This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/7fc5a1cc-cc5e-4e58-8df4-f886718313aa/0/142A78CA51D88042BA512A1BB46D6DF44F63BBD7.mft
File:                     142A78CA51D88042BA512A1BB46D6DF44F63BBD7.mft (raw, json)
Hash identifier:          OoVMfdIwf2cWgnUKHJaD9/c/QWbZwdxNUdgXfkW4Dio=
Subject key identifier:   1C:FB:A0:E0:0F:93:6C:9F:2D:8C:90:CD:DA:1D:93:90:4C:BD:F7:18
Authority key identifier: 14:2A:78:CA:51:D8:80:42:BA:51:2A:1B:B4:6D:6D:F4:4F:63:BB:D7
Certificate issuer:       /CN=142A78CA51D88042BA512A1BB46D6DF44F63BBD7
Certificate serial:       5FE8DF7B7AD0BFBEF9AD8161F4D6C2FD973387E1
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/142A78CA51D88042BA512A1BB46D6DF44F63BBD7.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/7fc5a1cc-cc5e-4e58-8df4-f886718313aa/0/142A78CA51D88042BA512A1BB46D6DF44F63BBD7.mft
Manifest number:          E0
Signing time:             Sat 06 Dec 2025 09:50:38 +0000
Manifest this update:     Sat 06 Dec 2025 09:45:38 +0000
Manifest next update:     Tue 09 Dec 2025 21:48:38 +0000
Files and hashes:         1: 142A78CA51D88042BA512A1BB46D6DF44F63BBD7.crl (hash: /vEGkq/M3bsF7EnKgoxflfytGISKTsu1ZUreERWv71w=)
                          2: 3136302e32302e3234302e302f32342d3234203d3e20313532383035.roa (hash: Ags6qEj8G1tNVxqoTo734mNPZsVwGq25ouTkNgTgiXA=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/7fc5a1cc-cc5e-4e58-8df4-f886718313aa/0/142A78CA51D88042BA512A1BB46D6DF44F63BBD7.crl
                          rsync://repo-rpki.idnic.net/repo/7fc5a1cc-cc5e-4e58-8df4-f886718313aa/0/142A78CA51D88042BA512A1BB46D6DF44F63BBD7.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/142A78CA51D88042BA512A1BB46D6DF44F63BBD7.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 09 Dec 2025 06:55:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:e8:df:7b:7a:d0:bf:be:f9:ad:81:61:f4:d6:c2:fd:97:33:87:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=142A78CA51D88042BA512A1BB46D6DF44F63BBD7
        Validity
            Not Before: Dec  6 09:45:38 2025 GMT
            Not After : Dec  9 21:48:38 2025 GMT
        Subject: CN=1CFBA0E00F936C9F2D8C90CDDA1D93904CBDF718
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:45:5d:46:2a:73:1c:ca:88:cf:4e:68:75:aa:
                    2f:e0:21:3d:25:96:06:fa:8c:42:44:a5:b0:e3:17:
                    c5:2f:ef:63:69:41:b8:2c:ee:e4:db:c7:d2:c9:a2:
                    1a:36:18:b7:09:66:7e:8b:8e:7c:d0:db:90:74:fe:
                    a4:d8:7b:cc:0b:cb:99:2c:31:1b:d9:3c:b3:ca:f8:
                    38:f0:db:43:db:ba:84:7a:da:19:43:c1:ac:80:f6:
                    7c:0d:12:3b:62:a2:8f:13:c1:30:b7:3b:e9:08:8a:
                    98:a2:2a:5f:02:9a:d4:0a:fb:82:1f:46:15:8f:8d:
                    35:76:e5:d8:f5:89:be:ea:69:b6:87:83:2d:70:22:
                    8a:28:e4:9d:67:8f:ac:b1:95:60:5d:b5:7f:aa:95:
                    7d:e7:eb:27:45:c5:50:fd:8f:f6:98:85:ca:59:13:
                    c5:ea:48:a0:6f:a8:de:87:39:6b:50:27:09:5a:fb:
                    82:e3:9f:d3:6e:ef:b7:87:b4:86:5b:57:b5:da:04:
                    7e:53:47:17:41:b1:08:66:38:8a:99:1c:0e:7a:cb:
                    05:79:f4:31:91:f2:9f:5d:0e:86:a6:a9:5a:af:be:
                    59:6b:8a:81:66:0e:6c:bd:b2:70:60:37:f0:dd:2a:
                    b5:44:b4:a5:3c:29:be:f6:76:e4:83:06:b0:53:43:
