This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/9b3b230a-fff1-47f0-bf91-7ceb8d36096e/0/7D508B225350B0D204F1943F4F53D4D86AC4FC31.mft
File:                     7D508B225350B0D204F1943F4F53D4D86AC4FC31.mft (raw, json)
Hash identifier:          UlxQng3OWPRle1SVOftsAyU4nill3FQIEtVMdyVoajI=
Subject key identifier:   05:D2:0A:A5:53:4A:54:81:93:79:FD:D4:EE:41:56:D0:1A:C8:DD:A5
Authority key identifier: 7D:50:8B:22:53:50:B0:D2:04:F1:94:3F:4F:53:D4:D8:6A:C4:FC:31
Certificate issuer:       /CN=7D508B225350B0D204F1943F4F53D4D86AC4FC31
Certificate serial:       4469985A8D401B5F7A23D6ADF2E297103288F4AD
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D508B225350B0D204F1943F4F53D4D86AC4FC31.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/9b3b230a-fff1-47f0-bf91-7ceb8d36096e/0/7D508B225350B0D204F1943F4F53D4D86AC4FC31.mft
Manifest number:          EE
Signing time:             Sat 24 Jan 2026 07:52:11 +0000
Manifest this update:     Sat 24 Jan 2026 07:47:11 +0000
Manifest next update:     Tue 27 Jan 2026 13:10:11 +0000
Files and hashes:         1: 7D508B225350B0D204F1943F4F53D4D86AC4FC31.crl (hash: 4qtsWf33jrSiai+QAwNJ8A3/h8OhDNNd6hGQ51mDaIY=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/9b3b230a-fff1-47f0-bf91-7ceb8d36096e/0/7D508B225350B0D204F1943F4F53D4D86AC4FC31.crl
                          rsync://repo-rpki.idnic.net/repo/9b3b230a-fff1-47f0-bf91-7ceb8d36096e/0/7D508B225350B0D204F1943F4F53D4D86AC4FC31.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D508B225350B0D204F1943F4F53D4D86AC4FC31.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 27 Jan 2026 13:10:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:69:98:5a:8d:40:1b:5f:7a:23:d6:ad:f2:e2:97:10:32:88:f4:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7D508B225350B0D204F1943F4F53D4D86AC4FC31
        Validity
            Not Before: Jan 24 07:47:11 2026 GMT
            Not After : Jan 27 13:10:11 2026 GMT
        Subject: CN=05D20AA5534A54819379FDD4EE4156D01AC8DDA5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:17:08:9f:89:c6:92:0a:4e:b1:34:43:75:48:
                    77:9f:bb:0f:64:21:b1:d5:75:eb:2e:4f:d2:4b:ff:
                    14:fe:7c:c7:f8:52:58:6d:da:36:65:20:b7:25:22:
                    cf:4b:13:ad:1e:00:6d:72:50:fd:e0:df:63:5f:fd:
                    27:79:92:c8:40:cd:89:5d:7b:bc:0b:3d:ac:0b:13:
                    3a:7d:cd:ec:6c:a0:72:4e:25:30:ea:56:84:08:6b:
                    87:30:ae:6c:d9:75:16:96:ce:b7:40:e3:d4:dc:4f:
                    1c:4f:c5:fe:4d:e7:f8:da:32:fc:62:c2:9c:0e:34:
                    0c:5d:f4:c9:af:4f:aa:8c:cc:5d:88:eb:ec:4e:ea:
                    4e:2f:4f:06:a5:f5:2d:8d:3e:aa:b1:8d:f0:4f:e0:
                    66:30:b3:01:8f:b8:dc:8c:a5:1b:08:2b:cd:0e:42:
                    8e:d6:dc:ba:20:60:f3:5e:cf:75:2d:e1:a6:82:ec:
                    57:7f:31:60:95:f7:d6:cd:ed:0c:ff:12:a3:0c:f4:
                    56:a0:b3:9c:3a:08:87:b2:8e:6e:4b:0a:53:75:f6:
                    c8:f0:90:ac:ae:b7:90:32:72:d7:19:f7:6f:17:5d:
                    bf:f6:69:b8:8d:99:cf:b4:ea:e0:19:e7:8e:1e:58:
                    08:5e:07:ba:0c:b4:1f:b9:e8:b8:57:bf:4f:06:0e:
                    ee:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:D2:0A:A5:53:4A:54:81:93:79:FD:D4:EE:41:56:D0:1A:C8:DD:A5
            X509v3 Authority Key Identifier:
                keyid:7D:50:8B:22:53:50:B0:D2:04:F1:94:3F:4F:53:D4:D8:6A:C4:FC:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/9b3b230a-fff1-47f0-bf91-7ceb8d36096e/0/7D508B225350B0D204F1943F4F53D4D86AC4FC31.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D508B225350B0D204F1943F4F53D4D86AC4FC31.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9b3b230a-fff1-47f0-bf91-7ceb8d36096e/0/7D508B225350B0D204F1943F4F53D4D86AC4FC31.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:24:fd:24:77:87:85:9f:9e:d0:88:a0:a7:05:3c:50:b8:ef:
         33:0f:af:2f:ad:01:6b:3e:ea:18:21:5d:85:eb:cb:50:ab:f2:
         3b:82:c9:31:fe:95:7c:b8:28:7c:b6:e0:98:79:3d:92:36:94:
         ff:dc:80:f0:85:c7:3e:34:f0:83:38:7f:3d:eb:e2:49:ef:14:
         6c:20:8a:35:09:a0:27:e6:51:c7:73:6f:f2:24:04:d7:a4:65:
         79:5e:91:45:98:5b:c7:e6:30:af:43:89:82:de:31:f2:d3:ca:
         df:08:c7:12:1e:71:88:a6:06:7a:0c:62:6a:c1:52:e8:c7:23:
         cb:99:b5:6b:3c:08:e9:33:1b:b4:87:50:08:5f:ae:8a:47:30:
         5b:f0:64:94:cf:be:0b:7a:b1:63:77:18:84:4d:68:2f:e8:60:
         c5:56:8d:c1:87:2d:c8:5b:75:a4:51:c8:da:c8:19:a9:54:73:
         e9:36:06:f6:37:9d:b0:33:e7:34:ba:12:55:d2:1a:41:45:3d:
         9c:af:72:c1:9c:06:19:a5:03:9f:e8:53:f9:00:95:5e:02:1b:
         9f:ee:e9:63:e2:7e:86:68:20:a7:1c:bf:82:6d:7c:f5:a1:86:
         5c:ae:3c:7a:0b:71:22:18:58:28:a4:95:e1:42:83:90:ab:45:
         ec:61:1e:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 01:19:53 2026 by rpki-client