This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/7540cf80-9315-42c1-844e-bb03622a05c1/0/722FE79638E6D14E4794815122247CBEC27B8505.mft
File:                     722FE79638E6D14E4794815122247CBEC27B8505.mft (raw, json)
Hash identifier:          Yr1WC1zFQ1tqtmxm27xppENbmzXZ0/jnr05aMgl0EL4=
Subject key identifier:   47:A0:F6:46:67:4D:4B:CB:90:B7:C6:F4:4C:54:1A:BA:D9:AE:9E:19
Authority key identifier: 72:2F:E7:96:38:E6:D1:4E:47:94:81:51:22:24:7C:BE:C2:7B:85:05
Certificate issuer:       /CN=722FE79638E6D14E4794815122247CBEC27B8505
Certificate serial:       714EC5F548DB19C5385EB15909E8DC0AE506CA8D
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/722FE79638E6D14E4794815122247CBEC27B8505.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/7540cf80-9315-42c1-844e-bb03622a05c1/0/722FE79638E6D14E4794815122247CBEC27B8505.mft
Manifest number:          03E1
Signing time:             Sat 06 Dec 2025 00:20:42 +0000
Manifest this update:     Sat 06 Dec 2025 00:15:42 +0000
Manifest next update:     Tue 09 Dec 2025 01:06:42 +0000
Files and hashes:         1: 3130332e3136372e3136362e302f32332d3233203d3e20313431393834.roa (hash: uMhuVVCWV6KJ9BoKOLCiDb7P+XJG3YcMCjnNadUtMPc=)
                          2: 3130332e3136372e3136362e302f32342d3234203d3e20313431393834.roa (hash: Lha8Dc5V7yxaccwl2cB1wpI7D9zABdY3uxyScLd254Q=)
                          3: 722FE79638E6D14E4794815122247CBEC27B8505.crl (hash: 3vFOO6hz+9dmDvSlPPKEtPWXCuR32KCHCZagBiYNk94=)
                          4: 3130332e3136372e3136372e302f32342d3234203d3e20313431393834.roa (hash: mcmmT8pT8SsuE0p1UknEAcW7BeTtM+31BJ7lasnlFWU=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/7540cf80-9315-42c1-844e-bb03622a05c1/0/722FE79638E6D14E4794815122247CBEC27B8505.crl
                          rsync://repo-rpki.idnic.net/repo/7540cf80-9315-42c1-844e-bb03622a05c1/0/722FE79638E6D14E4794815122247CBEC27B8505.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/722FE79638E6D14E4794815122247CBEC27B8505.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 09 Dec 2025 01:06:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:4e:c5:f5:48:db:19:c5:38:5e:b1:59:09:e8:dc:0a:e5:06:ca:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=722FE79638E6D14E4794815122247CBEC27B8505
        Validity
            Not Before: Dec  6 00:15:42 2025 GMT
            Not After : Dec  9 01:06:42 2025 GMT
        Subject: CN=47A0F646674D4BCB90B7C6F44C541ABAD9AE9E19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:d2:6d:00:ff:1a:32:00:7c:93:cc:a5:c4:f7:
                    b2:d3:6c:b3:70:fc:d0:a6:cb:6e:86:c0:4f:5a:05:
                    51:75:66:bd:3f:c0:6c:10:ee:70:73:78:ce:d9:ff:
                    bb:4c:ba:ff:db:9e:cd:59:b0:f0:eb:3b:38:76:22:
                    46:b3:4c:7d:2b:7d:34:f4:f2:fb:26:eb:3c:47:00:
                    37:61:ab:ec:c0:c6:99:97:6f:1e:52:02:df:16:1b:
                    d8:f3:d5:ab:47:a3:8a:4b:e7:fe:1a:db:15:a2:2c:
                    ae:78:fa:4c:cb:f3:3c:8d:5e:c9:26:54:ff:20:1d:
                    1b:34:c5:8e:bd:59:9e:97:7b:36:dd:b0:8c:aa:4f:
                    b5:08:78:c7:bc:02:19:30:ed:72:d9:77:81:10:fa:
                    00:aa:61:db:8d:45:b9:e8:50:aa:06:d0:2f:e4:38:
                    9c:f9:fb:24:1e:59:2d:c3:60:1b:50:41:57:58:e2:
                    76:74:60:81:dc:7a:51:4a:e8:60:32:2d:d4:ad:a7:
                    39:2c:87:06:d2:ae:c9:c2:99:b0:be:ae:ea:2b:ea:
                    97:db:09:cb:6e:e8:81:e6:99:44:1a:cb:2c:08:cf:
                    88:ae:a6:e5:de:18:84:b7:2b:1d:08:49:04:3d:85:
                    97:b3:b7:8b:c1:01:f3:91:bd:3e:15:e9:e0:03:dc:
                    a4:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:A0:F6:46:67:4D:4B:CB:90:B7:C6:F4:4C:54:1A:BA:D9:AE:9E:19
            X509v3 Authority Key Identifier:
                keyid:72:2F:E7:96:38:E6:D1:4E:47:94:81:51:22:24:7C:BE:C2:7B:85:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/7540cf80-9315-42c1-844e-bb03622a05c1/0/722FE79638E6D14E4794815122247CBEC27B8505.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/722FE79638E6D14E4794815122247CBEC27B8505.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7540cf80-9315-42c1-844e-bb03622a05c1/0/722FE79638E6D14E4794815122247CBEC27B8505.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:a8:eb:1a:d7:a6:b9:89:8a:b4:21:f5:e9:2b:9a:09:c7:60:
         2d:78:dc:47:e9:27:2e:b2:85:03:f1:51:93:02:ec:81:d2:a5:
         a3:c9:1b:17:68:0e:c7:a6:9b:df:81:09:d1:03:c5:c8:42:b2:
         33:b8:81:8d:7b:20:90:ec:38:83:48:80:23:07:f9:7a:76:89:
         37:46:4f:28:cc:7a:9e:a0:a8:df:8c:7e:5a:f5:1c:60:4e:d5:
         78:5b:23:5f:e9:1c:f0:83:23:a4:7a:88:bd:56:fb:57:16:f4:
         41:af:df:be:95:89:98:f9:19:e4:6b:82:69:1f:ee:03:88:69:
         d1:a9:92:13:f9:1d:2d:97:aa:83:f6:4e:39:0e:c3:a1:86:e5:
         49:9f:2d:bb:6e:ba:10:54:00:e6:7c:cd:f8:9b:b4:77:97:d3:
         ad:2b:2f:70:29:ec:0d:bc:62:6d:ca:05:76:48:d6:4a:26:71:
         e4:b4:87:07:1c:49:a2:31:05:00:16:2a:8a:4b:a4:a1:0c:95:
         a0:f3:8b:45:cd:d8:94:fc:c1:5f:1f:3b:d0:9e:93:75:c2:7d:
         eb:2e:8b:16:3a:3b:df:06:ae:a1:81:82:0e:d4:c4:ed:3e:21:
         76:5d:e8:fe:75:46:1f:bf:ae:20:da:60:52:6e:b1:e9:20:cd:
         ce:e1:14:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 22:54:49 2025 by rpki-client