE8E8E51B874C0A652.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 04 Dec 2025 12:48:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:9f:13:eb:13:b5:d5:00:ad:08:3b:fb:34:2f:a6:93:25:47:28:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81C94BE998ECBDD2EF897BFE8E8E51B874C0A652
        Validity
            Not Before: Dec  1 03:47:33 2025 GMT
            Not After : Dec  4 12:48:33 2025 GMT
        Subject: CN=C8C45706F1C9D94FA155A0DF4D49B8CA295BB79B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:8e:98:1e:60:8f:0f:23:50:86:0f:5c:77:40:
                    f4:f1:28:71:4a:17:e6:a9:e2:75:7b:fe:68:a9:60:
                    a6:c0:15:bb:5f:ea:a2:4e:bd:e0:5a:e6:4b:d5:ee:
                    6e:f7:2b:0a:5e:75:5a:18:7f:43:d0:58:b2:49:9a:
                    e5:86:6d:c6:87:19:0c:44:09:6d:b7:1a:dc:66:77:
                    04:f8:05:f1:41:2d:c0:79:7f:dd:d7:03:7d:f3:4f:
                    1e:16:c3:e2:43:2c:ea:ab:cf:c2:5c:0d:bf:23:b6:
                    a4:f5:b5:e2:86:1a:df:a7:70:cd:59:e6:f8:f9:77:
                    9e:92:fb:89:0c:22:1c:a3:2d:5c:fa:32:8e:1c:25:
                    f1:cb:38:4d:23:a5:2b:ea:3e:91:c8:5d:d8:4b:5f:
                    dd:3e:8a:aa:a4:92:75:d1:35:59:3d:44:96:3c:72:
                    10:19:09:08:b3:c8:a6:37:22:a2:a7:83:b5:af:56:
                    17:e6:8e:44:0d:13:a9:c7:13:7e:45:f8:6c:23:26:
                    5f:02:78:89:6d:4c:e8:2a:8e:fd:cb:a5:96:d2:f2:
                    39:51:de:b6:e6:9d:32:e4:3c:4e:69:4f:ac:dc:4a:
                    01:7a:0b:bc:20:91:7f:e6:a3:cb:97:30:5f:f5:82:
                    18:fe:f2:58:68:8a:eb:5c:6f:53:45:57:e2:33:2e:
                    73:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:C4:57:06:F1:C9:D9:4F:A1:55:A0:DF:4D:49:B8:CA:29:5B:B7:9B
            X509v3 Authority Key Identifier:
                keyid:81:C9:4B:E9:98:EC:BD:D2:EF:89:7B:FE:8E:8E:51:B8:74:C0:A6:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/2d234d50-67e1-419c-85ba-64ba8c111225/0/81C94BE998ECBDD2EF897BFE8E8E51B874C0A652.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/81C94BE998ECBDD2EF897BFE8E8E51B874C0A652.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2d234d50-67e1-419c-85ba-64ba8c111225/0/81C94BE998ECBDD2EF897BFE8E8E51B874C0A652.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:4d:f7:a1:85:4e:8b:b8:43:51:00:fd:c6:4a:f3:1c:26:81:
         34:42:7d:73:f2:e0:5b:4b:9d:ff:92:2b:24:d6:b3:21:be:2d:
         a0:a2:41:82:95:8f:b1:43:dd:c3:1a:c5:86:ca:cd:df:bb:c7:
         03:e3:d6:d3:ff:01:f2:e4:aa:dc:12:09:65:27:75:38:da:3a:
         4b:b1:eb:5a:1f:5f:8c:36:04:8c:00:e1:c5:87:b3:df:c2:1c:
         82:c1:f8:75:6e:38:12:55:e6:9b:5e:f1:ae:15:ef:c8:c5:cd:
         35:de:19:80:46:30:b6:21:e9:79:3e:97:1d:6f:ce:28:06:59:
         1b:4b:66:62:41:36:0b:4b:e9:41:83:ab:f4:1e:d6:ef:6a:bb:
         d8:ca:ed:15:b7:a6:69:2d:0b:7f:cf:03:44:c5:28:78:46:b0:
         39:5c:4a:76:99:59:b7:74:9d:6d:7e:87:ec:9b:fb:b8:80:c5:
         77:89:28:c8:12:6b:09:3e:ce:af:bb:c8:9d:65:7d:50:70:ab:
         a1:f2:c4:a0:d3:1c:24:7b:0f:34:5d:3a:b1:54:02:ff:30:90:
         60:c0:77:fa:01:24:54:1c:0b:9d:49:ef:fc:23:12:4b:08:e9:
         64:cc:8a:13:c5:e6:15:02:a6:a6:cf:61:2c:b1:f9:9c:73:41:
         da:eb:5d:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 13:58:31 2025 by rpki-client