This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/BE7F813F3C6CA289A9CDAC5630975B7627458103.mft
File:                     BE7F813F3C6CA289A9CDAC5630975B7627458103.mft (raw, json)
Hash identifier:          e2Y9ExYV5XyE7mLNOlbhEOB31+8Gq6eY57LRJKFEbIA=
Subject key identifier:   DC:4A:37:CF:38:BC:5F:0B:F3:D4:14:7A:94:10:51:0B:DE:49:5A:D6
Authority key identifier: BE:7F:81:3F:3C:6C:A2:89:A9:CD:AC:56:30:97:5B:76:27:45:81:03
Certificate issuer:       /CN=BE7F813F3C6CA289A9CDAC5630975B7627458103
Certificate serial:       1703BDBD96D5EFDBE544F81B4003A475FC9531B0
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BE7F813F3C6CA289A9CDAC5630975B7627458103.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/BE7F813F3C6CA289A9CDAC5630975B7627458103.mft
Manifest number:          02BB
Signing time:             Sun 21 Dec 2025 07:42:27 +0000
Manifest this update:     Sun 21 Dec 2025 07:37:27 +0000
Manifest next update:     Wed 24 Dec 2025 08:55:27 +0000
Files and hashes:         1: 3138302e3231312e38382e302f32312d3231203d3e203435373235.roa (hash: UrwHHQXWpjTi59OMqCHennU+aS155yzGb6/9UoO5zVs=)
                          2: 3230322e3135302e3136302e302f32302d3234203d3e203435373235.roa (hash: bcb47SdtlV0+rUuQrP25krobOWV4dOeRjxtP0NJ6Hg0=)
                          3: 3130332e3234352e3133382e302f32332d3233203d3e203435373235.roa (hash: gXSdvzH/obw2tBhIhIcWb1ceK7qyFmLN4iW37pSP6wI=)
                          4: 3230322e3135302e3137322e302f32332d3233203d3e203435373235.roa (hash: xC6iCUJS7sp4GX/eEQoZ92l1XLRswuGGeIaV26g4P7I=)
                          5: 323430323a3738303a3a2f34382d3438203d3e203435373235.roa (hash: srQ63HzedpqK/Z+fkfeTxdmOJkM7qi6/v3UkdQRaL40=)
                          6: 34332e3233302e3135342e302f32332d3233203d3e203435373235.roa (hash: FoOUIBlL9T9MhX4bEhccY3Kjn0yIPa1cMqY4C0eO3xI=)
                          7: 34332e3233302e3135322e302f32322d3232203d3e203435373235.roa (hash: pO9hy5n7UjW4vxC4PIPIijgfvw5lRU378EbEfDIE6ec=)
                          8: 3230322e3135302e3136342e302f32332d3233203d3e203435373235.roa (hash: w2ICECGLA7nw6Zv4Eo0IQI3O8W+wpDGsaM5DtnIpJKo=)
                          9: 3138302e3231312e38382e302f32312d3234203d3e203435373235.roa (hash: 6cpCf7GhdQEpx30p91qB9UYsON8gtbAQPKe5llQv0bs=)
                          10: 3230322e3135302e3136302e302f32302d3230203d3e203435373235.roa (hash: xQ4Ul97jwoDNyJ2eG9oO4TTlF8xSqcDLgnke6Urqw3k=)
                          11: 3130332e3234352e3133362e302f32322d3234203d3e203435373235.roa (hash: BI62UO3dEBMuV7GGUm78ylThtADmbOZbryA9/QTeswk=)
                          12: BE7F813F3C6CA289A9CDAC5630975B7627458103.crl (hash: EVDoO/eD/+apY4QpKQ0ci2JGwIWFS3F206qgz8vkvrg=)
                          13: 3230322e3135302e3137352e302f32342d3234203d3e20323037353731.roa (hash: fxq+INOzYywTpHUeb4pxKeVy8ePaMLmGli2Hhv5MQO4=)
                          14: 3230322e3135302e3136382e302f32332d3233203d3e203435373235.roa (hash: CFmjdJ2vd2S1hwPDr69BfeMIGUvy+yNC1CU/AmoDxB8=)
