This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/09a88897-c387-4735-acd8-1d1c53cde264/0/8B7E0099F26BEEE90826C9B0E424575BDE128403.mft
File:                     8B7E0099F26BEEE90826C9B0E424575BDE128403.mft (raw, json)
Hash identifier:          UgPG5cG/pO6w2+GhdTG+NE0+wP/XSpD49wtl46J/UbI=
Subject key identifier:   2B:65:FB:13:C1:BA:E3:11:79:59:A3:98:2C:05:78:2F:0A:54:10:FB
Authority key identifier: 8B:7E:00:99:F2:6B:EE:E9:08:26:C9:B0:E4:24:57:5B:DE:12:84:03
Certificate issuer:       /CN=8B7E0099F26BEEE90826C9B0E424575BDE128403
Certificate serial:       2657CADA8CE9FFD88A8872246DFE45D1E4B27927
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8B7E0099F26BEEE90826C9B0E424575BDE128403.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/09a88897-c387-4735-acd8-1d1c53cde264/0/8B7E0099F26BEEE90826C9B0E424575BDE128403.mft
Manifest number:          02BB
Signing time:             Thu 18 Dec 2025 01:22:11 +0000
Manifest this update:     Thu 18 Dec 2025 01:17:11 +0000
Manifest next update:     Sun 21 Dec 2025 05:38:11 +0000
Files and hashes:         1: 3130332e3137392e38362e302f32332d3234203d3e20313430333839.roa (hash: E6T8Gt5EtL567pGgeSiX6DPJMeUcOvm0iW+qF8Vx1Vo=)
                          2: 8B7E0099F26BEEE90826C9B0E424575BDE128403.crl (hash: YdbWzqWrn+0p8p2eaAqWEVf+ZY2XsbzsmdkggbsMHHM=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/09a88897-c387-4735-acd8-1d1c53cde264/0/8B7E0099F26BEEE90826C9B0E424575BDE128403.crl
                          rsync://repo-rpki.idnic.net/repo/09a88897-c387-4735-acd8-1d1c53cde264/0/8B7E0099F26BEEE90826C9B0E424575BDE128403.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8B7E0099F26BEEE90826C9B0E424575BDE128403.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 21 Dec 2025 05:38:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:57:ca:da:8c:e9:ff:d8:8a:88:72:24:6d:fe:45:d1:e4:b2:79:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8B7E0099F26BEEE90826C9B0E424575BDE128403
        Validity
            Not Before: Dec 18 01:17:11 2025 GMT
            Not After : Dec 21 05:38:11 2025 GMT
        Subject: CN=2B65FB13C1BAE3117959A3982C05782F0A5410FB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:cc:b5:de:6d:d2:5e:a6:dd:91:83:19:39:33:
                    6c:20:52:14:2b:e7:0c:e9:db:16:58:ae:0a:4c:87:
                    1d:b3:68:c9:30:3c:f2:02:be:76:82:24:68:9c:6b:
                    56:74:45:84:30:e5:1f:27:bd:79:ba:94:1d:34:31:
                    2f:30:03:00:3f:dd:01:aa:3c:28:0e:a7:08:dd:1c:
                    ae:30:b8:8e:b5:ed:dd:27:ad:4d:62:da:b5:3a:26:
                    e9:2b:40:93:9d:92:30:47:7f:5e:d5:1b:c1:75:ba:
                    d2:fb:ae:b4:56:f8:8f:50:81:7a:08:bd:1b:7c:c7:
                    cb:24:1c:4e:31:ce:dc:58:14:d3:ac:3d:18:29:35:
                    6c:01:22:53:1f:c7:c8:d2:ea:45:60:cc:07:1f:5d:
                    36:4b:10:bf:db:39:08:19:b7:4f:78:06:27:0f:b3:
                    0d:cc:41:d6:1e:1f:af:b2:8c:8e:2b:97:5f:0f:d4:
                    df:94:d1:e2:4e:c0:50:e8:c0:a2:d3:a4:fc:7d:d2:
                    4e:07:ef:e2:27:b4:e1:bf:fb:72:1d:c6:3f:4c:cb:
                    1a:73:b8:ad:bb:b8:29:b4:80:a9:55:7b:4e:40:5c:
                    97:82:f2:f9:29:2c:00:4c:6f:01:f0:8b:99:d1:35:
                    1f:e4:70:51:c0:4b:f1:18:59:be:ca:b7:08:bf:5c:
                    af:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:65:FB:13:C1:BA:E3:11:79:59:A3:98:2C:05:78:2F:0A:54:10:FB
            X509v3 Authority Key Identifier:
                keyid:8B:7E:00:99:F2:6B:EE:E9:08:26:C9:B0:E4:24:57:5B:DE:12:84:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/09a88897-c387-4735-acd8-1d1c53cde264/0/8B7E0099F26BEEE90826C9B0E424575BDE128403.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8B7E0099F26BEEE90826C9B0E424575BDE128403.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/09a88897-c387-4735-acd8-1d1c53cde264/0/8B7E0099F26BEEE90826C9B0E424575BDE128403.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:30:4a:38:0d:5e:74:0d:a4:c9:5a:74:5b:67:5d:fc:16:ca:
         49:af:11:7b:6f:e2:87:39:ee:4f:2f:c4:ea:ce:e8:b0:ff:7f:
         0b:2f:6e:76:87:3a:93:bd:64:97:0d:af:fa:29:6c:94:69:e3:
         86:4c:2a:11:2c:17:56:04:15:e2:77:87:c2:27:6f:b3:a4:46:
         ff:e2:37:2d:f5:09:45:bb:0d:e8:1e:f9:c4:21:cb:06:c3:b2:
         01:73:af:c9:92:c4:05:27:7b:20:c1:2a:50:16:89:f5:f8:4f:
         19:90:d9:a8:53:7f:2a:35:85:d3:1f:e3:ae:2e:3d:8a:ba:4c:
         d0:ed:9c:a3:e9:46:37:d7:4a:d0:a1:24:b3:3f:13:6a:5c:ef:
         f1:98:0f:04:22:05:37:a0:3a:dc:40:3e:80:95:d1:8c:c4:93:
         30:16:59:8f:39:67:ae:6c:a7:25:b2:96:54:0f:f3:af:46:14:
         64:ed:6e:5e:a0:c3:61:49:53:91:86:50:91:f2:74:5a:c9:1e:
         1c:a1:c5:f9:66:18:0c:3d:4d:d0:0b:4c:39:5b:cb:bd:72:aa:
         8c:98:19:24:7e:03:41:24:c7:01:77:42:65:95:0a:e7:23:8b:
         7b:78:05:fc:7d:7d:e1:e8:6f:b7:f0:4a:39:1b:37:32:07:3a:
         8b:e6:04:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 09:59:03 2025 by rpki-client