This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/7cd323be-837d-4244-846c-7d2393a9a009/0/B0928A45D014D8D5FAD50314E828086F12B15610.mft
File:                     B0928A45D014D8D5FAD50314E828086F12B15610.mft (raw, json)
Hash identifier:          wvlr2Gya24bCxZlZ2ctwhCwLfbxtZxVyKWivwc2cOjg=
Subject key identifier:   61:6E:DA:0E:E4:6B:B5:25:D9:53:68:17:D3:5F:F3:50:BF:F4:EB:9D
Authority key identifier: B0:92:8A:45:D0:14:D8:D5:FA:D5:03:14:E8:28:08:6F:12:B1:56:10
Certificate issuer:       /CN=B0928A45D014D8D5FAD50314E828086F12B15610
Certificate serial:       7EF0DF2ADC5E386C5A5D552DAD27BF00A8BA76F8
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B0928A45D014D8D5FAD50314E828086F12B15610.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/7cd323be-837d-4244-846c-7d2393a9a009/0/B0928A45D014D8D5FAD50314E828086F12B15610.mft
Manifest number:          032E
Signing time:             Mon 01 Dec 2025 05:11:20 +0000
Manifest this update:     Mon 01 Dec 2025 05:06:20 +0000
Manifest next update:     Thu 04 Dec 2025 16:47:20 +0000
Files and hashes:         1: B0928A45D014D8D5FAD50314E828086F12B15610.crl (hash: ApCI8J5HQr3P5FoSdUSLLW3ZrtUKrYh+7RcZQmqJGDk=)
                          2: 3230322e3132352e38322e302f32332d3233203d3e20313430343433.roa (hash: g4b6/Xa0b41J+1gc8Xz+JaVY6mTt5QNosbt82K9ZCLY=)
                          3: 3230322e37302e3133322e302f32332d3233203d3e20313430343433.roa (hash: unxNSSNtfbW/QtJSHv1+Jppsd16Z88+qlZSg2ZXLUc0=)
                          4: 3230322e37302e3133322e302f32342d3234203d3e20313430343433.roa (hash: hnSe2L9heULKYvVeefFY6CeCDXE6iTWu+s4r/qCo/4o=)
                          5: 3230322e37302e3133332e302f32342d3234203d3e20313430343433.roa (hash: wdtK/qmLPSYK98usl8We2OAmclE1Y5QskILTtOqsrh0=)
                          6: 3230322e3132352e38332e302f32342d3234203d3e20313430343433.roa (hash: Ky8MrLU9AvVMvZfrLkoaRO/9X/2qSweH3weFbcGoV3c=)
                          7: 3230322e3132352e38322e302f32342d3234203d3e20313430343433.roa (hash: svi5IuXnIA+13Wc0eQrV3WQdaOBiVClli1PIWM+ewGc=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/7cd323be-837d-4244-846c-7d2393a9a009/0/B0928A45D014D8D5FAD50314E828086F12B15610.crl
                          rsync://repo-rpki.idnic.net/repo/7cd323be-837d-4244-846c-7d2393a9a009/0/B0928A45D014D8D5FAD50314E828086F12B15610.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B0928A45D014D8D5FAD50314E828086F12B15610.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 04 Dec 2025 16:47:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:f0:df:2a:dc:5e:38:6c:5a:5d:55:2d:ad:27:bf:00:a8:ba:76:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B0928A45D014D8D5FAD50314E828086F12B15610
        Validity
            Not Before: Dec  1 05:06:20 2025 GMT
            Not After : Dec  4 16:47:20 2025 GMT
