This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/a1ca9435-7224-47a8-951b-c1b42eb0e2f7/0/316B0D7815A87F5AA07EC9E0D8FC859AC1A76794.mft
File:                     316B0D7815A87F5AA07EC9E0D8FC859AC1A76794.mft (raw, json)
Hash identifier:          pozxT9bWckIQrGEdZ5br/NpUihnkmym8sTnRgvK+SDw=
Subject key identifier:   93:0C:24:2D:29:D4:B8:96:1A:8A:EC:71:3C:AB:FD:66:C5:2B:EE:C6
Authority key identifier: 31:6B:0D:78:15:A8:7F:5A:A0:7E:C9:E0:D8:FC:85:9A:C1:A7:67:94
Certificate issuer:       /CN=316B0D7815A87F5AA07EC9E0D8FC859AC1A76794
Certificate serial:       1E5BCA2180684686E50F6F63C55ED33A8ACFA955
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/316B0D7815A87F5AA07EC9E0D8FC859AC1A76794.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/a1ca9435-7224-47a8-951b-c1b42eb0e2f7/0/316B0D7815A87F5AA07EC9E0D8FC859AC1A76794.mft
Manifest number:          049B
Signing time:             Sat 20 Dec 2025 20:10:52 +0000
Manifest this update:     Sat 20 Dec 2025 20:05:52 +0000
Manifest next update:     Wed 24 Dec 2025 00:27:52 +0000
Files and hashes:         1: 3130332e3136322e36322e302f32332d3234203d3e20313431363432.roa (hash: qCAW9RGYIwqqetHxh1sU75304B2gQRTVVqzCEK/6DVI=)
                          2: 316B0D7815A87F5AA07EC9E0D8FC859AC1A76794.crl (hash: 7bE3TImnBjdRZkLWVItdWRhN3AvDLVJGn8BuHtHE/00=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/a1ca9435-7224-47a8-951b-c1b42eb0e2f7/0/316B0D7815A87F5AA07EC9E0D8FC859AC1A76794.crl
                          rsync://repo-rpki.idnic.net/repo/a1ca9435-7224-47a8-951b-c1b42eb0e2f7/0/316B0D7815A87F5AA07EC9E0D8FC859AC1A76794.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/316B0D7815A87F5AA07EC9E0D8FC859AC1A76794.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 24 Dec 2025 00:27:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:5b:ca:21:80:68:46:86:e5:0f:6f:63:c5:5e:d3:3a:8a:cf:a9:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=316B0D7815A87F5AA07EC9E0D8FC859AC1A76794
        Validity
            Not Before: Dec 20 20:05:52 2025 GMT
            Not After : Dec 24 00:27:52 2025 GMT
        Subject: CN=930C242D29D4B8961A8AEC713CABFD66C52BEEC6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:f3:7a:9f:c4:55:a1:01:1a:48:02:e8:40:d0:
                    e1:91:7e:69:dc:06:98:6c:d5:e2:af:76:be:00:7f:
                    a7:e7:d0:16:ea:4b:3e:4f:58:b1:80:b0:2b:96:32:
                    d2:1d:d9:7f:74:53:60:6e:c0:42:f3:c9:98:bc:e5:
                    d1:28:4b:fa:c1:52:5f:e4:32:d3:63:2b:3e:7b:0d:
                    03:91:02:7a:52:fe:e6:a0:7c:11:66:c5:be:00:20:
                    f8:03:be:3a:c9:58:67:26:08:94:90:0a:2c:bd:a5:
                    ae:7b:1b:43:5d:31:1c:69:88:7e:f0:1d:77:5d:b0:
                    a3:fb:17:ca:a7:9b:da:e7:89:05:e8:a6:62:68:a6:
                    78:35:2d:15:71:bf:28:40:75:9b:0f:14:0f:fc:1f:
                    93:e6:fc:d5:67:d7:41:22:32:a8:a2:83:a7:1c:b1:
                    b9:b1:58:0e:a1:ba:4a:0d:92:2a:48:4d:c7:de:3e:
                    82:3e:c4:30:3b:13:87:ef:31:fc:13:58:d2:0c:8b:
                    59:39:7d:0b:5b:60:2c:47:5a:e2:14:34:da:33:85:
                    df:12:d1:eb:75:1f:0e:31:83:ca:0b:e4:43:95:76:
                    5f:2a:e5:85:32:67:fd:16:cf:81:c7:77:0f:80:e7:
                    ec:c7:c3:40:1e:dd:3b:77:db:33:1b:26:4d:32:e3:
                    50:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:0C:24:2D:29:D4:B8:96:1A:8A:EC:71:3C:AB:FD:66:C5:2B:EE:C6
            X509v3 Authority Key Identifier:
                keyid:31:6B:0D:78:15:A8:7F:5A:A0:7E:C9:E0:D8:FC:85:9A:C1:A7:67:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/a1ca9435-7224-47a8-951b-c1b42eb0e2f7/0/316B0D7815A87F5AA07EC9E0D8FC859AC1A76794.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/316B0D7815A87F5AA07EC9E0D8FC859AC1A76794.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a1ca9435-7224-47a8-951b-c1b42eb0e2f7/0/316B0D7815A87F5AA07EC9E0D8FC859AC1A76794.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b9:2f:a9:c7:01:05:f2:6c:59:ef:57:90:e5:f8:6d:3d:62:3a:
         69:e0:ba:d2:8e:19:48:2b:02:1c:40:d1:e1:cb:ad:85:d1:e3:
         ae:82:25:a3:a8:0d:56:47:e0:07:14:e2:6c:dc:b8:a6:be:de:
         27:e4:17:0c:21:0b:49:02:55:b5:a9:5f:a6:d1:e2:ce:1c:c7:
         a5:41:c5:c6:a3:1c:e2:11:a3:ac:82:cb:bd:cb:b6:e5:bc:e4:
         e8:31:12:5e:d8:b0:40:5d:2d:88:b2:ca:b7:68:3b:9b:d4:c6:
         01:0c:d7:df:1f:34:83:6e:06:05:ae:a8:68:4b:c7:e0:59:b8:
         a5:8a:5d:dd:c6:24:ae:0c:80:61:8e:6a:0e:15:b1:84:43:b2:
         82:6e:e3:e6:e9:7f:a6:3c:b0:01:0b:60:b2:3d:01:c1:a2:1d:
         16:ee:0e:6a:27:30:a1:d4:b3:1e:96:4a:ab:77:5b:e0:80:a7:
         b8:07:14:72:53:44:81:30:ea:f4:66:4c:93:21:69:7d:cd:7a:
         f6:c8:f7:26:5b:59:85:b1:b4:84:c9:3d:45:33:d3:24:42:14:
         62:57:cc:75:79:ac:ab:3d:db:46:44:2a:2b:1c:bb:31:f2:b6:
         40:65:78:61:a3:60:44:6e:fd:5f:32:1e:23:08:45:89:89:d7:
         ed:2e:23:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 11:31:31 2025 by rpki-client