This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/c4431751-664b-47a0-a520-d97f5c12618c/0/690E7BC726C787991D438BDDB48990A7A17D8D15.mft
File:                     690E7BC726C787991D438BDDB48990A7A17D8D15.mft (raw, json)
Hash identifier:          6phnaZSzV1WWDd2Wuiw+soL1DpX9zC/GBdD0LCK+dbw=
Subject key identifier:   8A:39:40:28:60:6A:E3:36:6B:AF:5A:69:C5:AF:48:35:DC:E0:3D:26
Authority key identifier: 69:0E:7B:C7:26:C7:87:99:1D:43:8B:DD:B4:89:90:A7:A1:7D:8D:15
Certificate issuer:       /CN=690E7BC726C787991D438BDDB48990A7A17D8D15
Certificate serial:       7528CBCD775B6E84AEFBF86505CB79051FB45B4B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/690E7BC726C787991D438BDDB48990A7A17D8D15.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/c4431751-664b-47a0-a520-d97f5c12618c/0/690E7BC726C787991D438BDDB48990A7A17D8D15.mft
Manifest number:          0152
Signing time:             Sat 06 Dec 2025 16:21:39 +0000
Manifest this update:     Sat 06 Dec 2025 16:16:39 +0000
Manifest next update:     Tue 09 Dec 2025 22:33:39 +0000
Files and hashes:         1: 690E7BC726C787991D438BDDB48990A7A17D8D15.crl (hash: z5wLAtwh87vA3qNW76ocRRgtE5JxRAtaka+LTAJYGyg=)
                          2: 3130332e32362e3230382e302f32322d3234203d3e203138313033.roa (hash: 6bqd3P1jvnQnjsCjRtIIfzvZLlg5nv5q33H6TglsIt4=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/c4431751-664b-47a0-a520-d97f5c12618c/0/690E7BC726C787991D438BDDB48990A7A17D8D15.crl
                          rsync://repo-rpki.idnic.net/repo/c4431751-664b-47a0-a520-d97f5c12618c/0/690E7BC726C787991D438BDDB48990A7A17D8D15.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/690E7BC726C787991D438BDDB48990A7A17D8D15.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 09 Dec 2025 15:57:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:28:cb:cd:77:5b:6e:84:ae:fb:f8:65:05:cb:79:05:1f:b4:5b:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=690E7BC726C787991D438BDDB48990A7A17D8D15
        Validity
            Not Before: Dec  6 16:16:39 2025 GMT
            Not After : Dec  9 22:33:39 2025 GMT
        Subject: CN=8A394028606AE3366BAF5A69C5AF4835DCE03D26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:ba:9f:ad:fe:ac:b4:13:9f:6d:ea:52:ba:a9:
                    36:68:5d:c9:ff:07:48:13:c1:49:43:15:48:9d:cc:
                    d0:65:c0:45:e7:21:1b:b3:89:3d:d1:7c:2b:33:6d:
                    6d:43:0b:45:ef:0c:20:90:1e:f9:ab:a4:41:d0:88:
                    6d:13:6c:5c:03:a5:5a:2f:af:5b:97:c8:c5:80:27:
                    5a:14:d1:f5:36:e9:2a:72:bb:e3:e9:6c:3a:99:77:
                    d8:47:3d:56:9b:1a:af:2c:a3:86:30:1d:2d:b9:21:
                    04:f5:7e:38:41:53:6e:4d:f7:1c:60:ba:6b:78:19:
                    56:3c:92:62:d4:0b:fe:99:bc:72:54:df:8b:00:2d:
                    36:e6:ff:c7:73:ed:0c:1f:33:04:5b:d3:dd:92:43:
                    56:5f:82:04:a7:7b:85:b1:6e:ec:2c:45:f6:6d:0d:
                    80:1d:7b:56:81:61:9e:2c:6a:ad:6a:24:ec:d7:12:
                    ed:b4:3c:dc:b4:bf:82:d7:a3:c6:a2:d6:99:65:ea:
                    91:c8:ea:9b:44:74:d6:69:b3:88:1f:eb:7c:e0:f2:
                    85:12:a6:04:ba:42:2a:29:72:75:c3:92:02:1f:5c:
                    27:b0:3c:d2:2b:be:dc:6f:cf:64:a1:96:6f:61:df:
                    7f:fe:a5:39:c2:a1:65:01:54:6c:00:98:81:29:15:
                    27:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:39:40:28:60:6A:E3:36:6B:AF:5A:69:C5:AF:48:35:DC:E0:3D:26
            X509v3 Authority Key Identifier:
                keyid:69:0E:7B:C7:26:C7:87:99:1D:43:8B:DD:B4:89:90:A7:A1:7D:8D:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/c4431751-664b-47a0-a520-d97f5c12618c/0/690E7BC726C787991D438BDDB48990A7A17D8D15.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/690E7BC726C787991D438BDDB48990A7A17D8D15.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c4431751-664b-47a0-a520-d97f5c12618c/0/690E7BC726C787991D438BDDB48990A7A17D8D15.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:46:e7:13:20:3f:e0:7d:ce:da:d4:4a:52:9b:c2:56:25:bf:
         56:d7:92:a9:01:26:f3:03:e0:c9:4e:8f:5d:9d:87:fc:00:76:
         62:5d:2c:60:13:d1:64:99:97:6b:1f:fd:18:a3:fd:54:67:61:
         50:db:af:01:7b:93:1b:e6:28:74:56:45:e6:09:dc:e1:21:43:
         79:d2:3e:da:e7:58:60:3f:32:08:97:df:c4:27:72:83:5e:54:
         ab:cf:13:1d:69:cb:84:2f:7f:05:50:43:2e:68:e2:1b:fd:84:
         79:ef:0a:4c:2f:82:2d:4d:a5:7f:a4:82:38:2c:16:4b:6d:73:
         ee:94:c6:fb:8c:c8:3e:dc:f7:f7:f0:a5:ce:91:3d:09:f2:f1:
         f6:f1:97:4c:5a:98:ac:7a:84:49:f7:1a:cc:a6:42:6d:6a:0f:
         b4:b1:16:d9:ce:eb:81:97:03:1f:91:8a:7d:57:ef:ee:57:ee:
         bd:ce:8f:43:3d:56:2a:70:73:d9:ed:d6:a3:e2:9e:fe:d2:d9:
         3a:17:b4:18:cf:0c:e2:9f:26:d1:4c:48:4e:00:7d:67:4c:19:
         1d:45:b3:b8:e2:46:b2:38:45:a9:4e:44:33:eb:a9:15:fa:05:
         fd:6c:46:02:8d:cb:57:ff:8c:24:29:4e:b9:1b:9e:59:f7:20:
         9e:2d:5d:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 04:51:57 2025 by rpki-client