This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/6e97dbc6-9374-42e2-a3d0-879ed6a19196/0/73BD266EEF13136ED4F4E96AB4984B5A0E310448.mft
File:                     73BD266EEF13136ED4F4E96AB4984B5A0E310448.mft (raw, json)
Hash identifier:          DOe3Bc+xJ8J7R1S91nEHIrNKWEmRsrxEVHlc9/5PloU=
Subject key identifier:   12:A3:E9:D0:5A:37:C4:62:0C:DC:1F:72:B3:73:66:28:7A:B6:A2:1A
Authority key identifier: 73:BD:26:6E:EF:13:13:6E:D4:F4:E9:6A:B4:98:4B:5A:0E:31:04:48
Certificate issuer:       /CN=73BD266EEF13136ED4F4E96AB4984B5A0E310448
Certificate serial:       7136585086A8092C1B88DB3CE02F5616D0B3551B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/73BD266EEF13136ED4F4E96AB4984B5A0E310448.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/6e97dbc6-9374-42e2-a3d0-879ed6a19196/0/73BD266EEF13136ED4F4E96AB4984B5A0E310448.mft
Manifest number:          028E
Signing time:             Tue 02 Dec 2025 07:50:45 +0000
Manifest this update:     Tue 02 Dec 2025 07:45:45 +0000
Manifest next update:     Fri 05 Dec 2025 15:23:45 +0000
Files and hashes:         1: 323430353a646238303a3a2f33322d3332203d3e20313335343539.roa (hash: YaMwkR41AdvOC7lp8b8/qG+wA8LmPjMEdab45baxyRY=)
                          2: 73BD266EEF13136ED4F4E96AB4984B5A0E310448.crl (hash: 1BiVyVN5lyhNkxpSzLT+ropvvbURjoaiusAIzBiWpV8=)
                          3: 3130332e36382e302e302f32332d3233203d3e20313335343539.roa (hash: HSyTIrpAeoepgTw2Qf4xN4feVn0VVvW9T2xruJUxPUQ=)
                          4: 3130332e36382e312e302f32342d3234203d3e20313335343539.roa (hash: ALYJPSGHoZ3vbUe+/ngTAg9Jpro0IJxFedbN05Rd8Wc=)
                          5: 3130332e36382e302e302f32322d3232203d3e20313335343539.roa (hash: hj0aLvHnsN2pt1jXNXHldeHD4msnEKkoRErUA/qhVzM=)
                          6: 3130332e36382e302e302f32342d3234203d3e20313335343539.roa (hash: eVMNZeAJ7cLVIjMPZBDtZxBLsAOFJHtMe9ME5u9mIlo=)
                          7: 3130332e36382e322e302f32342d3234203d3e20313530323635.roa (hash: ylhRyjN9O7aHn/zjEzn07ubViFMsJpvDX8p87PLz1EI=)
                          8: 3130332e36382e332e302f32342d3234203d3e20313335343539.roa (hash: 0l5kmySMjjsx5+tXbm7BMhXxqkpT2OomAPcwFliwHUc=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/6e97dbc6-9374-42e2-a3d0-879ed6a19196/0/73BD266EEF13136ED4F4E96AB4984B5A0E310448.crl
                          rsync://repo-rpki.idnic.net/repo/6e97dbc6-9374-42e2-a3d0-879ed6a19196/0/73BD266EEF13136ED4F4E96AB4984B5A0E310448.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/73BD266EEF13136ED4F4E96AB4984B5A0E310448.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 05 Dec 2025 15:23:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:36:58:50:86:a8:09:2c:1b:88:db:3c:e0:2f:56:16:d0:b3:55:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73BD266EEF13136ED4F4E96AB4984B5A0E310448
        Validity
            Not Before: Dec  2 07:45:45 2025 GMT
            Not After : Dec  5 15:23:45 2025 GMT
