This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/f3b47ab6-d1f1-4d2e-9cfc-8084a4bacf0b/0/7C4EACB6A8C8C7276D4CEB86DCDCA3E7F468A793.mft
File:                     7C4EACB6A8C8C7276D4CEB86DCDCA3E7F468A793.mft (raw, json)
Hash identifier:          7+Qun5LQUXa0UAAZnPs/0JOSmsPAJhfVQHJm+lOp1+k=
Subject key identifier:   79:E0:3D:02:C8:FE:9B:A4:03:E4:10:AB:7D:88:29:C6:4E:57:F4:A5
Authority key identifier: 7C:4E:AC:B6:A8:C8:C7:27:6D:4C:EB:86:DC:DC:A3:E7:F4:68:A7:93
Certificate issuer:       /CN=7C4EACB6A8C8C7276D4CEB86DCDCA3E7F468A793
Certificate serial:       621E222C2368CE2CF136DE7C391163159E8B3CEB
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/7C4EACB6A8C8C7276D4CEB86DCDCA3E7F468A793.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/f3b47ab6-d1f1-4d2e-9cfc-8084a4bacf0b/0/7C4EACB6A8C8C7276D4CEB86DCDCA3E7F468A793.mft
Manifest number:          010F
Signing time:             Fri 05 Dec 2025 23:50:49 +0000
Manifest this update:     Fri 05 Dec 2025 23:45:49 +0000
Manifest next update:     Tue 09 Dec 2025 05:04:49 +0000
Files and hashes:         1: 7C4EACB6A8C8C7276D4CEB86DCDCA3E7F468A793.crl (hash: sWr4CjWKlo1+ucykUleet/2/3TKvBm46z3s8biRFBEg=)
                          2: 3135372e32302e3231322e302f32332d3234203d3e20313532343135.roa (hash: rbjJyAwc8hNNHHozNUZcHui2yrJ3XRP3MxmsmjgubzQ=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/f3b47ab6-d1f1-4d2e-9cfc-8084a4bacf0b/0/7C4EACB6A8C8C7276D4CEB86DCDCA3E7F468A793.crl
                          rsync://repo-rpki.idnic.net/repo/f3b47ab6-d1f1-4d2e-9cfc-8084a4bacf0b/0/7C4EACB6A8C8C7276D4CEB86DCDCA3E7F468A793.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/7C4EACB6A8C8C7276D4CEB86DCDCA3E7F468A793.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 09 Dec 2025 05:04:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:1e:22:2c:23:68:ce:2c:f1:36:de:7c:39:11:63:15:9e:8b:3c:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7C4EACB6A8C8C7276D4CEB86DCDCA3E7F468A793
        Validity
            Not Before: Dec  5 23:45:49 2025 GMT
            Not After : Dec  9 05:04:49 2025 GMT
        Subject: CN=79E03D02C8FE9BA403E410AB7D8829C64E57F4A5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:d7:fe:16:c5:0a:47:0b:84:ab:b7:24:12:e3:
                    d1:7e:3c:12:d2:53:1e:e5:e2:2c:42:4c:2a:6c:6d:
                    8c:d6:98:2c:60:40:d2:16:3e:08:83:4d:b2:fe:73:
                    ba:eb:dc:28:3a:79:b0:95:4c:9e:7f:cf:17:bf:43:
                    62:65:d0:99:90:d7:b0:18:ed:db:f1:0c:f7:87:a1:
                    62:41:c9:13:fd:61:7e:f4:0d:88:d1:8c:78:18:4e:
                    2b:1c:e8:2a:0a:89:cf:d4:82:da:ce:2b:ee:0e:13:
                    59:1b:aa:ca:a8:11:3e:2f:ed:92:42:5e:2b:8b:98:
                    f2:45:5a:2b:d5:ec:6f:72:c6:0f:2b:a4:00:c5:b2:
                    d7:1f:ab:91:af:d1:8b:e2:3e:b6:f0:98:b2:1a:eb:
                    13:de:fd:dc:7a:0c:af:d6:c4:7c:94:ef:62:97:97:
                    8e:ed:01:fd:09:d3:c4:6b:12:9c:b7:a7:bb:88:e6:
                    24:e0:78:28:26:03:6c:dd:14:b5:8a:81:9e:24:d2:
                    f0:78:93:3e:63:64:ae:a9:97:be:49:30:b5:b9:ac:
                    9b:7e:a2:ca:71:cf:64:dd:c3:32:a7:30:3b:99:13:
                    26:7d:ac:fd:c3:9f:6a:99:a9:30:b3:44:0f:17:a4:
                    83:04:51:e3:f1:56:ce:37:c0:66:78:03:65:64:b8:
                    60:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:E0:3D:02:C8:FE:9B:A4:03:E4:10:AB:7D:88:29:C6:4E:57:F4:A5
            X509v3 Authority Key Identifier:
                keyid:7C:4E:AC:B6:A8:C8:C7:27:6D:4C:EB:86:DC:DC:A3:E7:F4:68:A7:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/f3b47ab6-d1f1-4d2e-9cfc-8084a4bacf0b/0/7C4EACB6A8C8C7276D4CEB86DCDCA3E7F468A793.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/7C4EACB6A8C8C7276D4CEB86DCDCA3E7F468A793.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f3b47ab6-d1f1-4d2e-9cfc-8084a4bacf0b/0/7C4EACB6A8C8C7276D4CEB86DCDCA3E7F468A793.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:69:86:a4:5d:fa:c3:b7:a7:fe:40:a4:2c:6c:b9:f4:a5:37:
         50:5d:a4:aa:fd:03:7c:a3:14:24:be:ae:63:e6:f9:21:b1:e1:
         30:35:96:08:ba:da:d8:8b:5d:70:1b:5f:91:d8:89:cb:18:36:
         50:b4:79:bf:f0:e0:99:c2:d1:83:13:e9:57:2b:1c:f8:f6:00:
         62:30:b6:e4:67:37:01:71:f2:b1:c0:ee:64:0d:8c:65:26:aa:
         e2:0c:53:7c:66:06:0c:d5:8b:cf:3c:79:f9:2d:12:bc:27:2a:
         c2:ed:a3:a7:86:0c:e0:d2:ee:f1:f8:86:d0:78:ee:bb:aa:cf:
         0a:43:db:02:0b:28:bd:92:18:08:4b:cb:e5:4e:28:96:89:34:
         8b:a0:60:db:23:bf:b0:d5:1a:21:0e:a0:f9:a8:c1:56:60:59:
         66:38:d4:c2:f0:a0:b2:50:22:b4:e6:43:7b:0e:64:16:2c:2c:
         ff:47:a0:59:6b:85:ce:ac:6a:0b:ee:f9:b0:57:4f:6e:10:a7:
         41:55:c9:58:24:f6:eb:c1:73:f2:db:c9:6d:af:63:52:96:2b:
         b7:e8:3b:67:d5:6c:6a:e3:e2:b2:3c:21:f4:b6:c4:e0:52:fe:
         34:86:99:32:31:f4:88:8a:75:6a:3c:88:2b:3d:38:c8:7e:b8:
         8a:66:90:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 19:45:50 2025 by rpki-client