This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/7c635ce9-0ea5-47d8-9fcc-cad1c9f06fbe/0/7B945974A79E8C77CB02F94495BA9F87BAA0E038.mft
File:                     7B945974A79E8C77CB02F94495BA9F87BAA0E038.mft (raw, json)
Hash identifier:          +blpwnBT/8cqk6zTxgzkRw3EK/gNEazE7t6sbGH/BLk=
Subject key identifier:   7A:A2:E5:90:04:41:1D:0E:71:03:09:7A:39:8F:6A:C4:99:82:62:BF
Authority key identifier: 7B:94:59:74:A7:9E:8C:77:CB:02:F9:44:95:BA:9F:87:BA:A0:E0:38
Certificate issuer:       /CN=7B945974A79E8C77CB02F94495BA9F87BAA0E038
Certificate serial:       3DCF75FA45C190382C165D4BF17296F5982090C0
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7B945974A79E8C77CB02F94495BA9F87BAA0E038.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/7c635ce9-0ea5-47d8-9fcc-cad1c9f06fbe/0/7B945974A79E8C77CB02F94495BA9F87BAA0E038.mft
Manifest number:          03AB
Signing time:             Sat 06 Dec 2025 19:12:12 +0000
Manifest this update:     Sat 06 Dec 2025 19:07:12 +0000
Manifest next update:     Wed 10 Dec 2025 03:50:12 +0000
Files and hashes:         1: 3130332e3136372e33302e302f32332d3234203d3e203137393935.roa (hash: jJAIyVbfrGhaQ1dlxzFUdHOYskMs8jKydFWI9VuwVq4=)
                          2: 7B945974A79E8C77CB02F94495BA9F87BAA0E038.crl (hash: zzxxo99ojwndMk8kOqYLUI1tfUgw5KJGAhqzvteMZkw=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/7c635ce9-0ea5-47d8-9fcc-cad1c9f06fbe/0/7B945974A79E8C77CB02F94495BA9F87BAA0E038.crl
                          rsync://repo-rpki.idnic.net/repo/7c635ce9-0ea5-47d8-9fcc-cad1c9f06fbe/0/7B945974A79E8C77CB02F94495BA9F87BAA0E038.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7B945974A79E8C77CB02F94495BA9F87BAA0E038.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 09 Dec 2025 15:57:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:cf:75:fa:45:c1:90:38:2c:16:5d:4b:f1:72:96:f5:98:20:90:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7B945974A79E8C77CB02F94495BA9F87BAA0E038
        Validity
            Not Before: Dec  6 19:07:12 2025 GMT
            Not After : Dec 10 03:50:12 2025 GMT
        Subject: CN=7AA2E59004411D0E7103097A398F6AC4998262BF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:0d:1f:61:14:b5:8b:59:08:fc:25:7d:a7:25:
                    d6:35:16:33:fa:3c:5c:20:ff:7e:bf:3d:b7:a1:2c:
                    15:6c:93:f4:0d:6f:00:49:1e:00:79:63:3c:0b:98:
                    69:77:30:0d:24:2d:c1:ae:e6:bf:9c:1a:96:0d:a4:
                    9b:7a:e4:42:56:a7:59:e6:9a:45:17:f8:5d:76:a1:
                    48:6f:9a:7d:ca:b4:58:2f:fb:55:70:1b:cf:62:9a:
                    fe:da:ae:88:df:c1:67:05:bf:03:9c:e7:1e:9c:30:
                    f5:82:b9:b3:da:d3:bc:eb:48:16:da:6b:35:2c:d6:
                    f8:0c:a3:04:c0:64:91:2a:69:b0:f1:be:f7:1b:46:
                    ca:8d:99:5a:32:23:5e:5d:de:d4:1d:06:20:69:38:
                    85:08:af:e2:0a:6e:b5:79:8a:37:ce:a4:2f:4a:1e:
                    f6:cc:c5:87:71:ab:8e:fa:a2:20:74:fc:12:ed:8e:
                    ed:39:af:33:8b:02:c5:06:4a:79:fa:1c:43:ab:ae:
                    51:97:a9:68:f6:b0:37:9a:af:5d:37:8c:6b:32:0a:
                    cf:ca:df:c0:8a:da:a8:16:78:07:c1:fb:16:72:e8:
                    a7:18:d1:bb:35:2d:bc:db:68:5e:8e:b4:8b:c3:26:
                    16:7b:39:9f:de:c4:6f:be:1a:26:66:93:46:22:46:
                    e8:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:A2:E5:90:04:41:1D:0E:71:03:09:7A:39:8F:6A:C4:99:82:62:BF
            X509v3 Authority Key Identifier:
                keyid:7B:94:59:74:A7:9E:8C:77:CB:02:F9:44:95:BA:9F:87:BA:A0:E0:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/7c635ce9-0ea5-47d8-9fcc-cad1c9f06fbe/0/7B945974A79E8C77CB02F94495BA9F87BAA0E038.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7B945974A79E8C77CB02F94495BA9F87BAA0E038.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7c635ce9-0ea5-47d8-9fcc-cad1c9f06fbe/0/7B945974A79E8C77CB02F94495BA9F87BAA0E038.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:bd:21:fa:ba:fe:f6:42:78:83:4a:d5:17:40:16:6a:77:c2:
         35:c5:85:89:27:fe:27:5d:98:a9:f5:a9:69:b7:3f:3c:6d:73:
         83:be:1e:f4:19:23:d1:6e:03:a0:03:d3:b7:23:c8:e8:ac:0e:
         5d:a1:87:d2:e5:22:29:40:11:d4:56:8c:a3:56:d7:72:64:44:
         c5:3e:0b:59:a2:29:04:42:1d:3a:b3:f8:6f:1f:01:f2:3b:ce:
         b5:cd:11:1c:b7:4e:f7:d1:a4:39:ec:d6:a9:7c:9e:d4:7b:d3:
         5f:0b:57:d6:5d:41:08:b4:ac:76:03:05:e9:93:9b:8e:80:fe:
         96:de:71:a6:9e:be:aa:6e:25:fb:eb:44:c7:4c:0b:b9:92:24:
         61:ce:ca:bb:82:d2:9f:8b:ac:27:21:8a:24:cb:e0:ff:6e:f8:
         f7:c6:ce:5d:1c:50:92:54:67:4c:35:cb:0c:e4:c4:5c:24:9d:
         e9:b6:c0:25:85:ce:95:34:a5:b9:c7:96:8b:f0:1d:95:ad:27:
         6a:bd:d8:21:9b:c4:c8:cc:a1:0f:6c:45:b4:ff:33:17:4c:af:
         41:ba:e9:63:18:7a:a7:da:5c:f3:20:89:6a:c0:b7:8d:55:73:
         43:93:01:78:6b:1c:90:d9:ac:a2:78:26:a4:32:5b:fe:c6:a5:
         00:6d:82:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 23:50:20 2025 by rpki-client