This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/0f7d2894-c077-421c-bc1d-37d6f9d9897d/0/B0D673B78DBE219F1EEEF056E3E49FB6D58A5550.mft
File:                     B0D673B78DBE219F1EEEF056E3E49FB6D58A5550.mft (raw, json)
Hash identifier:          GpCq52mw4NZR2tCwmgvCU39i8KtHjPZTlVkohBzhkOo=
Subject key identifier:   6E:16:9E:B1:96:F8:54:6B:FD:46:DB:E1:20:8A:FF:F4:62:0F:B7:18
Authority key identifier: B0:D6:73:B7:8D:BE:21:9F:1E:EE:F0:56:E3:E4:9F:B6:D5:8A:55:50
Certificate issuer:       /CN=B0D673B78DBE219F1EEEF056E3E49FB6D58A5550
Certificate serial:       12620D6D560EAA913E0F4E65143B78E51187220C
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B0D673B78DBE219F1EEEF056E3E49FB6D58A5550.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/0f7d2894-c077-421c-bc1d-37d6f9d9897d/0/B0D673B78DBE219F1EEEF056E3E49FB6D58A5550.mft
Manifest number:          F7
Signing time:             Mon 15 Dec 2025 09:40:57 +0000
Manifest this update:     Mon 15 Dec 2025 09:35:57 +0000
Manifest next update:     Thu 18 Dec 2025 17:10:57 +0000
Files and hashes:         1: 3136302e32322e32322e302f32332d3234203d3e20313532383032.roa (hash: 1cb+dRF1cCmzlK2LUqHDHTpgVi9SG86amprY/lPnWU4=)
                          2: B0D673B78DBE219F1EEEF056E3E49FB6D58A5550.crl (hash: wWC7DY9k45gUI+eJgBwYhldu5vC/ZXz+r6XtK+IRq4w=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/0f7d2894-c077-421c-bc1d-37d6f9d9897d/0/B0D673B78DBE219F1EEEF056E3E49FB6D58A5550.crl
                          rsync://repo-rpki.idnic.net/repo/0f7d2894-c077-421c-bc1d-37d6f9d9897d/0/B0D673B78DBE219F1EEEF056E3E49FB6D58A5550.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B0D673B78DBE219F1EEEF056E3E49FB6D58A5550.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 18 Dec 2025 17:10:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:62:0d:6d:56:0e:aa:91:3e:0f:4e:65:14:3b:78:e5:11:87:22:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B0D673B78DBE219F1EEEF056E3E49FB6D58A5550
        Validity
            Not Before: Dec 15 09:35:57 2025 GMT
            Not After : Dec 18 17:10:57 2025 GMT
        Subject: CN=6E169EB196F8546BFD46DBE1208AFFF4620FB718
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:58:27:e9:74:cd:a1:65:f7:f8:dd:c9:29:71:
                    a9:d0:65:ee:f9:99:ee:6a:bd:28:27:c1:05:75:56:
                    2d:17:37:f5:a4:b4:60:9b:d7:36:e7:65:23:32:b2:
                    97:9a:4a:79:b2:6e:d7:75:74:24:ea:82:90:76:54:
                    33:42:3f:7a:40:a2:ce:20:e9:0f:e6:bc:32:19:14:
                    31:77:e2:37:95:ce:70:9e:b1:83:37:d6:25:f9:e4:
                    ad:97:88:d5:24:a9:50:d6:26:56:59:b9:70:81:66:
                    55:4b:88:ea:02:75:0f:e5:1e:34:3a:cc:d0:44:99:
                    88:13:94:23:8f:a9:ea:72:7e:06:ff:6d:98:26:86:
                    ce:2a:16:05:c5:58:95:c3:c3:8a:31:8b:91:ea:b9:
                    f2:9c:65:05:3b:e3:e6:05:cf:ec:1e:e1:56:22:3a:
                    98:2b:4a:60:de:02:91:11:15:fe:ae:9b:d3:80:4a:
                    3a:65:a7:e3:82:39:7d:15:71:b5:a6:71:3c:1a:96:
                    d6:99:28:3b:fe:5d:f7:2f:e4:06:81:8a:c1:39:0e:
                    93:a5:9f:cc:dd:97:77:a3:9b:c7:a9:d5:22:6f:1d:
                    6f:3d:cf:66:52:ad:b4:b2:ca:ca:38:ce:e6:7d:21:
                    20:9b:49:c1:a2:da:5c:70:fb:81:0b:11:38:e7:c8:
                    4e:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:16:9E:B1:96:F8:54:6B:FD:46:DB:E1:20:8A:FF:F4:62:0F:B7:18
            X509v3 Authority Key Identifier:
                keyid:B0:D6:73:B7:8D:BE:21:9F:1E:EE:F0:56:E3:E4:9F:B6:D5:8A:55:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/0f7d2894-c077-421c-bc1d-37d6f9d9897d/0/B0D673B78DBE219F1EEEF056E3E49FB6D58A5550.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B0D673B78DBE219F1EEEF056E3E49FB6D58A5550.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0f7d2894-c077-421c-bc1d-37d6f9d9897d/0/B0D673B78DBE219F1EEEF056E3E49FB6D58A5550.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:11:60:51:52:8a:26:9d:11:17:05:78:03:2b:75:c1:e9:4a:
         2e:27:f7:f1:18:a0:8c:0d:77:24:45:b3:c8:62:50:53:49:4a:
         26:c8:31:b1:a2:24:61:6c:69:6e:01:a1:1f:32:42:55:d3:4c:
         d9:a1:7b:87:d5:7e:1b:06:ec:1d:08:90:08:34:91:b3:31:7e:
         24:fa:39:05:96:42:7e:0c:5f:1c:ef:7c:b3:9c:4f:d6:7f:63:
         cb:76:2f:8e:bf:07:37:17:6b:d9:ca:82:80:19:d1:63:43:09:
         cc:2f:e8:dd:e3:02:ba:b1:a7:71:2e:6f:80:62:9c:e9:0a:a6:
         4b:0f:82:b0:55:fc:05:9e:33:5d:21:e1:d3:da:d7:89:61:71:
         4c:33:45:ec:40:20:ca:d3:20:cd:16:56:42:4c:b4:4d:ad:a5:
         ed:b8:26:e7:9d:dd:59:c3:74:2a:cf:58:7b:e6:f9:dd:62:9d:
         ee:1c:bb:35:5d:87:ee:89:53:ea:0e:23:47:55:ab:b8:cc:f9:
         4f:44:04:6b:a4:14:a3:68:dd:a8:dd:20:71:dc:19:96:89:3d:
         b9:25:b0:de:d4:95:0b:a7:84:74:ef:c7:5b:fa:54:64:56:45:
         06:b8:47:be:b9:e2:d2:84:39:1e:77:d1:40:ad:df:e6:40:64:
         75:fd:76:02
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUEmINbVYOqpE+D05lFDt45RGHIgwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjBENjczQjc4REJFMjE5RjFFRUVGMDU2RTNFNDlGQjZE
NThBNTU1MDAeFw0yNTEyMTUwOTM1NTdaFw0yNTEyMTgxNzEwNTdaMDMxMTAvBgNV
BAMTKDZFMTY5RUIxOTZGODU0NkJGRDQ2REJFMTIwOEFGRkY0NjIwRkI3MTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaWCfpdM2hZff43ckpcanQZe75
me5qvSgnwQV1Vi0XN/WktGCb1zbnZSMyspeaSnmybtd1dCTqgpB2VDNCP3pAos4g
6Q/mvDIZFDF34jeVznCesYM31iX55K2XiNUkqVDWJlZZuXCBZlVLiOoCdQ/lHjQ6
zNBEmYgTlCOPqepyfgb/bZgmhs4qFgXFWJXDw4oxi5HqufKcZQU74+YFz+we4VYi
OpgrSmDeApERFf6um9OASjplp+OCOX0VcbWmcTwaltaZKDv+Xfcv5AaBisE5DpOl
n8zdl3ejm8ep1SJvHW89z2ZSrbSyyso4zuZ9ISCbScGi2lxw+4ELETjnyE7TAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUbhaesZb4VGv9RtvhIIr/9GIPtxgwHwYDVR0j
BBgwFoAUsNZzt42+IZ8e7vBW4+SfttWKVVAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w
ZjdkMjg5NC1jMDc3LTQyMWMtYmMxZC0zN2Q2ZjlkOTg5N2QvMC9CMEQ2NzNCNzhE
QkUyMTlGMUVFRUYwNTZFM0U0OUZCNkQ1OEE1NTUwLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzEvQjBENjczQjc4REJFMjE5RjFFRUVGMDU2RTNFNDlGQjZENThB
NTU1MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGY3ZDI4OTQtYzA3Ny00MjFjLWJj
MWQtMzdkNmY5ZDk4OTdkLzAvQjBENjczQjc4REJFMjE5RjFFRUVGMDU2RTNFNDlG
QjZENThBNTU1MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAJMRYFFSiiadERcFeAMrdcHpSi4n9/EYoIwN
dyRFs8hiUFNJSibIMbGiJGFsaW4BoR8yQlXTTNmhe4fVfhsG7B0IkAg0kbMxfiT6
OQWWQn4MXxzvfLOcT9Z/Y8t2L46/BzcXa9nKgoAZ0WNDCcwv6N3jArqxp3Eub4Bi
nOkKpksPgrBV/AWeM10h4dPa14lhcUwzRexAIMrTIM0WVkJMtE2tpe24Jued3VnD
dCrPWHvm+d1ine4cuzVdh+6JU+oOI0dVq7jM+U9EBGukFKNo3ajdIHHcGZaJPbkl
sN7UlQunhHTvx1v6VGRWRQa4R7654tKEOR530UCt3+ZAZHX9dgI=
-----END CERTIFICATE-----
Generated at Wed Dec 17 16:45:59 2025 by rpki-client