                          15: 323430323a3738303a3a2f33322d3438203d3e203435373235.roa (hash: 95U2BXJDC2l18nsj8XM2nUsJ+ABvrMW9ZXaTSbsG2jU=)
                          16: 34332e3233302e3135322e302f32322d3234203d3e203435373235.roa (hash: +4n6/TF4aeSEpR29DkcOnbNK9Y34aOX1PIvKhjQ5Hno=)
                          17: 323430323a3738303a343a3a2f34382d3438203d3e203435373235.roa (hash: q6uWsjDfmvPCM3wtKPBAHFLOKfxyuluuaFv/8slgJu8=)
                          18: 3130332e3234352e3133362e302f32322d3232203d3e203435373235.roa (hash: /MSndQdhW7y2Ps5XO1tBE5LRjY41c2iW6OY/QNg9AHs=)
                          19: 3138302e3231312e39342e302f32332d3233203d3e203435373235.roa (hash: P35zqgp/DvY+opYrPtfb+V3CygXLWvgpif4jdHfrT6Q=)
                          20: 3230322e3135302e3136322e302f32332d3233203d3e203435373235.roa (hash: GwuWySNcSg5ncnIH7xe0pJhIF0SwLtWfmclvASXmbzI=)
                          21: 323430323a3738303a3130303a3a2f34302d3430203d3e203435373235.roa (hash: ksLRob3f5SU2gNY1LxPipDlSLyvRGBxMHRiqu2c9VRY=)
                          22: 3230322e3135302e3137302e302f32332d3233203d3e203435373235.roa (hash: RYaUaP8z76N+rN9/CRDsCKHTh8kwn9eyhhBEqvlMUwo=)
                          23: 3138302e3231312e38382e302f32332d3233203d3e203435373235.roa (hash: 6XFpo57f1LKHWqv/atS95pTJHDHEw9gxmYNcdpJ+RZk=)
                          24: 3230322e3135302e3137342e302f32332d3233203d3e203435373235.roa (hash: P6E4qcRf4KYQyvZ7AMZmZFaBs6o4L0ILx70mhGz8FoA=)
                          25: 3230322e3135302e3136362e302f32332d3233203d3e203435373235.roa (hash: wRnGxN5uNoVdykOfNrkzIuyL1n8LTfsQZxmr2BmoYe4=)
                          26: 3230322e3135302e3136302e302f32332d3233203d3e203435373235.roa (hash: Vd4YXu/zv6QpeJqZrRqJLtEJqDsjx9BYEUrETFSOwbg=)
                          27: 3130332e3234352e3133362e302f32332d3233203d3e203435373235.roa (hash: MSYIfxCSXKVIOCS47ld9jUS6r+ZriPGRUCkoG4RgECY=)
                          28: 3138302e3231312e39302e302f32332d3233203d3e203435373235.roa (hash: OgCMc6N8YMB+q9soDBfzLtklXuNaeCduzkpg+Npc+Pg=)
                          29: 3138302e3231312e39322e302f32332d3233203d3e203435373235.roa (hash: 5gtSpN1P146ocldJClXJUUX1hGb29RqzWbJ13iydccw=)
                          30: 34332e3233302e3135322e302f32332d3233203d3e203435373235.roa (hash: xHPJ7HI+304D7YAd37d8j6skpjceFwNnjTWGzXVwcKM=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/BE7F813F3C6CA289A9CDAC5630975B7627458103.crl
                          rsync://repo-rpki.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/BE7F813F3C6CA289A9CDAC5630975B7627458103.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BE7F813F3C6CA289A9CDAC5630975B7627458103.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 24 Dec 2025 07:39:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:03:bd:bd:96:d5:ef:db:e5:44:f8:1b:40:03:a4:75:fc:95:31:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BE7F813F3C6CA289A9CDAC5630975B7627458103
