This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/c8e8ff49-f70a-4b6f-aae6-8c77769c5dee/0/BB69F13D2CEDC5F348CEA1C1BBF6E1DC24B1D981.mft
File:                     BB69F13D2CEDC5F348CEA1C1BBF6E1DC24B1D981.mft (raw, json)
Hash identifier:          DYxEbg7srr5vQC8bhDh3u+anI4iXwkAsdHbLycbhJtY=
Subject key identifier:   AE:C6:A1:79:A4:17:3F:8D:F0:C8:0F:50:5D:AD:57:4D:B2:90:AB:65
Authority key identifier: BB:69:F1:3D:2C:ED:C5:F3:48:CE:A1:C1:BB:F6:E1:DC:24:B1:D9:81
Certificate issuer:       /CN=BB69F13D2CEDC5F348CEA1C1BBF6E1DC24B1D981
Certificate serial:       18A47BD590268374D4DF64FEB8810535B74E2E84
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BB69F13D2CEDC5F348CEA1C1BBF6E1DC24B1D981.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/c8e8ff49-f70a-4b6f-aae6-8c77769c5dee/0/BB69F13D2CEDC5F348CEA1C1BBF6E1DC24B1D981.mft
Manifest number:          051B
Signing time:             Thu 25 Dec 2025 11:02:18 +0000
Manifest this update:     Thu 25 Dec 2025 10:57:18 +0000
Manifest next update:     Sun 28 Dec 2025 19:54:18 +0000
Files and hashes:         1: BB69F13D2CEDC5F348CEA1C1BBF6E1DC24B1D981.crl (hash: Fok0u3V5Iwv+luGfGM3b9/+vwlgZXDpRkUV1BUze3s4=)
                          2: 3130332e3134362e3230322e302f32332d3234203d3e20313336303532.roa (hash: 3qk3I2sPJGrqwIZSGGvefDpSgj0jalLHjTWubW6XWCI=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/c8e8ff49-f70a-4b6f-aae6-8c77769c5dee/0/BB69F13D2CEDC5F348CEA1C1BBF6E1DC24B1D981.crl
                          rsync://repo-rpki.idnic.net/repo/c8e8ff49-f70a-4b6f-aae6-8c77769c5dee/0/BB69F13D2CEDC5F348CEA1C1BBF6E1DC24B1D981.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BB69F13D2CEDC5F348CEA1C1BBF6E1DC24B1D981.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 28 Dec 2025 19:54:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:a4:7b:d5:90:26:83:74:d4:df:64:fe:b8:81:05:35:b7:4e:2e:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BB69F13D2CEDC5F348CEA1C1BBF6E1DC24B1D981
        Validity
            Not Before: Dec 25 10:57:18 2025 GMT
            Not After : Dec 28 19:54:18 2025 GMT
        Subject: CN=AEC6A179A4173F8DF0C80F505DAD574DB290AB65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:cc:b6:28:76:47:0d:dd:06:f1:61:65:56:28:
                    58:e3:6e:26:ac:75:0f:66:3b:5d:b8:63:e8:cd:0e:
                    f9:04:ae:6d:53:d1:c2:33:e7:29:f2:91:16:9f:fc:
                    27:8f:4d:4b:01:9b:11:c7:ea:42:14:8b:08:3b:bc:
                    5b:4c:fb:4c:7b:df:23:13:01:51:81:c1:59:9a:90:
                    83:f5:8a:6b:fb:da:1f:2b:d9:71:34:2e:88:aa:6d:
                    b5:3c:d9:a0:c3:8a:9a:e6:0e:32:b3:73:dc:c6:88:
                    6f:e6:a7:30:f3:cf:34:fd:62:96:b0:09:da:10:a6:
                    22:eb:72:7b:c9:8b:e8:1c:ab:77:e7:59:42:f3:ee:
                    ff:f8:8e:7a:18:1a:ff:3c:88:24:58:eb:c8:b8:2f:
                    c5:a2:7c:6c:2d:99:bc:be:4e:ef:0c:d0:f2:b2:c2:
                    e7:ce:63:d3:52:76:71:8a:b9:79:31:62:3f:57:74:
                    75:f9:c1:bf:6a:b9:e4:92:7c:b7:d4:ff:41:a2:01:
                    3f:24:cc:12:f6:93:a6:56:78:de:d0:47:8d:e9:8d:
                    8f:bd:f7:66:51:48:fb:ac:89:87:3c:08:71:6b:03:
                    5f:f8:ea:d1:09:30:df:9f:80:bb:e9:0b:31:7f:ee:
                    cc:d1:5d:66:2d:6e:f0:f8:81:3f:d0:90:dd:35:28:
                    68:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:C6:A1:79:A4:17:3F:8D:F0:C8:0F:50:5D:AD:57:4D:B2:90:AB:65
            X509v3 Authority Key Identifier:
                keyid:BB:69:F1:3D:2C:ED:C5:F3:48:CE:A1:C1:BB:F6:E1:DC:24:B1:D9:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/c8e8ff49-f70a-4b6f-aae6-8c77769c5dee/0/BB69F13D2CEDC5F348CEA1C1BBF6E1DC24B1D981.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BB69F13D2CEDC5F348CEA1C1BBF6E1DC24B1D981.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c8e8ff49-f70a-4b6f-aae6-8c77769c5dee/0/BB69F13D2CEDC5F348CEA1C1BBF6E1DC24B1D981.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:61:a2:27:e5:35:83:b6:c4:70:a2:34:09:f6:86:fb:54:0c:
         8d:40:bb:15:01:0d:08:cd:90:d8:92:fb:9b:04:cb:ca:25:25:
         a9:54:b4:19:8a:14:93:e7:05:eb:8a:c1:27:00:ea:95:18:41:
         47:90:4f:8a:08:83:f1:6f:06:73:c3:29:9f:83:73:6f:f3:b8:
         bd:45:ad:88:dc:5c:ad:6e:9c:c8:06:4c:0c:a5:df:7f:f9:9d:
         17:d9:e4:ff:e0:50:f7:23:33:90:1f:9e:29:fc:91:42:1b:ab:
         ae:5d:6f:15:52:cf:bd:ca:93:b7:b5:34:be:54:f8:02:d7:5f:
         70:dd:7c:2d:da:6e:67:17:2b:c1:42:e5:63:c3:df:89:dc:e7:
         f5:ec:6a:78:57:e5:33:04:c5:46:79:f5:53:e3:ed:0e:54:2a:
         8b:f1:50:a8:2c:bc:c2:b9:88:39:02:13:1f:ca:b7:5d:60:41:
         09:31:e5:34:1c:03:eb:b8:8a:ca:02:a7:66:6b:cd:bc:92:d3:
         94:77:13:0c:7d:fe:a2:1d:b5:b1:df:02:33:ae:73:8b:84:83:
         d2:b8:59:ab:50:01:aa:ac:4c:c6:53:c5:21:95:d1:b2:bf:55:
         a4:22:c6:c2:a3:f6:28:d2:23:27:bc:39:5e:9d:10:e3:ef:60:
         c1:9f:fd:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 27 17:49:50 2025 by rpki-client