This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/7e9af4db-cf6f-49b3-a05b-61a7b9c817c1/0/784DD9373B7B0B18D45139EEFEF49F1BB41E0408.mft
File:                     784DD9373B7B0B18D45139EEFEF49F1BB41E0408.mft (raw, json)
Hash identifier:          erg/d2hDtdebQuDsYznL6plkfH5OLeHTjFEjdXcOgGE=
Subject key identifier:   F4:C2:EF:D9:B9:9A:9B:78:99:1C:4A:45:E7:87:76:5F:AF:9D:C7:B2
Authority key identifier: 78:4D:D9:37:3B:7B:0B:18:D4:51:39:EE:FE:F4:9F:1B:B4:1E:04:08
Certificate issuer:       /CN=784DD9373B7B0B18D45139EEFEF49F1BB41E0408
Certificate serial:       1F5782B15838C7B04D4A45388D21BBC649B2BFF4
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/784DD9373B7B0B18D45139EEFEF49F1BB41E0408.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/7e9af4db-cf6f-49b3-a05b-61a7b9c817c1/0/784DD9373B7B0B18D45139EEFEF49F1BB41E0408.mft
Manifest number:          BE
Signing time:             Sun 14 Dec 2025 18:51:03 +0000
Manifest this update:     Sun 14 Dec 2025 18:46:03 +0000
Manifest next update:     Thu 18 Dec 2025 05:22:03 +0000
Files and hashes:         1: 784DD9373B7B0B18D45139EEFEF49F1BB41E0408.crl (hash: bOcUhC/geb2yf5+08GSVU5sTKHdQSZcFWCxQd1osvcY=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/7e9af4db-cf6f-49b3-a05b-61a7b9c817c1/0/784DD9373B7B0B18D45139EEFEF49F1BB41E0408.crl
                          rsync://repo-rpki.idnic.net/repo/7e9af4db-cf6f-49b3-a05b-61a7b9c817c1/0/784DD9373B7B0B18D45139EEFEF49F1BB41E0408.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/784DD9373B7B0B18D45139EEFEF49F1BB41E0408.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 18 Dec 2025 05:22:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:57:82:b1:58:38:c7:b0:4d:4a:45:38:8d:21:bb:c6:49:b2:bf:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=784DD9373B7B0B18D45139EEFEF49F1BB41E0408
        Validity
            Not Before: Dec 14 18:46:03 2025 GMT
            Not After : Dec 18 05:22:03 2025 GMT
        Subject: CN=F4C2EFD9B99A9B78991C4A45E787765FAF9DC7B2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:69:d0:72:f3:e9:81:8f:da:c6:b1:0c:82:c4:
                    56:fa:aa:fd:f6:ad:d5:74:d0:56:e4:7a:de:51:10:
                    12:bb:e5:93:4a:8f:4d:58:f2:db:14:56:76:f8:90:
                    93:10:05:3c:f8:4e:5a:d3:ea:59:a5:ff:03:a0:a9:
                    08:ec:22:e4:bd:ba:05:40:d3:e9:c9:05:dc:cb:15:
                    d2:f8:c0:f2:70:3a:cf:fe:03:23:26:14:b1:88:45:
                    a1:07:aa:73:4b:35:54:13:eb:3e:d5:50:56:20:21:
                    9c:58:dd:15:f0:3d:0e:9f:78:f3:28:81:b4:a4:8c:
                    8f:67:fd:28:3b:a5:00:f9:be:8e:dd:e8:ea:0b:14:
                    8e:a1:11:23:59:fa:09:82:b1:1c:93:3d:7f:e0:58:
                    3e:00:b7:dc:78:33:5f:10:3d:ee:50:c0:9e:44:28:
                    03:99:5e:8b:23:86:c9:cf:54:3b:c0:4b:63:22:39:
                    86:8f:7d:7f:b3:52:9e:57:52:fe:9b:27:12:f6:52:
                    4a:65:a6:dc:e3:9a:9f:6a:48:5a:bc:5b:53:bd:f0:
                    0b:77:22:05:5a:2f:0c:ea:b8:82:c5:f3:56:15:1e:
                    58:00:c6:0e:b9:a6:5f:49:a0:38:06:07:c9:ca:5e:
                    d3:3c:5a:c2:82:5e:c6:eb:88:2d:7d:f3:c4:76:b5:
                    3d:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:C2:EF:D9:B9:9A:9B:78:99:1C:4A:45:E7:87:76:5F:AF:9D:C7:B2
            X509v3 Authority Key Identifier:
                keyid:78:4D:D9:37:3B:7B:0B:18:D4:51:39:EE:FE:F4:9F:1B:B4:1E:04:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/7e9af4db-cf6f-49b3-a05b-61a7b9c817c1/0/784DD9373B7B0B18D45139EEFEF49F1BB41E0408.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/784DD9373B7B0B18D45139EEFEF49F1BB41E0408.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7e9af4db-cf6f-49b3-a05b-61a7b9c817c1/0/784DD9373B7B0B18D45139EEFEF49F1BB41E0408.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:f1:bf:cf:6d:52:8c:a9:48:eb:9b:31:26:b7:22:df:54:ef:
         ce:4a:c3:8b:e5:ac:5b:ac:68:9a:31:64:7d:d7:41:c0:a8:28:
         d1:7e:e5:7f:d0:d9:bd:74:e7:68:c7:05:72:20:70:29:6c:23:
         ac:b0:25:42:ca:b8:54:e2:21:a0:d7:ff:69:8e:60:65:76:66:
         3f:93:3c:a7:a5:9d:ea:d7:27:6f:00:de:cc:c9:7e:6f:4a:e3:
         e1:7b:a0:0a:f6:30:bf:4e:6e:cc:e4:30:be:14:e7:5f:42:ca:
         9e:d4:f2:1b:a2:91:15:4a:28:e5:23:14:e7:fe:22:5a:40:2b:
         77:c1:68:13:d8:bc:c6:4d:55:d6:f0:e7:25:31:98:52:00:0f:
         c9:f4:ef:63:4b:38:45:e4:e1:32:fa:d7:d9:c1:ad:b0:f5:df:
         17:8c:58:31:71:10:9d:24:05:b9:d8:c2:d1:04:5e:dc:2c:af:
         5c:85:76:d2:d4:2b:81:18:28:88:66:24:40:51:a5:0b:7f:38:
         a1:27:a6:fd:d8:f9:c4:80:6c:30:c5:9c:cc:48:a5:fb:4e:81:
         2f:6f:ca:64:44:b1:67:e9:aa:2a:54:02:86:52:22:9d:1b:b0:
         eb:ed:c5:2e:53:9b:8a:d1:ab:5c:08:b8:58:57:72:a9:9b:6e:
         f6:ea:1e:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 16 23:17:08 2025 by rpki-client