This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/d0a8ce6c-8290-4b9d-9aed-0754d3fd8d32/0/73238FE50473DF8F457921BE1B0C04764209BBF1.mft
File:                     73238FE50473DF8F457921BE1B0C04764209BBF1.mft (raw, json)
Hash identifier:          eDWHVtTysyYpQ9YdvbM+tmVs8GOjgwvCPv8h4t8Ipa8=
Subject key identifier:   3B:15:EB:3C:BB:71:AB:3E:36:32:55:89:8E:3F:45:6E:67:D9:A2:27
Authority key identifier: 73:23:8F:E5:04:73:DF:8F:45:79:21:BE:1B:0C:04:76:42:09:BB:F1
Certificate issuer:       /CN=73238FE50473DF8F457921BE1B0C04764209BBF1
Certificate serial:       10CC2B83B91710757A523BB2C28C94934BDA8B32
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/73238FE50473DF8F457921BE1B0C04764209BBF1.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/d0a8ce6c-8290-4b9d-9aed-0754d3fd8d32/0/73238FE50473DF8F457921BE1B0C04764209BBF1.mft
Manifest number:          E7
Signing time:             Thu 18 Dec 2025 17:51:12 +0000
Manifest this update:     Thu 18 Dec 2025 17:46:12 +0000
Manifest next update:     Sun 21 Dec 2025 20:20:12 +0000
Files and hashes:         1: 73238FE50473DF8F457921BE1B0C04764209BBF1.crl (hash: HYqN+1XTKrEqmWnKv3DKgM9gKmt9aTD2c3sLRy2NAR0=)
                          2: 3136302e32322e3130302e302f32342d3234203d3e20313532383038.roa (hash: 6ESo4EJBYW+TZiA7AQCDdrC7W+O2u7DLGxOGwrnalLc=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/d0a8ce6c-8290-4b9d-9aed-0754d3fd8d32/0/73238FE50473DF8F457921BE1B0C04764209BBF1.crl
                          rsync://repo-rpki.idnic.net/repo/d0a8ce6c-8290-4b9d-9aed-0754d3fd8d32/0/73238FE50473DF8F457921BE1B0C04764209BBF1.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/73238FE50473DF8F457921BE1B0C04764209BBF1.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 21 Dec 2025 20:20:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:cc:2b:83:b9:17:10:75:7a:52:3b:b2:c2:8c:94:93:4b:da:8b:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73238FE50473DF8F457921BE1B0C04764209BBF1
        Validity
            Not Before: Dec 18 17:46:12 2025 GMT
            Not After : Dec 21 20:20:12 2025 GMT
        Subject: CN=3B15EB3CBB71AB3E363255898E3F456E67D9A227
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:e0:08:53:7d:ea:48:fe:51:90:04:68:99:52:
                    e3:6a:e8:d7:dc:29:d0:73:f7:18:11:b3:6e:26:75:
                    c6:ef:21:e4:ee:a2:31:68:f5:4e:ac:fc:93:53:cd:
                    7a:81:65:b1:70:7f:07:60:2c:7a:68:43:62:6a:3d:
                    84:eb:2b:42:bc:53:cf:eb:48:6c:cb:9a:f3:65:0f:
                    f7:e8:76:10:b4:47:84:d9:84:28:83:ed:88:bf:b5:
                    3b:02:86:f3:b8:f2:a9:80:86:8e:2b:d3:7c:76:55:
                    4c:e2:b1:25:22:8a:f6:2c:11:0d:e2:84:a3:ec:2b:
                    a7:71:e8:e4:f3:40:f6:20:92:80:20:eb:a3:5c:62:
                    ec:ee:1b:3b:13:32:07:5d:ed:78:13:8f:47:0c:24:
                    45:41:f4:66:18:bc:29:a9:a3:b3:8e:2f:95:cf:e7:
                    a0:0a:ef:13:6c:1b:55:20:c4:0b:be:05:4f:ec:cd:
                    2c:96:df:4c:f4:aa:65:15:0d:f8:1a:f0:bf:c1:99:
                    2b:ba:d2:b3:38:42:e2:d0:e9:0c:47:ae:a7:e0:94:
                    f1:56:75:9d:17:be:1f:19:4d:4d:6a:50:aa:27:cc:
                    b8:4a:45:37:31:f5:6b:8a:14:f2:1c:ad:f3:42:59:
                    7a:f1:cb:e1:f4:21:04:7e:d9:c4:fd:ef:1d:1d:ae:
