This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/a87c2b7e-2663-4d68-b25a-5fcf05e07bb4/0/B8E13B8031811FE78FA73151056FBFABEE076814.mft
File:                     B8E13B8031811FE78FA73151056FBFABEE076814.mft (raw, json)
Hash identifier:          3mQfP5BJul7kB/a1AUcmiUaTfAkL/Y4vqJwZJwCzPmw=
Subject key identifier:   DF:A7:29:80:25:0F:A8:61:9F:CC:6A:1A:3F:DF:4D:67:1F:91:1F:59
Authority key identifier: B8:E1:3B:80:31:81:1F:E7:8F:A7:31:51:05:6F:BF:AB:EE:07:68:14
Certificate issuer:       /CN=B8E13B8031811FE78FA73151056FBFABEE076814
Certificate serial:       5E23E630D91F61DC55105242A4980D87673EB6BE
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B8E13B8031811FE78FA73151056FBFABEE076814.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/a87c2b7e-2663-4d68-b25a-5fcf05e07bb4/0/B8E13B8031811FE78FA73151056FBFABEE076814.mft
Manifest number:          5B
Signing time:             Tue 23 Dec 2025 19:53:27 +0000
Manifest this update:     Tue 23 Dec 2025 19:48:27 +0000
Manifest next update:     Sat 27 Dec 2025 06:31:27 +0000
Files and hashes:         1: B8E13B8031811FE78FA73151056FBFABEE076814.crl (hash: Ako1XCG0+9+fz4ngd/3Dz8n0GKn3cxJxqUxL2Oe1OJc=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/a87c2b7e-2663-4d68-b25a-5fcf05e07bb4/0/B8E13B8031811FE78FA73151056FBFABEE076814.crl
                          rsync://repo-rpki.idnic.net/repo/a87c2b7e-2663-4d68-b25a-5fcf05e07bb4/0/B8E13B8031811FE78FA73151056FBFABEE076814.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B8E13B8031811FE78FA73151056FBFABEE076814.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 27 Dec 2025 06:31:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:23:e6:30:d9:1f:61:dc:55:10:52:42:a4:98:0d:87:67:3e:b6:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B8E13B8031811FE78FA73151056FBFABEE076814
        Validity
            Not Before: Dec 23 19:48:27 2025 GMT
            Not After : Dec 27 06:31:27 2025 GMT
        Subject: CN=DFA72980250FA8619FCC6A1A3FDF4D671F911F59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:16:c0:7b:b7:1e:ca:e0:65:c3:49:c0:ba:e4:
                    31:ea:ef:dc:39:7e:81:83:b9:b2:8f:6d:b2:6a:9d:
                    fe:e8:f3:9d:22:d4:4e:b5:e5:f0:58:ad:99:29:b8:
                    01:93:a3:c7:f6:99:b2:82:1a:7e:d7:a6:e2:d5:76:
                    e5:f6:79:84:05:d4:90:db:c2:8f:37:85:de:b2:80:
                    83:fc:45:19:a3:6b:93:38:f7:06:7d:cd:9e:fd:25:
                    67:ad:d9:d4:b1:80:92:5c:e9:1e:30:56:11:ef:c6:
                    d8:af:0b:24:3f:c9:21:97:c9:dc:35:72:54:76:19:
                    03:c2:ac:14:cb:61:14:24:ec:81:51:5f:44:1c:57:
                    ef:9f:2c:97:84:ec:a9:66:56:ea:4d:df:d8:42:d2:
                    a2:3e:d9:99:71:a6:92:5b:3a:e6:0c:7c:19:7e:9c:
                    12:28:fa:fa:1d:1f:b2:57:44:be:3b:b2:98:67:2a:
                    82:db:9d:ba:94:98:05:66:fa:44:ba:38:77:06:23:
                    43:30:c5:27:94:ba:33:36:36:45:f3:7e:2c:36:9d:
                    a8:97:6a:4a:5c:04:52:61:8d:32:80:f2:dd:3e:ea:
                    81:76:d9:a3:96:e1:9b:be:c8:41:50:0e:07:8d:03:
                    b2:08:11:6a:9a:1c:ce:7a:96:e7:21:dc:dd:43:21:
                    97:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:A7:29:80:25:0F:A8:61:9F:CC:6A:1A:3F:DF:4D:67:1F:91:1F:59
