This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/fb8858e0-ecf0-4e53-a490-3b7c2de1693c/0/19A196F5E5BABA31926C5AEEF44FC16387E65C3C.mft
File:                     19A196F5E5BABA31926C5AEEF44FC16387E65C3C.mft (raw, json)
Hash identifier:          quv1mIVYwYGy8i/fzoel2qQ++w7np/mcK0RRjG6xKZw=
Subject key identifier:   33:FB:71:36:FF:B4:45:15:2F:04:FE:AF:40:0F:2F:4A:65:23:B7:EB
Authority key identifier: 19:A1:96:F5:E5:BA:BA:31:92:6C:5A:EE:F4:4F:C1:63:87:E6:5C:3C
Certificate issuer:       /CN=19A196F5E5BABA31926C5AEEF44FC16387E65C3C
Certificate serial:       727013A87175A37E30F715352DD0D2A58C049E88
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/19A196F5E5BABA31926C5AEEF44FC16387E65C3C.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/fb8858e0-ecf0-4e53-a490-3b7c2de1693c/0/19A196F5E5BABA31926C5AEEF44FC16387E65C3C.mft
Manifest number:          052D
Signing time:             Wed 03 Dec 2025 03:41:41 +0000
Manifest this update:     Wed 03 Dec 2025 03:36:41 +0000
Manifest next update:     Sat 06 Dec 2025 10:23:41 +0000
Files and hashes:         1: 19A196F5E5BABA31926C5AEEF44FC16387E65C3C.crl (hash: 8xJbGtqQtZ/HoH0V8OMaim7/16a/GyCJMxzIKJbvPcY=)
                          2: 323430333a393130303a3a2f33322d3438203d3e203435333032.roa (hash: 4brGPOCgGPQmWwoETwSHHbE2lw9R22KEcXYm0M7Fp90=)
                          3: 3135372e3131392e3232302e302f32322d3234203d3e203435333032.roa (hash: HO0xgGTKI8hDqeJBD1vkonWKYqVkEjngRgMiBcK+FFk=)
                          4: 3131322e37382e34302e302f32312d3234203d3e203435333032.roa (hash: Be1o2enB5OVbfeTb11FQx0y/6KQQnTeDSPNmLL8NRc4=)
                          5: 3130332e33302e3138302e302f32322d3234203d3e203435333032.roa (hash: U5fnoyr/5IIStrT2HEQ+BlCOUuRxzROoZ8IEFi9/L1Q=)
                          6: 323430333a393130303a3a2f33322d3332203d3e203435333032.roa (hash: hclG6eHZVb4H2Dv3mKJVXKKatJdKMCXUFJ5B8dDmEf4=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/fb8858e0-ecf0-4e53-a490-3b7c2de1693c/0/19A196F5E5BABA31926C5AEEF44FC16387E65C3C.crl
                          rsync://repo-rpki.idnic.net/repo/fb8858e0-ecf0-4e53-a490-3b7c2de1693c/0/19A196F5E5BABA31926C5AEEF44FC16387E65C3C.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/19A196F5E5BABA31926C5AEEF44FC16387E65C3C.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 06 Dec 2025 10:23:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:70:13:a8:71:75:a3:7e:30:f7:15:35:2d:d0:d2:a5:8c:04:9e:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19A196F5E5BABA31926C5AEEF44FC16387E65C3C
        Validity
            Not Before: Dec  3 03:36:41 2025 GMT
            Not After : Dec  6 10:23:41 2025 GMT
        Subject: CN=33FB7136FFB445152F04FEAF400F2F4A6523B7EB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:3b:29:d9:b1:9c:11:35:09:6c:f8:13:88:b5:
