This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/12307390-6ef3-4476-a6aa-d0c5783e1f37/0/8A05EBF58BEC96D946EE85F0F0F85701A0A72799.mft
File:                     8A05EBF58BEC96D946EE85F0F0F85701A0A72799.mft (raw, json)
Hash identifier:          YwlbOK0UxK869lqCLrCIBH9douLmJZcESLmfPfuMcF8=
Subject key identifier:   FE:A8:20:64:67:2E:1F:41:A3:BA:85:A9:F2:95:52:07:07:3A:E0:F9
Authority key identifier: 8A:05:EB:F5:8B:EC:96:D9:46:EE:85:F0:F0:F8:57:01:A0:A7:27:99
Certificate issuer:       /CN=8A05EBF58BEC96D946EE85F0F0F85701A0A72799
Certificate serial:       63746816E5D36AB150AC01DDECAB84D50FFA1AF6
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8A05EBF58BEC96D946EE85F0F0F85701A0A72799.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/12307390-6ef3-4476-a6aa-d0c5783e1f37/0/8A05EBF58BEC96D946EE85F0F0F85701A0A72799.mft
Manifest number:          0537
Signing time:             Fri 26 Dec 2025 05:01:09 +0000
Manifest this update:     Fri 26 Dec 2025 04:56:09 +0000
Manifest next update:     Mon 29 Dec 2025 15:21:09 +0000
Files and hashes:         1: 8A05EBF58BEC96D946EE85F0F0F85701A0A72799.crl (hash: gPWROBXh3MCAsLwOWBpEvwl123ySnBsT7ZS2er3VJcA=)
                          2: 3130332e3133392e34362e302f32342d3234203d3e203137393935.roa (hash: hthNpAwJxjCDLni6mv2Gc1l+BPz0lcv9dxQLklW+A64=)
                          3: 3130332e3133392e34372e302f32342d3234203d3e203137393935.roa (hash: hRDdGequ+GhEEqBrX8O9Zq6WRslymD5ehiejKAFbvr0=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/12307390-6ef3-4476-a6aa-d0c5783e1f37/0/8A05EBF58BEC96D946EE85F0F0F85701A0A72799.crl
                          rsync://repo-rpki.idnic.net/repo/12307390-6ef3-4476-a6aa-d0c5783e1f37/0/8A05EBF58BEC96D946EE85F0F0F85701A0A72799.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8A05EBF58BEC96D946EE85F0F0F85701A0A72799.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 29 Dec 2025 11:33:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:74:68:16:e5:d3:6a:b1:50:ac:01:dd:ec:ab:84:d5:0f:fa:1a:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8A05EBF58BEC96D946EE85F0F0F85701A0A72799
        Validity
            Not Before: Dec 26 04:56:09 2025 GMT
            Not After : Dec 29 15:21:09 2025 GMT
        Subject: CN=FEA82064672E1F41A3BA85A9F2955207073AE0F9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:32:14:dd:44:62:d3:84:1d:0e:e6:2e:a6:49:
                    67:d3:30:99:6b:e8:d9:07:07:5e:83:9c:ca:0d:a7:
                    40:01:57:00:19:56:e2:3f:6f:71:08:e4:6f:a6:8d:
                    70:3d:06:9d:05:a7:05:81:bc:ec:38:9b:76:0a:83:
                    3e:c5:4f:32:1c:72:b8:c3:dc:a5:90:e7:55:ec:c8:
                    f9:6f:98:f0:fe:ab:7d:64:be:ea:5f:ac:44:0e:2b:
                    5c:59:bf:fc:f0:98:c4:5b:e2:2c:f8:02:c1:bc:73:
                    89:df:49:9d:a6:69:f3:1f:3f:1c:69:d8:2e:45:eb:
                    2f:cb:d9:32:63:25:47:ed:cc:f7:91:f7:f3:0d:4d:
                    bb:41:b6:d9:a5:e5:99:06:7c:27:47:28:c9:b4:4f:
                    7e:0d:c4:85:f9:12:4e:19:22:b6:14:59:04:49:28:
                    b8:f2:9a:3a:b4:ba:cd:12:f2:20:43:83:ed:e7:76:
                    af:32:0e:81:4d:56:0e:b5:db:ff:72:3c:0d:55:a7:
                    c4:ec:3c:81:19:05:a3:f7:3c:bf:78:a9:11:ec:a2:
                    64:86:dd:6f:42:6e:04:47:58:7a:66:15:64:c3:04:
                    45:0d:df:c5:a4:52:02:e5:97:da:89:8c:8a:ab:da:
                    d4:ee:54:14:d8:22:46:bf:3c:78:c1:97:71:1a:1b:
                    59:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:A8:20:64:67:2E:1F:41:A3:BA:85:A9:F2:95:52:07:07:3A:E0:F9
            X509v3 Authority Key Identifier:
                keyid:8A:05:EB:F5:8B:EC:96:D9:46:EE:85:F0:F0:F8:57:01:A0:A7:27:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/12307390-6ef3-4476-a6aa-d0c5783e1f37/0/8A05EBF58BEC96D946EE85F0F0F85701A0A72799.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8A05EBF58BEC96D946EE85F0F0F85701A0A72799.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/12307390-6ef3-4476-a6aa-d0c5783e1f37/0/8A05EBF58BEC96D946EE85F0F0F85701A0A72799.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         da:d8:f6:11:fb:38:93:89:83:60:70:76:f4:c0:f8:50:d7:7e:
         1f:bd:e2:a7:a8:4e:e1:7c:41:1d:ef:dc:73:72:41:f3:e9:42:
         9e:7e:dc:95:d7:d6:26:1f:62:fe:e0:1b:af:21:b5:de:3b:a6:
         e6:f3:f9:55:6e:e9:c0:66:72:17:45:d1:0e:78:af:3f:20:c0:
         5e:f5:c4:e5:91:aa:05:be:c6:cb:bb:2e:75:4b:57:fe:6c:f4:
         37:95:d3:df:01:8c:55:d5:2c:10:6e:9e:af:8e:e9:b3:ea:5c:
         5b:e1:b7:82:0f:fc:86:7d:4c:3f:d5:69:a3:98:31:86:cb:87:
         11:3f:00:5b:6f:3f:c2:ab:d4:0b:3b:16:1b:94:96:72:9d:95:
         2e:e8:7e:4b:d1:bd:51:63:69:7c:5f:22:30:ca:7a:17:b2:90:
         d3:73:5c:ed:30:b9:57:8e:da:f5:0e:41:d4:9f:d5:2f:90:5b:
         a9:eb:c9:0f:d1:d6:98:06:81:c5:ab:27:de:57:e0:a3:10:55:
         2a:9a:46:ae:6a:28:51:d7:c3:6f:81:76:7e:c8:3d:64:22:85:
         c2:13:97:e9:33:0a:98:c9:1b:cd:dc:b2:cc:09:11:0e:f5:26:
         99:6d:85:c2:8c:09:98:a3:2b:17:89:c9:23:e5:1c:74:6e:a0:
         3f:9b:de:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 27 06:18:51 2025 by rpki-client