This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/d8463ad5-1745-443e-b165-d194eed89e6b/0/7B04CE58A1370241E93EF01F597DD18A039D613D.mft
File:                     7B04CE58A1370241E93EF01F597DD18A039D613D.mft (raw, json)
Hash identifier:          koCDjtwEumwP4BbQgCwGx1hVfefKlr+3qxxJY1CY+t0=
Subject key identifier:   EB:08:4F:F4:5F:12:17:49:A8:C3:39:F9:D1:1F:CF:52:64:96:24:A7
Authority key identifier: 7B:04:CE:58:A1:37:02:41:E9:3E:F0:1F:59:7D:D1:8A:03:9D:61:3D
Certificate issuer:       /CN=7B04CE58A1370241E93EF01F597DD18A039D613D
Certificate serial:       16F31BDC93B6B62A9E2A0ACE649B2BB29A18AEB1
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7B04CE58A1370241E93EF01F597DD18A039D613D.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/d8463ad5-1745-443e-b165-d194eed89e6b/0/7B04CE58A1370241E93EF01F597DD18A039D613D.mft
Manifest number:          01C1
Signing time:             Thu 18 Dec 2025 03:50:38 +0000
Manifest this update:     Thu 18 Dec 2025 03:45:38 +0000
Manifest next update:     Sun 21 Dec 2025 09:45:38 +0000
Files and hashes:         1: 3130332e39372e3139392e302f32342d3234203d3e20313530393135.roa (hash: KpZGTHHITDkYOGDokkGhFBTqUppZ/cNFbsmbPmwF8Cg=)
                          2: 3130332e39372e3139382e302f32342d3234203d3e20313530393135.roa (hash: BVsk6AHIvUUfWZ+4++VqM/4m6oLrmg+QHEXYFO+Hiks=)
                          3: 7B04CE58A1370241E93EF01F597DD18A039D613D.crl (hash: YKDNA8Blvl1lyKYosja2jSkH55nVeJK2f0Asg+94V6s=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/d8463ad5-1745-443e-b165-d194eed89e6b/0/7B04CE58A1370241E93EF01F597DD18A039D613D.crl
                          rsync://repo-rpki.idnic.net/repo/d8463ad5-1745-443e-b165-d194eed89e6b/0/7B04CE58A1370241E93EF01F597DD18A039D613D.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7B04CE58A1370241E93EF01F597DD18A039D613D.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 21 Dec 2025 09:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:f3:1b:dc:93:b6:b6:2a:9e:2a:0a:ce:64:9b:2b:b2:9a:18:ae:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7B04CE58A1370241E93EF01F597DD18A039D613D
        Validity
            Not Before: Dec 18 03:45:38 2025 GMT
            Not After : Dec 21 09:45:38 2025 GMT
        Subject: CN=EB084FF45F121749A8C339F9D11FCF52649624A7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:a0:aa:bf:66:ce:1c:c8:a4:86:f7:ad:9c:e9:
                    bd:c1:55:d3:64:fe:88:bd:2e:72:e6:1a:81:54:b3:
                    e5:96:d4:b5:5d:96:d4:ee:f7:2d:c0:a3:9c:f8:cb:
                    6f:52:60:3a:99:b1:97:ad:dc:18:8d:5b:11:26:da:
                    5d:4e:d0:81:d7:82:8e:a2:df:df:f8:a7:29:64:22:
                    4a:d6:9d:2a:a1:d6:e1:bd:50:bd:48:07:19:7d:d9:
                    4f:ac:0b:ad:36:65:10:0b:bc:d6:60:4c:62:d1:24:
                    6c:67:af:08:fd:38:cc:2e:84:f5:70:8b:87:38:0e:
                    26:9e:6d:d2:fb:a2:9d:63:bb:a4:57:bb:72:d2:3f:
                    7b:b3:0e:bb:d4:07:9d:5b:4d:35:5c:ae:f2:70:9c:
                    09:8b:53:ce:ce:71:8d:3a:4d:b0:f9:bb:ef:2b:fb:
                    55:b8:f9:f8:73:54:3b:d0:b1:78:48:09:be:f3:5c:
                    8f:b0:2f:e7:b2:95:20:ed:89:34:52:96:91:45:cb:
                    2e:a2:b7:8d:6b:d2:2f:fd:69:9a:5a:8e:27:6b:76:
                    70:42:57:10:7b:c4:b9:5a:3a:c2:fd:33:c6:d3:92:
                    ac:b7:33:47:b9:bd:8a:b6:0c:1f:a1:3a:b5:12:55:
                    6c:94:ae:61:22:70:20:8f:6d:7c:48:3a:43:c8:1c:
                    81:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:08:4F:F4:5F:12:17:49:A8:C3:39:F9:D1:1F:CF:52:64:96:24:A7
            X509v3 Authority Key Identifier:
                keyid:7B:04:CE:58:A1:37:02:41:E9:3E:F0:1F:59:7D:D1:8A:03:9D:61:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/d8463ad5-1745-443e-b165-d194eed89e6b/0/7B04CE58A1370241E93EF01F597DD18A039D613D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7B04CE58A1370241E93EF01F597DD18A039D613D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d8463ad5-1745-443e-b165-d194eed89e6b/0/7B04CE58A1370241E93EF01F597DD18A039D613D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cd:45:86:f4:8d:2c:47:36:ca:3e:23:1e:f4:7c:c1:12:60:85:
         93:2d:fe:fb:d5:64:23:dd:5f:1c:2a:e2:98:26:18:7f:5f:73:
         7b:6a:83:16:9e:70:bd:ae:fc:36:9f:5f:56:1d:58:0f:ea:cc:
         75:0e:20:40:ff:77:2e:b5:62:e9:db:23:61:a4:a3:e5:c2:0a:
         3f:9c:b4:17:9e:d3:75:98:d4:de:6b:bb:cb:ae:fb:1a:4c:0d:
         a8:93:8d:b8:2b:8b:6e:17:25:c7:4a:a1:58:f8:56:83:d2:50:
         85:02:01:32:04:89:25:90:67:06:18:ba:f8:4a:c2:f9:6b:9b:
         c5:69:85:a8:c2:28:e0:f8:e0:d0:4d:11:ae:6c:45:15:b5:be:
         f0:b1:f9:c6:94:dc:8b:fc:3f:d3:03:8a:c5:c5:48:55:6d:04:
         39:df:2c:86:10:72:1a:5a:ce:72:b3:d6:81:1f:42:9c:9f:f0:
         5b:d2:7b:29:25:cd:2c:c7:7d:aa:ad:fa:6d:b2:6d:37:e0:61:
         fd:39:70:ce:e6:7a:cb:19:22:cb:53:32:dd:77:a4:99:65:cd:
         ac:a0:9f:94:77:25:ba:9f:39:d6:ff:bf:96:4a:46:69:89:b1:
         97:02:88:89:6b:35:89:dd:ed:78:9a:75:a1:51:6d:f6:74:3d:
         56:1c:79:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 11:35:02 2025 by rpki-client