This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/0e31c69a-b792-40a4-a144-234b5a1dde52/0/82EABF24EF91106C28ACF9483B2EF11B2EA5319D.mft
File:                     82EABF24EF91106C28ACF9483B2EF11B2EA5319D.mft (raw, json)
Hash identifier:          VqTK3uXZ3yBRqQHB1WD4Mr1SgndlSNUWh7FIsM/hdRM=
Subject key identifier:   04:EE:87:C4:C2:C2:8D:34:12:4C:42:95:32:20:CD:35:64:97:49:E1
Authority key identifier: 82:EA:BF:24:EF:91:10:6C:28:AC:F9:48:3B:2E:F1:1B:2E:A5:31:9D
Certificate issuer:       /CN=82EABF24EF91106C28ACF9483B2EF11B2EA5319D
Certificate serial:       648653939F28348089FA7EB5212122D37856CB84
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82EABF24EF91106C28ACF9483B2EF11B2EA5319D.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/0e31c69a-b792-40a4-a144-234b5a1dde52/0/82EABF24EF91106C28ACF9483B2EF11B2EA5319D.mft
Manifest number:          B1
Signing time:             Wed 24 Dec 2025 02:40:55 +0000
Manifest this update:     Wed 24 Dec 2025 02:35:55 +0000
Manifest next update:     Sat 27 Dec 2025 06:22:55 +0000
Files and hashes:         1: 82EABF24EF91106C28ACF9483B2EF11B2EA5319D.crl (hash: YC6d0VMOfqXXXcQ8Rhd6Cc+OIR8QFvjgscqE/EnRHbk=)
                          2: 3130332e3137322e34332e302f32342d3234203d3e20313432333835.roa (hash: kJKEjz2D3G1RJer7Y7hYkLjIkHGT1MOdybvh9xHf4rg=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/0e31c69a-b792-40a4-a144-234b5a1dde52/0/82EABF24EF91106C28ACF9483B2EF11B2EA5319D.crl
                          rsync://repo-rpki.idnic.net/repo/0e31c69a-b792-40a4-a144-234b5a1dde52/0/82EABF24EF91106C28ACF9483B2EF11B2EA5319D.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82EABF24EF91106C28ACF9483B2EF11B2EA5319D.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 27 Dec 2025 06:22:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:86:53:93:9f:28:34:80:89:fa:7e:b5:21:21:22:d3:78:56:cb:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82EABF24EF91106C28ACF9483B2EF11B2EA5319D
        Validity
            Not Before: Dec 24 02:35:55 2025 GMT
            Not After : Dec 27 06:22:55 2025 GMT
        Subject: CN=04EE87C4C2C28D34124C42953220CD35649749E1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:42:4e:9a:b2:b2:66:fb:ce:25:13:3d:9a:be:
                    f5:fb:e1:34:15:e9:d7:c0:23:29:ef:48:86:83:f0:
                    a4:7a:35:b6:f6:f9:ca:46:d8:66:82:a4:df:77:01:
                    1c:ae:71:ab:5d:d0:87:71:eb:d7:18:85:31:6f:24:
                    8e:5f:b9:29:e9:3c:6a:56:3c:1b:e5:b1:3a:e9:86:
                    16:0e:38:4a:3c:78:64:b1:8d:15:c0:b6:d5:d6:51:
                    c3:5c:43:e6:af:24:03:bd:47:37:f3:e3:f6:94:3e:
                    e8:f0:e1:42:e5:36:ac:72:45:fe:0e:13:d6:d7:58:
                    6a:01:67:9e:bd:e3:49:74:a1:b8:4f:1f:f8:00:04:
                    c2:4c:55:df:9a:5c:8f:fb:cb:24:8f:72:64:e2:0d:
                    45:52:08:78:6d:a4:ca:4f:36:dd:09:8b:27:b9:06:
                    96:45:f2:7d:d0:83:07:bd:1e:16:18:8d:07:86:74:
                    98:44:9d:c3:f7:f2:41:33:33:5d:c9:08:90:99:da:
                    7e:cd:5e:f5:86:7c:fe:10:a7:b8:8b:5c:fb:42:41:
                    d7:7a:74:87:80:62:91:45:db:b5:22:78:16:0a:8c:
                    06:de:aa:de:d1:33:df:6a:88:c4:fc:1a:1b:9c:a8:
                    04:a5:69:e0:5b:0a:c1:8e:f5:62:73:f1:a7:5c:34:
                    26:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:EE:87:C4:C2:C2:8D:34:12:4C:42:95:32:20:CD:35:64:97:49:E1
            X509v3 Authority Key Identifier:
                keyid:82:EA:BF:24:EF:91:10:6C:28:AC:F9:48:3B:2E:F1:1B:2E:A5:31:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/0e31c69a-b792-40a4-a144-234b5a1dde52/0/82EABF24EF91106C28ACF9483B2EF11B2EA5319D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82EABF24EF91106C28ACF9483B2EF11B2EA5319D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0e31c69a-b792-40a4-a144-234b5a1dde52/0/82EABF24EF91106C28ACF9483B2EF11B2EA5319D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:c8:29:d7:75:f3:a6:78:af:e4:86:bf:96:5f:a3:06:af:03:
         8f:95:f0:a5:cd:92:63:cd:73:f5:11:1f:14:0b:81:fc:ee:1d:
         c3:d1:b2:f7:05:8f:a2:c2:9c:7e:b5:04:e8:27:49:02:4a:9a:
         1c:bf:79:5b:34:df:ec:ac:b7:24:b6:1a:5e:fd:e5:d4:cc:ae:
         a8:ae:0a:67:2b:5e:cd:56:ac:55:48:4e:1d:55:d9:49:8d:0a:
         ed:e5:90:a7:2a:5b:7a:ce:2d:f4:1a:46:6a:8b:ca:9d:a5:1f:
         c9:78:eb:ed:f3:aa:84:b5:6a:de:ac:94:e6:f6:ac:e7:a7:c2:
         84:4c:45:26:26:95:25:3f:1e:ef:4f:de:5c:00:ca:97:83:86:
         ce:c6:55:1e:cc:a5:9f:be:2b:d3:69:90:ce:77:f6:e2:79:a0:
         ff:32:f4:4a:40:94:99:78:c2:e1:d5:96:2d:77:80:a1:e2:15:
         48:1f:21:1a:d3:d6:c2:fd:d8:67:4d:a2:5c:d2:d2:6c:49:48:
         b0:82:db:43:74:73:96:46:16:e6:e7:51:bb:74:1b:75:e2:e3:
         ae:06:a0:8b:31:37:93:0f:71:02:37:29:d7:b7:33:af:d4:5d:
         0f:9f:a8:c8:19:99:40:be:cc:01:dc:bb:07:a5:45:c7:4d:86:
         ce:12:7a:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 22:07:22 2025 by rpki-client