                    8f:bb:aa:0f:50:6a:39:d3:ed:63:d7:c6:23:95:0e:
                    df:b8:04:2d:50:ee:56:f4:f1:fc:49:bf:49:71:71:
                    58:dc:9c:49:81:89:34:cf:d1:81:e0:4a:11:dc:21:
                    bd:03:ec:b8:8f:79:ec:0b:a3:af:c7:21:7c:0b:06:
                    8c:a0:5e:3e:9e:45:c3:29:e1:ae:5d:48:66:58:ef:
                    a3:f5:68:16:3b:ac:32:9f:d4:69:a4:63:d9:99:2a:
                    fb:8b:7b:a9:a0:6c:64:b5:f7:46:09:c1:29:1b:50:
                    59:55:f0:91:9c:67:a3:41:fe:5f:b5:84:94:76:e4:
                    da:1e:d6:05:df:08:db:f8:cc:dd:2a:e8:af:94:b7:
                    9d:4a:4b:01:87:df:dc:26:5e:15:1f:6d:5a:54:ad:
                    8c:38:88:37:06:3d:23:52:46:c3:50:3a:bb:83:c5:
                    03:fa:07:72:8c:97:4f:ea:a2:00:a5:d2:aa:fd:04:
                    cf:cb:b2:ce:18:75:04:20:63:d9:13:d2:a4:c3:ad:
                    bc:0b:8d:cf:1e:e1:43:96:86:0e:3a:7a:d0:7c:25:
                    d6:bb:42:56:84:74:d4:47:8a:36:f3:fa:ef:c7:b4:
                    3c:0d:60:99:cc:ce:68:df:9e:73:c0:09:ea:00:5c:
                    a7:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:FB:71:36:FF:B4:45:15:2F:04:FE:AF:40:0F:2F:4A:65:23:B7:EB
            X509v3 Authority Key Identifier:
                keyid:19:A1:96:F5:E5:BA:BA:31:92:6C:5A:EE:F4:4F:C1:63:87:E6:5C:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/fb8858e0-ecf0-4e53-a490-3b7c2de1693c/0/19A196F5E5BABA31926C5AEEF44FC16387E65C3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/19A196F5E5BABA31926C5AEEF44FC16387E65C3C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fb8858e0-ecf0-4e53-a490-3b7c2de1693c/0/19A196F5E5BABA31926C5AEEF44FC16387E65C3C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:b7:27:52:9a:7b:c8:60:e0:be:e8:a1:62:95:5d:a9:95:a8:
         2a:2a:05:e4:d8:76:55:60:d3:b2:3f:c9:60:4b:a1:bd:a6:93:
         a5:94:d6:8c:79:60:c3:88:63:2c:fd:94:60:c6:a9:43:d4:ca:
         6c:55:78:27:e6:79:91:47:02:74:a3:5a:49:bb:90:3c:07:f4:
         0a:f7:55:7a:54:92:40:07:4e:b8:ff:63:94:3a:f3:47:80:82:
         d3:d1:05:e0:9f:4a:7e:cb:e3:17:e1:7d:c6:e7:58:7a:81:c8:
         92:82:e3:80:48:bf:65:a1:11:56:f4:23:b2:38:4c:88:ae:bc:
         7f:e8:b8:2d:26:25:ed:aa:24:45:0b:14:ec:74:57:6a:ff:d5:
         0b:09:94:b0:b1:cc:43:ad:43:60:70:84:ac:ae:94:71:71:0d:
         aa:82:a3:04:89:76:b0:a9:a5:19:a1:e0:0d:49:dd:ca:54:87:
         0d:c0:6d:ee:b9:38:1c:e9:95:fc:b2:48:b3:d2:a9:55:4e:46:
         9c:b4:a7:79:4a:3a:2a:37:6e:a4:be:0e:dd:a4:13:c7:58:81:
         f2:af:79:29:62:f2:e4:73:44:e0:55:75:6a:bf:fb:09:ec:2f:
         b7:62:a8:8b:80:5d:04:5f:4a:f8:f0:1d:08:5b:99:04:4e:83:
         be:25:34:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 14:41:48 2025 by rpki-client