        Validity
            Not Before: Dec 21 07:37:27 2025 GMT
            Not After : Dec 24 08:55:27 2025 GMT
        Subject: CN=DC4A37CF38BC5F0BF3D4147A9410510BDE495AD6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:2d:aa:ad:1a:51:6a:af:4e:aa:cc:c7:62:b7:
                    12:5a:d4:dc:4e:07:cc:32:af:e9:36:07:77:29:58:
                    b7:21:64:e2:e6:cc:43:75:cf:2d:52:39:7d:dc:64:
                    c2:67:97:f5:11:db:f8:e5:86:15:00:11:e6:ac:36:
                    e6:a8:a5:72:86:49:22:16:ae:6f:d5:cb:36:7d:85:
                    1b:c5:f5:e3:a8:32:29:b8:62:8d:9d:48:5d:23:e0:
                    bd:48:86:26:e5:81:ca:35:9e:dc:4e:3e:56:81:ac:
                    3c:8d:b6:1e:8e:24:a4:39:51:6f:5c:7f:df:87:ac:
                    23:bc:7a:3a:d0:e1:76:45:25:78:6f:0c:4e:21:7a:
                    2d:83:84:71:a9:ef:73:7e:35:e0:9b:f0:71:78:4c:
                    d6:78:c4:2b:2b:2f:0b:2c:82:77:d7:1c:9f:84:78:
                    25:00:99:f1:37:29:65:67:b2:d9:88:08:03:c0:6a:
                    b6:99:58:ed:69:b8:43:c5:ed:1e:f9:8c:2e:4c:ac:
                    37:8e:76:b5:65:db:00:34:f9:d7:1b:45:fe:42:c7:
                    a5:83:c0:74:70:82:89:ae:7c:f8:27:e0:bd:36:1e:
                    fa:68:d6:bb:06:44:e6:ff:ab:1e:76:ae:dd:c2:d0:
                    06:a8:ee:43:de:4c:67:8a:22:2d:a3:96:ba:fe:12:
                    14:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:4A:37:CF:38:BC:5F:0B:F3:D4:14:7A:94:10:51:0B:DE:49:5A:D6
            X509v3 Authority Key Identifier:
                keyid:BE:7F:81:3F:3C:6C:A2:89:A9:CD:AC:56:30:97:5B:76:27:45:81:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/BE7F813F3C6CA289A9CDAC5630975B7627458103.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BE7F813F3C6CA289A9CDAC5630975B7627458103.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/BE7F813F3C6CA289A9CDAC5630975B7627458103.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:45:39:98:6b:fe:cf:71:3c:7b:75:33:24:a9:4d:fc:85:b9:
         b7:b6:e8:f2:aa:e3:f7:f2:7f:32:75:5e:1f:f1:11:d0:dc:b5:
         3e:6b:72:f2:c2:c8:cf:dd:c1:57:18:0f:3f:40:05:5d:8e:eb:
         b2:d5:b9:85:8b:ee:b9:b8:73:7d:5d:6e:4f:84:7d:11:a7:16:
         2b:39:99:a4:68:08:4c:0e:8f:52:cd:f9:9f:fc:33:0c:84:00:
         33:58:67:ff:1a:32:75:03:87:d4:c1:17:3f:93:6b:98:b9:b2:
         fb:cc:14:29:90:1e:d9:ce:30:74:52:6a:3c:fe:1a:a7:63:57:
         65:91:7e:3e:ef:e4:27:bd:70:29:88:e8:11:e7:fe:7b:80:a1:
         1c:d6:dd:62:5c:c7:c6:eb:23:f0:25:af:28:83:99:24:ea:95:
         5c:29:76:0c:d9:ec:df:2e:41:83:7d:4f:a6:20:49:8a:14:a2:
         44:1c:23:38:45:05:15:e3:d1:c8:47:33:6b:be:fc:0c:37:cf:
         4c:c5:32:62:a0:32:41:a8:a7:a6:d7:0b:06:61:7d:83:fa:09:
         8d:e0:d7:40:bd:3e:92:f0:5e:ce:38:7b:69:94:fe:d4:85:63:
         8d:10:6e:7f:e8:13:38:1e:a8:03:a2:99:de:b0:2d:74:c2:3f:
         8b:35:80:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 11:05:28 2025 by rpki-client