            X509v3 Authority Key Identifier:
                keyid:B8:E1:3B:80:31:81:1F:E7:8F:A7:31:51:05:6F:BF:AB:EE:07:68:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/a87c2b7e-2663-4d68-b25a-5fcf05e07bb4/0/B8E13B8031811FE78FA73151056FBFABEE076814.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B8E13B8031811FE78FA73151056FBFABEE076814.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a87c2b7e-2663-4d68-b25a-5fcf05e07bb4/0/B8E13B8031811FE78FA73151056FBFABEE076814.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:76:a6:70:26:cd:b1:61:33:6a:2e:31:e8:4b:6f:cd:80:70:
         63:e5:e0:f0:99:3e:3f:88:1e:4e:47:78:d2:f1:3a:80:27:75:
         00:97:12:c8:7f:35:cd:42:2a:16:40:1e:7b:be:b9:f5:81:81:
         57:28:d6:00:71:88:e7:0e:9e:93:86:d5:43:9b:b7:9f:5a:a5:
         86:04:8b:30:d0:e4:7f:69:9d:11:11:43:c8:e2:6d:a8:85:93:
         64:3a:a7:9a:47:6a:90:7c:a5:c7:01:00:e3:36:2d:b5:f0:8b:
         d7:d9:0d:65:49:12:79:d2:0d:54:0c:ff:d5:9f:72:d5:c7:74:
         f9:e3:35:04:d6:dc:24:08:c9:24:aa:7b:1c:2c:70:e2:6a:fb:
         68:b2:0a:64:22:7d:3e:fa:18:24:38:ae:49:80:a6:03:e2:7f:
         97:4d:c1:b9:46:9e:f4:35:bd:3e:c7:19:2c:a5:6b:99:9d:f9:
         af:e9:d6:19:6b:c7:59:ff:73:f4:71:99:83:ae:59:7d:da:b1:
         15:20:3e:52:f6:66:0c:1b:74:4e:47:c1:88:a3:1c:03:21:a4:
         e5:b5:80:7f:3b:30:36:08:3d:3b:18:7e:bf:49:45:a6:5e:5c:
         98:98:84:ad:2a:da:38:1b:e1:0d:2e:d4:c8:70:3a:29:69:be:
         43:c2:2a:bb
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUXiPmMNkfYdxVEFJCpJgNh2c+tr4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjhFMTNCODAzMTgxMUZFNzhGQTczMTUxMDU2RkJGQUJF
RTA3NjgxNDAeFw0yNTEyMjMxOTQ4MjdaFw0yNTEyMjcwNjMxMjdaMDMxMTAvBgNV
BAMTKERGQTcyOTgwMjUwRkE4NjE5RkNDNkExQTNGREY0RDY3MUY5MTFGNTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5FsB7tx7K4GXDScC65DHq79w5
foGDubKPbbJqnf7o850i1E615fBYrZkpuAGTo8f2mbKCGn7XpuLVduX2eYQF1JDb
wo83hd6ygIP8RRmja5M49wZ9zZ79JWet2dSxgJJc6R4wVhHvxtivCyQ/ySGXydw1
clR2GQPCrBTLYRQk7IFRX0QcV++fLJeE7KlmVupN39hC0qI+2ZlxppJbOuYMfBl+
nBIo+vodH7JXRL47sphnKoLbnbqUmAVm+kS6OHcGI0MwxSeUujM2NkXzfiw2naiX
akpcBFJhjTKA8t0+6oF22aOW4Zu+yEFQDgeNA7IIEWqaHM56luch3N1DIZcjAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQU36cpgCUPqGGfzGoaP99NZx+RH1kwHwYDVR0j
BBgwFoAUuOE7gDGBH+ePpzFRBW+/q+4HaBQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h
ODdjMmI3ZS0yNjYzLTRkNjgtYjI1YS01ZmNmMDVlMDdiYjQvMC9COEUxM0I4MDMx
ODExRkU3OEZBNzMxNTEwNTZGQkZBQkVFMDc2ODE0LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQjhFMTNCODAzMTgxMUZFNzhGQTczMTUxMDU2RkJGQUJFRTA3
NjgxNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTg3YzJiN2UtMjY2My00ZDY4LWIy
NWEtNWZjZjA1ZTA3YmI0LzAvQjhFMTNCODAzMTgxMUZFNzhGQTczMTUxMDU2RkJG
QUJFRTA3NjgxNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAEp2pnAmzbFhM2ouMehLb82AcGPl4PCZPj+I
Hk5HeNLxOoAndQCXEsh/Nc1CKhZAHnu+ufWBgVco1gBxiOcOnpOG1UObt59apYYE
izDQ5H9pnRERQ8jibaiFk2Q6p5pHapB8pccBAOM2LbXwi9fZDWVJEnnSDVQM/9Wf
ctXHdPnjNQTW3CQIySSqexwscOJq+2iyCmQifT76GCQ4rkmApgPif5dNwblGnvQ1
vT7HGSyla5md+a/p1hlrx1n/c/RxmYOuWX3asRUgPlL2ZgwbdE5HwYijHAMhpOW1
gH87MDYIPTsYfr9JRaZeXJiYhK0q2jgb4Q0u1MhwOilpvkPCKrs=
-----END CERTIFICATE-----
Generated at Wed Dec 24 20:23:46 2025 by rpki-client