This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/ac32eee1-10f7-457d-a8c5-5f7f741a63da/0/7195906BF48238F96B0510D75000910A519133F7.mft
File:                     7195906BF48238F96B0510D75000910A519133F7.mft (raw, json)
Hash identifier:          d/qyuzdpbIJ2frzUhQlK1MznQ/KvtLyP/hPXwAICYwI=
Subject key identifier:   6D:8A:B3:30:7C:6F:A9:C4:EF:FF:74:05:98:F5:1E:DE:2D:94:10:36
Authority key identifier: 71:95:90:6B:F4:82:38:F9:6B:05:10:D7:50:00:91:0A:51:91:33:F7
Certificate issuer:       /CN=7195906BF48238F96B0510D75000910A519133F7
Certificate serial:       1BFCA3205B8E6A61A47EBFC831B79CED1FBB5D4F
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7195906BF48238F96B0510D75000910A519133F7.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/ac32eee1-10f7-457d-a8c5-5f7f741a63da/0/7195906BF48238F96B0510D75000910A519133F7.mft
Manifest number:          01C5
Signing time:             Sat 06 Dec 2025 11:11:36 +0000
Manifest this update:     Sat 06 Dec 2025 11:06:36 +0000
Manifest next update:     Tue 09 Dec 2025 17:55:36 +0000
Files and hashes:         1: 3130332e3136382e3135312e302f32342d3234203d3e20313432333131.roa (hash: s6WBhLaUVIxSMrwUa1GyQKxiSJ5Lxm0zhF+JRIxoxjM=)
                          2: 3130332e3136382e3135302e302f32332d3233203d3e20313432333131.roa (hash: vej87BChpsakmxUSnkAXWyF/hseNZHZfP/+A76YToPE=)
                          3: 7195906BF48238F96B0510D75000910A519133F7.crl (hash: uY5o0aB2KB9wTGR+v/xty5BHQwTWkhRK5csoSqU+aKs=)
                          4: 3130332e3136382e3135302e302f32342d3234203d3e20313432333131.roa (hash: FbNYGlqllOlMcgZqW/AYQTW3Ig+jNpTHmcZ/SLk/YWc=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/ac32eee1-10f7-457d-a8c5-5f7f741a63da/0/7195906BF48238F96B0510D75000910A519133F7.crl
                          rsync://repo-rpki.idnic.net/repo/ac32eee1-10f7-457d-a8c5-5f7f741a63da/0/7195906BF48238F96B0510D75000910A519133F7.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7195906BF48238F96B0510D75000910A519133F7.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 09 Dec 2025 15:57:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:fc:a3:20:5b:8e:6a:61:a4:7e:bf:c8:31:b7:9c:ed:1f:bb:5d:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7195906BF48238F96B0510D75000910A519133F7
        Validity
            Not Before: Dec  6 11:06:36 2025 GMT
            Not After : Dec  9 17:55:36 2025 GMT
        Subject: CN=6D8AB3307C6FA9C4EFFF740598F51EDE2D941036
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:20:2f:ea:55:0b:9a:77:87:66:4f:6e:26:ac:
                    9a:cb:aa:18:a7:9b:c5:ba:34:dd:47:f6:cb:dc:33:
                    4c:8f:8f:30:22:37:e2:10:cf:6f:47:fc:09:c2:3d:
                    c5:50:12:a4:86:48:1b:cb:25:ab:eb:41:0a:00:38:
                    ed:a3:20:52:cb:e7:a0:6f:a4:82:b0:94:cc:44:6c:
                    5c:fe:2a:19:84:4c:27:da:05:a2:52:09:82:52:98:
                    95:aa:0a:68:8d:da:62:13:7e:66:a5:b8:52:fc:23:
                    7c:17:53:7a:3a:94:a5:25:15:7a:04:20:04:d0:ed:
                    34:54:7b:86:c5:b7:dd:e3:dc:96:54:ee:a4:24:3c:
                    8f:d1:1b:e7:17:da:01:d6:44:53:16:c0:dd:9a:b2:
                    37:e3:aa:a9:0a:f3:7e:29:d2:9f:74:e6:61:a7:e5:
                    f6:22:8e:59:73:55:f8:2d:c0:ae:2d:6a:9b:53:f0:
                    ba:a9:e8:8a:67:04:12:d2:43:b5:50:cf:b2:9f:41:
                    2b:93:55:98:1d:c4:cb:e3:24:fc:0d:35:c7:92:a2:
                    16:b4:bd:0f:7f:69:dd:cb:66:43:22:d1:ab:cd:9a:
