This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/89a6ceaf-d68c-4dcb-8267-fd1a53d99988/0/A7D83EE8703BBD59CDCAA5622ADB35C3F9722728.mft
File:                     A7D83EE8703BBD59CDCAA5622ADB35C3F9722728.mft (raw, json)
Hash identifier:          z/ctAiyox/j3AYm4hZ9jirkceVg1tiiSqDnlwmUmHrY=
Subject key identifier:   88:24:CC:B2:F0:94:02:13:E3:89:A1:43:50:5E:F6:58:50:F5:F4:0F
Authority key identifier: A7:D8:3E:E8:70:3B:BD:59:CD:CA:A5:62:2A:DB:35:C3:F9:72:27:28
Certificate issuer:       /CN=A7D83EE8703BBD59CDCAA5622ADB35C3F9722728
Certificate serial:       74D36C95E824C2583C9411DE0E04AC19AA3E30FF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A7D83EE8703BBD59CDCAA5622ADB35C3F9722728.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/89a6ceaf-d68c-4dcb-8267-fd1a53d99988/0/A7D83EE8703BBD59CDCAA5622ADB35C3F9722728.mft
Manifest number:          01D6
Signing time:             Wed 17 Dec 2025 16:11:38 +0000
Manifest this update:     Wed 17 Dec 2025 16:06:38 +0000
Manifest next update:     Sun 21 Dec 2025 00:06:38 +0000
Files and hashes:         1: 3130332e36332e32362e302f32342d3234203d3e20313338303839.roa (hash: iiGr+PopU6Hz3cnQVhQvXlHgSkixhRPRwZ/ZW4Nmfrw=)
                          2: A7D83EE8703BBD59CDCAA5622ADB35C3F9722728.crl (hash: Ue13vb87kYwp23OwOzxuUOfOkIr2vZ4ud+b92Oe4bnU=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:d3:6c:95:e8:24:c2:58:3c:94:11:de:0e:04:ac:19:aa:3e:30:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A7D83EE8703BBD59CDCAA5622ADB35C3F9722728
        Validity
            Not Before: Dec 17 16:06:38 2025 GMT
            Not After : Dec 21 00:06:38 2025 GMT
        Subject: CN=8824CCB2F0940213E389A143505EF65850F5F40F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:b7:0a:e4:0b:8f:47:bd:7d:c3:44:83:e4:29:
                    5c:69:00:df:70:07:c1:66:b9:65:b4:e9:3e:ef:a6:
                    3b:4e:ae:bc:c7:ed:28:88:63:42:3a:83:01:c4:32:
                    05:bd:91:82:40:6a:83:9d:74:97:43:db:ef:b7:95:
                    d3:d3:12:e5:20:6f:69:8a:15:9c:67:1a:51:45:e2:
                    f4:23:d0:0d:4b:7f:bb:1c:07:d5:51:1b:07:cb:ae:
                    61:61:67:fb:12:00:84:fa:67:ee:24:53:d4:f5:0e:
                    48:a2:b7:a7:03:cc:79:ab:74:85:01:7b:b7:e3:bb:
                    40:b6:a3:a4:90:5d:b1:d5:ea:89:5b:e7:a4:7d:df:
                    51:7d:d4:7a:db:32:cf:4c:8e:ee:18:b8:ff:5d:8c:
                    ab:7f:f8:09:f4:c2:e6:64:04:df:d5:95:78:19:82:
                    dd:05:05:89:f0:22:4b:35:68:1a:30:91:1c:b7:30:
                    85:c2:61:0b:0e:94:5b:91:ea:02:0c:38:71:bb:40:
                    0e:de:ff:37:f5:c6:e2:de:11:0d:76:a2:9a:94:43:
                    27:c7:5b:c5:2d:a3:fc:7c:38:7c:17:7a:33:ab:a8:
                    ea:d5:82:84:a2:9e:b4:30:89:f7:a1:69:81:b8:07:
                    e5:84:56:14:b0:c3:c8:04:d4:d7:9b:9c:fd:8c:df:
                    1a:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:24:CC:B2:F0:94:02:13:E3:89:A1:43:50:5E:F6:58:50:F5:F4:0F
            X509v3 Authority Key Identifier:
