This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/0c765d51-b0b1-435d-a66b-604c6e5d29ef/0/7470038419B67CD1743CE4D96953077ECE6928FE.mft
File:                     7470038419B67CD1743CE4D96953077ECE6928FE.mft (raw, json)
Hash identifier:          RW1U4zrZxP9AlKSt/qskjZrYD5jfC3XlVpUrnTIib/U=
Subject key identifier:   27:42:E3:24:28:22:10:E0:8F:40:43:E6:9C:04:5C:69:AD:30:63:5B
Authority key identifier: 74:70:03:84:19:B6:7C:D1:74:3C:E4:D9:69:53:07:7E:CE:69:28:FE
Certificate issuer:       /CN=7470038419B67CD1743CE4D96953077ECE6928FE
Certificate serial:       2EAC60A94833FE340B868FC21FDA605235B0C2FE
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7470038419B67CD1743CE4D96953077ECE6928FE.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/0c765d51-b0b1-435d-a66b-604c6e5d29ef/0/7470038419B67CD1743CE4D96953077ECE6928FE.mft
Manifest number:          01F7
Signing time:             Sat 06 Dec 2025 07:31:52 +0000
Manifest this update:     Sat 06 Dec 2025 07:26:52 +0000
Manifest next update:     Tue 09 Dec 2025 10:06:52 +0000
Files and hashes:         1: 7470038419B67CD1743CE4D96953077ECE6928FE.crl (hash: cSRRpeeLCcSEBJFtA4PaGbdJxuI9vW3rUt75Va76v/4=)
                          2: 3130332e3135342e35332e302f32342d3234203d3e20313430343739.roa (hash: XMfcxb2cyU/BTawAea91z/0xjspg0vqpK5L29ZTTMeY=)
                          3: 3130332e3135342e35322e302f32342d3234203d3e20313430343739.roa (hash: tMxmqnyNs+AqUZmzCKA8ba+dMpF5PucwNl1kbWxh19Q=)
                          4: 323430363a353463303a383030303a3a2f33332d3333203d3e20313430343739.roa (hash: 3w+VK+tvKAA1AfC4liESzr0B7Kk6JlTbtXB9BTFuOGs=)
                          5: 323430363a353463303a3a2f33332d3333203d3e20313430343739.roa (hash: WKukFhTAk9Wfv4/OtDk/a2nJ3JcuJ/OWKwAPnS7JgvA=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/0c765d51-b0b1-435d-a66b-604c6e5d29ef/0/7470038419B67CD1743CE4D96953077ECE6928FE.crl
                          rsync://repo-rpki.idnic.net/repo/0c765d51-b0b1-435d-a66b-604c6e5d29ef/0/7470038419B67CD1743CE4D96953077ECE6928FE.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7470038419B67CD1743CE4D96953077ECE6928FE.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 09 Dec 2025 10:06:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:ac:60:a9:48:33:fe:34:0b:86:8f:c2:1f:da:60:52:35:b0:c2:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7470038419B67CD1743CE4D96953077ECE6928FE
        Validity
            Not Before: Dec  6 07:26:52 2025 GMT
            Not After : Dec  9 10:06:52 2025 GMT
        Subject: CN=2742E324282210E08F4043E69C045C69AD30635B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:39:61:bd:74:6e:fe:19:b7:89:20:04:db:3c:
                    e4:ef:9c:bc:73:16:a5:f1:5e:88:21:67:b6:93:63:
                    ca:95:ac:18:4d:8f:10:7e:41:14:77:4e:a0:4a:45:
                    83:d0:3f:60:69:a0:91:68:66:55:eb:e0:a6:22:8b:
                    5a:17:27:4f:69:85:8e:c8:a8:62:6b:22:9c:db:d8:
                    76:67:ea:c7:8a:bb:e6:9d:a1:2b:a1:dc:72:a1:6c:
                    a3:3e:37:96:e5:06:70:bf:33:1b:2a:ca:b9:d7:42:
                    85:14:62:a9:75:89:46:a3:ff:83:bc:37:26:31:5a:
                    e0:17:03:7e:55:a5:78:c1:d4:8a:c5:cc:1e:c3:d5:
                    65:fb:1b:49:5b:3b:38:7c:15:6c:ad:75:e7:f7:01:
                    46:fa:16:0e:d1:57:20:5e:e9:3f:0b:45:76:df:1a:
                    07:8a:e1:c8:f8:c2:51:20:28:f2:b6:20:6e:69:12:
                    77:8d:37:ea:86:de:6e:e9:be:c3:28:62:12:d3:d2:
                    7b:68:0a:73:ba:1f:40:4b:bd:85:aa:19:9e:0e:56:
                    05:2a:1a:7d:25:40:68:45:00:22:a9:31:dc:82:ec:
                    7b:1f:ee:a8:e9:93:8b:11:4e:25:b0:00:05:6b:d8:
                    06:bb:49:d8:4d:8a:e3:e4:b5:ad:a3:96:37:06:fd:
                    27:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:42:E3:24:28:22:10:E0:8F:40:43:E6:9C:04:5C:69:AD:30:63:5B
            X509v3 Authority Key Identifier:
                keyid:74:70:03:84:19:B6:7C:D1:74:3C:E4:D9:69:53:07:7E:CE:69:28:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/0c765d51-b0b1-435d-a66b-604c6e5d29ef/0/7470038419B67CD1743CE4D96953077ECE6928FE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7470038419B67CD1743CE4D96953077ECE6928FE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0c765d51-b0b1-435d-a66b-604c6e5d29ef/0/7470038419B67CD1743CE4D96953077ECE6928FE.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:a5:30:fb:1e:5c:4f:77:08:4d:c1:2a:d5:10:80:b0:b2:42:
         4a:33:33:e7:0c:db:20:e6:28:11:a6:92:44:4d:32:7a:0b:00:
         1d:8b:16:1d:c8:41:bc:ce:5e:87:c0:00:b7:73:f7:cc:f1:13:
         34:62:d4:02:40:2f:99:ed:c3:86:17:bf:87:b6:9b:6e:b1:ca:
         30:6c:c5:18:7b:84:8a:39:ba:75:12:08:7f:c2:f1:d3:7d:22:
         27:81:eb:45:bc:7b:38:c0:63:76:37:1b:fe:ae:a4:70:85:6e:
         c9:d5:1b:f9:3b:33:f3:d7:cb:9f:37:a7:92:1e:bb:b8:32:a0:
         fd:0d:0e:bd:64:04:83:69:20:22:fa:4d:b2:6f:86:5c:88:c9:
         da:5c:6d:13:ea:4c:b0:bd:41:07:1d:16:82:ef:cf:1a:1e:47:
         fb:72:4b:20:97:c1:d6:32:4f:01:5a:db:37:7c:82:14:0f:62:
         f0:ab:45:cf:31:c4:5a:a5:d1:1c:70:cb:bd:37:64:1c:1b:88:
         dc:bc:c0:25:bd:fd:ac:e3:f0:17:a2:a0:e7:a1:b3:97:c1:c3:
         e9:ba:fd:a4:3e:4f:3e:a4:21:ad:4a:37:cc:07:88:15:8e:a7:
         a7:bf:39:31:dd:c0:d3:68:dc:50:e4:25:a3:09:d7:ec:95:76:
         a4:02:91:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 03:35:45 2025 by rpki-client