This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/0a75d371-18c7-48df-8f61-1d404b646413/0/8EEE0584B224A95915512EA70FE012A4AF134C7A.mft
File:                     8EEE0584B224A95915512EA70FE012A4AF134C7A.mft (raw, json)
Hash identifier:          /C+NJZZ3+mNy+MCS47dY8GnNNt/xIv3Tyh5kiTSeKj4=
Subject key identifier:   26:05:5E:26:F4:22:AF:B1:C9:07:C4:93:95:1B:5E:36:70:D9:F7:59
Authority key identifier: 8E:EE:05:84:B2:24:A9:59:15:51:2E:A7:0F:E0:12:A4:AF:13:4C:7A
Certificate issuer:       /CN=8EEE0584B224A95915512EA70FE012A4AF134C7A
Certificate serial:       1873B8F891397F29BB7F53B5D1209A46A7B9CBF5
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8EEE0584B224A95915512EA70FE012A4AF134C7A.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/0a75d371-18c7-48df-8f61-1d404b646413/0/8EEE0584B224A95915512EA70FE012A4AF134C7A.mft
Manifest number:          0533
Signing time:             Thu 18 Dec 2025 06:52:37 +0000
Manifest this update:     Thu 18 Dec 2025 06:47:37 +0000
Manifest next update:     Sun 21 Dec 2025 07:33:37 +0000
Files and hashes:         1: 8EEE0584B224A95915512EA70FE012A4AF134C7A.crl (hash: AajF2DIF/kQ37BPwV1F9kEvp9b/RdRH2kI0xjNZWMlg=)
                          2: 3130332e39352e3136302e302f32332d3234203d3e20313336313236.roa (hash: KD7T4Ue/VEXioee+nFto/OfNIEmRxJwHxyIAd7JKH2Q=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/0a75d371-18c7-48df-8f61-1d404b646413/0/8EEE0584B224A95915512EA70FE012A4AF134C7A.crl
                          rsync://repo-rpki.idnic.net/repo/0a75d371-18c7-48df-8f61-1d404b646413/0/8EEE0584B224A95915512EA70FE012A4AF134C7A.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8EEE0584B224A95915512EA70FE012A4AF134C7A.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 21 Dec 2025 07:33:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:73:b8:f8:91:39:7f:29:bb:7f:53:b5:d1:20:9a:46:a7:b9:cb:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8EEE0584B224A95915512EA70FE012A4AF134C7A
        Validity
            Not Before: Dec 18 06:47:37 2025 GMT
            Not After : Dec 21 07:33:37 2025 GMT
        Subject: CN=26055E26F422AFB1C907C493951B5E3670D9F759
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:10:51:d6:7f:f4:87:14:25:0a:75:c6:3f:5c:
                    71:16:95:36:a2:6b:41:f7:bc:da:18:ec:03:fe:af:
                    93:1f:b8:62:19:87:f7:fa:d4:cf:1d:2b:ee:0c:ba:
                    4e:2b:7b:ce:7a:31:42:3d:12:37:2e:e0:24:9f:b8:
                    cb:5e:3e:71:f8:b2:29:69:58:39:5f:c6:74:cb:1b:
                    87:2d:88:04:7f:50:b4:b8:1e:5e:6b:d9:09:f9:5b:
                    fe:45:93:39:0c:76:2c:ba:ca:98:88:c4:dc:99:5a:
                    13:f7:0f:6a:ba:87:74:32:c3:0f:0f:8c:1a:1f:8a:
                    4a:3c:bd:40:6a:88:59:f5:c1:83:44:ad:ba:c8:d2:
                    db:9c:1d:dc:24:b4:3a:15:c8:f0:63:00:ad:d5:8b:
                    74:51:a5:4c:9c:a2:37:64:cd:dc:99:06:e5:a7:08:
                    86:6d:2e:97:18:a1:9b:09:14:4b:e3:65:9f:1a:d8:
                    21:00:fa:67:f7:20:e4:d2:ba:f4:22:c2:d1:28:98:
                    49:a1:6a:39:f7:04:f1:31:c0:cc:e7:da:41:47:fd:
                    89:35:f5:d7:7d:13:90:e7:e0:86:82:fa:c0:37:64:
                    84:8a:63:55:e6:bf:dc:f3:c4:37:70:bf:92:38:2c:
                    a6:57:62:0a:46:48:97:9a:bc:1c:a1:b8:dd:9d:04:
