This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/b260f03c-8968-470f-b618-d3eb2c928a4d/0/7A82C5E5CFF68F5008CC068EC7CA6DA383C33D56.mft
File:                     7A82C5E5CFF68F5008CC068EC7CA6DA383C33D56.mft (raw, json)
Hash identifier:          3BpIneAsnMLkZN35tVRtEZQPC6cQV9iGn8pDfCkFnBQ=
Subject key identifier:   20:7A:8A:B7:9E:65:EF:10:B2:A8:60:9B:E4:36:7A:C1:80:BB:FC:12
Authority key identifier: 7A:82:C5:E5:CF:F6:8F:50:08:CC:06:8E:C7:CA:6D:A3:83:C3:3D:56
Certificate issuer:       /CN=7A82C5E5CFF68F5008CC068EC7CA6DA383C33D56
Certificate serial:       209BBD496A2807E4BB48BF76CD1CB9118BBDCAE4
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7A82C5E5CFF68F5008CC068EC7CA6DA383C33D56.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/b260f03c-8968-470f-b618-d3eb2c928a4d/0/7A82C5E5CFF68F5008CC068EC7CA6DA383C33D56.mft
Manifest number:          0148
Signing time:             Wed 03 Dec 2025 11:12:29 +0000
Manifest this update:     Wed 03 Dec 2025 11:07:29 +0000
Manifest next update:     Sat 06 Dec 2025 16:03:29 +0000
Files and hashes:         1: 7A82C5E5CFF68F5008CC068EC7CA6DA383C33D56.crl (hash: CPAegXICvyxd9HXZ1U/ImKTLAlpZnRk7zm3Tk3niguY=)
                          2: 3231302e37392e3139302e302f32332d3234203d3e20313336303532.roa (hash: ZPskTSVgdsAMYWlITNkyiUwul3HqotLFwwIKqMKt6lE=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/b260f03c-8968-470f-b618-d3eb2c928a4d/0/7A82C5E5CFF68F5008CC068EC7CA6DA383C33D56.crl
                          rsync://repo-rpki.idnic.net/repo/b260f03c-8968-470f-b618-d3eb2c928a4d/0/7A82C5E5CFF68F5008CC068EC7CA6DA383C33D56.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7A82C5E5CFF68F5008CC068EC7CA6DA383C33D56.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 06 Dec 2025 12:07:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:9b:bd:49:6a:28:07:e4:bb:48:bf:76:cd:1c:b9:11:8b:bd:ca:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7A82C5E5CFF68F5008CC068EC7CA6DA383C33D56
        Validity
            Not Before: Dec  3 11:07:29 2025 GMT
            Not After : Dec  6 16:03:29 2025 GMT
        Subject: CN=207A8AB79E65EF10B2A8609BE4367AC180BBFC12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:48:e2:17:31:d4:df:6c:b8:f7:ff:98:d5:a4:
                    3e:c4:8f:28:80:59:72:ac:14:12:86:af:ae:5d:00:
                    12:d1:45:84:76:7f:75:92:48:7e:68:c6:98:c7:a6:
                    fd:df:7b:95:53:e8:c4:a2:7b:ca:71:96:06:7d:4f:
                    33:cf:8e:16:e2:49:b9:de:76:e1:b8:7a:e9:9b:b2:
                    1e:b2:1b:c9:fc:e9:07:7e:e9:d3:5a:3d:37:12:6a:
                    68:fa:b7:65:38:70:e7:be:19:0f:37:4b:26:07:f6:
                    94:25:78:91:ee:a9:2e:3d:ad:f8:e8:a7:85:a1:2a:
                    40:f3:c1:50:10:99:2b:bd:ba:87:ee:1e:90:09:61:
                    16:fc:ac:15:a7:2a:81:ca:95:5b:22:9b:55:12:1a:
                    73:b7:01:69:56:07:cf:94:2a:c0:8d:59:21:44:85:
                    d6:f5:39:77:2f:dc:c0:8d:bf:06:17:87:3b:6f:20:
                    22:8c:86:8b:51:2b:29:ef:20:c6:9e:6a:15:9f:c6:
                    4b:8e:a1:d9:dd:22:ae:b4:7a:ea:c5:b7:ec:7a:51:
                    70:3e:1b:5f:0c:9a:0f:25:e5:9d:7b:8f:dd:82:54:
                    ea:17:b2:c9:4c:8b:5c:50:8c:f5:d5:ea:93:14:15:
                    3d:03:ef:de:0d:68:90:4d:ad:d6:82:37:4f:a4:5e:
                    d2:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:7A:8A:B7:9E:65:EF:10:B2:A8:60:9B:E4:36:7A:C1:80:BB:FC:12
            X509v3 Authority Key Identifier:
                keyid:7A:82:C5:E5:CF:F6:8F:50:08:CC:06:8E:C7:CA:6D:A3:83:C3:3D:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/b260f03c-8968-470f-b618-d3eb2c928a4d/0/7A82C5E5CFF68F5008CC068EC7CA6DA383C33D56.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7A82C5E5CFF68F5008CC068EC7CA6DA383C33D56.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b260f03c-8968-470f-b618-d3eb2c928a4d/0/7A82C5E5CFF68F5008CC068EC7CA6DA383C33D56.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:cc:87:f4:e5:89:19:1d:cc:e7:f0:96:aa:31:aa:2f:3a:75:
         fc:ad:ac:e9:f3:22:6b:5e:ae:8f:04:5d:79:a9:c2:cc:10:d7:
         01:7c:d7:b2:07:32:0a:a0:d8:30:ce:12:03:bb:f7:2e:cc:b8:
         fe:fa:8e:87:05:77:1d:87:f5:77:04:5d:fa:65:1e:e7:a1:0c:
         9f:72:9d:e5:18:65:a6:6c:41:3a:42:09:ca:1b:d8:64:32:6b:
         90:07:cd:a1:bf:7d:71:1d:e1:ec:1a:dd:fe:ef:3c:88:79:b1:
         28:c1:d9:bd:05:d7:a3:70:05:8f:39:16:01:52:b1:f2:6a:68:
         9a:db:07:f0:e9:17:0c:c5:ee:e4:3b:66:85:94:fa:ca:17:5d:
         f1:1c:6b:aa:d8:7f:b3:b4:c9:4c:db:f0:0d:f5:9d:44:61:de:
         d6:eb:57:1a:eb:8d:19:67:87:c2:86:00:70:9a:d7:92:00:03:
         ac:b7:da:07:4e:e8:e4:dc:04:e8:bb:df:fa:4b:14:29:68:c8:
         a8:6a:3b:b0:22:26:8b:4d:a7:ab:8d:ef:7c:0f:ab:68:6a:64:
         07:9a:86:83:57:af:9e:c9:3d:e8:2b:41:d2:0b:6a:32:d3:b5:
         fc:58:91:44:66:01:85:74:e8:fa:29:3c:c7:01:f4:23:8d:7e:
         94:af:3a:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 14:41:50 2025 by rpki-client