This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/49da7b6a-4e1a-41ff-b8eb-8c364cd264b1/0/A7D1BD82113CD720C572AF99A8FB2940610AEC49.mft
File:                     A7D1BD82113CD720C572AF99A8FB2940610AEC49.mft (raw, json)
Hash identifier:          aFgrjpYwFBNj5fdMaaWYoKQRzRYqy+XWqJLGIHuuuus=
Subject key identifier:   2B:0E:35:4B:67:F7:13:FE:B2:4F:82:05:35:48:F2:85:5C:5D:7F:AE
Authority key identifier: A7:D1:BD:82:11:3C:D7:20:C5:72:AF:99:A8:FB:29:40:61:0A:EC:49
Certificate issuer:       /CN=A7D1BD82113CD720C572AF99A8FB2940610AEC49
Certificate serial:       28C7D8EB4B904A467D2D66F51C8D9D27F60FFCC2
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A7D1BD82113CD720C572AF99A8FB2940610AEC49.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/49da7b6a-4e1a-41ff-b8eb-8c364cd264b1/0/A7D1BD82113CD720C572AF99A8FB2940610AEC49.mft
Manifest number:          01B4
Signing time:             Tue 16 Dec 2025 17:41:23 +0000
Manifest this update:     Tue 16 Dec 2025 17:36:23 +0000
Manifest next update:     Fri 19 Dec 2025 18:53:23 +0000
Files and hashes:         1: 3130332e37372e3230342e302f32332d3233203d3e203634323937.roa (hash: cOnqdPMFYbqbFi/FA6Q7dA8kJTzM3+iE0W1mSgXK4nI=)
                          2: A7D1BD82113CD720C572AF99A8FB2940610AEC49.crl (hash: WOwIHCiQxeIK3I/Fyt2wOVX3YUHFslvVG7mFkGMa5js=)
                          3: 3130332e37372e3230372e302f32342d3234203d3e203634323937.roa (hash: Ldzq0WjI5kxA0xwZ9j/+HkbFA7bRhcVP8vfijlAcxEw=)
                          4: 3130332e37372e3230352e302f32342d3234203d3e203634323937.roa (hash: NZ3zgpSngsIOBUBuxKD8qjF4IFrIt5WPsm16vJBokXQ=)
                          5: 3130332e37372e3230342e302f32342d3234203d3e203634323937.roa (hash: BXSq9b95eC9MSwvxuZ/AcJL572zXX4pRx3/J1qctsOw=)
                          6: 323430373a396538303a3a2f33322d3332203d3e203634323937.roa (hash: 8XW9fR3nJvKy312lXn4PWtXoN/9mgbLUR7iv4Mby3uc=)
                          7: 3130332e37372e3230362e302f32342d3234203d3e203634323937.roa (hash: qm6Wx8HHdMprTN2Xs+s/pxVtuwdrhpPAL17E7ApccPM=)
                          8: 3130332e37372e3230342e302f32322d3232203d3e203634323937.roa (hash: DfpI3sfZfOso5gGyoS07WtJ/Jycy9ggknC4EuCpUXOM=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/49da7b6a-4e1a-41ff-b8eb-8c364cd264b1/0/A7D1BD82113CD720C572AF99A8FB2940610AEC49.crl
                          rsync://repo-rpki.idnic.net/repo/49da7b6a-4e1a-41ff-b8eb-8c364cd264b1/0/A7D1BD82113CD720C572AF99A8FB2940610AEC49.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A7D1BD82113CD720C572AF99A8FB2940610AEC49.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Dec 2025 18:53:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:c7:d8:eb:4b:90:4a:46:7d:2d:66:f5:1c:8d:9d:27:f6:0f:fc:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A7D1BD82113CD720C572AF99A8FB2940610AEC49
        Validity
            Not Before: Dec 16 17:36:23 2025 GMT
            Not After : Dec 19 18:53:23 2025 GMT
