This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/918ad7a6-c907-4359-aba5-d5748ba16176/0/C7D4D30314160FDACB9582CF972E90EC10AE206F.mft
File:                     C7D4D30314160FDACB9582CF972E90EC10AE206F.mft (raw, json)
Hash identifier:          d7ovOmKOLCnXtdL9cPV0jQQfCnZxospllRPRMPQk16c=
Subject key identifier:   13:91:64:AA:1F:68:C9:96:0F:79:C7:C7:E8:F6:B3:6C:9E:CA:7B:F5
Authority key identifier: C7:D4:D3:03:14:16:0F:DA:CB:95:82:CF:97:2E:90:EC:10:AE:20:6F
Certificate issuer:       /CN=C7D4D30314160FDACB9582CF972E90EC10AE206F
Certificate serial:       618F628AD9686B71E77176FF7AC091BF6AC699FF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C7D4D30314160FDACB9582CF972E90EC10AE206F.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/918ad7a6-c907-4359-aba5-d5748ba16176/0/C7D4D30314160FDACB9582CF972E90EC10AE206F.mft
Manifest number:          0532
Signing time:             Wed 17 Dec 2025 19:31:38 +0000
Manifest this update:     Wed 17 Dec 2025 19:26:37 +0000
Manifest next update:     Sat 20 Dec 2025 20:05:37 +0000
Files and hashes:         1: C7D4D30314160FDACB9582CF972E90EC10AE206F.crl (hash: dSH4796GT1MlzcX2TZ8kW0XWTBGinCxqA+qTbEkVBmU=)
                          2: 3130332e35302e3231382e302f32342d3234203d3e20313333383339.roa (hash: xsM8R50wRfdlN5JweHjZIfTpmduLeILF/fWliK+i37M=)
                          3: 323030313a6466303a333330303a3a2f34382d3438203d3e20313333383339.roa (hash: 4N6LRCptGvt5p5Z3fi0q5sQmHj3OTG0hHztRBZdu+t8=)
                          4: 3130332e3134342e32322e302f32342d3234203d3e20313333383339.roa (hash: llGSDUYqSL3OD7TtVsp6ArCR8mqRzLPhfJs1tW9L5wg=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/918ad7a6-c907-4359-aba5-d5748ba16176/0/C7D4D30314160FDACB9582CF972E90EC10AE206F.crl
                          rsync://repo-rpki.idnic.net/repo/918ad7a6-c907-4359-aba5-d5748ba16176/0/C7D4D30314160FDACB9582CF972E90EC10AE206F.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C7D4D30314160FDACB9582CF972E90EC10AE206F.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Dec 2025 20:05:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:8f:62:8a:d9:68:6b:71:e7:71:76:ff:7a:c0:91:bf:6a:c6:99:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C7D4D30314160FDACB9582CF972E90EC10AE206F
        Validity
            Not Before: Dec 17 19:26:37 2025 GMT
            Not After : Dec 20 20:05:37 2025 GMT
        Subject: CN=139164AA1F68C9960F79C7C7E8F6B36C9ECA7BF5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:d5:65:7d:a5:9e:3f:6e:a9:38:9e:83:86:2f:
                    c2:d5:29:f7:f8:ea:0f:db:3d:2e:92:5f:04:de:ed:
                    57:71:a3:60:70:5d:29:35:ba:21:51:ba:c4:97:5a:
                    af:0f:cb:5c:45:73:7d:70:60:d7:b2:a3:37:bb:c1:
                    be:03:ac:39:f1:0a:3b:33:53:9e:08:03:df:83:75:
                    78:50:dc:f7:62:c1:f4:7e:3c:45:f5:3b:89:61:6b:
                    89:3e:ed:ff:07:a4:26:99:26:25:c8:4f:59:7d:dc:
                    c0:eb:0f:b2:75:e6:b9:44:1b:54:ef:c5:48:2d:f1:
                    90:10:87:39:96:8a:ef:7d:9c:bc:cc:0f:e2:b3:f2:
                    7a:17:e9:98:99:f1:05:76:ad:d7:e7:85:5e:be:84:
                    da:42:73:89:15:6a:17:25:83:59:7d:80:ba:c2:23:
                    5f:a8:3f:7b:d7:0a:33:f1:f9:bb:f6:69:08:30:e2:
                    c8:30:3b:7b:02:48:40:06:ac:1f:25:d9:47:b9:da:
                    6f:a5:59:73:14:01:5c:a3:51:a0:7b:a0:c9:13:e5:
                    14:f6:43:2e:ef:ce:b6:d0:1e:00:ea:67:63:db:23:
                    89:2f:e9:25:0c:fa:f6:28:03:11:66:13:d3:31:97:
                    49:c5:f4:96:ce:22:51:b3:d6:f1:98:1a:5a:f6:ba:
                    ab:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:91:64:AA:1F:68:C9:96:0F:79:C7:C7:E8:F6:B3:6C:9E:CA:7B:F5
            X509v3 Authority Key Identifier:
                keyid:C7:D4:D3:03:14:16:0F:DA:CB:95:82:CF:97:2E:90:EC:10:AE:20:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/918ad7a6-c907-4359-aba5-d5748ba16176/0/C7D4D30314160FDACB9582CF972E90EC10AE206F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C7D4D30314160FDACB9582CF972E90EC10AE206F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/918ad7a6-c907-4359-aba5-d5748ba16176/0/C7D4D30314160FDACB9582CF972E90EC10AE206F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:f2:ee:43:6f:85:01:fc:be:c1:b0:40:ad:29:16:17:bb:9c:
         18:6d:d2:12:2d:19:f7:db:a5:49:cd:ac:9d:36:94:e5:4c:ea:
         a8:2a:2b:ed:0c:9a:dc:0d:11:b1:17:86:97:6c:e6:2f:89:88:
         20:67:bf:fe:72:06:df:97:21:6c:b2:f7:bd:42:9a:ae:6a:23:
         be:4f:f0:2f:cb:09:82:a0:47:b0:f4:39:7f:f8:6b:bd:39:cb:
         d7:a5:a7:a2:a3:c0:a2:51:f0:3d:b8:50:23:45:85:d5:41:4e:
         94:0e:ba:cd:98:a6:29:f0:3f:3c:da:c1:e7:a1:50:4f:12:90:
         84:72:ab:91:fc:cb:20:3f:b9:97:c0:b2:72:ab:ab:ef:55:a5:
         a4:7b:46:7b:70:fe:a5:38:64:f0:28:0a:a8:00:6b:d7:fd:e6:
         83:94:af:95:26:8c:28:d3:6f:8e:ea:68:b8:ea:7f:a1:d7:49:
         6a:1d:fb:7a:a5:ac:6a:0e:9a:62:fe:30:39:65:d7:d2:d5:f8:
         6b:4f:70:bc:36:fc:c0:69:30:e1:d0:98:20:00:c5:2a:64:ce:
         55:a0:70:6a:71:88:59:39:16:32:2b:89:2f:f9:b4:18:17:0d:
         2c:be:ba:2c:09:75:67:80:3f:3d:66:bc:71:7d:fc:4a:52:59:
         8d:e1:9a:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 18 05:47:32 2025 by rpki-client