This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/ce3d8c03-17bb-4cab-8526-118f587dcc09/0/7B9F50722EE5D5DB8DF552ED32CB8764B64FA902.mft
File:                     7B9F50722EE5D5DB8DF552ED32CB8764B64FA902.mft (raw, json)
Hash identifier:          W17Y3BCmjCWWpCGs3KJCrpjsPBiV+H5Bzlkd2EUA4Fs=
Subject key identifier:   B3:7B:15:C5:C1:6B:A6:16:D5:4D:B0:0B:29:35:69:A2:7D:CA:B8:D0
Authority key identifier: 7B:9F:50:72:2E:E5:D5:DB:8D:F5:52:ED:32:CB:87:64:B6:4F:A9:02
Certificate issuer:       /CN=7B9F50722EE5D5DB8DF552ED32CB8764B64FA902
Certificate serial:       2E09BF073D8BC2B12CCBBDC7217F855DC8E04CFF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7B9F50722EE5D5DB8DF552ED32CB8764B64FA902.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/ce3d8c03-17bb-4cab-8526-118f587dcc09/0/7B9F50722EE5D5DB8DF552ED32CB8764B64FA902.mft
Manifest number:          0150
Signing time:             Mon 15 Dec 2025 09:51:24 +0000
Manifest this update:     Mon 15 Dec 2025 09:46:24 +0000
Manifest next update:     Thu 18 Dec 2025 17:51:24 +0000
Files and hashes:         1: 3130332e3138332e3130302e302f32332d3234203d3e20313439363730.roa (hash: 5MhHdS5d9rGYEWQQUwZMj2uRPg7u67+gzfI6p1UW8Ho=)
                          2: 7B9F50722EE5D5DB8DF552ED32CB8764B64FA902.crl (hash: UfwW2sye53TZqRfy4EDPmMujQnGdNDxJOkxiP8vavjs=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/ce3d8c03-17bb-4cab-8526-118f587dcc09/0/7B9F50722EE5D5DB8DF552ED32CB8764B64FA902.crl
                          rsync://repo-rpki.idnic.net/repo/ce3d8c03-17bb-4cab-8526-118f587dcc09/0/7B9F50722EE5D5DB8DF552ED32CB8764B64FA902.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7B9F50722EE5D5DB8DF552ED32CB8764B64FA902.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 18 Dec 2025 17:51:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:09:bf:07:3d:8b:c2:b1:2c:cb:bd:c7:21:7f:85:5d:c8:e0:4c:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7B9F50722EE5D5DB8DF552ED32CB8764B64FA902
        Validity
            Not Before: Dec 15 09:46:24 2025 GMT
            Not After : Dec 18 17:51:24 2025 GMT
        Subject: CN=B37B15C5C16BA616D54DB00B293569A27DCAB8D0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:42:01:86:1d:6e:e4:86:8b:b4:cb:c4:bf:e9:
                    10:b7:22:18:44:67:1e:f8:87:72:2f:ca:a5:50:9e:
                    fa:8e:d3:e4:d3:9f:ae:48:44:52:50:fd:c3:9d:fd:
                    61:55:f7:a4:3f:1d:5d:d4:6a:e8:e5:fc:3f:eb:13:
                    ac:7b:a0:e4:06:b7:24:88:1f:e4:d3:77:71:8b:2b:
                    5d:1a:83:4b:49:4b:d8:43:27:ac:13:d4:db:3f:27:
                    83:f6:5b:74:d2:26:21:c1:08:da:22:c2:30:fc:2e:
                    4d:d1:4e:e2:44:ca:bb:6f:e0:a6:e2:f6:1c:a6:6a:
                    89:24:93:b2:63:ea:9d:ee:de:ea:ae:b2:99:0d:e5:
                    9d:30:54:1f:3f:c4:fb:77:85:fa:e3:91:47:29:ec:
                    55:d4:7e:59:9e:65:f8:17:11:f1:50:74:20:14:e6:
                    fa:7c:ce:72:f4:5a:b1:7c:9b:c6:37:11:2d:77:02:
                    b3:ae:36:5d:73:d3:b0:3b:91:f3:c4:15:9f:96:a5:
                    3c:0b:f8:4a:51:34:4c:c0:f1:72:bb:e1:03:0b:e7:
                    b2:ea:6e:76:4b:30:bb:4d:57:3e:d3:4e:93:04:3a:
                    76:75:75:c2:0d:ee:b4:df:8d:0e:76:c7:58:62:b2:
                    3c:1f:b8:db:39:82:0e:64:2c:39:b8:b6:d2:35:8b:
                    74:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:7B:15:C5:C1:6B:A6:16:D5:4D:B0:0B:29:35:69:A2:7D:CA:B8:D0
            X509v3 Authority Key Identifier:
                keyid:7B:9F:50:72:2E:E5:D5:DB:8D:F5:52:ED:32:CB:87:64:B6:4F:A9:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/ce3d8c03-17bb-4cab-8526-118f587dcc09/0/7B9F50722EE5D5DB8DF552ED32CB8764B64FA902.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7B9F50722EE5D5DB8DF552ED32CB8764B64FA902.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ce3d8c03-17bb-4cab-8526-118f587dcc09/0/7B9F50722EE5D5DB8DF552ED32CB8764B64FA902.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:ab:41:12:b2:c8:7d:ea:03:2f:82:0c:74:38:18:e2:c3:db:
         87:fc:66:b5:d6:e4:ab:d2:6a:f2:ee:34:3d:61:d7:9f:27:db:
         a2:40:e0:19:7e:92:97:4e:a8:f9:b9:16:1e:e1:7f:3f:31:1b:
         86:86:83:9d:10:9c:fc:32:18:36:f1:da:d5:c4:9b:6b:ca:a0:
         5c:5b:6c:c8:fe:38:69:c4:86:f5:61:b6:ef:e2:8b:eb:17:34:
         29:bf:55:98:7a:43:32:25:d9:41:ce:db:9b:85:fe:18:df:1b:
         14:a4:b9:6f:36:a2:61:af:b9:b9:d0:d8:66:8e:c8:2a:04:ac:
         61:de:33:da:6b:5f:f7:cc:16:ce:0d:58:d6:f6:9f:37:13:cd:
         ba:df:09:8e:30:8e:54:41:2d:41:68:61:84:2f:02:f8:96:68:
         7c:6f:5f:73:dc:5f:65:16:db:55:44:17:9c:28:9b:a6:7d:70:
         96:97:5b:8c:d6:bb:58:f4:69:9c:33:f0:63:e7:a5:9e:f6:ac:
         9d:b5:66:66:23:ad:f0:d5:14:f9:56:ee:e8:a5:95:ce:bd:2c:
         90:05:69:93:b8:d9:60:67:e7:c0:8f:14:af:11:02:73:ef:e2:
         47:03:dc:a6:58:7d:cc:09:36:bb:46:55:c9:57:95:71:12:23:
         ec:f5:c0:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 16 19:10:42 2025 by rpki-client