This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/3360f078-8a20-48d1-82b8-e1f50a155201/0/B93759B19E4C1F8FFB6E9D1E2E674E4E317D7E94.mft
File:                     B93759B19E4C1F8FFB6E9D1E2E674E4E317D7E94.mft (raw, json)
Hash identifier:          H70XiyKe1JwE+6HYBfrBXnMIBKJm33LGBG47FmIix3g=
Subject key identifier:   BA:7D:A4:6B:FE:40:F2:EB:56:4F:DE:CC:82:4E:16:B2:ED:EB:34:11
Authority key identifier: B9:37:59:B1:9E:4C:1F:8F:FB:6E:9D:1E:2E:67:4E:4E:31:7D:7E:94
Certificate issuer:       /CN=B93759B19E4C1F8FFB6E9D1E2E674E4E317D7E94
Certificate serial:       5E1F871CE1700963407FAFFF6158202A4EE08140
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B93759B19E4C1F8FFB6E9D1E2E674E4E317D7E94.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3360f078-8a20-48d1-82b8-e1f50a155201/0/B93759B19E4C1F8FFB6E9D1E2E674E4E317D7E94.mft
Manifest number:          022B
Signing time:             Tue 23 Dec 2025 16:43:36 +0000
Manifest this update:     Tue 23 Dec 2025 16:38:36 +0000
Manifest next update:     Fri 26 Dec 2025 20:47:36 +0000
Files and hashes:         1: B93759B19E4C1F8FFB6E9D1E2E674E4E317D7E94.crl (hash: BZ4yFd3NcqhhAo4vYRkhqmhEaoUjmJlZnWL5vVtf1Ow=)
                          2: 3130332e3135302e3135382e302f32342d3234203d3e20313430333937.roa (hash: XFDD1vzbK3fH2oVTZT7/I8pF/szQ/Q1UsEfrzMZOTGI=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/3360f078-8a20-48d1-82b8-e1f50a155201/0/B93759B19E4C1F8FFB6E9D1E2E674E4E317D7E94.crl
                          rsync://repo-rpki.idnic.net/repo/3360f078-8a20-48d1-82b8-e1f50a155201/0/B93759B19E4C1F8FFB6E9D1E2E674E4E317D7E94.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B93759B19E4C1F8FFB6E9D1E2E674E4E317D7E94.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 26 Dec 2025 20:47:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:1f:87:1c:e1:70:09:63:40:7f:af:ff:61:58:20:2a:4e:e0:81:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B93759B19E4C1F8FFB6E9D1E2E674E4E317D7E94
        Validity
            Not Before: Dec 23 16:38:36 2025 GMT
            Not After : Dec 26 20:47:36 2025 GMT
        Subject: CN=BA7DA46BFE40F2EB564FDECC824E16B2EDEB3411
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:e2:57:fa:d4:01:b0:31:78:dc:aa:51:77:20:
                    c4:f6:45:3c:29:b4:59:ca:fd:ac:68:6d:a9:e1:be:
                    cb:48:5d:4f:ba:be:05:9a:5a:77:17:2d:c4:db:19:
                    bd:ee:4f:94:23:eb:6d:8a:71:95:40:72:90:b4:07:
                    77:71:62:d6:62:54:5d:0c:4d:15:ca:3b:9f:d5:23:
                    3e:e1:a4:e7:ba:eb:3b:b4:86:eb:4e:d3:91:12:64:
                    d5:35:74:c4:84:9a:55:34:b2:62:ab:11:cf:aa:8b:
                    52:1a:1e:f7:03:a1:f6:9a:40:d2:cc:7c:39:fd:3a:
                    3f:e9:93:51:72:c6:ce:b8:cf:43:6c:ba:65:1d:46:
                    6f:0b:2a:83:74:4f:88:19:31:9e:43:38:df:c2:ad:
                    b2:39:10:43:0c:2a:f7:08:f9:79:de:1c:12:23:2f:
                    09:37:cf:38:63:a7:9d:6c:f3:44:a0:6a:83:28:54:
                    5f:da:8a:86:ae:cd:90:7e:97:a7:1c:ce:5d:1b:73:
                    2f:6a:68:99:09:07:e7:3c:4d:52:78:8d:b3:92:e6:
                    5c:9b:b7:dc:6d:d9:eb:bb:10:e0:3f:f2:69:0b:8e:
                    78:05:c1:93:83:16:63:00:dd:a0:14:47:30:1a:4d:
                    72:92:a0:ba:e4:15:9f:f5:3a:9b:06:77:97:f9:76:
                    3d:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:7D:A4:6B:FE:40:F2:EB:56:4F:DE:CC:82:4E:16:B2:ED:EB:34:11
            X509v3 Authority Key Identifier:
                keyid:B9:37:59:B1:9E:4C:1F:8F:FB:6E:9D:1E:2E:67:4E:4E:31:7D:7E:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3360f078-8a20-48d1-82b8-e1f50a155201/0/B93759B19E4C1F8FFB6E9D1E2E674E4E317D7E94.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B93759B19E4C1F8FFB6E9D1E2E674E4E317D7E94.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3360f078-8a20-48d1-82b8-e1f50a155201/0/B93759B19E4C1F8FFB6E9D1E2E674E4E317D7E94.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:d7:85:37:eb:4e:e2:31:98:b2:6b:14:8e:3a:e4:fa:9e:36:
         0e:6f:5b:03:c3:74:e6:02:81:4b:81:38:c8:ed:73:f8:24:08:
         c2:43:17:76:67:77:c2:e2:b5:7f:98:05:25:e5:0c:f5:80:9e:
         e9:76:fb:e3:6e:63:71:8c:87:e4:9e:f4:c6:ad:28:99:8d:b4:
         ff:96:62:9c:c9:90:b7:2b:da:dd:63:08:4f:34:71:9a:83:44:
         0d:5d:d0:d0:05:74:b0:94:f5:c3:f1:0f:79:4c:e4:4a:79:16:
         4b:31:56:17:f1:ab:ed:e0:9f:84:7a:d2:25:2a:4a:2c:d6:08:
         f5:7a:ed:45:85:04:65:2b:0f:aa:01:7c:cb:79:50:1d:f5:ea:
         b6:c4:cd:dc:0b:22:39:0d:0b:22:f7:30:bd:89:69:a5:d2:f0:
         09:75:78:d6:42:61:8a:81:fc:34:47:27:48:35:86:0f:8d:6d:
         8e:69:71:8f:a4:fb:a6:5f:bb:ad:3c:3b:d0:dd:cf:45:1c:98:
         5a:7c:85:0c:3c:65:8d:10:1f:ea:ac:6b:3a:c5:f7:a5:b9:c5:
         75:ab:57:59:a4:6c:49:cd:e8:a8:eb:11:4c:6b:78:95:42:09:
         04:b8:16:49:b1:2e:f6:2b:ca:d6:c8:63:ed:13:2d:9d:8f:a3:
         21:fb:b0:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 20:25:21 2025 by rpki-client