This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/81cf5657-ecdc-4d97-a59c-b676ce53c8a1/0/B0D5A05340C55C7E2CDC83ADCE4774AF0CC184C1.mft
File:                     B0D5A05340C55C7E2CDC83ADCE4774AF0CC184C1.mft (raw, json)
Hash identifier:          mzLkYyiHXZ8FOfLFpKqBPJhO2OKm2lzlW6HFG5nBwbU=
Subject key identifier:   BB:38:78:3B:74:6B:7F:B4:C1:F8:02:91:80:22:8C:4C:10:10:15:17
Authority key identifier: B0:D5:A0:53:40:C5:5C:7E:2C:DC:83:AD:CE:47:74:AF:0C:C1:84:C1
Certificate issuer:       /CN=B0D5A05340C55C7E2CDC83ADCE4774AF0CC184C1
Certificate serial:       2E703A02BEEAC4CBC5BF6A837FD6FABB07B32647
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B0D5A05340C55C7E2CDC83ADCE4774AF0CC184C1.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/81cf5657-ecdc-4d97-a59c-b676ce53c8a1/0/B0D5A05340C55C7E2CDC83ADCE4774AF0CC184C1.mft
Manifest number:          0322
Signing time:             Wed 03 Dec 2025 11:41:04 +0000
Manifest this update:     Wed 03 Dec 2025 11:36:04 +0000
Manifest next update:     Sat 06 Dec 2025 19:13:04 +0000
Files and hashes:         1: B0D5A05340C55C7E2CDC83ADCE4774AF0CC184C1.crl (hash: owvzMz7QwZfH83yU92RJsUYxqt8TBUcUK35QdTBNWdw=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/81cf5657-ecdc-4d97-a59c-b676ce53c8a1/0/B0D5A05340C55C7E2CDC83ADCE4774AF0CC184C1.crl
                          rsync://repo-rpki.idnic.net/repo/81cf5657-ecdc-4d97-a59c-b676ce53c8a1/0/B0D5A05340C55C7E2CDC83ADCE4774AF0CC184C1.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B0D5A05340C55C7E2CDC83ADCE4774AF0CC184C1.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 06 Dec 2025 12:07:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:70:3a:02:be:ea:c4:cb:c5:bf:6a:83:7f:d6:fa:bb:07:b3:26:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B0D5A05340C55C7E2CDC83ADCE4774AF0CC184C1
        Validity
            Not Before: Dec  3 11:36:04 2025 GMT
            Not After : Dec  6 19:13:04 2025 GMT
        Subject: CN=BB38783B746B7FB4C1F8029180228C4C10101517
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:aa:ab:75:e9:b8:b2:1e:4e:7c:bf:85:47:84:
                    4d:ef:5b:5a:47:ce:d2:db:dd:4c:18:23:51:83:b3:
                    e8:43:76:74:35:be:97:35:8f:af:3b:11:42:24:87:
                    52:f0:c5:dc:49:c3:6e:c5:2b:a2:26:3e:2f:36:b3:
                    59:a0:da:58:65:4a:61:5a:6e:fc:f0:1a:bd:1c:7f:
                    26:a7:21:70:4f:87:e2:7c:27:28:7c:64:e4:ef:5b:
                    cf:54:b8:14:7d:cc:06:03:e0:11:cc:ee:95:1a:d9:
                    e1:96:b9:a6:81:80:79:cf:40:fb:9f:d2:60:8e:a7:
                    94:31:06:72:e2:d9:c8:2b:a5:1f:89:f3:8c:e2:2b:
                    8d:e0:66:0d:bc:c5:20:e2:8c:d4:28:fa:1f:a7:91:
                    71:fa:67:0d:30:f4:f9:88:b6:dc:5a:f4:24:30:8a:
                    97:0f:25:12:f1:f0:d1:1b:24:97:45:73:a7:fb:77:
                    63:82:00:e0:73:bf:02:8b:f3:8d:f7:c5:a6:a6:04:
                    33:8b:b4:5a:4a:10:56:1e:e7:b1:5a:38:a7:bc:bb:
                    4c:87:24:15:de:3b:bc:3e:28:81:eb:63:cd:6a:7d:
                    7d:5e:b5:2a:52:78:6f:b8:d9:08:0d:99:b6:b5:6a:
                    cb:f7:8e:06:c4:67:3a:68:eb:7c:5a:5e:6d:75:ef:
                    63:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:38:78:3B:74:6B:7F:B4:C1:F8:02:91:80:22:8C:4C:10:10:15:17
            X509v3 Authority Key Identifier:
                keyid:B0:D5:A0:53:40:C5:5C:7E:2C:DC:83:AD:CE:47:74:AF:0C:C1:84:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/81cf5657-ecdc-4d97-a59c-b676ce53c8a1/0/B0D5A05340C55C7E2CDC83ADCE4774AF0CC184C1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B0D5A05340C55C7E2CDC83ADCE4774AF0CC184C1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/81cf5657-ecdc-4d97-a59c-b676ce53c8a1/0/B0D5A05340C55C7E2CDC83ADCE4774AF0CC184C1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:0d:d8:96:78:30:12:64:7d:06:20:28:b0:f0:02:4d:f7:b2:
         d8:f5:d2:90:97:a9:29:5b:ab:a3:46:4c:aa:3e:c8:f9:7a:b9:
         85:7b:80:4a:1c:b4:20:13:bc:f3:90:d7:ea:3b:5c:18:3f:79:
         36:58:a0:36:86:24:11:c5:f9:87:86:1d:4d:9e:ea:d5:fe:9b:
         31:df:ed:f2:b7:d6:97:73:cf:9e:b3:3d:f3:30:d5:74:ab:45:
         a4:ac:ba:1e:9b:30:6a:fe:ee:5c:cf:64:84:01:cc:9e:c6:50:
         4b:05:50:4b:d7:37:99:d5:6e:f2:0c:23:08:12:1f:7c:b6:59:
         e8:cc:7b:ca:ce:fc:86:30:a3:8d:eb:90:54:69:5a:20:5c:65:
         a3:e9:08:24:45:8b:4f:cc:11:1d:6a:fc:a5:61:d7:92:53:04:
         c9:85:fe:5d:b8:1d:24:cd:46:51:c3:7b:c5:02:4f:be:d3:84:
         d5:8d:30:16:1c:03:af:a1:3d:09:79:79:2b:86:18:ab:82:8e:
         c1:69:07:bb:05:e5:ea:27:1d:4a:0b:7b:7b:ad:84:6c:1d:3b:
         3c:e6:2f:f9:aa:e4:3f:fe:c2:0a:59:17:73:fd:2b:ca:5e:58:
         11:9e:7e:e0:2e:7e:65:5a:05:0b:60:ef:4e:7e:f3:c0:03:4c:
         13:06:71:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 13:55:24 2025 by rpki-client