This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/388329ca-e8f7-4d3d-ace4-807f8aa58ae0/0/7365D5B1AE30C5B6450AFDDE98BA231F962A6C26.mft
File:                     7365D5B1AE30C5B6450AFDDE98BA231F962A6C26.mft (raw, json)
Hash identifier:          VDwU/7Y+w9VoAFT7jXoBBJe+tcK2t3HUTw8vISH6K/s=
Subject key identifier:   EF:3F:51:96:CD:3D:A3:E7:17:5C:FD:C0:54:09:1C:0A:8E:CE:2C:B3
Authority key identifier: 73:65:D5:B1:AE:30:C5:B6:45:0A:FD:DE:98:BA:23:1F:96:2A:6C:26
Certificate issuer:       /CN=7365D5B1AE30C5B6450AFDDE98BA231F962A6C26
Certificate serial:       6D73EEFE4114C548C2FA3F947A4224B59ED0A478
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7365D5B1AE30C5B6450AFDDE98BA231F962A6C26.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/388329ca-e8f7-4d3d-ace4-807f8aa58ae0/0/7365D5B1AE30C5B6450AFDDE98BA231F962A6C26.mft
Manifest number:          018B
Signing time:             Sat 06 Dec 2025 17:01:02 +0000
Manifest this update:     Sat 06 Dec 2025 16:56:02 +0000
Manifest next update:     Tue 09 Dec 2025 20:14:02 +0000
Files and hashes:         1: 3130332e3233342e31382e302f32342d3234203d3e20313531353036.roa (hash: OR1t4IQS/xyvZZqdpeuC2pHKP+AjsN9yFmbMgs+eujs=)
                          2: 3130332e3233342e31392e302f32342d3234203d3e20313531353036.roa (hash: KyUIZC7TjXTI6QS0grqhp1GxQ/Om/oaFfi+alLTVI8o=)
                          3: 7365D5B1AE30C5B6450AFDDE98BA231F962A6C26.crl (hash: dZ/Ra/CNLnY3YKu3D4XCWDSpp7UwzJAUuCqdOtoaqnE=)
                          4: 3130332e3233342e31382e302f32332d3233203d3e20313531353036.roa (hash: WfEJ9vF4jc0Zx7Acd4sKIoyTrc+nMSAchl082ejeiOg=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/388329ca-e8f7-4d3d-ace4-807f8aa58ae0/0/7365D5B1AE30C5B6450AFDDE98BA231F962A6C26.crl
                          rsync://repo-rpki.idnic.net/repo/388329ca-e8f7-4d3d-ace4-807f8aa58ae0/0/7365D5B1AE30C5B6450AFDDE98BA231F962A6C26.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7365D5B1AE30C5B6450AFDDE98BA231F962A6C26.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 09 Dec 2025 15:57:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:73:ee:fe:41:14:c5:48:c2:fa:3f:94:7a:42:24:b5:9e:d0:a4:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7365D5B1AE30C5B6450AFDDE98BA231F962A6C26
        Validity
            Not Before: Dec  6 16:56:02 2025 GMT
            Not After : Dec  9 20:14:02 2025 GMT
        Subject: CN=EF3F5196CD3DA3E7175CFDC054091C0A8ECE2CB3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:fe:c5:d6:4c:16:7a:4f:c3:32:9f:09:08:9b:
                    33:8f:79:17:65:5d:7d:1c:a3:87:a5:0f:27:de:3d:
                    ca:b6:d9:50:b7:a0:e4:64:06:00:09:45:f5:a5:ac:
                    82:b5:d1:0f:b4:f0:ba:da:17:68:ca:76:0e:c0:0e:
                    f8:f6:9c:17:06:c2:bb:24:36:82:ae:0e:7f:01:97:
                    21:c1:a5:26:11:05:8d:be:85:99:10:91:62:c8:db:
                    d9:00:62:25:d8:a7:5e:d4:f6:fa:3d:00:47:9e:ad:
                    4c:b1:4d:3a:8f:30:57:a9:69:25:cc:27:f7:e1:e5:
                    cf:43:02:79:0e:37:de:c9:b2:ad:15:dc:9c:cc:83:
                    4e:5b:79:83:ba:8f:8e:33:67:c0:91:0b:c8:f7:c4:
                    5a:ae:57:4c:27:10:a7:34:b8:98:aa:6e:76:97:4a:
                    16:ea:df:35:a0:da:e0:e3:c8:bd:19:f8:1f:df:61:
                    d0:cb:5c:e6:fa:4a:5f:4e:45:54:13:c8:b1:2a:de:
                    17:5c:21:c3:ae:43:d9:dd:16:c0:6e:13:a6:ce:ef:
                    48:f1:d5:df:57:c8:4b:55:54:de:27:39:5f:50:bf:
                    65:7a:17:c6:e1:3b:65:8a:ee:b4:a0:4a:49:e8:9a:
                    ea:51:99:66:30:11:07:2f:15:e9:6f:e8:b1:92:07:
                    eb:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:3F:51:96:CD:3D:A3:E7:17:5C:FD:C0:54:09:1C:0A:8E:CE:2C:B3
            X509v3 Authority Key Identifier:
                keyid:73:65:D5:B1:AE:30:C5:B6:45:0A:FD:DE:98:BA:23:1F:96:2A:6C:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/388329ca-e8f7-4d3d-ace4-807f8aa58ae0/0/7365D5B1AE30C5B6450AFDDE98BA231F962A6C26.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7365D5B1AE30C5B6450AFDDE98BA231F962A6C26.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/388329ca-e8f7-4d3d-ace4-807f8aa58ae0/0/7365D5B1AE30C5B6450AFDDE98BA231F962A6C26.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:93:46:ae:2a:68:3c:81:6b:d1:02:7e:d1:4a:bf:fd:1e:c7:
         c1:8e:e5:43:66:d6:d8:c1:57:e5:85:98:65:e2:e0:98:49:6b:
         7b:ca:c2:bb:36:da:e9:05:9e:1f:71:1b:4f:dc:62:83:a1:34:
         17:04:3c:ca:9b:23:ee:ee:b6:ee:b8:5e:49:8f:a9:93:5c:6c:
         d5:ad:e7:e7:ba:44:6f:90:b3:40:5e:3d:0a:df:ef:9a:fa:20:
         8d:05:d1:ac:3a:16:40:0f:66:ff:4f:71:36:46:21:8d:7d:72:
         5e:9f:b9:12:36:e6:21:35:c8:35:d7:07:28:3e:95:07:a4:0d:
         dc:37:3a:a2:0c:ed:ec:a2:7f:d5:47:48:63:c4:39:b7:31:b7:
         42:2e:30:30:13:46:ce:60:46:9d:1b:2d:fc:78:34:e7:a6:df:
         22:4f:3d:87:60:d8:3e:f3:78:ac:49:d6:a3:d3:9a:29:86:7f:
         a3:b1:30:d5:1e:e7:65:09:4d:e4:93:3b:12:a2:be:c8:40:95:
         6d:e4:f7:a5:f3:5d:73:60:34:ee:42:39:3e:42:ec:4a:10:c5:
         83:18:3a:97:79:ba:93:f6:ff:b8:f1:d9:d8:14:18:81:82:01:
         4c:4a:af:e9:86:f4:95:8f:1c:50:bc:ae:9d:fa:33:11:a6:69:
         6d:ab:5e:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 23:16:50 2025 by rpki-client