This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/aa11e6d7-57a1-4936-b7a7-de093525cb27/0/802B50E70791398C3EA43DDCECAA739EA01A638B.mft
File:                     802B50E70791398C3EA43DDCECAA739EA01A638B.mft (raw, json)
Hash identifier:          Yf1gP6rFxG6dLuPPX5kzTxTFBMS/mlsiZJxIT9h+gqA=
Subject key identifier:   75:AE:D6:BA:D2:86:44:05:F4:41:44:A4:FB:B5:D5:61:4D:A7:24:24
Authority key identifier: 80:2B:50:E7:07:91:39:8C:3E:A4:3D:DC:EC:AA:73:9E:A0:1A:63:8B
Certificate issuer:       /CN=802B50E70791398C3EA43DDCECAA739EA01A638B
Certificate serial:       5A8E8B51D2F2192A7A9F6C28C5AE414F43BD7FC1
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/802B50E70791398C3EA43DDCECAA739EA01A638B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/aa11e6d7-57a1-4936-b7a7-de093525cb27/0/802B50E70791398C3EA43DDCECAA739EA01A638B.mft
Manifest number:          4C
Signing time:             Wed 17 Dec 2025 13:41:48 +0000
Manifest this update:     Wed 17 Dec 2025 13:36:48 +0000
Manifest next update:     Sat 20 Dec 2025 20:27:48 +0000
Files and hashes:         1: 802B50E70791398C3EA43DDCECAA739EA01A638B.crl (hash: hFYBppXLmjAq4s+AkYHsIyV0FcHIJOoce+yAywXj8Mw=)
                          2: 3130332e3235352e3130392e302f32342d3234203d3e20313530313931.roa (hash: 7lyU4ARZl0iZzxpjuPYTjPexrJrOA5CaL9sS8oYLAAQ=)
                          3: 3130332e3235352e3130382e302f32342d3234203d3e20313437313530.roa (hash: +fO5TDM3co6TWyHEak4qQLIrEN8/2YmZcoMcyUXp4Tk=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/aa11e6d7-57a1-4936-b7a7-de093525cb27/0/802B50E70791398C3EA43DDCECAA739EA01A638B.crl
                          rsync://repo-rpki.idnic.net/repo/aa11e6d7-57a1-4936-b7a7-de093525cb27/0/802B50E70791398C3EA43DDCECAA739EA01A638B.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/802B50E70791398C3EA43DDCECAA739EA01A638B.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Dec 2025 20:27:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:8e:8b:51:d2:f2:19:2a:7a:9f:6c:28:c5:ae:41:4f:43:bd:7f:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=802B50E70791398C3EA43DDCECAA739EA01A638B
        Validity
            Not Before: Dec 17 13:36:48 2025 GMT
            Not After : Dec 20 20:27:48 2025 GMT
        Subject: CN=75AED6BAD2864405F44144A4FBB5D5614DA72424
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:ec:6b:2b:a5:f5:0b:90:4b:9c:7f:9e:39:53:
                    ca:2f:01:34:f8:7e:16:53:17:bb:b9:1d:24:f2:98:
                    2e:bf:1d:2c:b5:b2:c0:82:89:89:b8:6d:05:f2:9a:
                    9a:55:3a:ca:dc:3e:72:3d:a5:b4:17:4e:0e:14:b2:
                    45:28:f7:52:6d:d8:9d:ab:ed:b5:d9:58:db:a3:cd:
                    dd:c6:b7:ab:66:08:0f:c5:b5:ff:c8:68:e5:15:38:
                    3b:2e:7d:5f:db:9f:2a:ff:46:06:d5:79:71:ac:e9:
                    94:93:c8:72:cb:3e:e5:0b:22:f1:2f:c9:1c:30:1c:
                    67:03:68:ce:5a:55:c3:4f:83:e6:a2:42:56:37:50:
                    96:7d:8d:a8:af:33:8b:e6:c7:b2:70:b7:d7:bc:7b:
                    bd:6e:05:1a:16:df:45:4e:25:67:d4:9a:ca:27:7b:
                    2c:60:8f:cc:5c:96:2d:eb:83:7a:b1:28:49:f2:c0:
                    27:9d:a3:28:68:6c:6d:49:e0:c9:50:1f:b6:2e:55:
                    d3:bb:a4:c6:3f:bc:91:54:c4:d6:b5:8b:6f:2e:d2:
                    bf:2f:97:2f:a8:39:e0:1e:d2:d1:35:c8:d3:a7:4b:
                    f9:d9:ff:45:e5:60:31:36:f3:ae:44:ea:1b:b3:c0:
                    f2:c9:91:aa:b4:41:e0:50:dd:bd:dc:b0:be:b6:fa:
                    20:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:AE:D6:BA:D2:86:44:05:F4:41:44:A4:FB:B5:D5:61:4D:A7:24:24
            X509v3 Authority Key Identifier:
                keyid:80:2B:50:E7:07:91:39:8C:3E:A4:3D:DC:EC:AA:73:9E:A0:1A:63:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/aa11e6d7-57a1-4936-b7a7-de093525cb27/0/802B50E70791398C3EA43DDCECAA739EA01A638B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/802B50E70791398C3EA43DDCECAA739EA01A638B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/aa11e6d7-57a1-4936-b7a7-de093525cb27/0/802B50E70791398C3EA43DDCECAA739EA01A638B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:0b:a8:e4:0c:32:bf:bb:09:50:01:22:73:da:80:14:51:c2:
         af:7a:8d:2b:92:ec:e2:69:d5:31:7a:41:cc:cc:d7:f9:6a:26:
         9a:c6:7e:0a:0c:f7:f7:3e:26:72:fd:72:70:89:c3:73:1d:95:
         0f:a5:0f:94:de:60:2b:c3:9c:b8:71:0e:ff:95:f0:60:7f:a6:
         ba:5c:a3:85:d3:d7:49:eb:c8:06:cb:40:6d:78:8e:8b:cc:23:
         b8:c4:2e:cb:c5:ff:c8:3b:4c:67:0f:7e:c4:db:17:a2:d9:88:
         6f:27:f1:47:20:9f:80:9a:f9:09:f7:5d:da:40:11:99:2c:dd:
         c3:74:9b:9d:44:e6:45:b9:31:c9:28:ac:f6:14:01:0d:12:22:
         1a:81:37:2b:e7:8d:a1:46:d0:28:a9:e0:4d:2c:f5:32:2b:18:
         f9:f7:35:40:8f:86:f4:86:fa:db:82:19:5e:01:0e:ea:89:5f:
         d9:17:fe:e5:11:e5:2d:5a:ad:40:bc:32:4e:89:03:05:27:7a:
         b8:f3:19:30:86:97:5f:1d:42:19:f2:72:41:2c:59:ec:a0:0a:
         cf:17:1b:3a:13:47:6c:01:eb:16:79:d5:19:6e:dc:8d:46:00:
         66:9a:1e:6a:3f:e2:10:bc:69:3b:a3:13:07:2c:a1:7e:6d:76:
         d9:48:15:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 09:46:18 2025 by rpki-client