This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/28f5ba5e-1f5c-4284-9a16-0135a9fd4e28/0/C7840142ADE3E1876CB50EA3A410454EB3889153.mft
File:                     C7840142ADE3E1876CB50EA3A410454EB3889153.mft (raw, json)
Hash identifier:          yzFKN1RtyNQEQ2IherwiLZq7SgLk+/Okta8uLpd93SY=
Subject key identifier:   34:E7:EE:CC:B5:68:A2:0A:23:1D:AE:45:43:25:E9:51:9B:6E:F4:86
Authority key identifier: C7:84:01:42:AD:E3:E1:87:6C:B5:0E:A3:A4:10:45:4E:B3:88:91:53
Certificate issuer:       /CN=C7840142ADE3E1876CB50EA3A410454EB3889153
Certificate serial:       6F0623F961AEF3A1CB021553897B3AEB948811B8
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C7840142ADE3E1876CB50EA3A410454EB3889153.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/28f5ba5e-1f5c-4284-9a16-0135a9fd4e28/0/C7840142ADE3E1876CB50EA3A410454EB3889153.mft
Manifest number:          EC
Signing time:             Sat 13 Dec 2025 06:50:03 +0000
Manifest this update:     Sat 13 Dec 2025 06:45:03 +0000
Manifest next update:     Tue 16 Dec 2025 09:12:03 +0000
Files and hashes:         1: 323030313a6466323a633963303a3a2f34382d3438203d3e20313531353338.roa (hash: IoIyP//hrQlYB+aIBKE8acsqetTnMXLdLd08/ax7yKA=)
                          2: 3130332e3234382e382e302f32332d3234203d3e20313531353338.roa (hash: H6s77RONQxfYVUNz4YRn/C2zSuIhVFg1GTTCJsiiK0o=)
                          3: C7840142ADE3E1876CB50EA3A410454EB3889153.crl (hash: 5rV15J2jK0IE2Q+iJWwHXbceWrqY8AB5sZycV4sdpW8=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/28f5ba5e-1f5c-4284-9a16-0135a9fd4e28/0/C7840142ADE3E1876CB50EA3A410454EB3889153.crl
                          rsync://repo-rpki.idnic.net/repo/28f5ba5e-1f5c-4284-9a16-0135a9fd4e28/0/C7840142ADE3E1876CB50EA3A410454EB3889153.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C7840142ADE3E1876CB50EA3A410454EB3889153.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 16 Dec 2025 09:12:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:06:23:f9:61:ae:f3:a1:cb:02:15:53:89:7b:3a:eb:94:88:11:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C7840142ADE3E1876CB50EA3A410454EB3889153
        Validity
            Not Before: Dec 13 06:45:03 2025 GMT
            Not After : Dec 16 09:12:03 2025 GMT
        Subject: CN=34E7EECCB568A20A231DAE454325E9519B6EF486
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:4b:2c:a4:b7:c9:03:4a:a1:2f:56:78:1c:75:
                    02:8f:ff:5c:00:3f:32:1a:dc:d1:4e:19:f3:3a:a9:
                    f9:6a:05:52:0b:9d:45:9c:7b:8d:f1:ad:b8:8a:6b:
                    32:80:33:6c:da:70:0b:55:be:11:51:24:71:5b:a3:
                    34:57:cb:2a:9c:b2:5c:2b:bd:8b:06:28:9f:f4:c7:
                    7f:f3:6d:f6:c1:6e:3f:5c:30:b9:e5:86:bc:b0:ea:
                    ad:a1:f9:60:31:b0:2f:be:88:ba:f4:c4:57:53:4f:
                    a8:a2:89:c1:a6:9e:4a:a8:e7:77:5d:2c:15:18:51:
                    6a:75:8d:2a:c6:6c:89:b6:ac:6f:95:da:eb:7a:02:
                    8a:08:b0:55:0a:bc:1c:3c:74:05:fb:87:6b:7b:4d:
                    f6:4b:7d:cf:9c:f8:ee:d1:0e:56:80:11:dd:86:81:
                    4e:36:34:1a:a3:a5:0f:2f:04:16:fa:b1:82:c6:cc:
                    22:77:55:a6:2c:03:42:5f:da:b1:92:8c:d2:f2:31:
                    bd:12:e6:ac:78:86:68:83:a7:ba:1e:23:73:91:5d:
                    c7:3e:40:95:e5:b2:8f:c0:17:65:7e:71:32:92:78:
                    3e:83:18:71:78:c7:fe:d2:d5:e5:b2:96:be:52:0b:
                    f9:c9:b8:55:c4:ab:9b:61:96:c9:9a:8c:a4:88:82:
                    9a:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:E7:EE:CC:B5:68:A2:0A:23:1D:AE:45:43:25:E9:51:9B:6E:F4:86
            X509v3 Authority Key Identifier:
                keyid:C7:84:01:42:AD:E3:E1:87:6C:B5:0E:A3:A4:10:45:4E:B3:88:91:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/28f5ba5e-1f5c-4284-9a16-0135a9fd4e28/0/C7840142ADE3E1876CB50EA3A410454EB3889153.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C7840142ADE3E1876CB50EA3A410454EB3889153.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/28f5ba5e-1f5c-4284-9a16-0135a9fd4e28/0/C7840142ADE3E1876CB50EA3A410454EB3889153.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:cc:93:0c:b8:24:d2:c8:aa:4e:83:10:13:7c:23:c4:0a:7c:
         c8:fa:95:80:bc:2b:d0:47:ec:4a:87:1b:20:a7:60:1d:90:f1:
         8e:49:79:ad:3d:40:c4:3d:7e:f8:93:9f:b1:dd:e9:2d:e6:b3:
         f9:44:60:0c:b7:9a:b7:9d:bb:2f:59:b4:65:22:9e:d9:07:4c:
         45:db:3d:4a:c4:3f:ed:cb:45:7b:a2:2e:25:ad:76:c8:2f:c9:
         cc:c9:da:59:ba:b0:94:37:37:1c:d6:f3:bf:ee:3d:88:94:b7:
         3e:c4:c0:d5:a3:26:c6:a6:25:6f:63:33:83:0c:5f:57:9b:88:
         2a:9e:a1:01:83:3b:45:b5:7e:c9:b4:87:e5:f4:d9:9d:78:7f:
         77:98:fb:6e:45:ac:9b:3d:bd:79:20:e9:7e:29:a6:d5:6d:ea:
         45:78:ec:7c:e0:10:9a:72:53:c9:64:dd:4c:e4:12:71:1d:49:
         a0:f3:32:0a:c8:52:9c:ea:bf:53:fd:6e:64:c5:3a:f9:cf:13:
         91:a1:46:e9:53:36:fb:8f:a5:3c:26:9a:9e:27:21:bb:fb:c3:
         cd:51:bd:43:d1:dc:da:af:0c:90:bf:6a:1d:58:86:fa:db:ca:
         6b:68:99:e7:1b:52:bd:96:0b:07:8f:c2:71:6b:48:a6:69:3a:
         91:9c:2e:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 14 00:02:39 2025 by rpki-client