This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/273e2c09-70e4-4114-b4de-dd420c82fc1b/0/8A78F143A2E18078229313E44ACE70165360440C.mft
File:                     8A78F143A2E18078229313E44ACE70165360440C.mft (raw, json)
Hash identifier:          BAF7eBECS/TcdUumt2myDvK3Wx8rEVJ/hH21EhbuhHg=
Subject key identifier:   75:FD:55:C3:AF:D3:AB:EA:B2:F7:D3:D4:05:B6:60:02:60:1D:DF:E3
Authority key identifier: 8A:78:F1:43:A2:E1:80:78:22:93:13:E4:4A:CE:70:16:53:60:44:0C
Certificate issuer:       /CN=8A78F143A2E18078229313E44ACE70165360440C
Certificate serial:       6D048B87817A76B88057988F2B9920C5C5E5CD95
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/8A78F143A2E18078229313E44ACE70165360440C.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/273e2c09-70e4-4114-b4de-dd420c82fc1b/0/8A78F143A2E18078229313E44ACE70165360440C.mft
Manifest number:          FF
Signing time:             Fri 05 Dec 2025 22:20:57 +0000
Manifest this update:     Fri 05 Dec 2025 22:15:57 +0000
Manifest next update:     Tue 09 Dec 2025 07:19:57 +0000
Files and hashes:         1: 8A78F143A2E18078229313E44ACE70165360440C.crl (hash: GQvFOhHNZjLtQL8lH8ebpzSyBhEB7CTpXK/ifrdxZBk=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/273e2c09-70e4-4114-b4de-dd420c82fc1b/0/8A78F143A2E18078229313E44ACE70165360440C.crl
                          rsync://repo-rpki.idnic.net/repo/273e2c09-70e4-4114-b4de-dd420c82fc1b/0/8A78F143A2E18078229313E44ACE70165360440C.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/8A78F143A2E18078229313E44ACE70165360440C.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 09 Dec 2025 06:55:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:04:8b:87:81:7a:76:b8:80:57:98:8f:2b:99:20:c5:c5:e5:cd:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8A78F143A2E18078229313E44ACE70165360440C
        Validity
            Not Before: Dec  5 22:15:57 2025 GMT
            Not After : Dec  9 07:19:57 2025 GMT
        Subject: CN=75FD55C3AFD3ABEAB2F7D3D405B66002601DDFE3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:f8:1e:34:52:9e:22:5a:0e:b1:20:40:ee:b2:
                    47:67:2b:0f:0b:2f:72:55:14:aa:8a:b6:12:b3:44:
                    87:fb:cf:c2:e4:cc:c5:2d:3e:1d:6f:21:73:8e:d3:
                    00:fa:ed:db:13:5a:62:c8:f4:d1:42:2c:de:65:7e:
                    1c:ab:c4:1b:39:97:bb:a6:1d:c7:10:b4:2f:1f:b9:
                    4d:78:b5:a9:08:1d:9c:37:26:b0:f4:61:a3:14:e7:
                    32:e1:50:eb:26:78:8e:4a:fa:2d:26:4c:a9:34:58:
                    7d:d6:4d:4a:7b:3f:9c:f9:86:5b:64:5e:20:1f:bf:
                    fb:ad:4a:ce:60:fe:fe:1a:79:13:d4:53:1a:c5:50:
                    27:a7:83:5e:d7:e4:75:d6:98:3a:0a:3f:99:e1:a3:
                    ec:b0:34:98:3a:37:90:87:41:db:f6:bc:a3:e1:5e:
                    5f:02:d6:ad:3c:24:85:7c:45:63:0e:50:b1:06:87:
                    30:5a:f8:4f:9f:7c:57:0e:4a:e6:37:8a:05:af:19:
                    c8:75:9b:fe:75:99:88:79:68:c5:ce:ac:6f:10:22:
                    64:36:02:4e:2f:32:9b:dd:b9:6b:43:00:1c:a6:1b:
                    d8:57:eb:86:35:6e:fb:39:a5:6a:b5:70:32:39:85:
                    b0:1f:8e:c1:45:01:54:25:2d:eb:07:c3:a2:df:ed:
                    76:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:FD:55:C3:AF:D3:AB:EA:B2:F7:D3:D4:05:B6:60:02:60:1D:DF:E3
            X509v3 Authority Key Identifier:
                keyid:8A:78:F1:43:A2:E1:80:78:22:93:13:E4:4A:CE:70:16:53:60:44:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/273e2c09-70e4-4114-b4de-dd420c82fc1b/0/8A78F143A2E18078229313E44ACE70165360440C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/8A78F143A2E18078229313E44ACE70165360440C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/273e2c09-70e4-4114-b4de-dd420c82fc1b/0/8A78F143A2E18078229313E44ACE70165360440C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         de:64:64:52:c9:31:af:17:89:7f:c1:e3:8f:68:7f:dc:a6:6a:
         07:be:68:25:80:c0:b6:d0:02:cb:0c:07:8b:80:a1:d5:6f:93:
         84:5c:af:a7:ab:73:6f:56:e8:cd:ef:cd:b0:fc:65:83:c3:58:
         c7:74:71:cc:ee:79:8e:aa:20:89:d3:2b:b5:6f:00:aa:d9:c3:
         d0:7f:36:f5:47:0d:6b:7d:de:ac:20:32:9a:9f:31:1b:8b:30:
         12:a4:0d:9f:91:9f:3f:fb:e2:2d:ac:98:cb:97:e1:d6:d0:1e:
         3f:c7:5b:4b:9b:83:df:f9:98:69:7f:4a:58:a7:f8:f9:1a:55:
         f7:23:6a:e0:de:b5:24:17:21:e0:6b:c0:3d:67:94:8a:03:53:
         58:b9:41:2a:fd:80:41:43:31:c1:e5:11:ed:02:70:6a:e5:cb:
         1e:a6:6e:8f:4f:83:a2:e6:2d:05:8a:ce:cf:9e:59:84:13:6b:
         84:b8:d5:2b:5d:61:8e:e1:4d:45:02:16:8b:ee:4d:46:65:0d:
         d7:2c:50:bf:93:fb:5f:f3:aa:65:cf:7e:0a:8b:e8:19:f4:2d:
         ad:f8:d4:3b:30:f2:26:4b:20:c1:92:cf:52:1a:27:8f:19:aa:
         0c:35:f4:5a:9c:a9:3d:ac:d9:6f:d5:71:31:98:9a:65:fc:22:
         9d:ac:88:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 00:00:00 2025 by rpki-client