This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/49da7b6a-4e1a-41ff-b8eb-8c364cd264b1/0/A7D1BD82113CD720C572AF99A8FB2940610AEC49.mft
File:                     A7D1BD82113CD720C572AF99A8FB2940610AEC49.mft (raw, json)
Hash identifier:          T6doeEHott5g2Get1D9MPDkeeKmaVAkX46d0BcHquAU=
Subject key identifier:   D2:26:D7:52:62:10:F9:2B:98:95:A9:64:FB:9F:6F:A3:FD:62:69:CA
Authority key identifier: A7:D1:BD:82:11:3C:D7:20:C5:72:AF:99:A8:FB:29:40:61:0A:EC:49
Certificate issuer:       /CN=A7D1BD82113CD720C572AF99A8FB2940610AEC49
Certificate serial:       285C9D23917649AAFA50AB0B5D7E292173C26AB6
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A7D1BD82113CD720C572AF99A8FB2940610AEC49.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/49da7b6a-4e1a-41ff-b8eb-8c364cd264b1/0/A7D1BD82113CD720C572AF99A8FB2940610AEC49.mft
Manifest number:          01B5
Signing time:             Thu 18 Dec 2025 19:01:23 +0000
Manifest this update:     Thu 18 Dec 2025 18:56:23 +0000
Manifest next update:     Sun 21 Dec 2025 19:51:23 +0000
Files and hashes:         1: A7D1BD82113CD720C572AF99A8FB2940610AEC49.crl (hash: 0UoNjFBgIfisR84wxVm8UhAcAoiiLFtNdFh8A1IFShE=)
                          2: 3130332e37372e3230372e302f32342d3234203d3e203634323937.roa (hash: Ldzq0WjI5kxA0xwZ9j/+HkbFA7bRhcVP8vfijlAcxEw=)
                          3: 3130332e37372e3230362e302f32342d3234203d3e203634323937.roa (hash: qm6Wx8HHdMprTN2Xs+s/pxVtuwdrhpPAL17E7ApccPM=)
                          4: 3130332e37372e3230352e302f32342d3234203d3e203634323937.roa (hash: NZ3zgpSngsIOBUBuxKD8qjF4IFrIt5WPsm16vJBokXQ=)
                          5: 3130332e37372e3230342e302f32322d3232203d3e203634323937.roa (hash: DfpI3sfZfOso5gGyoS07WtJ/Jycy9ggknC4EuCpUXOM=)
                          6: 3130332e37372e3230342e302f32332d3233203d3e203634323937.roa (hash: cOnqdPMFYbqbFi/FA6Q7dA8kJTzM3+iE0W1mSgXK4nI=)
                          7: 3130332e37372e3230342e302f32342d3234203d3e203634323937.roa (hash: BXSq9b95eC9MSwvxuZ/AcJL572zXX4pRx3/J1qctsOw=)
                          8: 323430373a396538303a3a2f33322d3332203d3e203634323937.roa (hash: 8XW9fR3nJvKy312lXn4PWtXoN/9mgbLUR7iv4Mby3uc=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/49da7b6a-4e1a-41ff-b8eb-8c364cd264b1/0/A7D1BD82113CD720C572AF99A8FB2940610AEC49.crl
                          rsync://repo-rpki.idnic.net/repo/49da7b6a-4e1a-41ff-b8eb-8c364cd264b1/0/A7D1BD82113CD720C572AF99A8FB2940610AEC49.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A7D1BD82113CD720C572AF99A8FB2940610AEC49.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 21 Dec 2025 19:51:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:5c:9d:23:91:76:49:aa:fa:50:ab:0b:5d:7e:29:21:73:c2:6a:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A7D1BD82113CD720C572AF99A8FB2940610AEC49
        Validity
            Not Before: Dec 18 18:56:23 2025 GMT
            Not After : Dec 21 19:51:23 2025 GMT
