This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/5679b4d1-d6b5-4820-a497-693b93ddf58e/0/7A8364745196ADEDA32E89F410EFDC19F658815A.mft
File:                     7A8364745196ADEDA32E89F410EFDC19F658815A.mft (raw, json)
Hash identifier:          2ZzvZEhP/kikDHv8xFxMvtnKb/ujCDJcmGan2dQdaQ0=
Subject key identifier:   50:A7:73:F2:7E:98:CE:28:46:F3:2C:AD:0C:33:C0:58:FB:2F:6C:1B
Authority key identifier: 7A:83:64:74:51:96:AD:ED:A3:2E:89:F4:10:EF:DC:19:F6:58:81:5A
Certificate issuer:       /CN=7A8364745196ADEDA32E89F410EFDC19F658815A
Certificate serial:       5C425E020847892627D8AD8D8E4E27377740FC30
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/7A8364745196ADEDA32E89F410EFDC19F658815A.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/5679b4d1-d6b5-4820-a497-693b93ddf58e/0/7A8364745196ADEDA32E89F410EFDC19F658815A.mft
Manifest number:          DE
Signing time:             Fri 05 Dec 2025 05:00:00 +0000
Manifest this update:     Fri 05 Dec 2025 04:55:00 +0000
Manifest next update:     Mon 08 Dec 2025 15:04:00 +0000
Files and hashes:         1: 7A8364745196ADEDA32E89F410EFDC19F658815A.crl (hash: jFJ3poSdgRe9BzExcTkVkKrsehQEDdZ4X/gcHB2FxqQ=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/5679b4d1-d6b5-4820-a497-693b93ddf58e/0/7A8364745196ADEDA32E89F410EFDC19F658815A.crl
                          rsync://repo-rpki.idnic.net/repo/5679b4d1-d6b5-4820-a497-693b93ddf58e/0/7A8364745196ADEDA32E89F410EFDC19F658815A.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/7A8364745196ADEDA32E89F410EFDC19F658815A.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 08 Dec 2025 15:04:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:42:5e:02:08:47:89:26:27:d8:ad:8d:8e:4e:27:37:77:40:fc:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7A8364745196ADEDA32E89F410EFDC19F658815A
        Validity
            Not Before: Dec  5 04:55:00 2025 GMT
            Not After : Dec  8 15:04:00 2025 GMT
        Subject: CN=50A773F27E98CE2846F32CAD0C33C058FB2F6C1B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:91:49:6e:a2:b8:c3:80:13:67:d8:df:6b:0c:
                    bd:36:91:c5:ad:ad:4d:9e:d0:78:18:2d:6a:7c:c2:
                    50:5a:57:21:41:a1:27:e7:b2:8c:e1:d0:aa:6e:ee:
                    6d:d7:b5:b5:71:62:13:0f:e5:ab:9b:7a:15:18:49:
                    f6:f1:04:d0:e0:85:57:3d:f7:13:8a:8b:b5:ac:c0:
                    c8:89:fc:8f:04:20:f3:44:70:ad:c4:00:c1:8e:55:
                    bf:8e:1d:d1:f7:17:98:e8:f6:3e:c3:82:09:9e:3b:
                    97:31:ac:c0:05:31:8d:ae:a4:7a:f0:03:39:b2:a2:
                    27:c6:2e:af:d1:85:35:ba:2b:33:67:2c:43:57:03:
                    2f:a8:3b:bd:5c:ed:a1:b8:d9:2f:06:a4:ca:44:4c:
                    62:b8:5e:96:34:62:af:5c:2a:cd:85:b2:28:1e:93:
                    a3:81:65:58:ec:fb:bc:62:c3:c8:d0:0c:e4:bb:8c:
                    0e:18:0c:c6:ec:13:a1:50:38:30:87:26:c2:0f:b8:
                    a9:08:fe:c7:ee:0f:30:26:45:66:41:2a:b9:6b:66:
                    b4:8b:74:9e:14:94:d2:50:8b:59:f7:ae:b5:87:62:
                    a2:08:cc:51:ff:88:62:79:7e:35:79:bd:55:26:21:
                    b7:62:95:18:83:f8:69:68:79:3b:15:53:75:0e:35:
                    99:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:A7:73:F2:7E:98:CE:28:46:F3:2C:AD:0C:33:C0:58:FB:2F:6C:1B
            X509v3 Authority Key Identifier:
                keyid:7A:83:64:74:51:96:AD:ED:A3:2E:89:F4:10:EF:DC:19:F6:58:81:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/5679b4d1-d6b5-4820-a497-693b93ddf58e/0/7A8364745196ADEDA32E89F410EFDC19F658815A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/7A8364745196ADEDA32E89F410EFDC19F658815A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5679b4d1-d6b5-4820-a497-693b93ddf58e/0/7A8364745196ADEDA32E89F410EFDC19F658815A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:dd:24:27:de:86:eb:0f:e0:4d:8c:9e:b3:77:04:d3:7d:5c:
         90:06:09:0e:00:ec:c1:8b:db:33:85:7f:34:4a:47:44:ca:f1:
         1f:82:a5:d4:f5:f7:28:1f:8d:cc:35:a6:62:96:c5:5a:0c:98:
         20:14:dd:50:ba:35:e1:21:1a:15:4d:0e:00:ce:01:78:15:38:
         94:82:15:3e:29:f3:80:14:4b:59:02:c1:bc:f5:d6:4c:51:b9:
         82:d0:18:0b:83:69:58:7a:d8:10:de:f4:d5:8a:0d:d7:4d:bd:
         18:73:8c:70:81:94:45:6e:c4:cf:01:55:18:57:39:91:74:d4:
         63:6f:17:e3:30:7e:a7:f6:78:10:e8:94:19:32:03:c4:24:a7:
         76:92:33:2a:c0:83:aa:07:67:cb:2e:3d:63:e1:4c:cf:21:45:
         19:1e:db:77:45:fb:03:5f:1d:e0:56:14:fe:f2:e8:1c:05:b3:
         02:9b:1e:6d:f0:9f:c6:2b:81:aa:1d:35:5e:eb:6b:c2:e1:56:
         da:c2:7d:5a:02:a5:39:55:13:81:55:d0:40:52:5e:c7:61:d8:
         16:9b:d0:a0:bd:52:9d:93:9b:2c:5d:57:53:44:aa:18:a4:e5:
         8f:c6:0a:47:02:5e:c2:85:43:82:26:f6:74:5a:4a:6a:23:49:
         72:31:02:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 19:04:36 2025 by rpki-client