This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/d20fa14a-aaac-40f4-9c84-69257868f2cb/0/1762D22131EE967D86536D2B475A9A8C08CE6003.mft
File:                     1762D22131EE967D86536D2B475A9A8C08CE6003.mft (raw, json)
Hash identifier:          Z3ATt/xubPzOxOzRbzMgtyOZUjDtIdXyfslRG5RzRIY=
Subject key identifier:   16:A6:6F:4A:D1:36:4B:6C:0D:47:D7:8D:EA:55:B7:90:E7:C5:C3:C2
Authority key identifier: 17:62:D2:21:31:EE:96:7D:86:53:6D:2B:47:5A:9A:8C:08:CE:60:03
Certificate issuer:       /CN=1762D22131EE967D86536D2B475A9A8C08CE6003
Certificate serial:       72BC90097121B7A5BEC156F025A7E937540A8AB5
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1762D22131EE967D86536D2B475A9A8C08CE6003.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/d20fa14a-aaac-40f4-9c84-69257868f2cb/0/1762D22131EE967D86536D2B475A9A8C08CE6003.mft
Manifest number:          035E
Signing time:             Wed 17 Dec 2025 23:41:25 +0000
Manifest this update:     Wed 17 Dec 2025 23:36:25 +0000
Manifest next update:     Sun 21 Dec 2025 11:37:25 +0000
Files and hashes:         1: 3130332e3135392e3230342e302f32332d3234203d3e20313331313131.roa (hash: uumiLUQfphgqskF7mpd6oqfDDTxMSTqQ7X8YmHylWvY=)
                          2: 1762D22131EE967D86536D2B475A9A8C08CE6003.crl (hash: NjtACvLc4dWX8ltzERmthlqlApYvo/BPW2xAOFNsDdc=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/d20fa14a-aaac-40f4-9c84-69257868f2cb/0/1762D22131EE967D86536D2B475A9A8C08CE6003.crl
                          rsync://repo-rpki.idnic.net/repo/d20fa14a-aaac-40f4-9c84-69257868f2cb/0/1762D22131EE967D86536D2B475A9A8C08CE6003.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1762D22131EE967D86536D2B475A9A8C08CE6003.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 21 Dec 2025 11:37:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:bc:90:09:71:21:b7:a5:be:c1:56:f0:25:a7:e9:37:54:0a:8a:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1762D22131EE967D86536D2B475A9A8C08CE6003
        Validity
            Not Before: Dec 17 23:36:25 2025 GMT
            Not After : Dec 21 11:37:25 2025 GMT
        Subject: CN=16A66F4AD1364B6C0D47D78DEA55B790E7C5C3C2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:8f:68:ae:56:dc:3b:f4:c5:18:04:19:6f:6b:
                    3f:a9:f3:ae:ad:ca:98:0a:3b:28:87:68:f7:62:c2:
                    c2:8e:07:81:5d:41:92:18:1a:81:de:0b:70:aa:44:
                    4a:57:d7:62:8a:46:e1:54:66:80:32:f3:14:97:fe:
                    e7:5c:ac:ee:e4:86:3b:ae:e2:d5:15:51:e4:55:ef:
                    40:98:cb:ed:c3:ad:e1:dd:59:d5:a3:c5:d2:2a:79:
                    99:67:cb:5e:2d:d5:35:01:a3:ca:50:f1:07:9c:2c:
                    c9:ca:62:e9:48:1c:3f:77:93:ad:8b:72:97:d9:c2:
                    c3:bf:a2:d4:8a:e6:ba:e8:b1:60:bd:8e:cb:d0:4b:
                    24:58:e3:c1:2e:d1:03:15:83:1a:31:2b:bd:d9:55:
                    a6:02:21:77:a3:5d:8a:52:fc:ab:17:ac:1c:bd:42:
                    6b:41:21:8e:37:de:52:c6:07:0d:3b:d0:ee:f2:2f:
                    43:40:57:38:0a:0a:1f:78:cd:e2:d5:68:89:58:cc:
                    12:4f:43:da:ff:ef:15:00:e3:d2:c3:40:55:b5:76:
                    12:16:2d:96:1f:8f:f7:73:ad:aa:52:91:ba:a2:00:
                    77:7c:cd:b6:0b:19:de:88:6a:5c:f2:73:04:c2:6c:
                    45:00:3f:73:ca:19:a3:a7:ba:71:47:21:e1:7c:08:
                    e6:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:A6:6F:4A:D1:36:4B:6C:0D:47:D7:8D:EA:55:B7:90:E7:C5:C3:C2
            X509v3 Authority Key Identifier:
                keyid:17:62:D2:21:31:EE:96:7D:86:53:6D:2B:47:5A:9A:8C:08:CE:60:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/d20fa14a-aaac-40f4-9c84-69257868f2cb/0/1762D22131EE967D86536D2B475A9A8C08CE6003.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1762D22131EE967D86536D2B475A9A8C08CE6003.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d20fa14a-aaac-40f4-9c84-69257868f2cb/0/1762D22131EE967D86536D2B475A9A8C08CE6003.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:f6:be:da:8f:46:06:ba:c1:ed:ad:95:57:df:75:55:c4:6b:
         ef:21:d9:7b:da:39:22:aa:c4:f6:77:7a:06:34:9e:76:fd:eb:
         76:19:4d:ea:e3:e1:e8:f3:29:6f:f1:f7:ba:69:d7:1a:3d:6b:
         cb:2f:1a:cc:ad:cc:ec:f3:d7:9a:74:4c:29:e4:e9:b1:45:8b:
         30:97:ba:29:69:49:f3:e5:94:7f:98:b0:5b:74:a0:e1:ad:ee:
         18:93:c9:5a:5c:3b:34:c8:b1:89:7e:28:1b:18:5b:e4:1a:0b:
         16:cf:ba:58:06:e5:e3:c0:b7:9d:eb:a3:3b:1c:ea:e0:4c:1f:
         34:3a:ee:fa:85:8c:e5:39:5d:a7:09:73:4a:1d:c9:86:51:d8:
         3a:a3:f9:e3:f0:11:f2:ab:6e:85:b5:a6:c0:cd:87:4d:85:31:
         f9:42:66:79:cb:7d:78:d5:6b:b9:58:9f:a5:22:4e:39:74:da:
         fa:a1:d3:20:06:df:6d:55:cb:a7:91:bf:0a:37:00:38:4b:f8:
         5e:21:ee:83:0a:c0:d9:b4:17:8d:6a:ff:3f:65:74:09:c3:75:
         11:e9:8c:77:f8:d5:87:65:4c:dd:85:60:09:29:17:38:6f:95:
         48:a0:9a:c9:af:33:b6:7f:79:9a:cb:bc:f8:75:77:da:b0:53:
         9a:e7:3a:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 18 15:28:14 2025 by rpki-client