This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/3900208b-32ac-4a26-9d92-609ad76183c1/0/22825A0BEE926683AC41A0486AEF55AF8C1C228F.mft
File:                     22825A0BEE926683AC41A0486AEF55AF8C1C228F.mft (raw, json)
Hash identifier:          Wkc0xPmBvGWHvzcFDhXTING/SLQLW5Impfo2wCLLkgY=
Subject key identifier:   6D:DA:C0:4F:71:DE:60:8C:12:8E:0A:50:F5:17:1E:16:F1:0F:33:47
Authority key identifier: 22:82:5A:0B:EE:92:66:83:AC:41:A0:48:6A:EF:55:AF:8C:1C:22:8F
Certificate issuer:       /CN=22825A0BEE926683AC41A0486AEF55AF8C1C228F
Certificate serial:       582DD8B069DB467A1293A737CDA1418093E76CFE
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/22825A0BEE926683AC41A0486AEF55AF8C1C228F.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3900208b-32ac-4a26-9d92-609ad76183c1/0/22825A0BEE926683AC41A0486AEF55AF8C1C228F.mft
Manifest number:          01CC
Signing time:             Tue 02 Dec 2025 04:50:48 +0000
Manifest this update:     Tue 02 Dec 2025 04:45:48 +0000
Manifest next update:     Fri 05 Dec 2025 07:32:48 +0000
Files and hashes:         1: 3130332e3133392e3137352e302f32342d3234203d3e20313331373435.roa (hash: /z/ZhPaw5F3TCZQvmgqcleuF3rFMMJYxb+Mr//w9yXY=)
                          2: 22825A0BEE926683AC41A0486AEF55AF8C1C228F.crl (hash: EdohXFSLNpH2qlFhyPbG+OXnA1Ciof+/rQHz1BUMb3E=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/3900208b-32ac-4a26-9d92-609ad76183c1/0/22825A0BEE926683AC41A0486AEF55AF8C1C228F.crl
                          rsync://repo-rpki.idnic.net/repo/3900208b-32ac-4a26-9d92-609ad76183c1/0/22825A0BEE926683AC41A0486AEF55AF8C1C228F.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/22825A0BEE926683AC41A0486AEF55AF8C1C228F.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 05 Dec 2025 07:32:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:2d:d8:b0:69:db:46:7a:12:93:a7:37:cd:a1:41:80:93:e7:6c:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22825A0BEE926683AC41A0486AEF55AF8C1C228F
        Validity
            Not Before: Dec  2 04:45:48 2025 GMT
            Not After : Dec  5 07:32:48 2025 GMT
        Subject: CN=6DDAC04F71DE608C128E0A50F5171E16F10F3347
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:30:db:15:a1:20:1e:4b:fd:f0:d7:8a:36:d1:
                    6c:bf:62:78:dd:99:99:51:71:8a:7a:09:a6:74:3e:
                    7d:e1:82:8e:be:06:1b:34:20:04:1a:b0:2a:41:e9:
                    c4:28:07:f9:96:1f:87:a7:ca:2b:2a:15:4a:96:79:
                    4c:1e:6c:80:84:22:e0:e2:c7:2b:d9:f2:ce:6b:3d:
                    ce:e9:3d:75:d8:ad:27:91:63:98:4b:ac:ae:df:5d:
                    07:75:32:d1:2a:3f:7f:e5:ea:51:5b:1d:7b:c2:0f:
                    e0:40:10:c8:51:ba:cf:12:5c:b5:9d:32:4a:85:4c:
                    d0:4c:9e:d9:c1:ed:e9:52:eb:cc:70:4b:86:5f:a6:
                    2e:7e:00:70:a0:8d:cd:c1:94:e6:4a:7a:ff:2f:65:
                    dc:35:0f:16:6e:20:7c:c0:a0:a0:79:c2:34:6c:a2:
                    ea:f5:1d:cf:f0:d6:ff:80:96:eb:a6:43:b5:98:24:
                    54:8c:fe:3a:24:d3:24:c3:49:0c:ac:a5:6f:76:f2:
                    5c:e4:51:b1:bc:d5:c7:e0:fc:b6:03:4c:3d:8c:fa:
                    ab:53:d3:90:82:89:2d:f3:15:b1:a9:a5:df:56:94:
                    31:0b:5d:b1:c6:94:15:dd:a8:56:a9:f0:60:95:b7:
                    df:6e:4f:1a:38:50:68:ef:05:ed:81:1b:89:e5:de:
                    c9:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:DA:C0:4F:71:DE:60:8C:12:8E:0A:50:F5:17:1E:16:F1:0F:33:47
            X509v3 Authority Key Identifier:
                keyid:22:82:5A:0B:EE:92:66:83:AC:41:A0:48:6A:EF:55:AF:8C:1C:22:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3900208b-32ac-4a26-9d92-609ad76183c1/0/22825A0BEE926683AC41A0486AEF55AF8C1C228F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/22825A0BEE926683AC41A0486AEF55AF8C1C228F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3900208b-32ac-4a26-9d92-609ad76183c1/0/22825A0BEE926683AC41A0486AEF55AF8C1C228F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:c6:84:d4:53:8a:2c:4d:aa:a7:4d:72:4d:1b:bc:7f:a7:05:
         d0:09:b0:a9:90:b6:00:10:f8:c2:28:87:f6:46:8e:48:cd:27:
         3d:ee:b1:d1:45:85:07:a2:d8:40:6f:17:71:bb:9f:79:e5:92:
         a2:d9:6c:62:7f:2b:0c:b1:88:fb:00:08:3b:85:9f:1a:c9:6f:
         ae:ee:1f:a5:a1:ae:fa:9b:ef:41:13:aa:44:db:bc:c5:0e:c2:
         3e:4b:a4:56:b9:1d:20:5f:94:f8:20:ec:d2:a4:59:0f:de:f5:
         29:08:1c:25:4e:1d:fb:24:c2:ad:8d:81:c0:52:25:bc:2e:11:
         70:7b:e1:a6:db:23:b0:ad:16:19:54:6e:2b:cd:98:4f:9b:37:
         f2:e2:1c:98:58:76:62:6a:c8:2e:a0:76:87:e8:1f:47:20:e8:
         89:25:f8:3c:6a:36:0f:ef:0a:9b:95:cf:2e:5b:4a:16:e2:4b:
         f7:eb:d6:50:28:a0:a2:13:a8:58:24:50:6d:1f:f4:4d:df:10:
         5b:4d:56:b1:4c:d9:a8:32:c6:46:27:7e:9d:5e:86:2c:bb:e9:
         4a:4b:0d:86:db:c6:2f:a5:c8:75:e5:21:b1:b8:db:75:ac:4c:
         53:b7:7e:9a:9b:9b:53:43:17:c3:18:73:e1:7e:78:51:1a:29:
         3e:cb:67:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 14:14:40 2025 by rpki-client