This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/ac32eee1-10f7-457d-a8c5-5f7f741a63da/0/7195906BF48238F96B0510D75000910A519133F7.mft
File:                     7195906BF48238F96B0510D75000910A519133F7.mft (raw, json)
Hash identifier:          CzYuLnHJLbB4espOyW5QR9W0cCFi+f/lrUeu8aEMwEc=
Subject key identifier:   5C:EF:A5:72:A0:91:B2:90:F7:1E:9A:68:94:E0:5B:4C:97:72:7F:82
Authority key identifier: 71:95:90:6B:F4:82:38:F9:6B:05:10:D7:50:00:91:0A:51:91:33:F7
Certificate issuer:       /CN=7195906BF48238F96B0510D75000910A519133F7
Certificate serial:       5437590169349738BB374594A9F9B79DEBE13EC0
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7195906BF48238F96B0510D75000910A519133F7.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/ac32eee1-10f7-457d-a8c5-5f7f741a63da/0/7195906BF48238F96B0510D75000910A519133F7.mft
Manifest number:          01CA
Signing time:             Wed 17 Dec 2025 22:11:36 +0000
Manifest this update:     Wed 17 Dec 2025 22:06:36 +0000
Manifest next update:     Sat 20 Dec 2025 23:42:36 +0000
Files and hashes:         1: 7195906BF48238F96B0510D75000910A519133F7.crl (hash: qyj07jxP5UpkRTWItELJRs6g7k1icVMyd4ebBYyPW9Q=)
                          2: 3130332e3136382e3135302e302f32332d3233203d3e20313432333131.roa (hash: vej87BChpsakmxUSnkAXWyF/hseNZHZfP/+A76YToPE=)
                          3: 3130332e3136382e3135312e302f32342d3234203d3e20313432333131.roa (hash: s6WBhLaUVIxSMrwUa1GyQKxiSJ5Lxm0zhF+JRIxoxjM=)
                          4: 3130332e3136382e3135302e302f32342d3234203d3e20313432333131.roa (hash: FbNYGlqllOlMcgZqW/AYQTW3Ig+jNpTHmcZ/SLk/YWc=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/ac32eee1-10f7-457d-a8c5-5f7f741a63da/0/7195906BF48238F96B0510D75000910A519133F7.crl
                          rsync://repo-rpki.idnic.net/repo/ac32eee1-10f7-457d-a8c5-5f7f741a63da/0/7195906BF48238F96B0510D75000910A519133F7.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7195906BF48238F96B0510D75000910A519133F7.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Dec 2025 23:42:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:37:59:01:69:34:97:38:bb:37:45:94:a9:f9:b7:9d:eb:e1:3e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7195906BF48238F96B0510D75000910A519133F7
        Validity
            Not Before: Dec 17 22:06:36 2025 GMT
            Not After : Dec 20 23:42:36 2025 GMT
        Subject: CN=5CEFA572A091B290F71E9A6894E05B4C97727F82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:1d:48:33:3a:0d:e5:f8:a4:93:33:36:45:be:
                    84:d9:d6:b9:53:5b:97:fd:e3:f0:c1:e3:d1:7a:3e:
                    ba:d3:e2:21:0c:18:dc:20:4e:5f:09:99:b0:7f:1a:
                    65:66:94:0c:c5:f2:c3:62:b9:bd:2a:c8:fb:d1:eb:
                    07:31:53:8d:3d:ba:ba:c8:db:c0:f0:e3:68:b5:33:
                    15:2c:70:b2:f7:4e:22:df:58:91:ae:be:a2:fe:7f:
                    cd:01:65:32:28:be:8d:bc:1a:c4:a4:93:38:4c:30:
                    3a:ad:9d:49:d7:10:96:24:4b:6c:ad:37:7b:28:d0:
                    9f:62:b1:8a:4b:53:5f:62:02:71:60:51:20:c3:a2:
                    87:e9:b4:e4:31:3f:c5:41:21:7b:44:1f:2f:b7:ec:
                    af:91:cd:68:76:12:4d:5a:ef:25:32:b0:b0:d2:cd:
                    7d:28:56:4f:05:ca:c4:9d:80:85:f6:48:80:96:81:
                    1b:50:51:e7:cd:6a:e0:39:b6:61:35:91:64:63:42:
                    45:79:0e:c5:62:9b:90:4f:5d:d0:e1:74:59:c8:dd:
                    ee:1e:ab:10:a6:ef:cc:81:27:8c:b1:40:01:29:a9:
                    88:2e:0a:97:28:6c:85:fc:0e:d9:12:f7:7a:0b:1f:
                    89:39:0f:c0:a6:53:3f:91:23:b6:8c:4a:55:1f:1b:
                    ff:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:EF:A5:72:A0:91:B2:90:F7:1E:9A:68:94:E0:5B:4C:97:72:7F:82
            X509v3 Authority Key Identifier:
                keyid:71:95:90:6B:F4:82:38:F9:6B:05:10:D7:50:00:91:0A:51:91:33:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/ac32eee1-10f7-457d-a8c5-5f7f741a63da/0/7195906BF48238F96B0510D75000910A519133F7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7195906BF48238F96B0510D75000910A519133F7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ac32eee1-10f7-457d-a8c5-5f7f741a63da/0/7195906BF48238F96B0510D75000910A519133F7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:75:aa:8a:3b:19:d2:7c:2b:8e:9b:bd:ae:d5:b1:2a:9d:1e:
         64:ca:73:11:f1:a6:73:c0:38:3b:1c:0f:16:d7:03:a0:57:bd:
         9c:c5:b0:6d:f2:77:65:48:28:c1:fa:57:de:97:19:ff:f8:64:
         d5:e7:87:4d:40:93:b7:ae:e8:3e:ad:1c:de:0c:67:1a:f1:cb:
         e8:84:4f:f2:d9:b2:b3:70:68:7e:60:82:43:55:25:12:2a:e5:
         16:03:30:82:2b:c5:c3:62:35:61:f5:23:97:dd:3a:3b:d3:53:
         9a:1a:6f:2d:16:45:e3:4d:2b:fd:c8:00:df:b1:67:a6:cc:3a:
         4d:7b:f8:54:9a:78:78:17:22:76:3d:0d:6d:16:81:8e:da:ec:
         32:6e:64:ec:fe:f3:be:e2:2a:ab:b9:7e:6a:29:83:1c:39:11:
         97:d4:d3:29:8e:80:53:48:0b:88:88:8e:f7:af:ca:28:cd:93:
         82:00:08:e9:ed:5e:ae:4a:89:26:8d:51:e7:9e:79:a5:ca:9f:
         a3:af:44:e2:5c:ec:51:f4:15:ba:7f:ef:56:d9:f7:92:4b:17:
         f6:18:6f:2d:86:2b:7d:a5:fa:77:07:69:24:d8:8f:fe:f4:be:
         8f:1c:61:1a:21:d6:c3:3e:7a:64:43:bf:0b:65:bb:a2:08:e4:
         ae:78:97:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 11:33:14 2025 by rpki-client