This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/999688a9-e78d-4aba-83bc-5178679120ad/0/7E9242F2F0756C1DB232479261838C3701005D48.mft
File:                     7E9242F2F0756C1DB232479261838C3701005D48.mft (raw, json)
Hash identifier:          B8zteF69/LFQrMs2u1wQSKJxq07+fQ0w17NvUjshHAE=
Subject key identifier:   FB:D8:2D:BB:48:9B:24:B8:63:56:C6:96:48:21:12:B4:6E:52:C1:E0
Authority key identifier: 7E:92:42:F2:F0:75:6C:1D:B2:32:47:92:61:83:8C:37:01:00:5D:48
Certificate issuer:       /CN=7E9242F2F0756C1DB232479261838C3701005D48
Certificate serial:       5CA025369CC2F7ECC966B1E4F5DA3605F21E02D5
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7E9242F2F0756C1DB232479261838C3701005D48.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/999688a9-e78d-4aba-83bc-5178679120ad/0/7E9242F2F0756C1DB232479261838C3701005D48.mft
Manifest number:          0256
Signing time:             Sat 06 Dec 2025 15:32:05 +0000
Manifest this update:     Sat 06 Dec 2025 15:27:05 +0000
Manifest next update:     Tue 09 Dec 2025 17:24:05 +0000
Files and hashes:         1: 3130332e3138352e34382e302f32332d3234203d3e203538383230.roa (hash: sRruwoxKxC5v+4ajE2hcnIZkT8FBlsjjqaqL/hWChfA=)
                          2: 7E9242F2F0756C1DB232479261838C3701005D48.crl (hash: mYLcrKKip2S4Uap8BqMb9Ei4HH0luSU943BSQufJsJs=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/999688a9-e78d-4aba-83bc-5178679120ad/0/7E9242F2F0756C1DB232479261838C3701005D48.crl
                          rsync://repo-rpki.idnic.net/repo/999688a9-e78d-4aba-83bc-5178679120ad/0/7E9242F2F0756C1DB232479261838C3701005D48.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7E9242F2F0756C1DB232479261838C3701005D48.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 09 Dec 2025 15:57:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:a0:25:36:9c:c2:f7:ec:c9:66:b1:e4:f5:da:36:05:f2:1e:02:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7E9242F2F0756C1DB232479261838C3701005D48
        Validity
            Not Before: Dec  6 15:27:05 2025 GMT
            Not After : Dec  9 17:24:05 2025 GMT
        Subject: CN=FBD82DBB489B24B86356C696482112B46E52C1E0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:d7:33:69:0b:54:42:6e:c2:a4:7e:2a:74:35:
                    23:0c:2a:32:1f:e2:1a:79:53:df:cc:74:f9:c2:9c:
                    87:39:a7:86:04:f1:92:fd:c8:39:1e:51:56:15:2f:
                    d9:ee:0f:ac:28:36:2b:8e:f8:43:09:37:c8:52:e8:
                    15:14:b3:5f:f1:84:a8:84:52:41:ab:d0:cb:33:4e:
                    ca:64:e2:e4:1b:0e:a7:c6:55:c2:3a:1f:68:51:8d:
                    89:ee:09:3b:5a:cf:27:7a:6b:12:8a:07:a2:af:40:
                    6b:2c:be:93:f3:e9:2f:11:c5:57:93:66:83:15:b0:
                    f0:1b:fd:35:cf:69:b4:51:59:5b:f4:6b:06:e9:ad:
                    f6:03:8e:f5:74:8b:e0:ab:18:a7:1d:ce:a1:28:ca:
                    f1:26:89:09:b8:1f:84:16:f3:24:b3:38:66:73:2d:
                    24:fc:26:10:72:3b:4e:6d:e7:f9:c8:6b:e0:92:b0:
                    e3:2f:e6:f6:c3:11:21:91:72:f7:ed:1b:e7:49:c2:
                    3a:59:89:9b:ba:03:fd:b2:cc:b2:06:8b:2f:4d:53:
                    57:86:e5:59:7a:5a:5b:58:16:ce:2f:f5:73:30:b7:
                    24:0f:ba:79:18:a8:28:45:06:96:e7:0c:1d:64:53:
                    b3:a5:ca:72:f6:e9:af:f8:b3:05:94:70:40:5d:fd:
                    35:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:D8:2D:BB:48:9B:24:B8:63:56:C6:96:48:21:12:B4:6E:52:C1:E0
            X509v3 Authority Key Identifier:
                keyid:7E:92:42:F2:F0:75:6C:1D:B2:32:47:92:61:83:8C:37:01:00:5D:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/999688a9-e78d-4aba-83bc-5178679120ad/0/7E9242F2F0756C1DB232479261838C3701005D48.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7E9242F2F0756C1DB232479261838C3701005D48.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/999688a9-e78d-4aba-83bc-5178679120ad/0/7E9242F2F0756C1DB232479261838C3701005D48.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:50:49:75:78:e9:96:22:71:3a:84:f8:90:5f:97:24:11:8a:
         91:f0:e4:56:50:4b:38:b9:86:f5:d8:09:62:de:96:8b:d5:7f:
         6e:60:a4:6f:d5:d5:50:5e:03:96:80:7e:27:0a:08:73:56:a0:
         7d:24:f6:78:2a:ca:0e:29:71:75:0a:16:9a:8e:46:88:13:cc:
         48:2d:9c:1e:f1:7c:79:6b:06:91:29:e2:8e:71:04:57:72:52:
         b1:8a:67:63:54:c6:63:ce:90:0f:e2:f0:48:a8:94:3e:74:12:
         5f:03:2f:58:ba:bf:0f:a8:a6:99:83:ff:43:e4:3c:01:24:dd:
         8f:a4:14:2f:bb:01:3b:70:2c:fc:94:b0:46:eb:e5:2c:69:e1:
         91:70:76:ad:f7:fb:51:a5:0b:61:09:7a:5b:8f:ba:e2:de:c3:
         b4:12:f8:38:82:db:9e:cf:86:89:4a:47:2e:c9:2a:e6:33:b3:
         9c:bb:05:c3:25:dc:37:85:99:3b:b8:f9:6e:a2:87:9f:2e:aa:
         e2:fe:38:1b:9b:04:54:43:8a:44:b8:02:6b:03:e1:b8:a3:88:
         16:e9:fe:ca:16:45:12:20:66:b9:34:eb:74:f9:d9:ed:1b:4e:
         b2:c9:83:f9:69:8d:30:2e:2c:13:2f:a8:ae:27:78:19:df:f2:
         08:17:0d:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 02:02:20 2025 by rpki-client