                    14:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:15:EB:3C:BB:71:AB:3E:36:32:55:89:8E:3F:45:6E:67:D9:A2:27
            X509v3 Authority Key Identifier:
                keyid:73:23:8F:E5:04:73:DF:8F:45:79:21:BE:1B:0C:04:76:42:09:BB:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/d0a8ce6c-8290-4b9d-9aed-0754d3fd8d32/0/73238FE50473DF8F457921BE1B0C04764209BBF1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/73238FE50473DF8F457921BE1B0C04764209BBF1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d0a8ce6c-8290-4b9d-9aed-0754d3fd8d32/0/73238FE50473DF8F457921BE1B0C04764209BBF1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:ec:95:2b:e2:b6:41:f2:55:f3:a0:3f:11:73:be:6f:32:92:
         d8:d2:03:ad:15:29:51:85:b8:a2:5a:75:4f:0b:4e:f1:ed:bc:
         92:97:70:6c:09:d3:a7:30:c1:fb:7f:0e:60:91:c1:15:91:6c:
         93:48:9f:12:02:76:55:e7:20:0a:f8:81:9f:6c:bd:7c:ef:47:
         86:04:64:ff:b7:d0:1e:18:bc:aa:0b:4d:9e:f0:24:0b:ca:45:
         bd:12:eb:7e:d6:4b:18:5a:0f:43:f0:ff:68:7b:35:78:57:2d:
         f4:ae:6a:97:48:b7:dc:17:3f:7a:3e:be:bf:68:ac:e8:8d:1e:
         c0:f8:8e:70:02:ec:7e:b0:ac:d0:6f:a3:13:c9:4d:e1:c7:5a:
         a4:a8:c8:76:4d:e4:ff:8f:53:2b:8b:8e:51:c3:b9:df:18:3a:
         50:22:f4:47:b9:76:99:e3:06:de:b1:83:62:5d:ad:f9:16:a6:
         fe:95:2b:8d:5c:fd:be:9a:f5:ef:36:e9:8a:64:8f:7c:a5:c8:
         0a:0a:1b:08:3f:b2:ab:b0:2a:8c:ae:68:a3:41:1f:33:43:0f:
         0f:48:f6:2d:21:fc:38:36:1d:a4:a3:f8:f1:2e:18:b3:c4:7c:
         6a:2f:44:c0:11:24:e8:d7:a2:2a:9b:f0:9f:99:0e:e2:af:53:
         b3:e2:27:e4
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUEMwrg7kXEHV6UjuywoyUk0vaizIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzMyMzhGRTUwNDczREY4RjQ1NzkyMUJFMUIwQzA0NzY0
MjA5QkJGMTAeFw0yNTEyMTgxNzQ2MTJaFw0yNTEyMjEyMDIwMTJaMDMxMTAvBgNV
BAMTKDNCMTVFQjNDQkI3MUFCM0UzNjMyNTU4OThFM0Y0NTZFNjdEOUEyMjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC64AhTfepI/lGQBGiZUuNq6Nfc
KdBz9xgRs24mdcbvIeTuojFo9U6s/JNTzXqBZbFwfwdgLHpoQ2JqPYTrK0K8U8/r
SGzLmvNlD/fodhC0R4TZhCiD7Yi/tTsChvO48qmAho4r03x2VUzisSUiivYsEQ3i
hKPsK6dx6OTzQPYgkoAg66NcYuzuGzsTMgdd7XgTj0cMJEVB9GYYvCmpo7OOL5XP
56AK7xNsG1UgxAu+BU/szSyW30z0qmUVDfga8L/BmSu60rM4QuLQ6QxHrqfglPFW
dZ0Xvh8ZTU1qUKonzLhKRTcx9WuKFPIcrfNCWXrxy+H0IQR+2cT97x0drhS7AgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUOxXrPLtxqz42MlWJjj9FbmfZoicwHwYDVR0j
BBgwFoAUcyOP5QRz349FeSG+GwwEdkIJu/EwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k
MGE4Y2U2Yy04MjkwLTRiOWQtOWFlZC0wNzU0ZDNmZDhkMzIvMC83MzIzOEZFNTA0
NzNERjhGNDU3OTIxQkUxQjBDMDQ3NjQyMDlCQkYxLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzEvNzMyMzhGRTUwNDczREY4RjQ1NzkyMUJFMUIwQzA0NzY0MjA5
QkJGMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDBhOGNlNmMtODI5MC00YjlkLTlh
ZWQtMDc1NGQzZmQ4ZDMyLzAvNzMyMzhGRTUwNDczREY4RjQ1NzkyMUJFMUIwQzA0
NzY0MjA5QkJGMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAF3slSvitkHyVfOgPxFzvm8yktjSA60VKVGF
uKJadU8LTvHtvJKXcGwJ06cwwft/DmCRwRWRbJNInxICdlXnIAr4gZ9svXzvR4YE
ZP+30B4YvKoLTZ7wJAvKRb0S637WSxhaD0Pw/2h7NXhXLfSuapdIt9wXP3o+vr9o
rOiNHsD4jnAC7H6wrNBvoxPJTeHHWqSoyHZN5P+PUyuLjlHDud8YOlAi9Ee5dpnj
Bt6xg2JdrfkWpv6VK41c/b6a9e826Ypkj3ylyAoKGwg/squwKoyuaKNBHzNDDw9I
9i0h/Dg2HaSj+PEuGLPEfGovRMARJOjXoiqb8J+ZDuKvU7PiJ+Q=
-----END CERTIFICATE-----
Generated at Sat Dec 20 18:37:36 2025 by rpki-client