This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/8d22f649-9968-495d-bdf1-7d76256daad5/0/73626536B3B2A503E6D53473A97CF39A13301753.mft
File:                     73626536B3B2A503E6D53473A97CF39A13301753.mft (raw, json)
Hash identifier:          GU09saKqilNcFYP/W6o+p9RjdS7WoIRMO9CZG0UHSEs=
Subject key identifier:   63:BA:4F:AE:78:A6:1D:C5:EB:93:B0:3D:D0:6B:8B:59:89:1C:1A:A5
Authority key identifier: 73:62:65:36:B3:B2:A5:03:E6:D5:34:73:A9:7C:F3:9A:13:30:17:53
Certificate issuer:       /CN=73626536B3B2A503E6D53473A97CF39A13301753
Certificate serial:       4E7F1A597BB2ACFC8067C275CE6CA0F4BCFCE13D
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/73626536B3B2A503E6D53473A97CF39A13301753.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/8d22f649-9968-495d-bdf1-7d76256daad5/0/73626536B3B2A503E6D53473A97CF39A13301753.mft
Manifest number:          C0
Signing time:             Fri 05 Dec 2025 08:40:59 +0000
Manifest this update:     Fri 05 Dec 2025 08:35:59 +0000
Manifest next update:     Mon 08 Dec 2025 10:48:59 +0000
Files and hashes:         1: 3136302e3138372e3133392e302f32342d3234203d3e20313533313232.roa (hash: U/AZuWhjUWyMn2Gx5iZvx5RdqNlWPDYnQI/RL/HzzmI=)
                          2: 73626536B3B2A503E6D53473A97CF39A13301753.crl (hash: e+mLxo7fT5LuPehGxXNJ4djxZIzd2mRVnOqfanmsEc4=)
                          3: 3136302e3138372e3133382e302f32342d3234203d3e20313533313232.roa (hash: qbLrPvZpuRQboHf20eAwQEqv0hdBrMoM2us7hcpzxVQ=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/8d22f649-9968-495d-bdf1-7d76256daad5/0/73626536B3B2A503E6D53473A97CF39A13301753.crl
                          rsync://repo-rpki.idnic.net/repo/8d22f649-9968-495d-bdf1-7d76256daad5/0/73626536B3B2A503E6D53473A97CF39A13301753.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/73626536B3B2A503E6D53473A97CF39A13301753.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 08 Dec 2025 10:48:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:7f:1a:59:7b:b2:ac:fc:80:67:c2:75:ce:6c:a0:f4:bc:fc:e1:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73626536B3B2A503E6D53473A97CF39A13301753
        Validity
            Not Before: Dec  5 08:35:59 2025 GMT
            Not After : Dec  8 10:48:59 2025 GMT
        Subject: CN=63BA4FAE78A61DC5EB93B03DD06B8B59891C1AA5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:91:42:ed:c1:e6:50:26:13:53:40:94:40:dd:
                    61:1f:37:2b:b3:ac:15:94:7e:a8:3d:75:11:c4:37:
                    e7:bf:e8:49:7d:46:dd:74:b8:30:fd:b4:40:df:67:
                    a7:35:f9:f8:c4:5e:ce:ae:49:d8:a8:51:c7:f2:ce:
                    ed:3d:86:16:e6:b7:09:fc:a9:32:b5:0c:23:58:8c:
                    9f:3e:ed:9b:7c:48:f9:ec:7e:69:57:14:d9:46:82:
                    05:fc:31:07:06:fe:b0:0f:32:11:89:4d:0c:65:78:
                    8f:f2:75:26:7d:12:74:44:3c:c2:ae:87:fe:6c:65:
                    a8:42:5f:d6:57:ed:bd:73:0e:17:8e:5c:d4:8c:2b:
                    70:1a:fd:04:fd:99:a2:bc:ae:3e:d8:c2:13:32:b9:
                    52:9f:c5:4f:81:25:d7:30:09:1a:2e:50:06:c9:c0:
                    aa:1b:ca:23:c6:e8:ae:05:42:c9:f5:be:5a:6d:82:
                    77:fd:5c:06:88:9f:f1:b7:65:90:7f:2f:1e:09:e9:
                    79:a5:f3:d7:1a:ad:31:f8:9f:97:80:16:d2:53:8c:
                    79:94:61:49:fa:56:30:33:1c:1b:2d:19:d6:08:9e:
                    8e:f2:66:7d:68:d9:d8:cb:b1:c3:11:22:42:07:78:
                    fe:42:ad:fd:5c:9c:6f:85:df:f8:5b:1d:ee:6b:0c:
                    88:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:BA:4F:AE:78:A6:1D:C5:EB:93:B0:3D:D0:6B:8B:59:89:1C:1A:A5
            X509v3 Authority Key Identifier:
                keyid:73:62:65:36:B3:B2:A5:03:E6:D5:34:73:A9:7C:F3:9A:13:30:17:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/8d22f649-9968-495d-bdf1-7d76256daad5/0/73626536B3B2A503E6D53473A97CF39A13301753.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/73626536B3B2A503E6D53473A97CF39A13301753.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8d22f649-9968-495d-bdf1-7d76256daad5/0/73626536B3B2A503E6D53473A97CF39A13301753.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:01:25:ff:73:4b:16:10:b7:25:91:50:e9:58:35:97:a0:34:
         93:32:8b:93:1c:53:09:e5:a6:7d:3a:dd:3d:12:5e:ca:cd:a3:
         40:f0:3c:1f:87:07:db:7e:ed:08:42:a0:4c:0d:ac:54:01:46:
         4e:f5:5c:e5:09:eb:9d:a6:c9:51:37:db:dd:e6:07:39:bc:51:
         3e:d2:1a:28:3e:7e:9d:d0:7c:7a:72:13:55:b9:a2:68:36:d8:
         fb:55:dc:d1:8f:8a:65:17:4b:5b:1b:a1:e2:6c:8a:ef:8f:26:
         11:75:af:72:91:b1:99:52:a9:cf:f9:c0:5f:3f:32:1e:fb:67:
         04:7d:4f:06:be:99:c9:f9:e7:f2:71:5f:be:e9:9c:73:2e:41:
         0f:14:4a:41:4d:64:bd:fe:f8:58:5a:2c:73:d3:f4:f8:5d:e1:
         de:b5:a9:ac:ab:bc:f6:3e:16:4b:65:f8:fa:47:e2:77:e9:67:
         d0:0c:e3:83:98:a7:da:b0:f7:24:be:d3:9e:d9:11:1d:e5:af:
         b9:2b:6c:e7:a7:48:3a:ce:e4:1e:48:5d:95:8f:c1:b9:95:c3:
         47:5f:d7:40:51:fa:b0:a1:05:f9:52:b4:18:21:fe:38:28:75:
         9c:f2:41:54:81:fc:7e:c4:03:a1:22:fb:45:e5:c2:b6:89:0d:
         29:ff:ce:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 18:25:00 2025 by rpki-client