This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/172d1752-4853-4c74-b574-994d3b124090/0/7ED69B0DB232E419E90D72766374EA03E6F18F73.mft
File:                     7ED69B0DB232E419E90D72766374EA03E6F18F73.mft (raw, json)
Hash identifier:          UKsSKMuSimjyPGw22DTuwPVSiUdstW/MumQW0tIjDXg=
Subject key identifier:   BD:90:76:7F:FE:51:09:29:EB:99:E6:8C:D6:D5:AD:61:5C:3C:B3:36
Authority key identifier: 7E:D6:9B:0D:B2:32:E4:19:E9:0D:72:76:63:74:EA:03:E6:F1:8F:73
Certificate issuer:       /CN=7ED69B0DB232E419E90D72766374EA03E6F18F73
Certificate serial:       6E05ABA7F288FE2EA929FF4A1D14F63A15362ED7
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/7ED69B0DB232E419E90D72766374EA03E6F18F73.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/172d1752-4853-4c74-b574-994d3b124090/0/7ED69B0DB232E419E90D72766374EA03E6F18F73.mft
Manifest number:          0104
Signing time:             Fri 05 Dec 2025 21:31:26 +0000
Manifest this update:     Fri 05 Dec 2025 21:26:26 +0000
Manifest next update:     Mon 08 Dec 2025 22:48:26 +0000
Files and hashes:         1: 7ED69B0DB232E419E90D72766374EA03E6F18F73.crl (hash: 0YGXJ0VjUfvNKQrMHBfy3OiVYDqE7svWJzm0M0AOcY8=)
                          2: 3135372e32302e39342e302f32342d3234203d3e20313532343039.roa (hash: yeQYlb5D5MRjJOZy3icwpq+Xda5AxDKy2LKlKgiIVJg=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/172d1752-4853-4c74-b574-994d3b124090/0/7ED69B0DB232E419E90D72766374EA03E6F18F73.crl
                          rsync://repo-rpki.idnic.net/repo/172d1752-4853-4c74-b574-994d3b124090/0/7ED69B0DB232E419E90D72766374EA03E6F18F73.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/7ED69B0DB232E419E90D72766374EA03E6F18F73.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 08 Dec 2025 22:48:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:05:ab:a7:f2:88:fe:2e:a9:29:ff:4a:1d:14:f6:3a:15:36:2e:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ED69B0DB232E419E90D72766374EA03E6F18F73
        Validity
            Not Before: Dec  5 21:26:26 2025 GMT
            Not After : Dec  8 22:48:26 2025 GMT
        Subject: CN=BD90767FFE510929EB99E68CD6D5AD615C3CB336
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:4e:bc:d8:8a:d5:cb:5b:f3:76:bb:89:c7:ad:
                    bb:6c:68:62:69:bc:be:70:f5:cb:d0:4a:8e:3f:57:
                    4c:52:d6:90:c7:39:c9:37:ce:bc:bc:0c:d6:97:0d:
                    ac:6f:d2:01:50:50:06:87:1e:42:d9:e4:2d:78:1f:
                    8d:64:72:24:b6:f5:a7:73:8f:4a:a9:1f:45:c2:05:
                    37:e7:da:7f:35:2f:4d:9b:54:84:c7:85:06:0e:2d:
                    d1:4e:ea:f6:9b:34:c1:05:43:e9:6b:ee:63:e4:9c:
                    55:d5:87:a3:e5:e1:35:ec:37:75:0f:3a:84:88:eb:
                    8c:bd:3a:9c:f0:fe:45:0d:5d:1c:47:14:45:13:7b:
                    cd:59:50:c6:81:09:e6:22:5d:9d:0e:6f:3e:1d:5f:
                    10:a2:2e:e1:5a:ff:4f:69:81:b4:47:01:9c:db:98:
                    db:e6:a0:26:81:a6:3b:a8:63:41:b7:80:a4:1e:c8:
                    27:8b:9d:86:50:34:30:e9:d1:41:88:4b:60:38:7f:
                    2a:ed:c4:d9:c7:10:86:32:e1:aa:61:f7:a0:21:f2:
                    7a:29:8c:65:ca:17:11:fb:a8:a7:69:bd:02:2b:ac:
                    a9:58:84:ff:40:af:d0:82:17:4a:c5:da:e9:3e:d7:
                    65:6a:15:2d:b6:46:e9:fe:68:cd:8e:03:27:ba:72:
                    6c:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:90:76:7F:FE:51:09:29:EB:99:E6:8C:D6:D5:AD:61:5C:3C:B3:36
            X509v3 Authority Key Identifier:
                keyid:7E:D6:9B:0D:B2:32:E4:19:E9:0D:72:76:63:74:EA:03:E6:F1:8F:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/172d1752-4853-4c74-b574-994d3b124090/0/7ED69B0DB232E419E90D72766374EA03E6F18F73.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/7ED69B0DB232E419E90D72766374EA03E6F18F73.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/172d1752-4853-4c74-b574-994d3b124090/0/7ED69B0DB232E419E90D72766374EA03E6F18F73.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:04:a7:6a:30:b9:35:8a:90:b3:93:98:ae:59:fa:9a:04:1e:
         48:c2:68:9e:8d:b1:6e:1f:3b:06:64:80:67:92:94:93:7d:5a:
         07:6e:1e:7b:10:fd:e4:bf:58:83:2e:d6:17:ec:04:81:41:2e:
         7f:9b:34:fe:ee:2b:76:1c:c0:99:ad:f5:ca:ee:ff:32:c7:5b:
         55:3b:e2:30:69:af:49:3b:e3:ee:34:23:52:f3:37:01:7e:99:
         7d:c5:55:d4:3b:73:af:3e:5c:a9:7d:48:09:41:9d:be:81:ae:
         07:3d:2d:5c:bd:76:ac:89:6c:f2:7e:21:1c:cb:4e:ca:a1:86:
         20:53:69:18:3a:bc:0a:32:5d:f9:91:67:ca:a8:85:05:ec:80:
         ab:80:73:a2:73:64:1d:45:ff:ea:df:50:6d:70:37:71:28:3e:
         89:c8:01:1d:06:f1:62:ad:df:68:c8:12:52:0b:f8:e1:dd:60:
         e6:2b:c1:95:9b:66:83:47:78:c7:a0:3e:f1:22:07:72:9e:2d:
         51:a3:3a:bb:e3:eb:84:81:ad:90:5b:80:1c:61:24:57:13:88:
         fb:57:a2:90:58:41:60:41:ec:9b:a2:76:2b:6d:60:01:4a:7b:
         79:b0:b7:ea:f4:4e:1d:36:88:5e:cf:9f:09:6e:25:c0:41:d5:
         be:53:c2:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 23:43:26 2025 by rpki-client