This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/e09b51a2-63d5-44b2-82b2-d94c516dd5f8/0/C83A14814153DADF0B9F754B65105F431A2C552D.mft
File:                     C83A14814153DADF0B9F754B65105F431A2C552D.mft (raw, json)
Hash identifier:          P+aZ8dXXptGEdgeYK0AOhMRJi2SQ7WusEgJcOgG0xBY=
Subject key identifier:   52:FB:97:68:A2:4D:51:B5:9B:B7:62:C5:02:59:5E:B2:0B:CE:4D:0E
Authority key identifier: C8:3A:14:81:41:53:DA:DF:0B:9F:75:4B:65:10:5F:43:1A:2C:55:2D
Certificate issuer:       /CN=C83A14814153DADF0B9F754B65105F431A2C552D
Certificate serial:       7717A5325313785646C92943C2ECE5C419BCEECD
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C83A14814153DADF0B9F754B65105F431A2C552D.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/e09b51a2-63d5-44b2-82b2-d94c516dd5f8/0/C83A14814153DADF0B9F754B65105F431A2C552D.mft
Manifest number:          0236
Signing time:             Wed 17 Dec 2025 04:31:36 +0000
Manifest this update:     Wed 17 Dec 2025 04:26:36 +0000
Manifest next update:     Sat 20 Dec 2025 08:19:36 +0000
Files and hashes:         1: C83A14814153DADF0B9F754B65105F431A2C552D.crl (hash: kxJtWmSBeezl7xdZ1gV2f5NpaegDLB7d0Fwod6IRKKQ=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/e09b51a2-63d5-44b2-82b2-d94c516dd5f8/0/C83A14814153DADF0B9F754B65105F431A2C552D.crl
                          rsync://repo-rpki.idnic.net/repo/e09b51a2-63d5-44b2-82b2-d94c516dd5f8/0/C83A14814153DADF0B9F754B65105F431A2C552D.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C83A14814153DADF0B9F754B65105F431A2C552D.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Dec 2025 08:19:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:17:a5:32:53:13:78:56:46:c9:29:43:c2:ec:e5:c4:19:bc:ee:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C83A14814153DADF0B9F754B65105F431A2C552D
        Validity
            Not Before: Dec 17 04:26:36 2025 GMT
            Not After : Dec 20 08:19:36 2025 GMT
        Subject: CN=52FB9768A24D51B59BB762C502595EB20BCE4D0E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:08:86:2a:aa:79:fc:3f:3c:52:7b:b2:83:46:
                    6b:a3:e2:4f:1b:59:66:4f:83:e6:0c:70:0b:4d:95:
                    27:c7:01:5e:27:71:34:1e:bf:8e:a7:f3:94:b7:ce:
                    dd:e1:a3:01:47:eb:ab:31:0a:70:e6:f8:6e:db:35:
                    19:05:af:5c:e7:7a:ae:9f:9d:b9:30:e6:07:38:2d:
                    60:ee:9f:20:a4:7b:4b:66:f1:48:42:84:3c:b5:58:
                    ae:7d:23:29:ff:6c:6a:1c:4f:4d:42:fa:4d:5f:40:
                    56:d6:a7:d7:a1:46:e5:65:ea:f7:f0:fd:00:53:f2:
                    00:c2:75:c6:e2:82:6c:8b:79:70:e3:f6:51:06:3b:
                    ff:2b:0f:b5:81:12:01:9d:55:36:e7:2f:28:be:4c:
                    81:eb:dd:0d:fd:a2:a0:3f:cc:02:98:04:e0:ee:0b:
                    ff:a4:0d:d3:28:af:24:79:c4:c9:71:c2:80:74:44:
                    66:80:bc:89:46:38:b8:fc:31:78:b8:81:75:44:de:
                    74:c8:35:97:f4:9f:75:bb:9d:64:93:d2:76:05:5c:
                    fe:31:18:14:0a:7c:2e:58:55:8c:58:69:1b:7b:ae:
                    4a:31:99:64:69:ca:47:43:2c:72:5e:76:71:89:d4:
                    50:a9:c8:c7:b4:ea:10:f6:f0:38:65:4f:d4:f1:43:
                    30:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:FB:97:68:A2:4D:51:B5:9B:B7:62:C5:02:59:5E:B2:0B:CE:4D:0E
            X509v3 Authority Key Identifier:
                keyid:C8:3A:14:81:41:53:DA:DF:0B:9F:75:4B:65:10:5F:43:1A:2C:55:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/e09b51a2-63d5-44b2-82b2-d94c516dd5f8/0/C83A14814153DADF0B9F754B65105F431A2C552D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C83A14814153DADF0B9F754B65105F431A2C552D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e09b51a2-63d5-44b2-82b2-d94c516dd5f8/0/C83A14814153DADF0B9F754B65105F431A2C552D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:ac:61:c9:f8:96:a4:65:51:b7:ca:39:b2:50:41:25:8a:df:
         51:65:53:dd:76:4d:e5:46:68:97:8f:30:fe:26:ec:8f:80:9a:
         2f:59:06:52:e1:af:00:f8:ab:89:83:fd:67:24:74:d6:61:b2:
         3f:73:0a:4e:23:ee:f5:48:4f:20:83:3a:a2:16:1d:47:65:c6:
         4c:75:29:f8:b9:ca:5e:62:6b:24:b8:89:07:34:1a:44:c0:5c:
         10:2c:77:b1:5f:a5:c7:c6:56:ae:9e:5c:57:63:a1:92:43:8f:
         8f:d4:bf:c3:56:8b:b6:05:71:d5:04:00:d3:3f:a8:bf:3e:a2:
         7e:05:41:bf:4e:6a:ee:cd:b6:ab:58:6a:9c:c5:a3:57:1f:0d:
         a0:99:50:87:78:5b:70:b5:e4:d4:61:9f:72:ad:67:62:86:1a:
         ab:0e:fa:2d:74:fa:f6:80:cf:59:1a:b7:f7:39:be:d5:16:01:
         f2:d7:84:72:55:f2:38:54:f9:e7:75:db:d7:82:69:72:ee:fb:
         cb:c1:a0:b9:31:94:0a:fb:02:ba:63:0a:55:f3:78:06:9d:3f:
         80:2c:ae:41:2a:d6:87:4f:6f:4c:ae:04:f0:44:7f:98:58:23:
         05:61:86:93:6a:4a:05:0f:40:d5:9e:0b:7d:2e:e3:74:2c:99:
         c0:61:fd:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 03:05:41 2025 by rpki-client