This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/c8f6beb8-e4e8-4e39-8275-1c6d77c3eef8/0/A79FD307C37E8C559F65A58EC9CE95BE266F8A6D.mft
File:                     A79FD307C37E8C559F65A58EC9CE95BE266F8A6D.mft (raw, json)
Hash identifier:          59/LSG4kgki85gmJR9a7mmRcyEkydrD8ktmkE/J1OIk=
Subject key identifier:   B4:A4:D1:E8:0A:19:70:32:E4:84:F8:41:AA:CF:3B:59:21:D9:64:C9
Authority key identifier: A7:9F:D3:07:C3:7E:8C:55:9F:65:A5:8E:C9:CE:95:BE:26:6F:8A:6D
Certificate issuer:       /CN=A79FD307C37E8C559F65A58EC9CE95BE266F8A6D
Certificate serial:       0BEA137FA9335EC571691B2DC399873FEB905B02
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A79FD307C37E8C559F65A58EC9CE95BE266F8A6D.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/c8f6beb8-e4e8-4e39-8275-1c6d77c3eef8/0/A79FD307C37E8C559F65A58EC9CE95BE266F8A6D.mft
Manifest number:          052B
Signing time:             Tue 02 Dec 2025 09:41:36 +0000
Manifest this update:     Tue 02 Dec 2025 09:36:36 +0000
Manifest next update:     Fri 05 Dec 2025 16:27:36 +0000
Files and hashes:         1: 3230322e3133382e3232342e302f31392d3234203d3e2039363537.roa (hash: Go0CPlPcssjZzIiCTnTf40YOYb6lhMvP1qODXAMUZSM=)
                          2: 323430333a393530303a3a2f33322d3336203d3e2039363537.roa (hash: m9TQ4kbiWJ7wAU6DJc4l1m4yIYMItzDNgLT+tillKjs=)
                          3: A79FD307C37E8C559F65A58EC9CE95BE266F8A6D.crl (hash: SiOJBZY8yD/kQNYEsdyW+70HBmpOFOsFRQevJHrPxkw=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/c8f6beb8-e4e8-4e39-8275-1c6d77c3eef8/0/A79FD307C37E8C559F65A58EC9CE95BE266F8A6D.crl
                          rsync://repo-rpki.idnic.net/repo/c8f6beb8-e4e8-4e39-8275-1c6d77c3eef8/0/A79FD307C37E8C559F65A58EC9CE95BE266F8A6D.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A79FD307C37E8C559F65A58EC9CE95BE266F8A6D.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 05 Dec 2025 16:27:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:ea:13:7f:a9:33:5e:c5:71:69:1b:2d:c3:99:87:3f:eb:90:5b:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A79FD307C37E8C559F65A58EC9CE95BE266F8A6D
        Validity
            Not Before: Dec  2 09:36:36 2025 GMT
            Not After : Dec  5 16:27:36 2025 GMT
        Subject: CN=B4A4D1E80A197032E484F841AACF3B5921D964C9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:d8:94:fb:5f:24:c7:37:72:2c:bf:19:03:ff:
                    b7:e0:d4:87:e8:42:eb:a9:59:b7:4f:40:31:42:59:
                    df:64:dc:46:09:58:8b:5d:0c:05:d1:e7:e2:30:7e:
                    38:88:9e:46:15:dd:79:9b:d3:54:fa:c5:8c:f5:26:
                    7d:a3:4c:11:b2:df:76:1c:27:af:f9:c5:d4:81:fe:
                    36:ce:92:2e:08:90:06:40:3f:95:d1:50:78:a9:71:
                    a1:15:8b:70:f1:4c:ad:ae:42:1e:1b:3c:ab:01:d6:
                    23:49:04:3c:48:d7:ac:e5:b4:b7:5a:01:33:90:d5:
                    08:46:7a:19:19:b7:f6:c9:0e:ff:26:f5:3b:6c:3c:
                    5f:b6:4d:c4:8d:20:c3:14:db:06:1b:68:c5:6d:c8:
                    91:0c:4e:c6:91:38:89:60:c9:99:8f:cf:a3:c3:58:
                    10:e7:72:6e:04:76:66:1a:34:01:9e:70:36:08:58:
                    46:41:b5:83:fc:13:02:8c:e8:a6:9e:4b:5b:be:74:
                    a0:3b:af:5c:a0:d0:72:02:84:8e:46:4b:f6:7b:d0:
                    dc:84:4e:9c:69:37:b9:9b:6f:53:f0:05:a6:b8:94:
                    fa:e2:2f:58:c9:32:4b:fd:f6:ce:4e:18:a1:81:88:
                    36:f3:2c:22:12:a0:92:a3:23:d4:c5:53:e7:13:50:
                    62:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:A4:D1:E8:0A:19:70:32:E4:84:F8:41:AA:CF:3B:59:21:D9:64:C9
            X509v3 Authority Key Identifier:
                keyid:A7:9F:D3:07:C3:7E:8C:55:9F:65:A5:8E:C9:CE:95:BE:26:6F:8A:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/c8f6beb8-e4e8-4e39-8275-1c6d77c3eef8/0/A79FD307C37E8C559F65A58EC9CE95BE266F8A6D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A79FD307C37E8C559F65A58EC9CE95BE266F8A6D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c8f6beb8-e4e8-4e39-8275-1c6d77c3eef8/0/A79FD307C37E8C559F65A58EC9CE95BE266F8A6D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:2d:48:7e:78:90:3a:64:93:07:0e:c8:bb:66:04:f1:7f:0e:
         1e:07:3e:dd:eb:44:3b:47:7e:22:98:dc:15:e7:59:d1:f6:16:
         56:96:ef:eb:84:40:85:fa:c5:aa:11:d8:de:61:e4:53:8c:f7:
         67:5c:e2:d7:db:8c:87:f2:26:02:7f:1b:a5:37:84:02:3f:55:
         0f:15:46:0c:7a:d1:a0:f5:22:75:93:cc:19:5e:d7:e4:14:82:
         a8:17:1e:e4:0b:0d:ea:af:d0:88:5f:c7:5c:0d:9a:5f:b9:ad:
         e7:74:38:0f:77:74:97:ea:66:49:2b:52:40:ec:3c:64:cf:f5:
         e4:00:c5:ac:ea:2e:08:bd:ed:63:38:b2:a4:99:b7:e5:29:eb:
         3c:f1:fb:75:44:2c:76:ee:36:27:5a:e8:cb:64:fd:f6:bd:7e:
         ad:b3:68:9d:4f:36:ce:28:f6:a1:02:8c:56:81:44:12:c3:df:
         b6:96:57:f2:60:28:7c:08:90:ee:4a:58:96:6f:65:69:2a:fe:
         6e:99:1f:36:b6:38:08:b3:8b:73:df:e9:fe:73:6c:cc:eb:a2:
         60:88:1e:6a:2d:15:a3:ea:30:e2:68:d8:4c:bd:17:74:6d:15:
         fa:39:db:9f:f5:ed:37:d0:d5:d5:9f:a1:9b:94:c8:a1:dc:0a:
         c6:38:28:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 14:41:46 2025 by rpki-client