This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/5ce6ac01-8eac-46c5-9469-35efa36099fd/0/7892183ECB217EAEF2D3DD16491BE535CA5C5A61.mft
File:                     7892183ECB217EAEF2D3DD16491BE535CA5C5A61.mft (raw, json)
Hash identifier:          y8CZOKkB6LXdmWYLEgQacMR9o4Te1zPoBSl4pjWZduQ=
Subject key identifier:   D1:5F:8B:0F:26:29:7E:13:23:1B:A8:1C:F9:26:16:81:CA:CC:A7:8D
Authority key identifier: 78:92:18:3E:CB:21:7E:AE:F2:D3:DD:16:49:1B:E5:35:CA:5C:5A:61
Certificate issuer:       /CN=7892183ECB217EAEF2D3DD16491BE535CA5C5A61
Certificate serial:       35F31FF785F38B7AA2B80C22B3B906052F9245FC
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7892183ECB217EAEF2D3DD16491BE535CA5C5A61.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/5ce6ac01-8eac-46c5-9469-35efa36099fd/0/7892183ECB217EAEF2D3DD16491BE535CA5C5A61.mft
Manifest number:          0209
Signing time:             Sat 06 Dec 2025 04:00:40 +0000
Manifest this update:     Sat 06 Dec 2025 03:55:40 +0000
Manifest next update:     Tue 09 Dec 2025 12:50:40 +0000
Files and hashes:         1: 7892183ECB217EAEF2D3DD16491BE535CA5C5A61.crl (hash: /hdKgy6E6Lb9ilRs3CpqXzi6OFrQ32/mkv9/jwSgH+Q=)
                          2: 3130332e3232352e34342e302f32332d3234203d3e2034383030.roa (hash: OSaJ9H+pyoyoyW3zEewmfSIETQNngkI7dg9yZKfTzxI=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/5ce6ac01-8eac-46c5-9469-35efa36099fd/0/7892183ECB217EAEF2D3DD16491BE535CA5C5A61.crl
                          rsync://repo-rpki.idnic.net/repo/5ce6ac01-8eac-46c5-9469-35efa36099fd/0/7892183ECB217EAEF2D3DD16491BE535CA5C5A61.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7892183ECB217EAEF2D3DD16491BE535CA5C5A61.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 09 Dec 2025 12:50:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:f3:1f:f7:85:f3:8b:7a:a2:b8:0c:22:b3:b9:06:05:2f:92:45:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7892183ECB217EAEF2D3DD16491BE535CA5C5A61
        Validity
            Not Before: Dec  6 03:55:40 2025 GMT
            Not After : Dec  9 12:50:40 2025 GMT
        Subject: CN=D15F8B0F26297E13231BA81CF9261681CACCA78D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:ac:37:97:22:30:9c:d9:7c:a3:7e:68:12:3e:
                    a5:59:c6:c4:13:35:9b:aa:1d:7a:05:6a:56:f4:90:
                    17:d6:fd:ad:da:a1:a9:5f:ae:d2:f0:11:87:6a:73:
                    00:0e:56:5e:17:ce:e8:e1:d5:aa:75:88:20:aa:2b:
                    a2:37:26:f7:37:7f:6d:67:42:1b:3d:26:d0:e4:e3:
                    32:e5:9b:68:a5:b3:1f:c3:37:9a:46:74:d9:dc:60:
                    a2:37:48:98:36:2e:b4:f3:97:c5:d1:a1:a5:44:cd:
                    fb:13:3f:f0:5c:47:e9:ba:18:58:e2:47:d2:70:bf:
                    ff:79:1b:94:f7:9d:f7:63:94:9a:6f:27:42:42:5e:
                    9b:0a:c2:04:84:fe:59:66:f5:f5:93:9c:a6:61:52:
                    4f:9a:af:af:20:b6:16:41:a5:26:60:4e:2d:a5:f2:
                    dd:c1:95:86:e9:18:d1:07:69:d4:83:83:2b:37:17:
                    bb:26:75:47:ab:0f:b6:21:b7:b1:9a:82:2f:4f:0e:
                    02:6e:45:da:51:e4:3d:78:35:6e:e1:94:67:5b:5b:
                    68:52:9a:8f:24:df:89:2b:02:1d:fc:64:01:c2:95:
                    93:9b:10:9a:cc:44:fc:68:99:81:d7:9f:3d:ff:bb:
                    03:80:61:3e:d0:85:51:fd:0a:cf:35:a4:10:f8:e6:
                    b3:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:5F:8B:0F:26:29:7E:13:23:1B:A8:1C:F9:26:16:81:CA:CC:A7:8D
            X509v3 Authority Key Identifier:
                keyid:78:92:18:3E:CB:21:7E:AE:F2:D3:DD:16:49:1B:E5:35:CA:5C:5A:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/5ce6ac01-8eac-46c5-9469-35efa36099fd/0/7892183ECB217EAEF2D3DD16491BE535CA5C5A61.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7892183ECB217EAEF2D3DD16491BE535CA5C5A61.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5ce6ac01-8eac-46c5-9469-35efa36099fd/0/7892183ECB217EAEF2D3DD16491BE535CA5C5A61.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:47:3c:00:10:41:a8:d2:63:fa:73:6f:36:0b:b6:e1:1c:de:
         71:41:89:97:35:77:e5:15:ca:b0:9a:77:ab:7b:15:f7:e4:22:
         df:41:d5:ad:6f:e3:a7:07:54:ad:cb:cd:ff:8f:ef:7a:2f:3d:
         cc:8c:86:99:b9:b4:b1:6d:5f:da:45:05:42:7c:30:2e:18:25:
         b9:6e:ed:30:e9:4d:ae:95:37:4b:9b:10:d1:69:d4:e7:f8:1b:
         8c:89:36:cc:12:1d:cd:62:80:c1:7e:12:8c:c9:19:8a:ae:0f:
         f4:49:d9:8e:67:4a:6a:05:0e:32:c4:75:e7:58:1e:28:a9:b9:
         df:ab:d7:00:b6:9f:8a:f3:31:7b:5f:0e:ef:97:93:3e:e0:6c:
         b7:b5:22:4e:aa:bf:42:0d:c7:77:d3:9b:b7:4f:e8:68:1b:cc:
         27:93:e3:04:e0:94:cf:2e:eb:33:f9:8e:2b:2d:69:23:4a:81:
         5c:cd:0b:f2:bd:6d:46:ed:b9:dd:42:32:43:b6:cf:ff:8b:eb:
         00:30:a7:d0:67:3e:c7:7d:b5:a0:7a:d1:60:38:59:dc:b4:b0:
         24:81:5d:a7:4b:7c:42:df:b7:e0:7a:21:6c:32:b6:3c:2e:a2:
         63:66:ee:4f:22:11:ad:0a:c1:40:a7:76:31:82:dd:32:a1:d4:
         4d:77:fc:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 21:57:56 2025 by rpki-client