                keyid:A7:D8:3E:E8:70:3B:BD:59:CD:CA:A5:62:2A:DB:35:C3:F9:72:27:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/89a6ceaf-d68c-4dcb-8267-fd1a53d99988/0/A7D83EE8703BBD59CDCAA5622ADB35C3F9722728.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A7D83EE8703BBD59CDCAA5622ADB35C3F9722728.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/89a6ceaf-d68c-4dcb-8267-fd1a53d99988/0/A7D83EE8703BBD59CDCAA5622ADB35C3F9722728.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:55:17:69:74:ea:db:88:a5:ab:cd:e7:69:5d:f7:98:18:20:
         02:ca:fd:28:1f:d8:07:13:32:10:be:27:31:a7:09:3e:b9:c2:
         ad:0f:59:d5:fc:62:cd:48:1f:91:a6:50:6f:b0:b8:33:f0:c1:
         bd:3c:8f:28:d5:ba:42:34:43:fa:45:ae:26:d3:06:fd:21:d9:
         94:70:75:cc:ba:83:23:94:db:ef:47:1f:5f:ec:cc:6e:2c:e8:
         0c:c7:6b:09:74:3d:96:a5:80:fe:2f:f3:2f:36:df:0c:b7:b6:
         2d:5b:43:da:53:9f:bb:9b:7d:9d:84:a2:6a:e0:d0:55:1e:a4:
         64:84:34:b5:ca:8e:d5:f0:b3:27:67:fc:d9:21:04:ed:da:45:
         b6:9f:15:81:3c:78:6d:3d:d9:51:bf:21:b6:25:d8:e6:99:1d:
         a2:13:e3:d4:be:7e:a8:c2:f8:a5:d3:ed:40:7e:de:f0:92:ae:
         d0:b3:71:f8:02:a5:b9:54:f6:b2:c7:d8:84:bb:f3:1b:3e:c1:
         cd:65:cd:46:25:f2:27:47:c7:e5:43:54:61:65:07:7f:18:f2:
         79:55:50:a0:74:5d:08:46:92:bb:20:e5:5e:dc:37:0f:87:0c:
         03:79:9c:0e:b0:3a:34:fb:86:4d:be:bf:ea:e0:62:b3:2d:8e:
         6b:f0:7c:a6
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUdNNslegkwlg8lBHeDgSsGao+MP8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTdEODNFRTg3MDNCQkQ1OUNEQ0FBNTYyMkFEQjM1QzNG
OTcyMjcyODAeFw0yNTEyMTcxNjA2MzhaFw0yNTEyMjEwMDA2MzhaMDMxMTAvBgNV
BAMTKDg4MjRDQ0IyRjA5NDAyMTNFMzg5QTE0MzUwNUVGNjU4NTBGNUY0MEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDvtwrkC49HvX3DRIPkKVxpAN9w
B8FmuWW06T7vpjtOrrzH7SiIY0I6gwHEMgW9kYJAaoOddJdD2++3ldPTEuUgb2mK
FZxnGlFF4vQj0A1Lf7scB9VRGwfLrmFhZ/sSAIT6Z+4kU9T1Dkiit6cDzHmrdIUB
e7fju0C2o6SQXbHV6olb56R931F91HrbMs9Mju4YuP9djKt/+An0wuZkBN/VlXgZ
gt0FBYnwIks1aBowkRy3MIXCYQsOlFuR6gIMOHG7QA7e/zf1xuLeEQ12opqUQyfH
W8Uto/x8OHwXejOrqOrVgoSinrQwifehaYG4B+WEVhSww8gE1NebnP2M3xqdAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUiCTMsvCUAhPjiaFDUF72WFD19A8wHwYDVR0j
BBgwFoAUp9g+6HA7vVnNyqViKts1w/lyJygwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84
OWE2Y2VhZi1kNjhjLTRkY2ItODI2Ny1mZDFhNTNkOTk5ODgvMC9BN0Q4M0VFODcw
M0JCRDU5Q0RDQUE1NjIyQURCMzVDM0Y5NzIyNzI4LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQTdEODNFRTg3MDNCQkQ1OUNEQ0FBNTYyMkFEQjM1QzNGOTcy
MjcyOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODlhNmNlYWYtZDY4Yy00ZGNiLTgy
NjctZmQxYTUzZDk5OTg4LzAvQTdEODNFRTg3MDNCQkQ1OUNEQ0FBNTYyMkFEQjM1
QzNGOTcyMjcyOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAD9VF2l06tuIpavN52ld95gYIALK/Sgf2AcT
MhC+JzGnCT65wq0PWdX8Ys1IH5GmUG+wuDPwwb08jyjVukI0Q/pFribTBv0h2ZRw
dcy6gyOU2+9HH1/szG4s6AzHawl0PZalgP4v8y823wy3ti1bQ9pTn7ubfZ2Eomrg
0FUepGSENLXKjtXwsydn/NkhBO3aRbafFYE8eG092VG/IbYl2OaZHaIT49S+fqjC
+KXT7UB+3vCSrtCzcfgCpblU9rLH2IS78xs+wc1lzUYl8idHx+VDVGFlB38Y8nlV
UKB0XQhGkrsg5V7cNw+HDAN5nA6wOjT7hk2+v+rgYrMtjmvwfKY=
-----END CERTIFICATE-----