This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/52292ba8-ad1a-4139-8c20-5b526da970bd/0/7E6A786ACEF684F37758FC4A6D8517CAD165FA77.mft
File:                     7E6A786ACEF684F37758FC4A6D8517CAD165FA77.mft (raw, json)
Hash identifier:          28tcPCxDiDb/fNeaVPbiQf/oFZ4aAaTTc7QYz7T316s=
Subject key identifier:   1F:B4:B6:BE:EE:A5:4D:C8:3C:13:37:20:82:A5:23:7F:C9:15:B4:13
Authority key identifier: 7E:6A:78:6A:CE:F6:84:F3:77:58:FC:4A:6D:85:17:CA:D1:65:FA:77
Certificate issuer:       /CN=7E6A786ACEF684F37758FC4A6D8517CAD165FA77
Certificate serial:       3F4381AE6CF8654A94F5EC8DDD3D04B4588EE6A7
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7E6A786ACEF684F37758FC4A6D8517CAD165FA77.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/52292ba8-ad1a-4139-8c20-5b526da970bd/0/7E6A786ACEF684F37758FC4A6D8517CAD165FA77.mft
Manifest number:          01E6
Signing time:             Sat 13 Dec 2025 22:22:09 +0000
Manifest this update:     Sat 13 Dec 2025 22:17:09 +0000
Manifest next update:     Wed 17 Dec 2025 08:08:09 +0000
Files and hashes:         1: 7E6A786ACEF684F37758FC4A6D8517CAD165FA77.crl (hash: E5w+4GYIbObIr6YFN7QdtcwR7dHqvZSa6yXL9m9fRtc=)
                          2: 3130332e3231332e3233312e302f32342d3234203d3e20313431313236.roa (hash: LgrwV1f0ZUMT2nBDfwKWYCZTwrW8QfuLgJJFAHp0cWA=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/52292ba8-ad1a-4139-8c20-5b526da970bd/0/7E6A786ACEF684F37758FC4A6D8517CAD165FA77.crl
                          rsync://repo-rpki.idnic.net/repo/52292ba8-ad1a-4139-8c20-5b526da970bd/0/7E6A786ACEF684F37758FC4A6D8517CAD165FA77.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7E6A786ACEF684F37758FC4A6D8517CAD165FA77.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 16 Dec 2025 13:15:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:43:81:ae:6c:f8:65:4a:94:f5:ec:8d:dd:3d:04:b4:58:8e:e6:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7E6A786ACEF684F37758FC4A6D8517CAD165FA77
        Validity
            Not Before: Dec 13 22:17:09 2025 GMT
            Not After : Dec 17 08:08:09 2025 GMT
        Subject: CN=1FB4B6BEEEA54DC83C13372082A5237FC915B413
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:f6:39:cb:bf:11:93:91:84:4f:9b:3d:d7:d3:
                    a4:28:1d:5d:e3:19:bc:24:fd:07:28:a6:3b:f4:ff:
                    74:23:84:f1:9b:5b:2b:2b:84:5b:07:bf:89:1f:2a:
                    17:20:cc:1f:a7:aa:8f:4d:9a:a4:50:ba:56:20:cd:
                    49:b5:45:91:c9:02:a3:79:22:0c:0d:ab:45:27:de:
                    c1:8c:ad:31:4e:67:74:aa:3a:9a:ca:90:6d:9a:dd:
                    98:00:4d:db:0d:c7:b7:ac:12:62:35:ba:a2:fc:40:
                    93:6e:45:8a:2e:ce:6e:3e:b8:55:f7:6c:d2:28:8b:
                    62:3d:e0:c0:9f:c8:8e:3f:fb:33:a1:0b:97:a3:b7:
                    54:b6:97:c6:bc:ff:41:a7:30:75:0b:2c:9c:72:96:
                    8a:92:48:bd:33:91:1b:c7:59:f8:58:7b:4a:0b:f1:
                    1f:98:c4:46:c9:5a:ef:5b:e3:41:ff:fe:ff:4a:9d:
                    73:e3:5d:14:0d:fc:a2:5c:ac:97:a1:5f:22:46:61:
                    78:fa:3f:b1:31:5b:f9:11:7e:51:8e:34:25:92:96:
                    0a:2a:a0:4a:ab:95:e4:18:ec:33:f8:14:46:6c:13:
                    41:54:c4:ca:62:08:7b:af:d9:85:82:57:77:cf:c8:
                    5b:f4:5e:3a:99:3f:11:b1:2f:86:4c:d2:d5:18:7f:
                    10:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:B4:B6:BE:EE:A5:4D:C8:3C:13:37:20:82:A5:23:7F:C9:15:B4:13
            X509v3 Authority Key Identifier:
                keyid:7E:6A:78:6A:CE:F6:84:F3:77:58:FC:4A:6D:85:17:CA:D1:65:FA:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/52292ba8-ad1a-4139-8c20-5b526da970bd/0/7E6A786ACEF684F37758FC4A6D8517CAD165FA77.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7E6A786ACEF684F37758FC4A6D8517CAD165FA77.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/52292ba8-ad1a-4139-8c20-5b526da970bd/0/7E6A786ACEF684F37758FC4A6D8517CAD165FA77.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:13:b0:b3:3f:cd:53:d4:66:01:68:70:b7:3e:d2:41:42:1a:
         cd:e9:19:f6:0a:0d:71:eb:17:e2:45:d8:bc:2b:03:d1:e7:0b:
         ff:b0:0e:f8:60:ee:86:bf:08:cc:29:31:bc:60:a9:26:80:43:
         e1:bc:b9:bb:e4:bc:1a:99:a8:a7:39:c4:5b:e1:24:d8:d8:e3:
         47:77:c8:84:0a:91:9e:68:ed:26:ef:12:1d:c0:2d:74:ba:05:
         64:a4:76:e6:30:72:8b:0e:8a:52:a6:d1:77:26:b7:5f:c9:b6:
         65:32:ac:e4:17:0d:27:bf:51:e9:13:f7:f3:13:62:20:9f:67:
         f3:e2:a1:a4:3d:f5:2e:7d:c2:4c:64:bd:58:7c:6d:3f:ff:03:
         5a:0b:09:aa:26:fe:0c:24:52:ec:b3:b5:d1:dc:fc:fe:07:5e:
         ac:7a:5a:9b:0e:89:f4:d7:4e:f2:52:b2:c8:25:b7:e7:70:8a:
         18:ee:ba:b7:3f:26:ce:10:e5:2c:77:45:7d:d1:c4:d0:a2:d9:
         fa:d7:c2:84:b2:c3:7e:10:49:8d:0b:d5:9e:96:d0:15:c3:a0:
         b4:e8:71:cc:6f:38:6b:72:2e:a1:28:cc:94:ea:c1:88:09:d1:
         49:37:62:c6:ae:47:2f:3a:b6:59:24:81:ba:60:85:4d:23:ad:
         aa:9b:af:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 14 03:33:42 2025 by rpki-client