This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/b2a0a771-62d2-4238-a406-7999f224849c/0/B2BCF7264F89246583B384F354CB350DF3B6AADB.mft
File:                     B2BCF7264F89246583B384F354CB350DF3B6AADB.mft (raw, json)
Hash identifier:          d8atSftK/VrcKKGRlDOvgoKp4H+vHlF0m0nyhjQCvWY=
Subject key identifier:   62:B6:DE:36:06:97:2F:68:5D:9C:E9:78:D3:09:26:04:1A:07:F7:23
Authority key identifier: B2:BC:F7:26:4F:89:24:65:83:B3:84:F3:54:CB:35:0D:F3:B6:AA:DB
Certificate issuer:       /CN=B2BCF7264F89246583B384F354CB350DF3B6AADB
Certificate serial:       2C4D2C019174ECF04C462827166B8F1258CD17D2
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2BCF7264F89246583B384F354CB350DF3B6AADB.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/b2a0a771-62d2-4238-a406-7999f224849c/0/B2BCF7264F89246583B384F354CB350DF3B6AADB.mft
Manifest number:          0531
Signing time:             Wed 17 Dec 2025 02:42:15 +0000
Manifest this update:     Wed 17 Dec 2025 02:37:15 +0000
Manifest next update:     Sat 20 Dec 2025 10:52:15 +0000
Files and hashes:         1: 3230322e34372e39302e302f32332d3234203d3e203436303230.roa (hash: f31WSeSw8w1qVqSz7UZlMp3AZocd9nv655saAh7fViI=)
                          2: B2BCF7264F89246583B384F354CB350DF3B6AADB.crl (hash: qeA32smlEnokWfE01eSrcBq9/1vGCy1A6989lpeemHk=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/b2a0a771-62d2-4238-a406-7999f224849c/0/B2BCF7264F89246583B384F354CB350DF3B6AADB.crl
                          rsync://repo-rpki.idnic.net/repo/b2a0a771-62d2-4238-a406-7999f224849c/0/B2BCF7264F89246583B384F354CB350DF3B6AADB.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2BCF7264F89246583B384F354CB350DF3B6AADB.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Dec 2025 10:52:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:4d:2c:01:91:74:ec:f0:4c:46:28:27:16:6b:8f:12:58:cd:17:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B2BCF7264F89246583B384F354CB350DF3B6AADB
        Validity
            Not Before: Dec 17 02:37:15 2025 GMT
            Not After : Dec 20 10:52:15 2025 GMT
        Subject: CN=62B6DE3606972F685D9CE978D30926041A07F723
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:80:da:2d:27:c3:99:79:56:fa:99:34:59:29:
                    60:57:9c:78:27:e9:fd:b8:55:88:e7:fe:52:d9:ae:
                    52:2f:ca:58:cf:05:52:93:71:b4:cc:6f:c4:b7:bf:
                    1b:0a:1f:0f:53:b5:c9:02:bb:e6:9d:c6:5e:e7:7b:
                    23:c4:07:ae:c8:e2:c2:18:21:5c:0c:ab:fc:7e:9e:
                    2b:60:d5:b9:5b:2a:a9:66:5c:20:d3:25:8e:fc:ba:
                    a3:47:39:46:44:48:54:04:ab:87:6d:35:86:62:92:
                    9b:9b:f6:3f:3d:c0:a8:5b:e5:31:24:6b:9a:6f:4f:
                    65:b3:a9:2d:56:6b:9d:af:37:41:1a:b6:dc:d6:23:
                    d3:85:20:bf:f2:b5:36:6c:a5:c3:90:7e:aa:83:17:
                    05:a6:8c:71:55:70:47:9b:2d:70:dd:eb:be:c2:ab:
                    45:d6:25:94:8d:62:b0:d7:2f:00:11:65:7e:86:84:
                    2c:c8:46:35:40:d7:5b:28:be:94:d1:1f:4c:e9:39:
                    0e:da:47:c0:80:0c:17:4b:71:40:97:c7:f1:27:83:
                    5b:4f:f4:81:ba:aa:3a:41:13:59:8f:67:3e:d0:8d:
                    0f:f8:89:3e:d4:64:0b:9e:48:76:6c:6c:bb:e1:59:
                    ca:8e:83:05:83:96:1d:5a:5e:80:9b:a1:4a:c8:60:
                    63:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:B6:DE:36:06:97:2F:68:5D:9C:E9:78:D3:09:26:04:1A:07:F7:23
            X509v3 Authority Key Identifier:
                keyid:B2:BC:F7:26:4F:89:24:65:83:B3:84:F3:54:CB:35:0D:F3:B6:AA:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/b2a0a771-62d2-4238-a406-7999f224849c/0/B2BCF7264F89246583B384F354CB350DF3B6AADB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2BCF7264F89246583B384F354CB350DF3B6AADB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b2a0a771-62d2-4238-a406-7999f224849c/0/B2BCF7264F89246583B384F354CB350DF3B6AADB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:27:01:2a:39:52:cb:55:52:0e:14:13:c0:01:a4:37:22:99:
         82:c6:f0:ad:85:84:b5:76:e7:79:e1:ec:bb:84:d7:a5:5d:2a:
         ef:a7:11:ed:c1:60:31:43:73:3a:46:56:8f:b9:42:19:0f:b7:
         41:67:61:10:45:5a:ef:14:1f:a2:44:34:e5:ed:58:8a:d4:7e:
         a7:97:88:d5:25:42:ab:59:ee:75:ed:aa:53:52:df:00:af:30:
         da:63:83:98:27:93:50:fc:b5:4c:17:52:ce:ac:38:2d:37:70:
         21:20:0d:a8:8e:52:ff:f8:1a:cd:87:3b:da:d1:61:ea:f4:f6:
         dd:ff:0e:04:a3:90:2c:01:3b:46:f4:f9:52:d7:ca:d7:b3:5f:
         e5:bc:83:c8:f5:d2:12:51:d3:67:5f:d1:44:1e:88:9b:78:94:
         20:98:1c:e2:0f:ca:1a:1b:b0:87:c2:b2:b7:74:e3:61:a9:48:
         5a:97:48:b0:87:6a:84:23:0c:45:c4:fa:79:f2:85:ba:27:65:
         c7:88:02:59:62:6b:02:29:fc:79:59:ec:95:14:5f:dd:ae:87:
         f1:24:76:3e:57:b0:b7:c9:96:fb:79:6d:5e:9f:5f:50:8e:5b:
         7f:b2:37:49:61:8f:6b:06:3d:ba:55:0c:b8:35:d8:a8:55:bf:
         f4:04:50:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 16:03:05 2025 by rpki-client