                    2a:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:FB:A0:E0:0F:93:6C:9F:2D:8C:90:CD:DA:1D:93:90:4C:BD:F7:18
            X509v3 Authority Key Identifier:
                keyid:14:2A:78:CA:51:D8:80:42:BA:51:2A:1B:B4:6D:6D:F4:4F:63:BB:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/7fc5a1cc-cc5e-4e58-8df4-f886718313aa/0/142A78CA51D88042BA512A1BB46D6DF44F63BBD7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/142A78CA51D88042BA512A1BB46D6DF44F63BBD7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7fc5a1cc-cc5e-4e58-8df4-f886718313aa/0/142A78CA51D88042BA512A1BB46D6DF44F63BBD7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:4e:64:1e:f3:34:10:93:e4:f1:b8:5c:48:8f:90:da:05:1c:
         00:9e:b2:b1:07:32:a5:49:7b:80:17:f1:37:93:05:48:1c:3c:
         66:aa:3a:2b:7c:c5:ea:d3:1d:36:19:90:1c:79:ed:2d:bf:b7:
         c8:5c:37:33:8a:5d:15:ba:b4:57:88:46:33:12:d4:a8:04:95:
         8d:af:66:1f:10:df:89:ac:3f:11:fb:5a:28:7e:98:dc:1f:36:
         23:1d:15:27:d4:20:94:b7:0b:b8:9e:a5:b7:b3:f0:37:a1:d3:
         15:80:d4:4a:ff:49:c1:46:f0:35:17:80:8d:cc:7e:f8:85:cb:
         ee:c6:3c:44:9b:35:aa:b0:c9:60:c1:93:26:9a:d2:13:52:48:
         8a:d3:f6:5d:1b:9a:6c:48:44:62:6a:4f:86:c4:25:be:a2:5a:
         8f:ef:c1:70:ba:0b:eb:af:d7:cd:3a:79:a1:f9:45:43:61:0d:
         da:82:77:9d:f9:98:8b:d6:ef:41:ab:4b:3d:af:69:d8:a5:f0:
         fa:04:b0:7a:1d:a4:8e:90:00:60:d7:d7:10:d9:7a:33:11:6a:
         75:af:ad:e8:fb:5a:a5:b3:4e:b3:09:e4:ee:1d:cf:ff:41:7a:
         5f:26:87:83:af:10:75:7e:98:48:88:ed:29:76:d2:07:41:9b:
         c0:fe:f8:41
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUX+jfe3rQv775rYFh9NbC/Zczh+EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTQyQTc4Q0E1MUQ4ODA0MkJBNTEyQTFCQjQ2RDZERjQ0
RjYzQkJENzAeFw0yNTEyMDYwOTQ1MzhaFw0yNTEyMDkyMTQ4MzhaMDMxMTAvBgNV
BAMTKDFDRkJBMEUwMEY5MzZDOUYyRDhDOTBDRERBMUQ5MzkwNENCREY3MTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeRV1GKnMcyojPTmh1qi/gIT0l
lgb6jEJEpbDjF8Uv72NpQbgs7uTbx9LJoho2GLcJZn6LjnzQ25B0/qTYe8wLy5ks
MRvZPLPK+Djw20PbuoR62hlDwayA9nwNEjtioo8TwTC3O+kIipiiKl8CmtQK+4If
RhWPjTV25dj1ib7qabaHgy1wIooo5J1nj6yxlWBdtX+qlX3n6ydFxVD9j/aYhcpZ
E8XqSKBvqN6HOWtQJwla+4Ljn9Nu77eHtIZbV7XaBH5TRxdBsQhmOIqZHA56ywV5
9DGR8p9dDoamqVqvvllrioFmDmy9snBgN/DdKrVEtKU8Kb72duSDBrBTQyqpAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUHPug4A+TbJ8tjJDN2h2TkEy99xgwHwYDVR0j
BBgwFoAUFCp4ylHYgEK6USobtG1t9E9ju9cwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83
ZmM1YTFjYy1jYzVlLTRlNTgtOGRmNC1mODg2NzE4MzEzYWEvMC8xNDJBNzhDQTUx
RDg4MDQyQkE1MTJBMUJCNDZENkRGNDRGNjNCQkQ3LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzEvMTQyQTc4Q0E1MUQ4ODA0MkJBNTEyQTFCQjQ2RDZERjQ0RjYz
QkJENy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2ZjNWExY2MtY2M1ZS00ZTU4LThk
ZjQtZjg4NjcxODMxM2FhLzAvMTQyQTc4Q0E1MUQ4ODA0MkJBNTEyQTFCQjQ2RDZE
RjQ0RjYzQkJENy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAEBOZB7zNBCT5PG4XEiPkNoFHACesrEHMqVJ
e4AX8TeTBUgcPGaqOit8xerTHTYZkBx57S2/t8hcNzOKXRW6tFeIRjMS1KgElY2v
Zh8Q34msPxH7Wih+mNwfNiMdFSfUIJS3C7iepbez8Deh0xWA1Er/ScFG8DUXgI3M
fviFy+7GPESbNaqwyWDBkyaa0hNSSIrT9l0bmmxIRGJqT4bEJb6iWo/vwXC6C+uv
1806eaH5RUNhDdqCd535mIvW70GrSz2vadil8PoEsHodpI6QAGDX1xDZejMRanWv
rej7WqWzTrMJ5O4dz/9Bel8mh4OvEHV+mEiI7Sl20gdBm8D++EE=
-----END CERTIFICATE-----
Generated at Sun Dec 7 18:53:33 2025 by rpki-client