This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/1b90ada6-b721-4b5f-90ca-e8f4b977d561/0/7CDEC0195C0619A2844735B38B762AB1C145318A.mft
File:                     7CDEC0195C0619A2844735B38B762AB1C145318A.mft (raw, json)
Hash identifier:          CPhrQio8YYQFkcZRBrQfjzWN+OZJu67CDwtZCPjSSQU=
Subject key identifier:   38:3C:19:5A:18:64:C2:B9:45:B5:11:58:72:B4:74:31:4B:84:80:AE
Authority key identifier: 7C:DE:C0:19:5C:06:19:A2:84:47:35:B3:8B:76:2A:B1:C1:45:31:8A
Certificate issuer:       /CN=7CDEC0195C0619A2844735B38B762AB1C145318A
Certificate serial:       3846EDA15A8F7EB85EF57367969E08E63DCD9242
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7CDEC0195C0619A2844735B38B762AB1C145318A.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/1b90ada6-b721-4b5f-90ca-e8f4b977d561/0/7CDEC0195C0619A2844735B38B762AB1C145318A.mft
Manifest number:          01F8
Signing time:             Sat 06 Dec 2025 05:10:52 +0000
Manifest this update:     Sat 06 Dec 2025 05:05:52 +0000
Manifest next update:     Tue 09 Dec 2025 13:25:52 +0000
Files and hashes:         1: 7CDEC0195C0619A2844735B38B762AB1C145318A.crl (hash: eokOOOgRTu7N0Wz/8wA7xASjHinw4OlTLgy+b7VKuDA=)
                          2: 3130332e3136332e33362e302f32332d3234203d3e20313338383836.roa (hash: CtGkBvOXr+z5xeQBMHV9NThlZEDqDbWOP9wsaKhn80Y=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/1b90ada6-b721-4b5f-90ca-e8f4b977d561/0/7CDEC0195C0619A2844735B38B762AB1C145318A.crl
                          rsync://repo-rpki.idnic.net/repo/1b90ada6-b721-4b5f-90ca-e8f4b977d561/0/7CDEC0195C0619A2844735B38B762AB1C145318A.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7CDEC0195C0619A2844735B38B762AB1C145318A.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 09 Dec 2025 13:25:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:46:ed:a1:5a:8f:7e:b8:5e:f5:73:67:96:9e:08:e6:3d:cd:92:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CDEC0195C0619A2844735B38B762AB1C145318A
        Validity
            Not Before: Dec  6 05:05:52 2025 GMT
            Not After : Dec  9 13:25:52 2025 GMT
        Subject: CN=383C195A1864C2B945B5115872B474314B8480AE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:cb:87:1b:c1:9b:e6:2f:4f:44:0d:76:37:54:
                    ae:e1:53:d7:e6:3e:78:1b:3b:ae:1e:9f:c7:50:4a:
                    40:b1:53:f5:a1:00:9f:09:f6:d8:09:8a:0e:b7:e1:
                    8f:ab:e8:f0:ec:c9:f2:99:f1:36:9a:f0:54:56:1d:
                    83:cb:d7:1f:75:58:1a:61:10:4d:ae:c8:71:20:f2:
                    bb:f7:1d:94:0c:b5:b2:8b:0b:b1:18:8a:e3:05:e0:
                    b6:cc:34:c7:d3:a8:37:ad:98:6b:80:b0:94:0d:69:
                    71:e5:da:f6:af:63:af:2e:0f:ed:9a:34:5a:a3:fd:
                    ac:d8:ee:05:1e:50:ed:2d:92:d2:7c:3c:7b:b0:28:
                    2a:50:30:cb:71:ec:58:ab:55:7f:f1:a8:e3:65:85:
                    da:9f:38:48:af:72:9d:44:da:c5:aa:ad:15:ca:33:
                    39:c9:f3:4d:c0:3d:05:88:ca:9d:6a:cb:ba:02:61:
                    c9:2e:f1:38:e3:4e:4d:99:0d:8d:e5:10:b0:87:e8:
                    70:41:e7:5f:4b:b0:ed:38:82:ba:da:8e:ae:0d:d1:
                    41:32:43:25:d6:8f:01:fa:35:cd:9d:a6:ce:93:90:
                    35:57:1e:9f:3a:b1:88:9d:00:dd:b4:d3:98:c8:07:
                    0e:2e:92:9f:a8:6d:0e:eb:28:2a:50:00:aa:5b:00:
                    b4:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:3C:19:5A:18:64:C2:B9:45:B5:11:58:72:B4:74:31:4B:84:80:AE
            X509v3 Authority Key Identifier:
                keyid:7C:DE:C0:19:5C:06:19:A2:84:47:35:B3:8B:76:2A:B1:C1:45:31:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/1b90ada6-b721-4b5f-90ca-e8f4b977d561/0/7CDEC0195C0619A2844735B38B762AB1C145318A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7CDEC0195C0619A2844735B38B762AB1C145318A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1b90ada6-b721-4b5f-90ca-e8f4b977d561/0/7CDEC0195C0619A2844735B38B762AB1C145318A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:02:11:4e:93:57:0d:ef:06:6d:c2:5b:86:ef:da:a2:32:5e:
         48:c6:61:c1:94:8d:07:28:9c:c3:11:52:71:43:b2:13:e1:31:
         0b:a7:4a:d9:cc:34:20:a7:64:8f:73:f7:ea:03:3f:e8:4d:e1:
         a3:54:c0:e3:c7:6f:ee:70:cb:37:27:aa:57:8c:d6:a0:48:fc:
         d4:e1:0c:bf:0a:97:54:23:32:25:9b:db:58:33:c5:6d:da:e1:
         79:f1:dc:14:be:8d:87:04:c8:05:97:66:fa:cd:e5:33:09:b1:
         b0:60:07:e1:29:70:f5:04:49:4a:50:04:1b:53:82:85:f0:24:
         de:ab:ee:54:1b:5a:90:a6:a6:10:a6:76:53:ef:a6:66:5d:0f:
         d5:c0:ac:a9:71:19:8c:de:3c:bc:ef:54:40:2d:b9:4e:4e:c7:
         e6:43:7f:69:93:4f:7c:fa:90:33:9f:c1:e9:10:51:31:07:b6:
         cd:16:23:70:a5:f1:0c:e2:e9:79:2c:29:5f:c9:7a:83:87:1f:
         74:94:c2:d8:0a:cb:29:70:6f:ca:48:89:f9:6f:eb:c8:1d:3c:
         c9:24:de:99:5d:3d:4f:93:ed:7c:41:14:33:81:18:27:c1:00:
         eb:21:4a:34:19:41:03:e3:a9:8c:4a:ac:fe:8c:9c:b2:10:c2:
         29:58:e1:ef
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUOEbtoVqPfrhe9XNnlp4I5j3NkkIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0NERUMwMTk1QzA2MTlBMjg0NDczNUIzOEI3NjJBQjFD
MTQ1MzE4QTAeFw0yNTEyMDYwNTA1NTJaFw0yNTEyMDkxMzI1NTJaMDMxMTAvBgNV
BAMTKDM4M0MxOTVBMTg2NEMyQjk0NUI1MTE1ODcyQjQ3NDMxNEI4NDgwQUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsy4cbwZvmL09EDXY3VK7hU9fm
PngbO64en8dQSkCxU/WhAJ8J9tgJig634Y+r6PDsyfKZ8Taa8FRWHYPL1x91WBph
EE2uyHEg8rv3HZQMtbKLC7EYiuMF4LbMNMfTqDetmGuAsJQNaXHl2vavY68uD+2a
NFqj/azY7gUeUO0tktJ8PHuwKCpQMMtx7FirVX/xqONlhdqfOEivcp1E2sWqrRXK
MznJ803APQWIyp1qy7oCYcku8TjjTk2ZDY3lELCH6HBB519LsO04grrajq4N0UEy
QyXWjwH6Nc2dps6TkDVXHp86sYidAN2005jIBw4ukp+obQ7rKCpQAKpbALShAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUODwZWhhkwrlFtRFYcrR0MUuEgK4wHwYDVR0j
BBgwFoAUfN7AGVwGGaKERzWzi3YqscFFMYowDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x
YjkwYWRhNi1iNzIxLTRiNWYtOTBjYS1lOGY0Yjk3N2Q1NjEvMC83Q0RFQzAxOTVD
MDYxOUEyODQ0NzM1QjM4Qjc2MkFCMUMxNDUzMThBLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvN0NERUMwMTk1QzA2MTlBMjg0NDczNUIzOEI3NjJBQjFDMTQ1
MzE4QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWI5MGFkYTYtYjcyMS00YjVmLTkw
Y2EtZThmNGI5NzdkNTYxLzAvN0NERUMwMTk1QzA2MTlBMjg0NDczNUIzOEI3NjJB
QjFDMTQ1MzE4QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAGkCEU6TVw3vBm3CW4bv2qIyXkjGYcGUjQco
nMMRUnFDshPhMQunStnMNCCnZI9z9+oDP+hN4aNUwOPHb+5wyzcnqleM1qBI/NTh
DL8Kl1QjMiWb21gzxW3a4Xnx3BS+jYcEyAWXZvrN5TMJsbBgB+EpcPUESUpQBBtT
goXwJN6r7lQbWpCmphCmdlPvpmZdD9XArKlxGYzePLzvVEAtuU5Ox+ZDf2mTT3z6
kDOfwekQUTEHts0WI3Cl8Qzi6XksKV/JeoOHH3SUwtgKyylwb8pIiflv68gdPMkk
3pldPU+T7XxBFDOBGCfBAOshSjQZQQPjqYxKrP6MnLIQwilY4e8=
-----END CERTIFICATE-----
Generated at Sun Dec 7 00:14:08 2025 by rpki-client