This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/769f8aa8-8971-4e51-8b51-803b49b32a4f/0/78B7FAA2881ABFBC117C0F83ECDC9D554DF41414.mft
File:                     78B7FAA2881ABFBC117C0F83ECDC9D554DF41414.mft (raw, json)
Hash identifier:          ZRaIa1hiQUYOgkqQ5oQuZDjWOWC3tYZA6M1Au24baUc=
Subject key identifier:   4E:EC:EE:49:F8:46:89:15:B6:0F:85:DB:86:8A:DE:AD:F4:07:A0:3F
Authority key identifier: 78:B7:FA:A2:88:1A:BF:BC:11:7C:0F:83:EC:DC:9D:55:4D:F4:14:14
Certificate issuer:       /CN=78B7FAA2881ABFBC117C0F83ECDC9D554DF41414
Certificate serial:       2D98041A61D016D3C8D2A5C597423BEC72C91CC9
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/78B7FAA2881ABFBC117C0F83ECDC9D554DF41414.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/769f8aa8-8971-4e51-8b51-803b49b32a4f/0/78B7FAA2881ABFBC117C0F83ECDC9D554DF41414.mft
Manifest number:          A5
Signing time:             Fri 05 Dec 2025 18:31:21 +0000
Manifest this update:     Fri 05 Dec 2025 18:26:21 +0000
Manifest next update:     Mon 08 Dec 2025 21:34:21 +0000
Files and hashes:         1: 3136302e3139312e3139382e302f32332d3233203d3e20313533313537.roa (hash: BKOeIpPmZ/JlEup668j4Ru9S2UzMSJK/Lz9NsYvcvj4=)
                          2: 3136302e3139312e3139382e302f32342d3234203d3e20313533313537.roa (hash: pcrYcQfetv/rc/0VTi5Yuk7X3ubcBjWkKo4wzgdZiSs=)
                          3: 3136302e3139312e3139392e302f32342d3234203d3e20313533313537.roa (hash: PB5sEIidful8Aq2vYl2cOVwqgMl/aNUVGYhSLpss8uA=)
                          4: 78B7FAA2881ABFBC117C0F83ECDC9D554DF41414.crl (hash: YepGg7SnCHa2kHd/sjkahDj1G8os9H/IO0Vd3GEZhuc=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/769f8aa8-8971-4e51-8b51-803b49b32a4f/0/78B7FAA2881ABFBC117C0F83ECDC9D554DF41414.crl
                          rsync://repo-rpki.idnic.net/repo/769f8aa8-8971-4e51-8b51-803b49b32a4f/0/78B7FAA2881ABFBC117C0F83ECDC9D554DF41414.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/78B7FAA2881ABFBC117C0F83ECDC9D554DF41414.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 08 Dec 2025 21:34:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:98:04:1a:61:d0:16:d3:c8:d2:a5:c5:97:42:3b:ec:72:c9:1c:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78B7FAA2881ABFBC117C0F83ECDC9D554DF41414
        Validity
            Not Before: Dec  5 18:26:21 2025 GMT
            Not After : Dec  8 21:34:21 2025 GMT
        Subject: CN=4EECEE49F8468915B60F85DB868ADEADF407A03F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:e3:af:7e:a0:25:1e:bd:2b:4f:60:3d:e3:2a:
                    2f:05:9c:00:d3:fc:06:ab:30:9f:0d:5e:4a:9f:55:
                    3e:b5:39:88:da:0c:6d:c3:7f:f9:a1:2c:44:46:ba:
                    ef:8e:61:a1:3a:3e:43:1e:0e:86:ea:cf:d6:b0:fd:
                    02:a2:5d:71:2c:f1:da:f5:b1:23:b8:53:8e:7b:6a:
                    cd:04:11:96:99:c8:4b:9e:22:6c:72:df:3c:cc:e2:
                    22:e2:91:45:92:40:cb:65:ea:af:86:64:39:7a:84:
                    69:52:46:54:a7:d1:e8:a4:16:73:a4:18:78:a5:f3:
                    3a:86:4e:89:18:1c:2a:ed:ea:97:6e:3d:ac:5e:a2:
                    0e:1c:03:db:da:e7:ef:0f:f6:fa:ca:79:c6:b2:05:
                    f2:79:b4:59:df:94:c1:fd:08:79:d5:f9:56:4d:8a:
                    42:b3:19:9e:e6:70:db:f5:e0:77:54:93:16:8c:e0:
                    db:94:62:63:d2:d9:88:0f:f5:a4:7a:98:ce:ec:69:
                    e7:a2:1c:16:e7:40:6c:d4:bf:39:9a:da:4d:b1:18:
                    37:14:02:0b:3d:70:20:e7:b3:e2:96:dc:c1:3e:6a:
                    88:80:bc:49:1a:ce:fe:a4:f9:1d:7e:03:38:66:f9:
                    71:89:1c:c8:9b:67:d5:ae:61:2c:61:a5:44:11:a3:
                    c6:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:EC:EE:49:F8:46:89:15:B6:0F:85:DB:86:8A:DE:AD:F4:07:A0:3F
            X509v3 Authority Key Identifier:
                keyid:78:B7:FA:A2:88:1A:BF:BC:11:7C:0F:83:EC:DC:9D:55:4D:F4:14:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/769f8aa8-8971-4e51-8b51-803b49b32a4f/0/78B7FAA2881ABFBC117C0F83ECDC9D554DF41414.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/78B7FAA2881ABFBC117C0F83ECDC9D554DF41414.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/769f8aa8-8971-4e51-8b51-803b49b32a4f/0/78B7FAA2881ABFBC117C0F83ECDC9D554DF41414.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:37:ed:35:d0:4b:02:c0:13:98:4b:f3:b9:4f:7e:0b:87:86:
         4d:bb:21:af:1d:2f:17:36:25:1d:43:d9:dc:77:f7:f8:21:86:
         61:c5:d4:f9:c8:a7:cc:27:0b:f8:f7:27:e9:15:e7:11:66:43:
         41:c8:1e:65:2b:bb:4b:a4:67:18:38:28:69:89:18:b4:6e:f1:
         ac:30:2b:59:43:2d:9a:04:19:ce:da:b5:c7:c0:c5:80:2a:bb:
         2b:1b:58:a1:c1:e8:f7:e7:97:72:d1:3c:01:24:e0:ec:8a:1c:
         76:f4:1d:c3:5d:30:d2:0d:8c:85:f9:0e:33:7b:34:78:bb:95:
         2a:f0:7d:e7:7e:b7:3e:cc:f8:08:9f:c9:80:36:8d:2e:d3:0d:
         d4:75:8b:3d:dc:65:26:90:6d:26:df:71:6d:23:87:18:55:fe:
         a4:af:c5:35:d6:e7:e7:3d:f3:09:b4:ab:45:20:65:3b:aa:cb:
         17:e0:c5:92:3a:72:47:6c:f3:57:4f:d5:e6:c6:fc:f5:8e:f8:
         51:41:b0:0c:15:fa:74:28:96:71:11:97:3e:78:85:aa:2c:79:
         e0:75:b6:88:d4:bc:2f:e2:2f:54:a3:65:06:f5:e9:90:3c:24:
         f4:40:a4:cc:68:1c:61:4e:f5:9b:94:e5:9f:5b:fb:a4:8c:27:
         0e:c5:f1:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 17:35:33 2025 by rpki-client