This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/414e04fa-7188-4f4f-81bb-330389f87015/0/782659A7F6433029248A38A1C68F2E9971161391.mft
File:                     782659A7F6433029248A38A1C68F2E9971161391.mft (raw, json)
Hash identifier:          PxV8Op7csEkNZWGeNWllSgOKDWNHf02rYMml9I/vLz0=
Subject key identifier:   CB:D1:0C:2E:5B:08:1A:0E:2C:49:E1:D2:B2:C1:D4:48:E1:F2:6C:9C
Authority key identifier: 78:26:59:A7:F6:43:30:29:24:8A:38:A1:C6:8F:2E:99:71:16:13:91
Certificate issuer:       /CN=782659A7F6433029248A38A1C68F2E9971161391
Certificate serial:       1D5FC08F7037D0ACBB75EE8D8813BFC8DEBF2590
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/782659A7F6433029248A38A1C68F2E9971161391.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/414e04fa-7188-4f4f-81bb-330389f87015/0/782659A7F6433029248A38A1C68F2E9971161391.mft
Manifest number:          0145
Signing time:             Wed 03 Dec 2025 06:30:59 +0000
Manifest this update:     Wed 03 Dec 2025 06:25:59 +0000
Manifest next update:     Sat 06 Dec 2025 07:53:59 +0000
Files and hashes:         1: 3130332e35352e3235322e302f32342d3234203d3e20313531353838.roa (hash: 40JRxNw6stZoA1fUKj/zKco7HRJV/HtMAMb74Ejikyo=)
                          2: 3130332e35352e3235332e302f32342d3234203d3e20313531353838.roa (hash: QzBzm2jTi52qCuHNFLxAMIYm8xcW8JwG11leVCtzjT8=)
                          3: 782659A7F6433029248A38A1C68F2E9971161391.crl (hash: h+JK4gC07x16tD0tP/2fejfl92Y8sPiTRJUyQnrVXDI=)
                          4: 3130332e35352e3235322e302f32332d3233203d3e20313531353838.roa (hash: 4SzxYxsm34j+//J0Zj7fCtaaSGBPCJKKVqr4apFWEx0=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/414e04fa-7188-4f4f-81bb-330389f87015/0/782659A7F6433029248A38A1C68F2E9971161391.crl
                          rsync://repo-rpki.idnic.net/repo/414e04fa-7188-4f4f-81bb-330389f87015/0/782659A7F6433029248A38A1C68F2E9971161391.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/782659A7F6433029248A38A1C68F2E9971161391.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 06 Dec 2025 07:53:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:5f:c0:8f:70:37:d0:ac:bb:75:ee:8d:88:13:bf:c8:de:bf:25:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=782659A7F6433029248A38A1C68F2E9971161391
        Validity
            Not Before: Dec  3 06:25:59 2025 GMT
            Not After : Dec  6 07:53:59 2025 GMT
        Subject: CN=CBD10C2E5B081A0E2C49E1D2B2C1D448E1F26C9C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:ce:ca:a5:b2:67:c8:6f:66:85:74:82:d2:97:
                    c8:ad:e2:71:9d:23:57:ef:5c:11:50:cf:f9:91:b7:
                    14:69:0f:be:fc:55:40:7e:ca:e7:43:22:a2:e0:3e:
                    e4:84:c0:c2:89:46:6e:c9:0a:4a:49:29:71:a9:88:
                    79:ac:97:b9:f6:14:fc:3f:f9:28:ab:fe:6f:0b:99:
                    74:2d:ed:52:48:96:ef:7e:20:c6:1a:98:7a:52:f5:
                    29:88:4e:97:a7:d7:14:42:aa:a1:0b:17:6b:86:e5:
                    25:b4:0c:fa:57:4c:af:08:9d:68:78:73:e1:dd:1c:
                    0d:53:07:94:b9:c7:2b:14:b8:29:a0:3b:5e:6e:09:
                    60:b2:a2:2b:19:3e:f8:3e:37:dd:db:f0:a1:d8:94:
                    54:df:26:37:c9:e5:18:ff:d4:2e:4d:38:b3:da:26:
                    78:87:c9:c6:8f:ea:a5:94:c1:d2:57:77:ca:46:aa:
                    61:1e:78:a8:df:df:bb:eb:1d:55:f8:65:4d:0f:3c:
                    29:4f:18:94:ce:27:a5:8d:40:0d:ac:61:19:19:1e:
                    57:6c:bb:e8:10:48:40:2a:fd:d2:e9:a8:3b:26:01:
                    7c:c8:3e:60:94:bd:0f:e6:d4:1b:8c:1b:04:49:4b:
                    4b:d4:11:0c:65:fc:52:eb:3b:39:88:49:b7:ce:87:
                    e6:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:D1:0C:2E:5B:08:1A:0E:2C:49:E1:D2:B2:C1:D4:48:E1:F2:6C:9C
            X509v3 Authority Key Identifier:
                keyid:78:26:59:A7:F6:43:30:29:24:8A:38:A1:C6:8F:2E:99:71:16:13:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/414e04fa-7188-4f4f-81bb-330389f87015/0/782659A7F6433029248A38A1C68F2E9971161391.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/782659A7F6433029248A38A1C68F2E9971161391.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/414e04fa-7188-4f4f-81bb-330389f87015/0/782659A7F6433029248A38A1C68F2E9971161391.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:5b:1b:a3:74:de:af:7b:3b:0c:e5:d0:6e:bc:ef:7c:f0:17:
         8f:e3:e6:6a:b6:ea:7a:b2:48:9a:f3:52:46:6f:0a:44:e7:86:
         b2:5c:78:f9:df:e4:7f:f0:36:3f:a3:70:4f:2f:90:f7:9c:91:
         6f:50:35:1e:52:3f:a8:78:e9:cd:a7:51:3c:87:1e:2a:9f:d0:
         ce:34:24:a8:62:b7:30:9c:1d:ef:77:64:05:96:60:69:a7:49:
         e1:25:e4:98:41:ae:c5:35:90:5e:81:62:f9:cd:48:4f:e2:da:
         5a:8e:d1:25:cc:a2:33:57:bd:01:82:08:61:09:d3:66:87:8e:
         d5:3e:4a:6b:c7:d7:28:01:2b:66:16:9c:ad:69:1b:b5:2e:84:
         b3:3c:7d:70:39:ae:98:52:0c:b4:a3:7a:97:2a:53:48:98:a3:
         c4:c9:ec:92:00:e0:b5:8b:01:d3:4d:1b:e7:03:3d:c4:73:c3:
         bf:c2:02:d8:19:8e:81:d8:a5:5f:72:35:f5:b2:fc:ba:4a:04:
         9b:03:81:13:61:0e:ae:78:fa:db:55:6b:d5:9c:c7:14:b1:3d:
         be:4b:72:07:f6:cd:40:69:d4:60:8e:24:26:0a:08:1e:fa:c6:
         cf:e7:3c:c8:c2:4d:81:37:80:22:64:3b:60:a8:95:da:fb:b4:
         e4:b8:cb:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 13:58:24 2025 by rpki-client