This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/ea7d7b38-d66b-43b3-91fb-4bb9e6637e2a/0/7188210EAEFBA7947009E19B6219830752F542A9.mft
File:                     7188210EAEFBA7947009E19B6219830752F542A9.mft (raw, json)
Hash identifier:          Cag6wGVyinM/cdlIROGgejiqea0v3OtoH53Tm8Rl+qk=
Subject key identifier:   B4:F4:A2:84:10:2D:99:EB:B8:0C:3C:E3:33:DB:D4:1A:4C:23:01:14
Authority key identifier: 71:88:21:0E:AE:FB:A7:94:70:09:E1:9B:62:19:83:07:52:F5:42:A9
Certificate issuer:       /CN=7188210EAEFBA7947009E19B6219830752F542A9
Certificate serial:       24B2F84470B3ECE5AD69A301B8FA54852FCCBDC8
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7188210EAEFBA7947009E19B6219830752F542A9.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/ea7d7b38-d66b-43b3-91fb-4bb9e6637e2a/0/7188210EAEFBA7947009E19B6219830752F542A9.mft
Manifest number:          01C7
Signing time:             Mon 01 Dec 2025 06:31:11 +0000
Manifest this update:     Mon 01 Dec 2025 06:26:11 +0000
Manifest next update:     Thu 04 Dec 2025 14:38:11 +0000
Files and hashes:         1: 7188210EAEFBA7947009E19B6219830752F542A9.crl (hash: XBVuQOIoPjTx3FF+7ilSDZFJ/bI1Jpm76FMYAwmwz1w=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/ea7d7b38-d66b-43b3-91fb-4bb9e6637e2a/0/7188210EAEFBA7947009E19B6219830752F542A9.crl
                          rsync://repo-rpki.idnic.net/repo/ea7d7b38-d66b-43b3-91fb-4bb9e6637e2a/0/7188210EAEFBA7947009E19B6219830752F542A9.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7188210EAEFBA7947009E19B6219830752F542A9.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 04 Dec 2025 14:38:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:b2:f8:44:70:b3:ec:e5:ad:69:a3:01:b8:fa:54:85:2f:cc:bd:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7188210EAEFBA7947009E19B6219830752F542A9
        Validity
            Not Before: Dec  1 06:26:11 2025 GMT
            Not After : Dec  4 14:38:11 2025 GMT
        Subject: CN=B4F4A284102D99EBB80C3CE333DBD41A4C230114
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:10:d5:75:fb:dc:23:03:fd:cb:e5:3a:5c:80:
                    b3:c1:5b:0c:24:4b:82:79:c6:bd:39:71:c6:1a:b4:
                    a2:cb:82:41:1a:7b:96:f7:10:9f:b2:0c:ca:14:7b:
                    c0:5a:d9:ae:c3:05:cc:98:58:b1:4b:4a:5a:d4:42:
                    b7:04:cb:f9:7c:83:0f:84:d9:ff:b5:43:d9:b7:84:
                    c8:7e:80:6a:21:8b:b6:b7:d1:87:97:b2:7a:96:39:
                    9c:a9:b9:87:5c:74:87:e4:5d:87:49:60:9d:d7:8d:
                    fc:d5:18:98:24:79:36:09:68:8b:23:bc:a9:71:51:
                    83:ae:86:e1:02:c9:2b:cd:99:0b:1f:23:7b:38:5d:
                    87:f6:87:94:31:84:9e:c3:2c:fc:0f:f3:8a:0b:42:
                    2e:46:97:1a:0d:8e:e5:6d:e0:ea:ec:18:20:82:87:
                    a7:cc:e1:4e:39:d3:4a:9e:58:39:be:4b:05:d6:cd:
                    1f:f5:d2:9c:36:3a:b9:7c:00:83:3f:74:a5:ef:a4:
                    02:7f:00:56:c6:d9:95:97:74:82:fb:46:de:0d:db:
                    cb:87:4f:c2:4c:42:0e:4b:56:24:c2:c3:f2:ab:a0:
                    8a:0e:8e:33:3d:e2:95:08:8b:90:e3:96:54:27:a5:
                    f7:d8:e1:1f:93:ea:0f:ae:e9:0a:d6:33:b3:32:49:
                    66:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:F4:A2:84:10:2D:99:EB:B8:0C:3C:E3:33:DB:D4:1A:4C:23:01:14
            X509v3 Authority Key Identifier:
                keyid:71:88:21:0E:AE:FB:A7:94:70:09:E1:9B:62:19:83:07:52:F5:42:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/ea7d7b38-d66b-43b3-91fb-4bb9e6637e2a/0/7188210EAEFBA7947009E19B6219830752F542A9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7188210EAEFBA7947009E19B6219830752F542A9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ea7d7b38-d66b-43b3-91fb-4bb9e6637e2a/0/7188210EAEFBA7947009E19B6219830752F542A9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:86:47:ff:24:16:d2:26:ea:fe:ce:f5:4c:2b:b0:29:85:cc:
         76:38:ec:0b:7b:71:1a:5f:f5:86:60:a5:6f:d8:df:89:66:3c:
         17:56:56:04:0f:d2:e8:8a:e6:b2:65:01:3e:86:d6:a2:00:92:
         16:a2:b1:8f:53:6b:e3:b2:36:f1:f2:29:07:98:f5:70:68:d5:
         8a:be:a9:f2:02:c8:89:40:95:93:2f:e2:90:4f:61:e5:18:7f:
         3c:e1:20:15:76:94:9e:f9:06:9d:5c:b9:b9:9d:19:d2:6b:dd:
         af:34:1b:a9:2c:68:16:d7:93:dd:75:55:d3:a9:1e:7e:8b:24:
         b5:86:4f:39:19:5f:4c:9f:1a:d1:ae:1d:76:b1:07:0b:f2:de:
         a1:43:05:3e:e5:62:15:0e:9b:42:db:ef:58:79:5e:c5:b6:bd:
         6c:7a:ad:ac:70:06:76:52:35:a1:b7:e0:02:3e:e4:3e:ea:e5:
         9b:73:44:4c:5f:63:39:f0:ea:e7:b9:68:53:b4:aa:f1:71:da:
         d7:03:36:df:e4:c5:c5:d0:27:dd:b6:75:ef:95:5c:6b:8b:1c:
         4f:17:30:73:7b:7d:83:d4:73:0d:c9:6a:ca:17:b5:28:33:94:
         0f:ab:0d:46:1d:d8:19:56:27:66:1f:f7:84:6f:5e:e9:1e:fd:
         00:d5:72:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 13:56:25 2025 by rpki-client