        Subject: CN=2B0E354B67F713FEB24F82053548F2855C5D7FAE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:8d:9d:b6:bb:dd:b9:f6:ad:b9:e8:1e:b8:bc:
                    e4:98:84:bc:86:a7:e8:8e:1a:aa:8b:5c:01:b2:15:
                    3d:fe:e8:e4:62:35:d3:73:49:19:d9:d4:c2:1f:49:
                    3f:e2:e1:fd:11:05:f1:1c:30:97:66:1b:c4:0a:b5:
                    e4:9f:f3:d9:ec:d3:f3:16:c9:46:db:d6:eb:5c:92:
                    d1:ae:97:d9:bd:34:5e:20:9e:8b:1c:45:81:ab:dd:
                    16:20:f2:63:d0:60:c1:c6:e8:9a:4d:34:d3:8f:b6:
                    e4:71:36:34:05:97:f9:63:f2:09:4c:d3:c7:b4:28:
                    83:b4:e6:7f:1e:ad:78:c0:f8:5c:11:34:ed:dc:54:
                    bb:b3:e4:48:6c:50:7f:d1:6d:09:e5:2c:9c:8b:b9:
                    77:29:41:13:76:bb:39:ff:70:f1:de:81:ce:86:19:
                    e7:dc:3e:01:1f:21:4d:be:12:81:0c:27:88:08:5d:
                    0a:59:c3:07:21:d2:63:c8:72:c0:d7:5a:12:56:64:
                    b9:5b:b3:35:f0:c5:99:eb:70:ed:52:2b:45:66:a7:
                    58:5b:a7:2d:d1:f5:e1:d5:12:8a:8d:f5:c3:d2:de:
                    d9:ee:85:94:09:5c:3e:cf:3a:cf:f2:46:97:56:1e:
                    2f:ff:aa:08:1a:1d:f1:63:a2:be:e3:14:01:5c:d4:
                    96:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:0E:35:4B:67:F7:13:FE:B2:4F:82:05:35:48:F2:85:5C:5D:7F:AE
            X509v3 Authority Key Identifier:
                keyid:A7:D1:BD:82:11:3C:D7:20:C5:72:AF:99:A8:FB:29:40:61:0A:EC:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/49da7b6a-4e1a-41ff-b8eb-8c364cd264b1/0/A7D1BD82113CD720C572AF99A8FB2940610AEC49.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A7D1BD82113CD720C572AF99A8FB2940610AEC49.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/49da7b6a-4e1a-41ff-b8eb-8c364cd264b1/0/A7D1BD82113CD720C572AF99A8FB2940610AEC49.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:9e:ea:ee:14:23:a4:82:6a:2c:78:a6:9e:73:39:1f:81:27:
         4f:57:59:d4:59:ee:0a:f0:97:91:2f:60:45:ee:23:6f:cd:e3:
         50:31:40:28:8c:dc:1b:8e:3d:d8:cd:0c:25:6a:39:63:58:66:
         d4:ae:58:09:37:ba:df:4c:d9:85:30:48:a3:a5:be:20:f5:08:
         f5:3a:7f:ee:4a:d6:2b:8a:b0:99:45:1b:3d:63:cf:83:25:ba:
         0d:6f:78:58:e3:1f:d7:7d:70:09:40:bf:5a:e8:e1:3b:ba:f2:
         dd:c6:35:2d:bc:9c:05:28:25:d1:87:63:60:36:3d:13:9d:fd:
         fe:a6:33:1e:93:d9:b2:de:27:a4:c9:46:e4:1e:64:56:5c:40:
         16:09:60:b9:ba:bb:a3:ab:f1:83:d1:af:85:98:18:4b:0f:33:
         8b:18:f0:a0:35:36:67:92:47:c9:5c:26:f5:d8:33:62:e8:2e:
         54:66:ac:78:44:a5:17:d0:2b:78:43:40:cb:04:04:eb:32:9e:
         56:c0:2f:9b:ed:4e:2c:20:0f:5f:4d:fe:3a:e9:85:21:e9:9c:
         55:85:e9:36:72:fb:d9:ba:ea:22:d4:96:bc:a1:13:2a:aa:e7:
         ca:b8:66:fc:62:88:0a:7d:52:6a:cf:9b:9a:39:04:e2:70:47:
         1c:3f:b2:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 18 07:09:04 2025 by rpki-client