This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/5591b59b-1ca5-4464-9982-bf6f6d8a1c94/0/715DC6DEA80FE5D89FDC682C19C7B30F5C77E2C1.mft
File:                     715DC6DEA80FE5D89FDC682C19C7B30F5C77E2C1.mft (raw, json)
Hash identifier:          JacZU81cjbXaAo4LBeJrWBFxwkhDHjIbWX73daFs6vs=
Subject key identifier:   87:A8:A0:B2:9A:03:FF:D8:A9:96:C5:BD:87:40:34:6F:FE:F5:17:60
Authority key identifier: 71:5D:C6:DE:A8:0F:E5:D8:9F:DC:68:2C:19:C7:B3:0F:5C:77:E2:C1
Certificate issuer:       /CN=715DC6DEA80FE5D89FDC682C19C7B30F5C77E2C1
Certificate serial:       7BE2C7E9D36F527F24047EA0DDD4B2F8A47DC1CC
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/715DC6DEA80FE5D89FDC682C19C7B30F5C77E2C1.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/5591b59b-1ca5-4464-9982-bf6f6d8a1c94/0/715DC6DEA80FE5D89FDC682C19C7B30F5C77E2C1.mft
Manifest number:          0475
Signing time:             Thu 18 Dec 2025 10:00:39 +0000
Manifest this update:     Thu 18 Dec 2025 09:55:39 +0000
Manifest next update:     Sun 21 Dec 2025 19:30:39 +0000
Files and hashes:         1: 3130332e3136312e3139302e302f32332d3233203d3e20313333383233.roa (hash: ghtilaMZ6RJAQvHOL9rJ7eLcuLTYk5ZeH+7mykIlzjM=)
                          2: 715DC6DEA80FE5D89FDC682C19C7B30F5C77E2C1.crl (hash: 9b+A+O8e8Qhrh9Eq1bTGTqrwww/vLdl9bGfxA8XQ+9Q=)
                          3: 3130332e3136312e3139312e302f32342d3234203d3e20313333383233.roa (hash: KGskRiaq/+lRAEP6f41FobsVw96uMstK/fLzsAVB4eg=)
                          4: 3130332e3136312e3139302e302f32342d3234203d3e20313333383233.roa (hash: inNvDvxX4hbCC8+Dho69jFxrO3UdsZFxdsWq+NYPKcc=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/5591b59b-1ca5-4464-9982-bf6f6d8a1c94/0/715DC6DEA80FE5D89FDC682C19C7B30F5C77E2C1.crl
                          rsync://repo-rpki.idnic.net/repo/5591b59b-1ca5-4464-9982-bf6f6d8a1c94/0/715DC6DEA80FE5D89FDC682C19C7B30F5C77E2C1.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/715DC6DEA80FE5D89FDC682C19C7B30F5C77E2C1.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 21 Dec 2025 19:30:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:e2:c7:e9:d3:6f:52:7f:24:04:7e:a0:dd:d4:b2:f8:a4:7d:c1:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=715DC6DEA80FE5D89FDC682C19C7B30F5C77E2C1
        Validity
            Not Before: Dec 18 09:55:39 2025 GMT
            Not After : Dec 21 19:30:39 2025 GMT
        Subject: CN=87A8A0B29A03FFD8A996C5BD8740346FFEF51760
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:9d:4c:5a:cf:55:44:c8:35:91:bd:bc:3c:58:
                    07:bd:fb:f3:3b:c5:d0:31:46:71:89:f1:e7:f5:f3:
                    5f:bc:f5:74:06:3d:84:01:bb:01:e0:9f:a9:67:a6:
                    06:35:d6:09:ee:f0:f7:9a:f8:06:f5:a7:20:61:a3:
                    83:c9:ee:76:e1:a9:96:9e:7e:55:d1:d4:a7:08:97:
                    9d:a9:3f:db:f1:4c:34:8d:06:8a:29:ac:10:1b:83:
                    7f:76:5c:33:dc:f4:c4:f5:5f:0e:26:f5:6e:29:4c:
                    d7:a1:0d:6c:c1:2f:09:13:88:9e:63:8e:63:35:8b:
                    fb:52:24:88:f9:98:e6:63:27:3d:e8:00:73:b7:f2:
                    4e:e1:66:09:fd:45:64:09:5f:9a:30:ee:b7:66:8f:
                    eb:c9:be:b8:06:57:9c:0d:34:20:9b:0c:8f:67:1f:
                    65:ec:5e:14:33:d1:ab:02:cf:95:6d:94:6a:3a:c3:
                    12:17:6e:e4:6a:b1:d2:60:85:90:6d:65:34:f4:d9:
                    ca:cc:12:96:76:b1:ff:9c:cc:f8:e4:5f:84:d5:15:
                    93:9c:d0:89:5e:f7:5c:ec:d7:2c:4a:12:a5:d5:31:
                    04:d9:1f:e5:08:33:20:5f:43:f2:47:4e:46:c4:50:
                    fa:f7:4a:e7:75:5f:1a:12:3d:e3:ad:d7:23:ff:b0:
                    26:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:A8:A0:B2:9A:03:FF:D8:A9:96:C5:BD:87:40:34:6F:FE:F5:17:60
            X509v3 Authority Key Identifier:
                keyid:71:5D:C6:DE:A8:0F:E5:D8:9F:DC:68:2C:19:C7:B3:0F:5C:77:E2:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/5591b59b-1ca5-4464-9982-bf6f6d8a1c94/0/715DC6DEA80FE5D89FDC682C19C7B30F5C77E2C1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/715DC6DEA80FE5D89FDC682C19C7B30F5C77E2C1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5591b59b-1ca5-4464-9982-bf6f6d8a1c94/0/715DC6DEA80FE5D89FDC682C19C7B30F5C77E2C1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:70:25:d9:1a:3d:09:49:c2:92:a3:a9:4c:db:b5:0f:99:43:
         12:54:f3:b1:2e:9a:2b:fb:e6:9e:0d:88:0f:4c:e8:0c:65:2e:
         ca:d9:d5:fb:d3:09:de:ba:b0:f5:c8:28:a6:3b:d6:d9:09:97:
         e3:57:59:8c:70:bc:73:69:f2:a7:dd:3e:5b:7b:ad:1e:3d:d0:
         db:dc:cc:e6:08:69:e3:45:e4:d6:07:7f:0a:14:ab:6f:3f:c5:
         7a:0e:ea:c4:03:1d:e3:c5:26:1a:f1:aa:42:b8:97:fa:01:63:
         c2:db:24:4e:80:49:3a:b4:6e:fd:2a:70:ff:14:e8:33:21:2f:
         3c:c6:59:2e:19:cd:8d:d0:e9:9c:fe:53:ca:48:95:1d:a3:79:
         cd:7c:78:0f:60:83:26:ee:12:e2:c0:b7:49:46:3d:02:14:09:
         50:f4:58:00:6d:61:ff:9a:a4:34:5b:3a:c9:43:41:ce:d6:46:
         50:3d:6b:0f:a5:c8:fb:db:64:4c:3c:5f:5a:eb:38:c4:14:cc:
         1c:1f:b8:65:bb:43:74:cc:d6:e4:a7:2e:d5:c9:06:83:f4:35:
         17:9a:49:50:ae:eb:c3:97:ce:61:2f:c5:38:ae:47:fa:25:43:
         41:b2:55:59:bd:2e:bc:d1:67:ed:8c:f6:1d:22:e1:2b:9f:66:
         4b:17:a7:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 11:39:43 2025 by rpki-client