This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/42713a32-fada-484e-a68d-0cac0fffa33c/0/B0FA6C3ED4780E032B0A3F161E018A7C8FA82B45.mft
File:                     B0FA6C3ED4780E032B0A3F161E018A7C8FA82B45.mft (raw, json)
Hash identifier:          Pw4rJDxG2YdXqRyxx+B451AYE0yEdnj0wgzmuABuQS0=
Subject key identifier:   55:3D:32:FC:0A:75:E9:12:7E:01:85:5D:2D:06:3E:F8:1E:59:FD:FA
Authority key identifier: B0:FA:6C:3E:D4:78:0E:03:2B:0A:3F:16:1E:01:8A:7C:8F:A8:2B:45
Certificate issuer:       /CN=B0FA6C3ED4780E032B0A3F161E018A7C8FA82B45
Certificate serial:       13444A5A30B1CD53BD26E598BA1D8861BB71089B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B0FA6C3ED4780E032B0A3F161E018A7C8FA82B45.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/42713a32-fada-484e-a68d-0cac0fffa33c/0/B0FA6C3ED4780E032B0A3F161E018A7C8FA82B45.mft
Manifest number:          024D
Signing time:             Wed 17 Dec 2025 04:32:23 +0000
Manifest this update:     Wed 17 Dec 2025 04:27:23 +0000
Manifest next update:     Sat 20 Dec 2025 08:52:23 +0000
Files and hashes:         1: B0FA6C3ED4780E032B0A3F161E018A7C8FA82B45.crl (hash: YfW+STL0uzniZpy9oJMZ1i1UufhgZBJd//63NDlEdCk=)
                          2: 3130332e3138362e3136382e302f32332d3233203d3e20313439333135.roa (hash: 0o9IBgjEwrH3ZJGqMXSmtJgW+TONR3n1c/K3AjhSCz0=)
                          3: 3130332e3138362e3136392e302f32342d3234203d3e20313439333135.roa (hash: k0YtTjCvRfHkKBkEOTB9msrr0NImtoiaOd/b0Un02oI=)
                          4: 3130332e3138362e3136382e302f32342d3234203d3e20313439333135.roa (hash: cA/IXkQfExxLqkZklRIGA4Iq/8wfMruGPEzuyZnNgNM=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/42713a32-fada-484e-a68d-0cac0fffa33c/0/B0FA6C3ED4780E032B0A3F161E018A7C8FA82B45.crl
                          rsync://repo-rpki.idnic.net/repo/42713a32-fada-484e-a68d-0cac0fffa33c/0/B0FA6C3ED4780E032B0A3F161E018A7C8FA82B45.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B0FA6C3ED4780E032B0A3F161E018A7C8FA82B45.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Dec 2025 08:52:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:44:4a:5a:30:b1:cd:53:bd:26:e5:98:ba:1d:88:61:bb:71:08:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B0FA6C3ED4780E032B0A3F161E018A7C8FA82B45
        Validity
            Not Before: Dec 17 04:27:23 2025 GMT
            Not After : Dec 20 08:52:23 2025 GMT
        Subject: CN=553D32FC0A75E9127E01855D2D063EF81E59FDFA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:65:f6:b5:24:21:c8:6e:04:0a:5a:8b:a2:00:
                    01:56:3e:76:2e:53:ed:a4:30:37:a0:f5:83:bc:e5:
                    d5:bb:dc:c6:fb:74:a6:b8:3f:24:e3:16:d7:e0:e7:
                    2e:c5:59:de:af:d0:f2:31:dc:85:32:57:7b:73:27:
                    ee:e4:6b:96:71:ff:f9:e0:89:6e:03:b5:30:01:48:
                    5b:71:5f:42:85:8c:77:98:f7:61:a6:6b:30:80:25:
                    9a:fe:39:fa:f1:d2:ae:85:f1:e1:02:7b:65:ad:18:
                    ec:02:7f:cc:12:57:2e:c7:62:6b:c7:a0:91:bb:4d:
                    67:66:9b:88:d2:e6:04:7c:02:cd:2d:51:73:22:c1:
                    73:97:b1:6d:f6:86:bc:49:3f:39:ec:dc:69:06:02:
                    51:79:7d:d1:fb:4a:ca:89:a2:85:3f:ea:0e:af:31:
                    85:d1:f6:74:67:3a:5c:34:1d:0c:9c:fd:ec:aa:6f:
                    53:2a:7e:4f:68:d9:87:f1:3c:51:e9:71:bf:0b:e5:
                    b2:74:79:ce:1b:0c:17:d6:5b:0e:ef:ed:0d:9b:a4:
                    a2:72:eb:66:34:85:1c:9a:5a:17:e0:c3:21:fb:fd:
                    91:48:9b:83:3c:e6:80:52:6d:a3:99:7f:77:0d:14:
                    36:0c:08:95:38:54:b5:fb:f3:f5:13:b9:fc:e2:06:
                    99:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:3D:32:FC:0A:75:E9:12:7E:01:85:5D:2D:06:3E:F8:1E:59:FD:FA
            X509v3 Authority Key Identifier:
                keyid:B0:FA:6C:3E:D4:78:0E:03:2B:0A:3F:16:1E:01:8A:7C:8F:A8:2B:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/42713a32-fada-484e-a68d-0cac0fffa33c/0/B0FA6C3ED4780E032B0A3F161E018A7C8FA82B45.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B0FA6C3ED4780E032B0A3F161E018A7C8FA82B45.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/42713a32-fada-484e-a68d-0cac0fffa33c/0/B0FA6C3ED4780E032B0A3F161E018A7C8FA82B45.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:32:a3:e7:84:47:3f:97:15:cb:42:21:15:65:4f:54:f7:2d:
         4e:59:2e:ad:69:59:ac:3c:37:cb:71:e4:4a:ad:27:ab:62:71:
         2c:c6:f7:83:67:ab:7d:16:3b:8a:67:59:f1:3e:ac:9f:09:5b:
         ae:97:0f:4f:e7:43:18:73:37:d2:60:e8:90:ff:42:40:47:a0:
         41:f6:8e:22:04:c9:55:5c:eb:02:61:7b:3a:f6:f3:20:7b:31:
         40:7e:b1:00:54:4b:81:85:fd:70:d1:0b:3c:8d:8c:40:50:d6:
         a9:50:60:95:d0:63:ad:d0:9f:f3:61:19:a1:b2:3b:fa:fa:3e:
         33:da:da:14:f4:eb:3c:d8:dd:a1:f1:29:74:4b:bb:45:2c:97:
         da:62:f2:36:3d:ef:9b:e4:52:c3:35:d1:94:ef:88:8a:59:b7:
         ac:ab:fc:f0:3d:7a:c9:91:2e:72:06:af:f4:81:34:69:02:9d:
         ee:cb:ff:b3:4f:f8:1a:b8:2f:03:a1:3c:1f:f9:60:f7:43:06:
         2f:c7:92:44:18:8f:f2:48:62:d7:e8:4c:5b:c4:c6:8e:88:2c:
         57:ce:3a:03:52:6c:3f:b1:ce:82:b3:28:30:6c:f5:cc:c3:c7:
         31:46:d0:8b:03:ee:fc:cf:d5:3c:c3:81:d5:8d:a5:79:1c:0a:
         04:50:24:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 09:45:09 2025 by rpki-client