This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/b8b441ad-f1aa-48d3-9edb-b9a5d5ce9ba8/0/F2441731A38F6F03ED8BFDB14F3CF89CED26A880.mft
File:                     F2441731A38F6F03ED8BFDB14F3CF89CED26A880.mft (raw, json)
Hash identifier:          T9FdW3qilSPOInZUHVgT4cHXRWsC4TEWfkvMFMrMf40=
Subject key identifier:   E8:BE:5F:0C:6E:AC:2D:D7:32:84:A5:1C:FC:FE:74:CD:CC:2D:01:73
Authority key identifier: F2:44:17:31:A3:8F:6F:03:ED:8B:FD:B1:4F:3C:F8:9C:ED:26:A8:80
Certificate issuer:       /CN=F2441731A38F6F03ED8BFDB14F3CF89CED26A880
Certificate serial:       5906215BED54191BEEF3767A397203D8E07F2D93
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F2441731A38F6F03ED8BFDB14F3CF89CED26A880.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/b8b441ad-f1aa-48d3-9edb-b9a5d5ce9ba8/0/F2441731A38F6F03ED8BFDB14F3CF89CED26A880.mft
Manifest number:          0534
Signing time:             Tue 23 Dec 2025 14:41:54 +0000
Manifest this update:     Tue 23 Dec 2025 14:36:54 +0000
Manifest next update:     Fri 26 Dec 2025 21:20:54 +0000
Files and hashes:         1: 3230322e39342e38332e302f32342d3234203d3e203535363732.roa (hash: XIFruI1ighCiBN1KxhqbA4Dl9kZx4Bi5WaQ0ju1y2JQ=)
                          2: F2441731A38F6F03ED8BFDB14F3CF89CED26A880.crl (hash: mauGDpomvQU0TadhjuitJQZyuOVjsu2pw7Oz3v9bhWQ=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/b8b441ad-f1aa-48d3-9edb-b9a5d5ce9ba8/0/F2441731A38F6F03ED8BFDB14F3CF89CED26A880.crl
                          rsync://repo-rpki.idnic.net/repo/b8b441ad-f1aa-48d3-9edb-b9a5d5ce9ba8/0/F2441731A38F6F03ED8BFDB14F3CF89CED26A880.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F2441731A38F6F03ED8BFDB14F3CF89CED26A880.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 26 Dec 2025 21:20:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:06:21:5b:ed:54:19:1b:ee:f3:76:7a:39:72:03:d8:e0:7f:2d:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F2441731A38F6F03ED8BFDB14F3CF89CED26A880
        Validity
            Not Before: Dec 23 14:36:54 2025 GMT
            Not After : Dec 26 21:20:54 2025 GMT
        Subject: CN=E8BE5F0C6EAC2DD73284A51CFCFE74CDCC2D0173
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:19:b6:b4:1c:fd:56:33:90:85:ee:6c:58:b7:
                    7c:65:be:0f:43:f3:9e:5c:2d:1f:46:63:1f:6c:0b:
                    b2:2d:ed:19:9b:e1:d4:2c:89:19:53:43:ee:c0:43:
                    81:9d:f8:63:ec:cf:2f:42:75:e1:53:36:d8:d1:39:
                    93:d4:90:2a:dc:43:ee:96:23:11:63:69:1d:c4:35:
                    b9:ba:08:80:fd:84:67:2c:f6:34:29:95:8c:18:be:
                    0f:ca:17:d0:26:1b:4f:62:0f:37:e5:32:a3:14:54:
                    14:ca:fe:2e:b2:70:ec:bd:17:14:3d:4c:a7:fb:6c:
                    ed:a7:00:a5:52:e0:4d:b9:50:0e:32:06:78:1b:9f:
                    1b:5c:1b:b9:90:e5:66:a8:36:5a:c3:79:38:f3:2f:
                    0f:69:1a:9d:91:e0:8d:8b:c1:e1:60:53:c0:bc:ab:
                    3c:7c:01:9c:f2:23:88:df:58:34:3e:6f:6c:07:97:
                    5d:a4:0a:d9:f8:05:b3:b5:3c:da:3f:31:3a:26:94:
                    6a:12:f1:af:1a:07:82:65:65:59:ce:ff:c6:8c:b2:
                    88:84:a4:75:71:ca:5b:4c:0e:9c:96:23:9c:f8:b8:
                    7f:46:96:b8:f3:36:0d:51:44:10:46:4c:31:92:de:
                    58:07:e7:6e:84:a6:d9:f8:00:29:30:5c:5c:5c:f9:
                    e7:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:BE:5F:0C:6E:AC:2D:D7:32:84:A5:1C:FC:FE:74:CD:CC:2D:01:73
            X509v3 Authority Key Identifier:
                keyid:F2:44:17:31:A3:8F:6F:03:ED:8B:FD:B1:4F:3C:F8:9C:ED:26:A8:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/b8b441ad-f1aa-48d3-9edb-b9a5d5ce9ba8/0/F2441731A38F6F03ED8BFDB14F3CF89CED26A880.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F2441731A38F6F03ED8BFDB14F3CF89CED26A880.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b8b441ad-f1aa-48d3-9edb-b9a5d5ce9ba8/0/F2441731A38F6F03ED8BFDB14F3CF89CED26A880.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:98:1e:5b:4b:89:8d:de:39:7c:3a:96:63:93:f0:7a:19:d4:
         49:76:c9:09:14:c0:3d:69:fe:d8:a5:f4:06:88:36:41:af:33:
         4a:17:b7:a2:20:aa:a0:82:fe:51:a2:77:b3:2b:7d:d7:27:ad:
         84:aa:5b:1a:d2:b5:c7:1e:ba:67:9b:fd:5a:95:3d:c9:43:8f:
         4e:e4:1a:e2:7e:fb:1f:86:a1:b7:c3:3a:b4:0f:1c:33:e8:8c:
         3f:ac:96:03:43:d4:e2:49:01:12:f7:78:c1:69:1c:38:f0:88:
         08:55:76:35:b2:21:51:77:76:20:ff:16:84:3e:27:f2:d5:b1:
         11:3e:97:7b:72:91:58:46:fc:2a:55:79:f3:2a:15:4a:fe:f2:
         28:c4:26:6b:04:8b:c5:23:db:c7:11:34:02:f3:ec:0f:09:43:
         2b:bc:96:27:34:60:54:a6:b3:b7:69:da:1f:b5:bb:0d:98:5d:
         42:75:fc:07:57:8e:df:e2:cf:2e:72:c0:d4:46:b0:5a:69:53:
         69:ca:77:2f:e9:68:ab:d5:8d:f5:c9:5a:43:5e:c8:1d:94:d1:
         9e:d6:08:01:eb:7c:ed:b2:e8:0f:f7:73:04:8a:c7:5a:f0:ae:
         93:03:bb:d2:40:4b:eb:8b:50:02:97:f4:79:d8:8c:5b:54:01:
         24:b6:fa:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 25 04:32:57 2025 by rpki-client