This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/fc2ab062-8703-4da6-ad72-80d25ae8bf5f/0/C82A80ADCBD836F4D8D5E4E98088C3ECBCAF18D7.mft
File:                     C82A80ADCBD836F4D8D5E4E98088C3ECBCAF18D7.mft (raw, json)
Hash identifier:          8CIb5OyvkHJ1f29mOt3g5SKpolsKNCuyJimJEUvFAig=
Subject key identifier:   1E:52:1A:8D:51:EA:BA:72:5D:53:77:4D:A9:17:55:C2:C2:64:EF:9A
Authority key identifier: C8:2A:80:AD:CB:D8:36:F4:D8:D5:E4:E9:80:88:C3:EC:BC:AF:18:D7
Certificate issuer:       /CN=C82A80ADCBD836F4D8D5E4E98088C3ECBCAF18D7
Certificate serial:       65DB7B886889F80482EA6FE4021AEF95AD1B5274
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C82A80ADCBD836F4D8D5E4E98088C3ECBCAF18D7.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/fc2ab062-8703-4da6-ad72-80d25ae8bf5f/0/C82A80ADCBD836F4D8D5E4E98088C3ECBCAF18D7.mft
Manifest number:          052F
Signing time:             Sat 13 Dec 2025 02:01:41 +0000
Manifest this update:     Sat 13 Dec 2025 01:56:41 +0000
Manifest next update:     Tue 16 Dec 2025 07:35:41 +0000
Files and hashes:         1: 3130332e3135312e3232362e302f32342d3234203d3e20313430343239.roa (hash: 95rrpHgHcYlBddvbgX3RJAAMir/2oNARNGF298XXujg=)
                          2: 323430363a323163303a3a2f33322d3332203d3e20313430343239.roa (hash: zzI9rCP/tfewJ6DIUZ/QCdxSlaG3S+TwyllnR3goWuU=)
                          3: 3130332e3135312e3232372e302f32342d3234203d3e20313430343239.roa (hash: 2U9Zf0sqVfy0Kk4IRyy+SOT0VXzAWAUry3fc1mN2+RE=)
                          4: C82A80ADCBD836F4D8D5E4E98088C3ECBCAF18D7.crl (hash: NM08g2LfzyLMxPUkoLOGs0VXqNl0ytWj1QuG4q81Cq8=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/fc2ab062-8703-4da6-ad72-80d25ae8bf5f/0/C82A80ADCBD836F4D8D5E4E98088C3ECBCAF18D7.crl
                          rsync://repo-rpki.idnic.net/repo/fc2ab062-8703-4da6-ad72-80d25ae8bf5f/0/C82A80ADCBD836F4D8D5E4E98088C3ECBCAF18D7.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C82A80ADCBD836F4D8D5E4E98088C3ECBCAF18D7.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 16 Dec 2025 07:35:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:db:7b:88:68:89:f8:04:82:ea:6f:e4:02:1a:ef:95:ad:1b:52:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C82A80ADCBD836F4D8D5E4E98088C3ECBCAF18D7
        Validity
            Not Before: Dec 13 01:56:41 2025 GMT
            Not After : Dec 16 07:35:41 2025 GMT
        Subject: CN=1E521A8D51EABA725D53774DA91755C2C264EF9A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:f8:47:5f:c7:bc:27:93:8a:f8:2c:f5:c0:a5:
                    a7:dc:28:9c:53:34:1e:5c:89:25:62:09:67:46:e0:
                    55:49:84:a3:8f:55:17:e0:01:72:cd:f4:95:48:bc:
                    44:1e:a0:88:f4:23:26:9f:c6:d7:9e:94:57:50:38:
                    5e:bd:c8:f8:0b:58:2b:e1:50:fb:09:4b:fa:37:bd:
                    aa:92:d7:b3:67:aa:2f:24:32:b3:9d:5a:2e:53:6b:
                    27:6c:91:a9:23:75:cc:f5:fc:91:9c:03:98:39:f4:
                    e0:3a:0f:be:01:36:15:a5:0a:db:38:db:ef:26:66:
                    dc:bc:53:d8:4b:ea:d8:e5:87:87:77:5b:48:c5:df:
                    fb:e5:5b:53:2b:a4:8e:91:1c:54:a0:4b:7b:37:91:
                    29:26:ba:8b:7c:bf:59:89:d2:01:34:64:0b:90:7e:
                    dc:7b:c9:8a:1c:25:9f:e8:bc:4d:c5:ec:a6:4f:25:
                    e8:d0:fe:0a:68:89:af:c2:08:fe:74:ed:cb:c0:87:
                    89:9c:49:c5:6b:df:46:e1:e6:a2:3f:33:db:c9:f3:
                    43:a0:1b:1e:a7:c9:a8:12:36:61:3e:2f:59:a4:4c:
                    d4:9d:8c:b1:22:f8:64:4b:a1:24:ca:72:14:4f:8f:
                    ac:d6:90:2d:78:5b:6c:3c:00:e6:b0:9e:15:f6:f5:
                    a6:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:52:1A:8D:51:EA:BA:72:5D:53:77:4D:A9:17:55:C2:C2:64:EF:9A
            X509v3 Authority Key Identifier:
                keyid:C8:2A:80:AD:CB:D8:36:F4:D8:D5:E4:E9:80:88:C3:EC:BC:AF:18:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/fc2ab062-8703-4da6-ad72-80d25ae8bf5f/0/C82A80ADCBD836F4D8D5E4E98088C3ECBCAF18D7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C82A80ADCBD836F4D8D5E4E98088C3ECBCAF18D7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fc2ab062-8703-4da6-ad72-80d25ae8bf5f/0/C82A80ADCBD836F4D8D5E4E98088C3ECBCAF18D7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:27:d6:eb:43:18:c4:85:af:e1:d6:15:e0:6a:1b:be:06:5b:
         d3:65:ad:fe:f3:1d:d1:22:c4:06:21:ae:88:e4:cd:6a:43:ff:
         ca:c1:90:43:13:8d:4f:6f:05:12:99:63:1c:d5:00:4d:27:88:
         08:31:41:2a:e5:aa:9e:6e:5e:6b:be:01:3d:ec:7f:1a:fa:67:
         da:db:0e:95:45:0e:73:6f:77:62:2d:d2:d4:32:bc:04:28:78:
         c1:a0:a1:74:67:03:9f:22:b2:28:62:08:6b:ce:78:8a:ad:dd:
         d2:c9:98:a6:99:9f:0d:b1:bc:ab:37:bb:ee:52:d8:c0:5d:f1:
         68:04:42:0d:0e:ec:6f:49:c6:6e:15:a1:e3:0d:61:b9:75:22:
         42:e6:1f:01:a5:53:90:b3:80:c7:fe:a0:28:6b:32:5b:f4:6f:
         eb:27:3b:b7:5d:33:d1:51:7a:d7:60:b9:71:21:a8:43:b0:09:
         da:11:ea:b4:2a:3f:f6:11:8e:ec:a4:a9:58:f9:a1:ef:56:6c:
         c9:bb:d6:c4:47:f7:1b:d8:78:dd:1c:9a:a8:60:1f:d2:1a:1a:
         ff:ed:31:6d:3e:2e:56:b4:f8:fc:a0:2c:7a:eb:f0:2b:65:f4:
         69:b1:e9:8f:9d:7d:f4:bc:e7:63:e5:36:cb:54:56:13:25:32:
         d7:52:e7:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 15 04:58:05 2025 by rpki-client