        Subject: CN=616EDA0EE46BB525D9536817D35FF350BFF4EB9D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:5a:d1:5e:61:0c:1b:04:6d:0a:37:a9:80:77:
                    97:81:cf:4a:9f:07:d1:4f:d5:d2:2b:90:9c:88:dd:
                    1d:e2:40:fa:47:ea:dd:8f:3c:17:79:78:ea:25:bd:
                    5f:0f:af:33:2f:57:83:65:4f:c9:a7:f4:91:83:c8:
                    75:49:36:33:ca:31:2f:f9:69:34:0c:25:f9:1e:02:
                    ec:4a:04:64:db:46:0d:bd:0a:1c:03:cf:6b:01:9f:
                    cf:29:19:ef:61:08:ce:45:11:59:73:2f:f2:bf:0c:
                    5f:e9:3e:05:16:bd:51:cb:f5:97:37:16:9c:a2:d4:
                    88:79:1b:cc:07:3f:3d:72:b8:a3:c1:bd:29:11:04:
                    80:60:db:52:0e:31:be:b1:2d:b3:b9:80:7f:3b:36:
                    68:ef:26:86:8d:30:d1:de:3a:7e:17:96:aa:26:0e:
                    ad:4b:03:45:e3:55:2c:de:2b:54:3f:53:88:1b:2a:
                    83:89:91:cd:f0:6a:f9:7d:5b:a5:a7:75:b2:a2:68:
                    40:b8:1a:08:23:55:6f:b7:fe:96:69:c7:82:0e:53:
                    06:c9:ee:36:76:70:68:28:0b:fd:39:bc:b1:df:15:
                    75:48:ef:d7:79:9c:23:b1:33:cb:5c:c2:f2:db:19:
                    d3:36:bb:f9:f9:09:d0:de:51:9c:37:47:63:72:be:
                    11:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:6E:DA:0E:E4:6B:B5:25:D9:53:68:17:D3:5F:F3:50:BF:F4:EB:9D
            X509v3 Authority Key Identifier:
                keyid:B0:92:8A:45:D0:14:D8:D5:FA:D5:03:14:E8:28:08:6F:12:B1:56:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/7cd323be-837d-4244-846c-7d2393a9a009/0/B0928A45D014D8D5FAD50314E828086F12B15610.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B0928A45D014D8D5FAD50314E828086F12B15610.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7cd323be-837d-4244-846c-7d2393a9a009/0/B0928A45D014D8D5FAD50314E828086F12B15610.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:0a:d7:96:50:63:66:53:00:81:c3:b4:e1:9c:bd:f5:90:cb:
         79:87:0d:5c:20:59:37:07:3b:69:c0:66:9b:34:91:9c:25:0a:
         40:a5:1d:42:d8:5c:38:c3:29:25:9c:85:e0:bb:18:c5:f1:69:
         7d:be:93:c9:0b:d4:a2:01:bf:58:43:91:f5:34:28:f2:ca:78:
         1c:5f:2f:c0:a6:49:0a:f9:35:55:b4:aa:9e:69:a3:b7:13:40:
         e3:bd:54:d6:a4:04:f3:d6:47:ed:f9:a5:68:2f:96:9f:07:00:
         d1:6f:05:dd:72:b7:af:45:c2:89:18:71:29:2a:f7:9f:d4:e7:
         02:11:ac:72:c4:74:9a:ea:7e:b8:fc:4a:da:4c:05:24:2d:b6:
         78:65:b3:5b:64:b3:ed:2f:75:62:8f:f4:d6:de:f0:4a:ef:59:
         a7:71:0b:56:da:1d:fd:fb:af:d8:b0:94:7e:d7:82:5f:d7:a8:
         45:0a:25:6b:70:92:3d:90:b5:a2:b0:33:ef:06:74:09:fa:29:
         31:25:9f:27:82:ae:84:ee:66:6c:18:15:1c:c1:ee:3c:d0:14:
         0b:63:3b:2f:2a:54:fc:45:d4:54:80:f8:47:0b:61:f9:55:df:
         b7:9b:6e:15:f4:24:32:a9:70:9c:81:f1:74:35:f5:8b:f0:be:
         0a:53:05:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 13:57:07 2025 by rpki-client