This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/3360f078-8a20-48d1-82b8-e1f50a155201/0/B93759B19E4C1F8FFB6E9D1E2E674E4E317D7E94.mft
File:                     B93759B19E4C1F8FFB6E9D1E2E674E4E317D7E94.mft (raw, json)
Hash identifier:          iuySVOoiPTf58384SjEwyW02hURVwIsWE//OuDzDFrM=
Subject key identifier:   EB:7E:CA:3A:91:D2:CA:D5:01:9C:D5:FE:AF:7D:A4:97:41:F2:7B:A9
Authority key identifier: B9:37:59:B1:9E:4C:1F:8F:FB:6E:9D:1E:2E:67:4E:4E:31:7D:7E:94
Certificate issuer:       /CN=B93759B19E4C1F8FFB6E9D1E2E674E4E317D7E94
Certificate serial:       18E54DAA060546336D765CF9B10C9CB9486F5A53
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B93759B19E4C1F8FFB6E9D1E2E674E4E317D7E94.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3360f078-8a20-48d1-82b8-e1f50a155201/0/B93759B19E4C1F8FFB6E9D1E2E674E4E317D7E94.mft
Manifest number:          0222
Signing time:             Wed 03 Dec 2025 11:52:25 +0000
Manifest this update:     Wed 03 Dec 2025 11:47:25 +0000
Manifest next update:     Sat 06 Dec 2025 16:41:25 +0000
Files and hashes:         1: 3130332e3135302e3135382e302f32342d3234203d3e20313430333937.roa (hash: XFDD1vzbK3fH2oVTZT7/I8pF/szQ/Q1UsEfrzMZOTGI=)
                          2: B93759B19E4C1F8FFB6E9D1E2E674E4E317D7E94.crl (hash: OlfVyZIRBVA2VJeCGHMqreGAsUkCGpl2xwPb5eHHj1M=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/3360f078-8a20-48d1-82b8-e1f50a155201/0/B93759B19E4C1F8FFB6E9D1E2E674E4E317D7E94.crl
                          rsync://repo-rpki.idnic.net/repo/3360f078-8a20-48d1-82b8-e1f50a155201/0/B93759B19E4C1F8FFB6E9D1E2E674E4E317D7E94.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B93759B19E4C1F8FFB6E9D1E2E674E4E317D7E94.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 06 Dec 2025 12:07:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:e5:4d:aa:06:05:46:33:6d:76:5c:f9:b1:0c:9c:b9:48:6f:5a:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B93759B19E4C1F8FFB6E9D1E2E674E4E317D7E94
        Validity
            Not Before: Dec  3 11:47:25 2025 GMT
            Not After : Dec  6 16:41:25 2025 GMT
        Subject: CN=EB7ECA3A91D2CAD5019CD5FEAF7DA49741F27BA9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:6d:09:05:28:b0:9d:92:71:ef:ba:ca:97:b2:
                    22:67:f8:19:9e:27:bb:22:d0:fd:bd:53:b8:61:40:
                    b3:f5:ad:16:46:63:e9:2d:23:31:4c:bc:b1:81:c7:
                    89:9c:bf:16:62:c0:31:8d:2c:10:c6:be:48:e5:68:
                    32:10:df:3e:ed:d6:81:40:3e:55:95:5a:19:2d:e4:
                    33:1a:59:45:6a:88:35:c5:89:09:d8:d6:40:b5:eb:
                    fa:f4:b8:88:c4:cb:91:dc:3c:a5:36:d6:ce:8c:04:
                    b0:d8:ba:cc:1d:5e:9b:85:a6:2a:6f:ab:d7:c6:a6:
                    77:e0:25:1b:4f:0e:cf:6e:a1:b1:d2:68:1d:04:9e:
                    bb:24:e6:c1:c7:d6:66:f0:b0:02:77:a4:d1:2b:36:
                    3c:85:51:18:86:86:c0:1d:cd:44:66:11:6d:32:72:
                    ad:90:5d:99:37:f5:07:3d:ab:6c:ab:7c:04:7a:8b:
                    8f:06:01:3a:14:3f:65:3a:3d:b0:8e:e2:1b:18:b7:
                    d6:20:45:53:71:52:cb:11:a1:37:8d:2d:69:10:89:
                    9f:c3:4c:e6:b1:da:f7:40:14:91:7d:2f:be:60:66:
                    45:3b:f4:8e:1d:c9:ea:e3:6d:23:1b:b9:ab:85:e8:
                    ca:bd:83:5a:b0:4a:ce:70:c9:e5:b0:9d:b0:db:7b:
                    7b:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:7E:CA:3A:91:D2:CA:D5:01:9C:D5:FE:AF:7D:A4:97:41:F2:7B:A9
            X509v3 Authority Key Identifier:
                keyid:B9:37:59:B1:9E:4C:1F:8F:FB:6E:9D:1E:2E:67:4E:4E:31:7D:7E:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3360f078-8a20-48d1-82b8-e1f50a155201/0/B93759B19E4C1F8FFB6E9D1E2E674E4E317D7E94.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B93759B19E4C1F8FFB6E9D1E2E674E4E317D7E94.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3360f078-8a20-48d1-82b8-e1f50a155201/0/B93759B19E4C1F8FFB6E9D1E2E674E4E317D7E94.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:08:c0:ad:50:1b:be:e5:ef:25:99:c0:0a:e6:05:b9:89:b2:
         06:43:d0:01:be:4f:e0:fa:20:74:18:9d:22:bf:bf:44:62:49:
         27:ee:3e:d4:f1:0c:19:ad:34:c2:b6:26:09:77:32:e8:ae:d2:
         7d:88:c8:8c:39:f8:5b:8d:e8:66:b8:85:ca:18:57:7c:51:68:
         26:27:3b:87:e9:d8:fb:59:26:ba:db:7f:16:d1:00:f1:86:eb:
         7f:3b:8e:0c:a4:dd:5f:7a:7e:f5:7a:fa:d1:de:46:10:01:3d:
         b9:f5:1c:c3:f3:0e:20:7f:2c:dd:b7:cf:54:dd:8a:31:34:9b:
         67:88:24:45:4b:66:d0:9e:00:6c:5e:dc:21:1e:74:d5:dd:6f:
         ff:29:65:69:65:be:f2:47:26:ae:c4:8f:e7:ec:89:69:ea:01:
         6e:e3:b8:1e:c2:5d:97:90:d6:ee:36:da:c3:8e:ca:53:66:87:
         11:cd:9e:f1:52:15:ea:55:ce:8a:41:5c:b6:c7:67:ce:c1:08:
         4a:eb:76:70:97:1b:da:45:76:c7:04:7c:b7:f1:9a:05:c7:4e:
         3f:2d:c9:c8:ea:ff:d3:63:47:59:33:98:a7:ed:a9:e5:d5:4d:
         c6:92:31:ed:08:ba:17:08:fd:a0:f1:c0:1f:37:a9:93:26:c9:
         76:26:7e:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 14:57:30 2025 by rpki-client