                    c8:da:a9:3d:a3:08:1e:eb:c3:36:71:13:c1:42:ef:
                    5f:c2:23:9e:ed:34:06:8b:2d:d6:50:9c:a2:2a:63:
                    7d:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:8A:B3:30:7C:6F:A9:C4:EF:FF:74:05:98:F5:1E:DE:2D:94:10:36
            X509v3 Authority Key Identifier:
                keyid:71:95:90:6B:F4:82:38:F9:6B:05:10:D7:50:00:91:0A:51:91:33:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/ac32eee1-10f7-457d-a8c5-5f7f741a63da/0/7195906BF48238F96B0510D75000910A519133F7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7195906BF48238F96B0510D75000910A519133F7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ac32eee1-10f7-457d-a8c5-5f7f741a63da/0/7195906BF48238F96B0510D75000910A519133F7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:ae:e7:e8:e4:63:20:33:50:f3:2a:45:03:6f:de:d6:1c:c1:
         3f:15:27:ea:38:ed:58:9c:49:09:00:91:4c:b0:84:cf:ee:ad:
         22:00:04:37:47:4e:3a:d9:9c:6f:00:2f:1f:4c:75:75:4a:1a:
         41:08:1a:f8:8e:68:04:e6:a2:21:b2:fa:52:f9:c5:23:40:09:
         32:6f:94:75:7e:62:b8:b0:c6:c0:11:a6:4f:4f:1b:a1:3a:a7:
         7d:fd:33:f5:fc:02:23:c4:23:df:79:4e:c8:52:92:6c:cf:a2:
         42:1d:ca:79:76:7b:c4:31:39:93:2f:00:d2:0e:16:3a:e3:5b:
         e7:1a:f1:cf:0c:1d:0b:4a:c9:0b:e4:e4:08:58:a7:0e:12:b3:
         cb:77:31:35:ca:43:66:9f:13:79:f7:fb:11:76:08:34:8f:57:
         e8:b6:e5:71:1f:f5:57:61:2c:f0:17:c4:90:4d:0d:18:33:34:
         2e:11:7f:29:78:01:cd:67:74:99:d8:9f:b9:9c:fb:b0:dc:ec:
         1b:c0:ee:f9:49:cc:14:3e:21:db:11:fc:43:49:68:ad:65:d6:
         f0:82:c9:49:62:8e:ab:51:b7:28:e5:4a:f5:f4:9d:c8:26:12:
         f0:31:b0:2c:e1:70:cb:eb:05:8f:68:e1:95:c9:bb:8a:cd:40:
         e9:9c:7b:3e
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUG/yjIFuOamGkfr/IMbec7R+7XU8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzE5NTkwNkJGNDgyMzhGOTZCMDUxMEQ3NTAwMDkxMEE1
MTkxMzNGNzAeFw0yNTEyMDYxMTA2MzZaFw0yNTEyMDkxNzU1MzZaMDMxMTAvBgNV
BAMTKDZEOEFCMzMwN0M2RkE5QzRFRkZGNzQwNTk4RjUxRURFMkQ5NDEwMzYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5IC/qVQuad4dmT24mrJrLqhin
m8W6NN1H9svcM0yPjzAiN+IQz29H/AnCPcVQEqSGSBvLJavrQQoAOO2jIFLL56Bv
pIKwlMxEbFz+KhmETCfaBaJSCYJSmJWqCmiN2mITfmaluFL8I3wXU3o6lKUlFXoE
IATQ7TRUe4bFt93j3JZU7qQkPI/RG+cX2gHWRFMWwN2asjfjqqkK834p0p905mGn
5fYijllzVfgtwK4taptT8Lqp6IpnBBLSQ7VQz7KfQSuTVZgdxMvjJPwNNceSoha0
vQ9/ad3LZkMi0avNmsjaqT2jCB7rwzZxE8FC71/CI57tNAaLLdZQnKIqY31hAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUbYqzMHxvqcTv/3QFmPUe3i2UEDYwHwYDVR0j
BBgwFoAUcZWQa/SCOPlrBRDXUACRClGRM/cwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h
YzMyZWVlMS0xMGY3LTQ1N2QtYThjNS01ZjdmNzQxYTYzZGEvMC83MTk1OTA2QkY0
ODIzOEY5NkIwNTEwRDc1MDAwOTEwQTUxOTEzM0Y3LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNzE5NTkwNkJGNDgyMzhGOTZCMDUxMEQ3NTAwMDkxMEE1MTkx
MzNGNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWMzMmVlZTEtMTBmNy00NTdkLWE4
YzUtNWY3Zjc0MWE2M2RhLzAvNzE5NTkwNkJGNDgyMzhGOTZCMDUxMEQ3NTAwMDkx
MEE1MTkxMzNGNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAEGu5+jkYyAzUPMqRQNv3tYcwT8VJ+o47Vic
SQkAkUywhM/urSIABDdHTjrZnG8ALx9MdXVKGkEIGviOaATmoiGy+lL5xSNACTJv
lHV+YriwxsARpk9PG6E6p339M/X8AiPEI995TshSkmzPokIdynl2e8QxOZMvANIO
FjrjW+ca8c8MHQtKyQvk5AhYpw4Ss8t3MTXKQ2afE3n3+xF2CDSPV+i25XEf9Vdh
LPAXxJBNDRgzNC4Rfyl4Ac1ndJnYn7mc+7Dc7BvA7vlJzBQ+IdsR/ENJaK1l1vCC
yUlijqtRtyjlSvX0ncgmEvAxsCzhcMvrBY9o4ZXJu4rNQOmcez4=
-----END CERTIFICATE-----
Generated at Sun Dec 7 06:41:44 2025 by rpki-client