This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/b8b441ad-f1aa-48d3-9edb-b9a5d5ce9ba8/0/F2441731A38F6F03ED8BFDB14F3CF89CED26A880.mft
File:                     F2441731A38F6F03ED8BFDB14F3CF89CED26A880.mft (raw, json)
Hash identifier:          DtON7Yj5QmP7Z0o1v3Xyh2Ha2rwxurokUKP+z1uNtLs=
Subject key identifier:   D1:47:2E:46:85:E5:75:27:5F:B6:77:A1:8B:B5:E3:04:15:3F:CB:6D
Authority key identifier: F2:44:17:31:A3:8F:6F:03:ED:8B:FD:B1:4F:3C:F8:9C:ED:26:A8:80
Certificate issuer:       /CN=F2441731A38F6F03ED8BFDB14F3CF89CED26A880
Certificate serial:       7C5B4D7107ABAB395FB97A82F235D2125CA32692
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F2441731A38F6F03ED8BFDB14F3CF89CED26A880.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/b8b441ad-f1aa-48d3-9edb-b9a5d5ce9ba8/0/F2441731A38F6F03ED8BFDB14F3CF89CED26A880.mft
Manifest number:          052B
Signing time:             Wed 03 Dec 2025 02:41:26 +0000
Manifest this update:     Wed 03 Dec 2025 02:36:26 +0000
Manifest next update:     Sat 06 Dec 2025 09:05:26 +0000
Files and hashes:         1: F2441731A38F6F03ED8BFDB14F3CF89CED26A880.crl (hash: V4jItJLTvpGVI6YcRbiAc1His7SeaJUhM6Jv/rXxjrI=)
                          2: 3230322e39342e38332e302f32342d3234203d3e203535363732.roa (hash: XIFruI1ighCiBN1KxhqbA4Dl9kZx4Bi5WaQ0ju1y2JQ=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/b8b441ad-f1aa-48d3-9edb-b9a5d5ce9ba8/0/F2441731A38F6F03ED8BFDB14F3CF89CED26A880.crl
                          rsync://repo-rpki.idnic.net/repo/b8b441ad-f1aa-48d3-9edb-b9a5d5ce9ba8/0/F2441731A38F6F03ED8BFDB14F3CF89CED26A880.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F2441731A38F6F03ED8BFDB14F3CF89CED26A880.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 06 Dec 2025 09:05:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:5b:4d:71:07:ab:ab:39:5f:b9:7a:82:f2:35:d2:12:5c:a3:26:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F2441731A38F6F03ED8BFDB14F3CF89CED26A880
        Validity
            Not Before: Dec  3 02:36:26 2025 GMT
            Not After : Dec  6 09:05:26 2025 GMT
        Subject: CN=D1472E4685E575275FB677A18BB5E304153FCB6D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:ff:60:74:13:7d:92:6d:04:2d:66:6a:d5:d0:
                    cc:4d:0e:e1:1a:f8:35:7a:38:70:22:ca:30:1e:8d:
                    a6:c9:1e:e1:b2:12:cf:d2:5d:e3:12:d4:fb:9a:c5:
                    11:1d:55:af:35:4c:83:e2:e1:41:31:ad:58:66:d9:
                    8d:81:55:c0:c9:0c:63:c6:ff:79:df:37:83:02:21:
                    aa:83:26:31:a4:20:26:dc:f1:87:e3:59:76:36:1c:
                    8b:77:98:e0:06:b2:3b:43:ce:14:e5:3d:d8:5b:09:
                    3e:74:78:15:bd:00:a6:98:bd:46:4d:64:30:5d:34:
                    05:91:d8:e0:13:2c:21:9d:2a:82:44:7b:09:37:f0:
                    67:18:8b:23:7a:ea:32:ad:26:3e:c2:9d:b0:ce:1a:
                    ff:d9:05:37:b1:aa:9e:78:a0:90:68:44:9c:82:36:
                    ea:70:58:44:0c:34:c2:84:e3:8c:db:ff:26:79:40:
                    fd:68:ce:73:23:e4:37:c2:c0:84:b7:53:a8:9b:76:
                    89:ff:8f:25:da:74:27:a5:b7:9e:a1:6a:43:b2:ec:
                    fb:38:8b:06:ea:45:8a:5d:4d:6f:be:58:6c:37:b4:
                    65:0d:82:0b:fc:b1:95:4d:d7:9a:ac:97:dd:10:61:
                    f6:c1:9e:2b:93:44:f2:e7:68:06:03:19:78:d5:aa:
                    3a:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:47:2E:46:85:E5:75:27:5F:B6:77:A1:8B:B5:E3:04:15:3F:CB:6D
            X509v3 Authority Key Identifier:
                keyid:F2:44:17:31:A3:8F:6F:03:ED:8B:FD:B1:4F:3C:F8:9C:ED:26:A8:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/b8b441ad-f1aa-48d3-9edb-b9a5d5ce9ba8/0/F2441731A38F6F03ED8BFDB14F3CF89CED26A880.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F2441731A38F6F03ED8BFDB14F3CF89CED26A880.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b8b441ad-f1aa-48d3-9edb-b9a5d5ce9ba8/0/F2441731A38F6F03ED8BFDB14F3CF89CED26A880.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:7f:cb:5b:23:cd:d2:ce:09:8c:a1:2b:67:11:7b:c0:41:00:
         ee:26:07:20:69:41:3a:16:13:dc:b6:b5:b9:f2:11:d7:ce:05:
         61:28:4a:13:8c:72:1b:25:78:28:63:e1:93:c8:62:5b:eb:5b:
         b4:c0:75:cc:80:70:e4:7a:58:97:f2:a8:e4:c7:4b:a5:ff:b2:
         23:3b:dd:75:bc:b5:fa:68:67:31:aa:21:94:78:3d:5b:df:d2:
         81:7b:06:00:2b:27:0f:85:fc:45:01:64:dd:c8:99:06:b8:c7:
         13:ff:53:c2:1e:fd:e5:77:1a:1f:9a:53:d1:bf:2d:b5:97:5c:
         0f:96:65:79:c6:ee:d7:93:4f:80:de:d4:35:67:2a:fd:67:9b:
         d2:17:56:b2:0e:e1:e6:45:3b:1e:ec:65:22:28:76:6f:36:77:
         52:31:d6:07:1f:ee:a2:3c:a5:72:c2:5c:b9:ff:63:26:c6:76:
         fa:90:4a:a3:29:c0:82:35:9b:4a:d5:ce:1a:af:86:14:56:45:
         b4:58:cc:d6:96:1d:4d:52:cf:8c:4c:90:6f:bb:e9:c8:79:67:
         d4:86:1b:df:44:0e:58:f6:27:06:7f:68:fc:b3:82:f4:3d:8a:
         74:12:39:63:85:a6:73:f8:ed:9a:55:b6:d0:49:b3:fa:89:ed:
         ca:91:59:6c
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUfFtNcQerqzlfuXqC8jXSElyjJpIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjI0NDE3MzFBMzhGNkYwM0VEOEJGREIxNEYzQ0Y4OUNF
RDI2QTg4MDAeFw0yNTEyMDMwMjM2MjZaFw0yNTEyMDYwOTA1MjZaMDMxMTAvBgNV
BAMTKEQxNDcyRTQ2ODVFNTc1Mjc1RkI2NzdBMThCQjVFMzA0MTUzRkNCNkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDC/2B0E32SbQQtZmrV0MxNDuEa
+DV6OHAiyjAejabJHuGyEs/SXeMS1PuaxREdVa81TIPi4UExrVhm2Y2BVcDJDGPG
/3nfN4MCIaqDJjGkICbc8YfjWXY2HIt3mOAGsjtDzhTlPdhbCT50eBW9AKaYvUZN
ZDBdNAWR2OATLCGdKoJEewk38GcYiyN66jKtJj7CnbDOGv/ZBTexqp54oJBoRJyC
NupwWEQMNMKE44zb/yZ5QP1oznMj5DfCwIS3U6ibdon/jyXadCelt56hakOy7Ps4
iwbqRYpdTW++WGw3tGUNggv8sZVN15qsl90QYfbBniuTRPLnaAYDGXjVqjqvAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQU0UcuRoXldSdftnehi7XjBBU/y20wHwYDVR0j
BBgwFoAU8kQXMaOPbwPti/2xTzz4nO0mqIAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i
OGI0NDFhZC1mMWFhLTQ4ZDMtOWVkYi1iOWE1ZDVjZTliYTgvMC9GMjQ0MTczMUEz
OEY2RjAzRUQ4QkZEQjE0RjNDRjg5Q0VEMjZBODgwLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvRjI0NDE3MzFBMzhGNkYwM0VEOEJGREIxNEYzQ0Y4OUNFRDI2
QTg4MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjhiNDQxYWQtZjFhYS00OGQzLTll
ZGItYjlhNWQ1Y2U5YmE4LzAvRjI0NDE3MzFBMzhGNkYwM0VEOEJGREIxNEYzQ0Y4
OUNFRDI2QTg4MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAJR/y1sjzdLOCYyhK2cRe8BBAO4mByBpQToW
E9y2tbnyEdfOBWEoShOMchsleChj4ZPIYlvrW7TAdcyAcOR6WJfyqOTHS6X/siM7
3XW8tfpoZzGqIZR4PVvf0oF7BgArJw+F/EUBZN3ImQa4xxP/U8Ie/eV3Gh+aU9G/
LbWXXA+WZXnG7teTT4De1DVnKv1nm9IXVrIO4eZFOx7sZSIodm82d1Ix1gcf7qI8
pXLCXLn/YybGdvqQSqMpwII1m0rVzhqvhhRWRbRYzNaWHU1Sz4xMkG+76ch5Z9SG
G99EDlj2JwZ/aPyzgvQ9inQSOWOFpnP47ZpVttBJs/qJ7cqRWWw=
-----END CERTIFICATE-----
Generated at Wed Dec 3 14:44:30 2025 by rpki-client