        Subject: CN=12A3E9D05A37C4620CDC1F72B37366287AB6A21A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:10:b4:e4:70:4c:61:42:0b:8e:39:8c:8b:15:
                    36:c5:99:ef:c9:77:dc:de:a9:aa:b7:41:7a:5f:cc:
                    31:24:1e:a8:83:78:58:c1:c1:c8:7f:d2:00:b5:dd:
                    e1:6e:e8:d2:cd:0e:09:c9:f7:c4:d9:cd:58:4b:13:
                    9d:53:3a:96:04:a1:9a:7d:80:fd:41:bf:53:fa:77:
                    2e:5a:de:03:eb:fa:84:3b:a4:c4:14:1a:98:01:18:
                    43:47:99:eb:ad:58:83:89:dd:97:e1:e1:1c:5e:96:
                    98:35:e2:d0:7d:72:9a:40:a7:07:30:88:b0:e8:78:
                    22:ed:de:3e:e3:95:05:2c:b2:a4:1c:85:14:af:01:
                    57:d4:a7:83:6f:bd:16:26:12:c8:a4:e4:56:6b:cd:
                    10:3a:87:d9:f2:40:7c:fe:5c:7f:48:88:e8:63:7e:
                    65:39:90:ee:7a:2a:13:e6:a2:89:fb:58:09:3b:91:
                    06:48:5b:53:19:37:e2:2f:12:61:d0:9f:4e:14:73:
                    8c:20:19:07:47:51:a8:8a:13:94:b2:0e:af:ee:6d:
                    9f:d1:f5:c8:ef:17:7c:2e:72:00:1a:98:36:aa:83:
                    70:40:4b:9c:2b:3e:aa:e9:15:6a:34:d3:2b:fb:4a:
                    b9:23:25:e8:2c:41:72:c9:46:ed:4a:93:87:35:a3:
                    91:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:A3:E9:D0:5A:37:C4:62:0C:DC:1F:72:B3:73:66:28:7A:B6:A2:1A
            X509v3 Authority Key Identifier:
                keyid:73:BD:26:6E:EF:13:13:6E:D4:F4:E9:6A:B4:98:4B:5A:0E:31:04:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/6e97dbc6-9374-42e2-a3d0-879ed6a19196/0/73BD266EEF13136ED4F4E96AB4984B5A0E310448.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/73BD266EEF13136ED4F4E96AB4984B5A0E310448.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6e97dbc6-9374-42e2-a3d0-879ed6a19196/0/73BD266EEF13136ED4F4E96AB4984B5A0E310448.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:35:33:f7:dc:10:73:7d:1e:9f:ca:e4:51:e2:5f:b8:92:d4:
         23:82:e5:bc:4a:46:ca:1f:09:de:56:a5:51:ac:77:6a:48:0d:
         f3:ed:0c:21:28:c1:14:6e:e7:0d:27:c4:ff:da:53:66:e4:98:
         42:42:7b:c6:6c:fd:14:fa:2c:89:8b:3d:8d:18:c0:3e:3a:bb:
         ca:cb:14:ba:b3:18:ab:64:53:7b:27:90:73:5b:bc:d4:47:89:
         96:ce:8a:7e:e9:ab:51:61:fb:7e:3d:43:46:c8:39:e0:e9:52:
         09:6f:15:31:cc:e3:31:55:44:4c:3e:01:10:2a:46:4d:67:de:
         ae:70:d4:8f:dd:16:4a:66:ec:7b:a4:0c:c2:45:9f:8a:12:fb:
         1f:ac:27:7a:aa:e4:68:6b:f4:0c:54:04:8f:e9:d8:78:a1:6d:
         61:4d:b1:7c:99:d3:96:bb:df:68:e0:99:5a:f6:8d:2f:ee:77:
         d0:f8:e4:ea:19:81:73:66:65:15:db:29:6b:9f:37:67:1f:35:
         d0:e0:dd:1a:97:0c:47:d7:9e:d3:42:8d:b6:be:3c:7b:b3:a8:
         c6:3e:75:3b:fb:a1:17:88:21:a9:f6:20:57:13:a4:ff:92:88:
         d0:ce:da:06:79:3c:b0:8f:be:20:c2:6a:93:91:96:ad:e3:5a:
         95:0e:83:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 14:44:20 2025 by rpki-client