This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/7540cf80-9315-42c1-844e-bb03622a05c1/0/722FE79638E6D14E4794815122247CBEC27B8505.mft
File:                     722FE79638E6D14E4794815122247CBEC27B8505.mft (raw, json)
Hash identifier:          sA45ZMVneIAe6/yLVtqTPFFbSuP+tteDcRaL33DFrQg=
Subject key identifier:   FE:73:30:30:58:75:34:1F:16:39:3D:27:ED:4A:F7:52:09:B2:1A:7F
Authority key identifier: 72:2F:E7:96:38:E6:D1:4E:47:94:81:51:22:24:7C:BE:C2:7B:85:05
Certificate issuer:       /CN=722FE79638E6D14E4794815122247CBEC27B8505
Certificate serial:       1744D2F9EDAD11E540A454053068326CC716275C
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/722FE79638E6D14E4794815122247CBEC27B8505.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/7540cf80-9315-42c1-844e-bb03622a05c1/0/722FE79638E6D14E4794815122247CBEC27B8505.mft
Manifest number:          03DF
Signing time:             Mon 01 Dec 2025 08:12:14 +0000
Manifest this update:     Mon 01 Dec 2025 08:07:14 +0000
Manifest next update:     Thu 04 Dec 2025 13:02:14 +0000
Files and hashes:         1: 3130332e3136372e3136362e302f32332d3233203d3e20313431393834.roa (hash: uMhuVVCWV6KJ9BoKOLCiDb7P+XJG3YcMCjnNadUtMPc=)
                          2: 722FE79638E6D14E4794815122247CBEC27B8505.crl (hash: ygXHzVh9y0hDmr+7RQ+bcORIl1b5s8k+RRRGQ3LD2cw=)
                          3: 3130332e3136372e3136372e302f32342d3234203d3e20313431393834.roa (hash: mcmmT8pT8SsuE0p1UknEAcW7BeTtM+31BJ7lasnlFWU=)
                          4: 3130332e3136372e3136362e302f32342d3234203d3e20313431393834.roa (hash: Lha8Dc5V7yxaccwl2cB1wpI7D9zABdY3uxyScLd254Q=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/7540cf80-9315-42c1-844e-bb03622a05c1/0/722FE79638E6D14E4794815122247CBEC27B8505.crl
                          rsync://repo-rpki.idnic.net/repo/7540cf80-9315-42c1-844e-bb03622a05c1/0/722FE79638E6D14E4794815122247CBEC27B8505.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/722FE79638E6D14E4794815122247CBEC27B8505.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 04 Dec 2025 13:02:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:44:d2:f9:ed:ad:11:e5:40:a4:54:05:30:68:32:6c:c7:16:27:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=722FE79638E6D14E4794815122247CBEC27B8505
        Validity
            Not Before: Dec  1 08:07:14 2025 GMT
            Not After : Dec  4 13:02:14 2025 GMT
        Subject: CN=FE7330305875341F16393D27ED4AF75209B21A7F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:3b:ba:1b:2d:43:e7:ac:75:fc:52:11:50:30:
                    94:9a:f5:33:41:a1:1f:3d:a8:96:84:85:7f:fc:1d:
                    23:c1:9a:73:a9:14:e0:ba:7d:e5:18:00:56:8b:61:
                    89:e9:a9:3e:83:e7:4f:09:2c:df:19:2a:9e:7b:2d:
                    48:10:4d:4a:7f:23:46:7f:a6:2f:a2:3c:48:e3:b8:
                    d5:e9:38:aa:f7:10:29:d9:7e:b0:69:55:dc:42:e5:
                    8f:99:98:e4:0f:c3:25:26:fc:0a:75:9f:95:91:6a:
                    b2:06:16:3c:59:15:d2:48:e9:e9:88:83:73:6c:8b:
                    8f:fd:95:f4:79:1e:8d:23:03:5a:07:5f:4b:ce:8a:
                    05:df:66:f4:48:d8:b9:de:20:05:f5:e2:54:ab:26:
                    d0:02:d0:3f:93:07:ba:0a:03:11:6b:2e:e2:84:1d:
                    db:a2:aa:8e:40:7a:7e:9f:79:0e:26:f3:93:ce:c8:
                    3e:46:32:16:3f:8b:31:b3:0b:b4:91:7b:ec:eb:3f:
                    2f:a2:0d:5e:cd:1b:2e:51:3b:c8:76:48:bf:01:d9:
                    ea:28:58:4a:af:19:4e:65:7c:02:71:1a:30:3b:3d:
                    a4:02:c1:eb:e2:ef:95:d8:20:c1:dd:dc:f3:ad:44:
                    99:0c:1a:74:9e:81:bc:19:33:44:36:dc:d1:ff:1b:
                    4f:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:73:30:30:58:75:34:1F:16:39:3D:27:ED:4A:F7:52:09:B2:1A:7F
            X509v3 Authority Key Identifier:
                keyid:72:2F:E7:96:38:E6:D1:4E:47:94:81:51:22:24:7C:BE:C2:7B:85:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/7540cf80-9315-42c1-844e-bb03622a05c1/0/722FE79638E6D14E4794815122247CBEC27B8505.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/722FE79638E6D14E4794815122247CBEC27B8505.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7540cf80-9315-42c1-844e-bb03622a05c1/0/722FE79638E6D14E4794815122247CBEC27B8505.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ba:42:6b:64:53:32:2f:05:40:08:12:c2:62:62:59:9b:03:1f:
         f9:4e:11:c8:d6:77:4d:09:6d:c8:29:5f:c2:dc:4b:9f:ec:0b:
         21:30:35:48:7f:1d:36:38:3e:1f:ea:c8:14:dd:6f:5b:ce:6f:
         bc:e2:d7:7f:20:2c:7d:3e:43:37:81:2b:56:38:3d:6e:0f:a1:
         16:8f:91:c7:0d:f3:37:71:ce:28:af:5d:f3:a9:78:95:87:85:
         77:79:7a:27:c7:16:20:55:15:09:6f:55:02:4f:a8:98:ee:f5:
         4d:b8:0f:a2:b1:4c:30:33:e3:2c:db:bc:85:89:49:d5:a5:90:
         ec:1f:00:9e:8a:1d:33:49:e9:ee:36:25:01:f4:94:ec:61:aa:
         90:48:83:c2:e5:9f:85:31:76:80:7c:6b:46:b0:5c:3c:1f:5f:
         12:3c:89:32:84:3c:20:df:73:35:51:eb:86:7a:57:4e:eb:0f:
         65:c8:1c:ef:13:fa:e0:97:39:5f:0f:56:cd:b2:3b:4d:48:05:
         1a:0f:bf:cd:7f:b4:3b:fc:57:e7:40:41:57:47:bc:27:08:5c:
         7c:15:19:ea:8e:cf:23:ee:ce:34:9e:ff:df:43:a5:8d:23:4e:
         b5:fb:20:d9:fb:a0:d2:8f:35:7f:cf:bd:80:e3:6f:1c:a7:06:
         3e:15:10:39
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUF0TS+e2tEeVApFQFMGgybMcWJ1wwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzIyRkU3OTYzOEU2RDE0RTQ3OTQ4MTUxMjIyNDdDQkVD
MjdCODUwNTAeFw0yNTEyMDEwODA3MTRaFw0yNTEyMDQxMzAyMTRaMDMxMTAvBgNV
BAMTKEZFNzMzMDMwNTg3NTM0MUYxNjM5M0QyN0VENEFGNzUyMDlCMjFBN0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4O7obLUPnrHX8UhFQMJSa9TNB
oR89qJaEhX/8HSPBmnOpFOC6feUYAFaLYYnpqT6D508JLN8ZKp57LUgQTUp/I0Z/
pi+iPEjjuNXpOKr3ECnZfrBpVdxC5Y+ZmOQPwyUm/Ap1n5WRarIGFjxZFdJI6emI
g3Nsi4/9lfR5Ho0jA1oHX0vOigXfZvRI2LneIAX14lSrJtAC0D+TB7oKAxFrLuKE
Hduiqo5Aen6feQ4m85POyD5GMhY/izGzC7SRe+zrPy+iDV7NGy5RO8h2SL8B2eoo
WEqvGU5lfAJxGjA7PaQCwevi75XYIMHd3POtRJkMGnSegbwZM0Q23NH/G0/jAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQU/nMwMFh1NB8WOT0n7Ur3UgmyGn8wHwYDVR0j
BBgwFoAUci/nljjm0U5HlIFRIiR8vsJ7hQUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83
NTQwY2Y4MC05MzE1LTQyYzEtODQ0ZS1iYjAzNjIyYTA1YzEvMC83MjJGRTc5NjM4
RTZEMTRFNDc5NDgxNTEyMjI0N0NCRUMyN0I4NTA1LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNzIyRkU3OTYzOEU2RDE0RTQ3OTQ4MTUxMjIyNDdDQkVDMjdC
ODUwNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzU0MGNmODAtOTMxNS00MmMxLTg0
NGUtYmIwMzYyMmEwNWMxLzAvNzIyRkU3OTYzOEU2RDE0RTQ3OTQ4MTUxMjIyNDdD
QkVDMjdCODUwNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBALpCa2RTMi8FQAgSwmJiWZsDH/lOEcjWd00J
bcgpX8LcS5/sCyEwNUh/HTY4Ph/qyBTdb1vOb7zi138gLH0+QzeBK1Y4PW4PoRaP
kccN8zdxziivXfOpeJWHhXd5eifHFiBVFQlvVQJPqJju9U24D6KxTDAz4yzbvIWJ
SdWlkOwfAJ6KHTNJ6e42JQH0lOxhqpBIg8Lln4UxdoB8a0awXDwfXxI8iTKEPCDf
czVR64Z6V07rD2XIHO8T+uCXOV8PVs2yO01IBRoPv81/tDv8V+dAQVdHvCcIXHwV
GeqOzyPuzjSe/99DpY0jTrX7INn7oNKPNX/PvYDjbxynBj4VEDk=
-----END CERTIFICATE-----
Generated at Wed Dec 3 13:57:17 2025 by rpki-client