This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/388329ca-e8f7-4d3d-ace4-807f8aa58ae0/0/7365D5B1AE30C5B6450AFDDE98BA231F962A6C26.mft
File:                     7365D5B1AE30C5B6450AFDDE98BA231F962A6C26.mft (raw, json)
Hash identifier:          AvW43SUQwx4FdxQE75X9Qosu+hnq6ElZSrT6U5akQ2g=
Subject key identifier:   0E:31:6B:45:DF:0C:2F:EF:D9:71:A6:F1:78:3E:7E:2F:E3:6F:42:98
Authority key identifier: 73:65:D5:B1:AE:30:C5:B6:45:0A:FD:DE:98:BA:23:1F:96:2A:6C:26
Certificate issuer:       /CN=7365D5B1AE30C5B6450AFDDE98BA231F962A6C26
Certificate serial:       1230E38E9D0689AF69C5FF358C53958324B5FE80
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7365D5B1AE30C5B6450AFDDE98BA231F962A6C26.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/388329ca-e8f7-4d3d-ace4-807f8aa58ae0/0/7365D5B1AE30C5B6450AFDDE98BA231F962A6C26.mft
Manifest number:          0193
Signing time:             Wed 24 Dec 2025 01:01:33 +0000
Manifest this update:     Wed 24 Dec 2025 00:56:33 +0000
Manifest next update:     Sat 27 Dec 2025 06:52:33 +0000
Files and hashes:         1: 3130332e3233342e31392e302f32342d3234203d3e20313531353036.roa (hash: KyUIZC7TjXTI6QS0grqhp1GxQ/Om/oaFfi+alLTVI8o=)
                          2: 3130332e3233342e31382e302f32342d3234203d3e20313531353036.roa (hash: OR1t4IQS/xyvZZqdpeuC2pHKP+AjsN9yFmbMgs+eujs=)
                          3: 3130332e3233342e31382e302f32332d3233203d3e20313531353036.roa (hash: WfEJ9vF4jc0Zx7Acd4sKIoyTrc+nMSAchl082ejeiOg=)
                          4: 7365D5B1AE30C5B6450AFDDE98BA231F962A6C26.crl (hash: SKr7qWGRaCa6e2U8NSeFWwTz59Vhn294zC9spN23GcM=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/388329ca-e8f7-4d3d-ace4-807f8aa58ae0/0/7365D5B1AE30C5B6450AFDDE98BA231F962A6C26.crl
                          rsync://repo-rpki.idnic.net/repo/388329ca-e8f7-4d3d-ace4-807f8aa58ae0/0/7365D5B1AE30C5B6450AFDDE98BA231F962A6C26.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7365D5B1AE30C5B6450AFDDE98BA231F962A6C26.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 27 Dec 2025 06:52:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:30:e3:8e:9d:06:89:af:69:c5:ff:35:8c:53:95:83:24:b5:fe:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7365D5B1AE30C5B6450AFDDE98BA231F962A6C26
        Validity
            Not Before: Dec 24 00:56:33 2025 GMT
            Not After : Dec 27 06:52:33 2025 GMT
        Subject: CN=0E316B45DF0C2FEFD971A6F1783E7E2FE36F4298
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:cc:09:d2:74:31:25:f7:9f:df:ba:ab:02:7d:
                    3e:82:90:11:89:5d:d3:b4:0d:d7:5f:27:fd:b1:7b:
                    89:c8:e0:68:06:4d:07:7b:01:a4:4c:f9:ce:3a:d9:
                    6f:b0:29:7c:12:31:ed:6a:6e:1a:d9:cd:51:6b:0e:
                    20:40:b2:90:8f:3f:17:2a:df:22:d5:ef:64:ab:f9:
                    53:54:d5:93:f9:04:fe:e0:2e:62:59:5b:bb:61:d4:
                    c0:47:c4:a8:da:a6:0e:76:be:0a:7b:db:34:f0:7c:
                    41:ca:c2:77:09:21:11:65:ae:88:3e:db:96:e6:48:
                    34:37:4d:41:09:a1:c4:d4:88:ca:83:16:6f:d6:c3:
                    f8:cc:f4:c0:13:31:50:b1:4e:c6:b7:10:b4:59:7b:
                    b4:bb:20:4f:ea:09:83:12:44:f8:57:4d:2f:64:5c:
                    91:c5:90:61:bd:6f:d3:a3:58:07:7d:54:7e:d0:3f:
                    07:ae:b0:1a:ea:66:5d:6f:79:b0:96:45:06:1c:b3:
                    c6:6e:a5:3f:41:0f:bd:0a:cd:76:7d:d0:69:43:0a:
                    7f:69:f9:57:a4:c3:95:e8:fa:1a:84:1c:8d:3f:6e:
                    2d:20:bb:bb:ba:5a:c7:6e:2a:fc:20:f9:5a:50:55:
                    75:24:68:44:e3:ac:b2:56:da:5d:fe:b3:8f:42:ae:
                    0d:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:31:6B:45:DF:0C:2F:EF:D9:71:A6:F1:78:3E:7E:2F:E3:6F:42:98
            X509v3 Authority Key Identifier:
                keyid:73:65:D5:B1:AE:30:C5:B6:45:0A:FD:DE:98:BA:23:1F:96:2A:6C:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/388329ca-e8f7-4d3d-ace4-807f8aa58ae0/0/7365D5B1AE30C5B6450AFDDE98BA231F962A6C26.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7365D5B1AE30C5B6450AFDDE98BA231F962A6C26.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/388329ca-e8f7-4d3d-ace4-807f8aa58ae0/0/7365D5B1AE30C5B6450AFDDE98BA231F962A6C26.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:94:c4:14:70:fc:6c:2e:36:76:75:56:9d:97:29:97:01:c9:
         52:73:da:cb:a9:1f:1d:0d:3d:85:91:26:bb:41:d3:ef:27:9c:
         2f:28:0d:b6:ce:41:c3:92:27:f0:5f:1e:f5:50:98:57:7e:24:
         55:6b:d8:1a:eb:5c:f9:00:dc:31:c0:ac:1a:7b:e6:60:aa:05:
         e7:a3:73:70:d5:31:66:48:3f:96:b1:fa:a5:c7:4e:2f:d1:4b:
         48:bf:b3:27:12:06:18:ce:f6:72:0c:89:26:5f:12:a9:c4:ce:
         87:c4:ec:a1:d2:22:93:ca:62:72:cc:73:56:59:74:90:99:be:
         72:5b:f9:d2:08:e7:e4:e4:b1:5c:a0:a6:3a:40:0f:d5:ce:97:
         d1:ca:81:a1:cb:94:71:38:c2:31:a0:27:16:e0:2f:90:f3:e6:
         c0:8b:ac:02:3a:e9:b0:45:e3:93:80:09:6f:51:4f:49:f6:16:
         f0:49:48:aa:49:96:9d:90:a9:37:94:ff:9a:c8:42:0c:f7:78:
         5d:d3:6a:98:6a:12:ef:b2:2d:66:f9:5a:f6:fb:56:ce:45:d6:
         3e:de:32:b4:0b:73:66:d8:f5:78:43:05:6c:ac:3c:5f:c6:d8:
         e5:ec:96:73:7c:62:44:3a:27:fa:a0:9e:52:ce:36:b5:d2:28:
         aa:c0:ca:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 25 00:39:03 2025 by rpki-client