        Subject: CN=D226D7526210F92B9895A964FB9F6FA3FD6269CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:a4:5a:fa:34:e9:6d:d1:b3:e9:84:ab:43:2f:
                    8d:6f:82:c2:c9:90:11:2e:95:fc:02:a0:6f:3a:8a:
                    2c:22:98:97:d3:d3:5b:d7:0c:61:0e:ab:38:80:6c:
                    e3:9d:87:57:fb:5f:30:3c:e9:6e:9a:1c:21:3b:5f:
                    0c:2b:02:15:e4:cc:3e:50:67:38:cb:33:be:f4:99:
                    13:8a:93:4d:a3:bc:9b:a5:2d:76:a4:33:7f:1a:d5:
                    f3:86:d3:9c:21:d3:33:df:1f:bf:5d:e0:90:ff:f8:
                    4b:1e:d3:30:66:3c:fc:31:92:c0:85:f8:57:b8:40:
                    8c:64:9c:90:c6:a8:74:a1:53:79:74:11:ab:b9:22:
                    88:d2:75:21:31:43:b5:e4:64:3b:d4:78:a2:db:e7:
                    f2:a8:48:a2:87:59:51:42:bc:d7:01:c8:49:da:15:
                    13:67:3d:75:23:bf:95:63:2b:ea:d7:e7:3a:42:bc:
                    50:a1:5e:68:81:a9:89:6f:82:cd:7c:47:df:9b:a3:
                    d8:4d:2a:6b:37:71:3e:87:4d:31:c2:3d:91:2c:1e:
                    63:44:16:4b:12:03:5b:62:6a:21:17:17:53:87:cc:
                    26:90:68:47:83:19:a9:43:b0:c4:b1:f1:1f:6b:5e:
                    96:5d:24:32:59:b6:0d:a2:b6:6c:93:a3:3a:e8:ff:
                    a1:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:26:D7:52:62:10:F9:2B:98:95:A9:64:FB:9F:6F:A3:FD:62:69:CA
            X509v3 Authority Key Identifier:
                keyid:A7:D1:BD:82:11:3C:D7:20:C5:72:AF:99:A8:FB:29:40:61:0A:EC:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/49da7b6a-4e1a-41ff-b8eb-8c364cd264b1/0/A7D1BD82113CD720C572AF99A8FB2940610AEC49.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A7D1BD82113CD720C572AF99A8FB2940610AEC49.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/49da7b6a-4e1a-41ff-b8eb-8c364cd264b1/0/A7D1BD82113CD720C572AF99A8FB2940610AEC49.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:37:be:66:ed:bd:57:cb:0a:dc:70:2a:cc:1d:f6:0c:16:ec:
         d8:c9:79:9e:dc:c3:9f:10:0a:98:7e:4a:0b:56:3f:a8:c1:6f:
         f4:98:45:b2:66:75:15:83:15:4a:60:a1:95:1d:f9:2f:80:5a:
         a9:1f:a2:35:08:7c:ba:2d:87:86:ad:a8:36:5d:e8:34:1f:1a:
         85:a8:e9:43:89:6c:cc:93:2e:b3:90:ad:c4:16:a6:f9:91:45:
         7e:ab:51:92:49:b5:cb:22:d4:5e:bd:9e:e5:c5:0a:bf:a0:65:
         42:59:de:49:0e:4e:24:81:e3:59:8d:83:3c:88:cf:fa:ff:71:
         d5:e4:1e:af:43:22:0d:f2:56:d0:dd:9a:83:52:03:b8:ea:9e:
         3a:00:aa:8c:dc:55:bb:3c:ab:3f:70:b2:4b:29:c0:fe:32:e7:
         9f:2a:57:a1:eb:e8:be:a7:40:6b:17:de:18:97:77:d4:f0:69:
         53:2e:14:be:ed:ea:47:c8:c4:07:6b:32:12:c2:a7:85:30:04:
         cc:ea:9b:c0:34:2e:01:f8:c5:ef:ac:2c:cf:6e:f9:54:f0:3b:
         46:48:4c:18:fb:55:6e:f2:b9:69:54:ba:76:48:fc:e1:ac:55:
         b2:c4:f6:ee:ad:82:5b:be:53:72:1d:1e:7b:52:60:9f:25:e2:
         0f:c8:8c:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 11:17:37 2025 by rpki-client