This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/c0ea5056-0fbc-4032-8680-3fa5441e4d55/0/A794160F8781ADF0A63CEECE52275B19F08F18D8.mft
File:                     A794160F8781ADF0A63CEECE52275B19F08F18D8.mft (raw, json)
Hash identifier:          eyiau237e4tadwjRPc7g/YzMle2nNKB9b9pXCaR9lMM=
Subject key identifier:   B6:91:0C:8A:15:23:A0:2E:0A:50:51:4E:19:A5:0F:DD:4F:CE:E1:CA
Authority key identifier: A7:94:16:0F:87:81:AD:F0:A6:3C:EE:CE:52:27:5B:19:F0:8F:18:D8
Certificate issuer:       /CN=A794160F8781ADF0A63CEECE52275B19F08F18D8
Certificate serial:       31BAD2F2D7CA5DC177C8E0F056C3B6F8DE0955D6
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A794160F8781ADF0A63CEECE52275B19F08F18D8.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/c0ea5056-0fbc-4032-8680-3fa5441e4d55/0/A794160F8781ADF0A63CEECE52275B19F08F18D8.mft
Manifest number:          0168
Signing time:             Mon 22 Dec 2025 22:21:05 +0000
Manifest this update:     Mon 22 Dec 2025 22:16:05 +0000
Manifest next update:     Fri 26 Dec 2025 10:18:05 +0000
Files and hashes:         1: A794160F8781ADF0A63CEECE52275B19F08F18D8.crl (hash: 8eDrPzEAOWQZxkyFhhpqs2dGOmMH8iy5XQw/QNK//JU=)
                          2: 3130332e3234342e32332e302f32342d3234203d3e20313531353336.roa (hash: mtMEnNnCc/n2ygwxa9g+6Mh/rQhVC5sEMiRt5rS7CMM=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/c0ea5056-0fbc-4032-8680-3fa5441e4d55/0/A794160F8781ADF0A63CEECE52275B19F08F18D8.crl
                          rsync://repo-rpki.idnic.net/repo/c0ea5056-0fbc-4032-8680-3fa5441e4d55/0/A794160F8781ADF0A63CEECE52275B19F08F18D8.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A794160F8781ADF0A63CEECE52275B19F08F18D8.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 24 Dec 2025 07:39:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:ba:d2:f2:d7:ca:5d:c1:77:c8:e0:f0:56:c3:b6:f8:de:09:55:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A794160F8781ADF0A63CEECE52275B19F08F18D8
        Validity
            Not Before: Dec 22 22:16:05 2025 GMT
            Not After : Dec 26 10:18:05 2025 GMT
        Subject: CN=B6910C8A1523A02E0A50514E19A50FDD4FCEE1CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:91:cd:71:7e:5a:00:8e:b3:48:6d:4d:ee:a3:
                    86:fc:40:ba:4d:c3:b7:8a:30:54:b3:fa:21:7e:a0:
                    09:9c:0c:d7:6c:a3:c1:3b:4f:4c:71:bf:b2:23:1a:
                    c4:16:78:99:b2:8a:6b:01:a6:d4:78:bd:4b:ae:fd:
                    63:dd:bd:2d:ea:08:44:d0:70:a3:87:0b:20:be:85:
                    91:9c:61:a2:64:fc:24:62:77:98:34:65:16:c0:bc:
                    13:b1:d7:3f:e4:91:ee:28:7e:e3:3a:27:cc:0e:2a:
                    14:bd:bb:0a:80:b9:67:a4:c2:cb:2d:15:78:28:68:
                    05:8d:80:ec:29:3d:cb:d0:07:3a:04:04:31:cc:a9:
                    51:2f:a9:42:e9:71:af:d0:b8:c7:b6:eb:95:72:d0:
                    04:73:5c:cb:16:ab:dd:d8:70:28:23:d6:64:4e:c5:
                    60:06:f0:7b:ab:47:87:42:80:26:15:fc:fb:14:d4:
                    10:d5:e7:76:6b:ae:75:97:81:36:7f:4a:43:17:c0:
                    a9:c0:24:f1:3c:6a:37:54:db:b7:e8:5e:85:e6:c5:
                    d4:27:75:ad:21:bd:d4:2e:4a:68:7a:e1:c8:bc:db:
                    42:28:2f:63:32:2e:8a:60:f4:a3:44:03:f5:c5:57:
                    86:94:63:90:b2:a6:23:19:6a:f0:04:2b:2e:f0:55:
                    29:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:91:0C:8A:15:23:A0:2E:0A:50:51:4E:19:A5:0F:DD:4F:CE:E1:CA
            X509v3 Authority Key Identifier:
                keyid:A7:94:16:0F:87:81:AD:F0:A6:3C:EE:CE:52:27:5B:19:F0:8F:18:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/c0ea5056-0fbc-4032-8680-3fa5441e4d55/0/A794160F8781ADF0A63CEECE52275B19F08F18D8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A794160F8781ADF0A63CEECE52275B19F08F18D8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c0ea5056-0fbc-4032-8680-3fa5441e4d55/0/A794160F8781ADF0A63CEECE52275B19F08F18D8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:c7:6f:6a:7f:6d:d2:19:fc:b8:8e:75:3b:cd:67:2b:b8:a2:
         a3:ba:3e:7f:13:e2:17:69:da:2b:50:96:26:24:32:3e:64:eb:
         d0:9e:5f:8f:cd:2e:a1:75:d8:4f:1e:48:a5:fd:9b:0e:3e:43:
         8b:e4:80:69:76:cf:8a:7f:c5:2a:33:9a:3d:2d:19:6f:7c:61:
         f7:ec:b9:19:c0:b4:a3:98:71:77:81:28:46:2a:31:77:6c:71:
         ef:78:0b:73:71:43:6a:68:a2:30:8b:7e:d3:6a:ce:de:4f:1b:
         eb:36:8b:5b:9a:07:0d:10:2e:cb:22:dd:58:12:1f:9d:c1:32:
         1b:3c:0b:8a:02:5f:e4:ab:50:8d:68:7d:7c:f5:2c:e9:08:ad:
         e5:51:4a:c6:4e:45:d1:49:95:62:cb:21:77:7a:9a:eb:05:50:
         e9:14:5c:1f:b6:78:49:f7:ce:eb:30:c8:28:43:bc:05:cc:3b:
         7b:5d:2d:b3:5d:40:2e:90:58:d0:f5:41:5e:9d:92:28:df:b4:
         94:af:82:de:24:90:5a:6b:15:2a:0c:1b:81:10:fd:bc:d8:99:
         e1:d2:89:08:06:53:3c:47:3f:06:cd:82:c5:2e:c9:06:e5:2c:
         b6:dc:2c:61:4f:91:92:a3:5a:04:b1:6a:0a:7f:ed:f4:6f:30:
         82:e4:30:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 03:46:38 2025 by rpki-client