                    8c:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:05:5E:26:F4:22:AF:B1:C9:07:C4:93:95:1B:5E:36:70:D9:F7:59
            X509v3 Authority Key Identifier:
                keyid:8E:EE:05:84:B2:24:A9:59:15:51:2E:A7:0F:E0:12:A4:AF:13:4C:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/0a75d371-18c7-48df-8f61-1d404b646413/0/8EEE0584B224A95915512EA70FE012A4AF134C7A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8EEE0584B224A95915512EA70FE012A4AF134C7A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0a75d371-18c7-48df-8f61-1d404b646413/0/8EEE0584B224A95915512EA70FE012A4AF134C7A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:61:2e:04:8e:7a:ee:ce:36:fb:a4:c7:82:d8:3e:15:6f:b2:
         7e:d6:46:17:67:73:02:3a:4d:08:81:02:87:55:b7:28:a3:4e:
         04:02:7e:23:9f:11:ae:b7:a5:49:ce:9c:2b:00:05:25:d5:6f:
         bc:07:0c:08:3e:f0:5d:91:dc:a0:cf:b2:10:4a:0c:97:de:59:
         6c:fe:9e:85:06:c0:04:36:12:fb:80:1f:de:40:b6:fd:da:9f:
         fc:8a:aa:48:e0:41:6b:3f:96:9b:9e:88:f1:47:9b:6a:c4:47:
         21:32:63:48:9b:ca:71:b5:52:ec:0e:82:02:ed:c5:a3:cb:dd:
         2d:3a:10:f3:bd:d5:23:a6:d1:88:af:42:d1:f1:68:c4:ff:7d:
         90:6d:15:a8:8f:59:07:ff:d0:1a:8a:39:0d:15:5a:17:94:5b:
         b9:13:5b:6b:a3:f2:c9:cc:db:35:92:d7:1f:1a:68:48:58:f6:
         cd:42:da:97:b2:c2:03:93:e2:6c:b0:44:76:91:e6:ec:0c:48:
         e6:74:63:65:dc:3a:e2:02:e5:4b:24:07:15:38:df:95:91:4f:
         b1:b1:9d:c4:b4:ab:a3:1c:07:58:7e:49:be:6e:7b:c8:3c:5b:
         be:68:ce:0b:9c:24:7a:04:89:a1:72:0d:4d:29:68:5b:80:6a:
         e4:3d:30:b9
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUGHO4+JE5fym7f1O10SCaRqe5y/UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEVFRTA1ODRCMjI0QTk1OTE1NTEyRUE3MEZFMDEyQTRB
RjEzNEM3QTAeFw0yNTEyMTgwNjQ3MzdaFw0yNTEyMjEwNzMzMzdaMDMxMTAvBgNV
BAMTKDI2MDU1RTI2RjQyMkFGQjFDOTA3QzQ5Mzk1MUI1RTM2NzBEOUY3NTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzEFHWf/SHFCUKdcY/XHEWlTai
a0H3vNoY7AP+r5MfuGIZh/f61M8dK+4Muk4re856MUI9Ejcu4CSfuMtePnH4silp
WDlfxnTLG4ctiAR/ULS4Hl5r2Qn5W/5FkzkMdiy6ypiIxNyZWhP3D2q6h3Qyww8P
jBofiko8vUBqiFn1wYNErbrI0tucHdwktDoVyPBjAK3Vi3RRpUycojdkzdyZBuWn
CIZtLpcYoZsJFEvjZZ8a2CEA+mf3IOTSuvQiwtEomEmhajn3BPExwMzn2kFH/Yk1
9dd9E5Dn4IaC+sA3ZISKY1Xmv9zzxDdwv5I4LKZXYgpGSJeavByhuN2dBIxnAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUJgVeJvQir7HJB8STlRteNnDZ91kwHwYDVR0j
BBgwFoAUju4FhLIkqVkVUS6nD+ASpK8TTHowDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w
YTc1ZDM3MS0xOGM3LTQ4ZGYtOGY2MS0xZDQwNGI2NDY0MTMvMC84RUVFMDU4NEIy
MjRBOTU5MTU1MTJFQTcwRkUwMTJBNEFGMTM0QzdBLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvOEVFRTA1ODRCMjI0QTk1OTE1NTEyRUE3MEZFMDEyQTRBRjEz
NEM3QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGE3NWQzNzEtMThjNy00OGRmLThm
NjEtMWQ0MDRiNjQ2NDEzLzAvOEVFRTA1ODRCMjI0QTk1OTE1NTEyRUE3MEZFMDEy
QTRBRjEzNEM3QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBABxhLgSOeu7ONvukx4LYPhVvsn7WRhdncwI6
TQiBAodVtyijTgQCfiOfEa63pUnOnCsABSXVb7wHDAg+8F2R3KDPshBKDJfeWWz+
noUGwAQ2EvuAH95Atv3an/yKqkjgQWs/lpueiPFHm2rERyEyY0ibynG1UuwOggLt
xaPL3S06EPO91SOm0YivQtHxaMT/fZBtFaiPWQf/0BqKOQ0VWheUW7kTW2uj8snM
2zWS1x8aaEhY9s1C2peywgOT4mywRHaR5uwMSOZ0Y2XcOuIC5UskBxU435WRT7Gx
ncS0q6McB1h+Sb5ue8g8W75ozgucJHoEiaFyDU0paFuAauQ9MLk=
-----END CERTIFICATE-----
Generated at Fri Dec 19 19:35:35 2025 by rpki-client