This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/82f6c516-ef11-4c15-8b33-2eb10403043b/0/A203777786215EACE763209954A241380D9D9512.mft
File:                     A203777786215EACE763209954A241380D9D9512.mft (raw, json)
Hash identifier:          QoyiqjLUbSLUvfxbqa3Zyc7PmHRk3nV15/cQ5dQVO2I=
Subject key identifier:   9C:3E:6F:BE:36:B5:53:86:80:69:8C:CA:BD:DD:19:D9:4B:2B:64:82
Authority key identifier: A2:03:77:77:86:21:5E:AC:E7:63:20:99:54:A2:41:38:0D:9D:95:12
Certificate issuer:       /CN=A203777786215EACE763209954A241380D9D9512
Certificate serial:       045C0E23B68DC542DAF267D5411A379D2D5F0B8D
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A203777786215EACE763209954A241380D9D9512.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/82f6c516-ef11-4c15-8b33-2eb10403043b/0/A203777786215EACE763209954A241380D9D9512.mft
Manifest number:          023B
Signing time:             Wed 24 Dec 2025 08:14:23 +0000
Manifest this update:     Wed 24 Dec 2025 08:09:23 +0000
Manifest next update:     Sat 27 Dec 2025 16:10:23 +0000
Files and hashes:         1: A203777786215EACE763209954A241380D9D9512.crl (hash: lpnQQQQ2AmjFwQPgEt0LTrni5fhwb6XQGn/1O+6vuPc=)
                          2: 3130332e3138392e3136352e302f32342d3234203d3e20313439373534.roa (hash: wShX4HwUIYNF3iyYYyGTfjxRGOOJsJ+YgSdcOfkVc6Q=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/82f6c516-ef11-4c15-8b33-2eb10403043b/0/A203777786215EACE763209954A241380D9D9512.crl
                          rsync://repo-rpki.idnic.net/repo/82f6c516-ef11-4c15-8b33-2eb10403043b/0/A203777786215EACE763209954A241380D9D9512.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A203777786215EACE763209954A241380D9D9512.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 27 Dec 2025 16:10:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:5c:0e:23:b6:8d:c5:42:da:f2:67:d5:41:1a:37:9d:2d:5f:0b:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A203777786215EACE763209954A241380D9D9512
        Validity
            Not Before: Dec 24 08:09:23 2025 GMT
            Not After : Dec 27 16:10:23 2025 GMT
        Subject: CN=9C3E6FBE36B5538680698CCABDDD19D94B2B6482
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:c8:bc:c7:87:09:90:b0:be:c2:34:1a:4d:02:
                    45:c6:fb:84:4e:e8:cd:32:af:d5:55:b6:d4:c1:66:
                    b3:cd:60:8b:c3:6d:d6:83:72:6d:28:09:a8:30:9d:
                    2f:f6:f5:33:91:16:a4:c3:5b:2f:ba:9c:e5:81:13:
                    2c:1d:1e:b6:5d:2f:2c:ab:6f:1b:f8:e8:0a:ec:16:
                    ee:83:9a:b4:db:54:91:d4:99:17:29:86:ae:93:8b:
                    73:8f:c4:5f:20:4a:fb:07:c5:46:08:2f:de:d8:d5:
                    c8:1d:49:73:87:ed:24:a1:60:c6:5a:f4:4f:95:7f:
                    a3:25:91:47:7b:79:cf:86:2a:e9:09:a1:f1:55:43:
                    c6:93:c1:fb:0c:b1:0b:46:92:58:8f:e2:ca:7d:1d:
                    f5:5a:0d:c3:b5:f7:4f:6f:f2:dd:f9:db:66:9d:a6:
                    6b:07:86:66:d4:25:6d:4e:99:96:a0:f3:83:21:ee:
                    fc:c6:38:75:01:e0:1e:84:ab:db:ff:0a:ad:3b:05:
                    e9:a6:e7:b7:39:f1:fc:2f:ba:fc:50:ad:ff:9a:ab:
                    ab:d1:2e:d6:f0:ae:3b:ff:4e:e4:5a:79:f4:63:67:
                    ab:b4:9e:54:ba:ea:d6:c8:8a:58:72:3e:66:69:b9:
                    78:e4:26:aa:c7:cb:b0:45:87:b7:94:6f:4e:a7:f8:
                    77:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:3E:6F:BE:36:B5:53:86:80:69:8C:CA:BD:DD:19:D9:4B:2B:64:82
            X509v3 Authority Key Identifier:
                keyid:A2:03:77:77:86:21:5E:AC:E7:63:20:99:54:A2:41:38:0D:9D:95:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/82f6c516-ef11-4c15-8b33-2eb10403043b/0/A203777786215EACE763209954A241380D9D9512.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A203777786215EACE763209954A241380D9D9512.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/82f6c516-ef11-4c15-8b33-2eb10403043b/0/A203777786215EACE763209954A241380D9D9512.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:9b:ae:83:0b:42:22:8d:09:a0:ce:7a:db:6d:13:2a:01:56:
         23:49:f0:71:af:de:7d:d3:62:31:b7:30:69:b0:ca:b0:7c:be:
         d8:96:4a:58:ce:80:22:89:ed:e8:dd:02:f9:52:7a:41:6a:a2:
         63:10:15:59:68:2c:c5:b5:7d:b1:a5:d1:f3:c6:80:a4:c5:53:
         ba:85:70:6b:fb:0d:28:04:cd:20:e9:43:e4:d6:40:88:90:53:
         d4:1b:1e:fe:23:22:c9:ef:8a:72:bc:65:7f:50:77:04:00:c2:
         d4:d6:7f:18:d9:04:22:0c:2a:a2:8c:ec:5d:76:49:43:4d:93:
         a9:4d:c0:78:22:14:67:6a:7e:92:3d:06:ab:a9:01:1e:c1:fa:
         b0:d2:0f:62:81:ba:fc:ac:5f:40:b8:f9:b5:8f:3c:ce:b5:42:
         d8:39:12:5e:2d:b2:26:f1:82:a2:d6:24:25:2f:e6:f8:32:57:
         0f:ee:1d:91:0e:d7:41:a2:86:c2:44:a4:b2:e8:a9:83:2f:ea:
         db:5e:f3:ce:6e:f5:e6:26:13:24:e3:9e:36:ad:62:98:c9:6d:
         9e:5f:40:bf:d4:90:b3:3a:dd:62:38:3c:54:0c:b4:99:33:8c:
         07:bd:55:d0:0a:8b:30:9a:84:d0:22:12:e6:04:59:75:46:7b:
         af:7c:6f:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 22:06:53 2025 by rpki-client