This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/187ade9f-6b79-4723-9949-96de7e41db70/0/E4B72563B465301EE966885E5BE212EE92B97305.mft
File:                     E4B72563B465301EE966885E5BE212EE92B97305.mft (raw, json)
Hash identifier:          nSFCOh89Ddw7wnTECGSBSejCiSMUZ2rAC5b6WXVGx+A=
Subject key identifier:   E0:23:E6:8D:B3:03:4E:D3:6A:2B:A4:F6:F6:D3:E5:3D:80:2A:F5:EE
Authority key identifier: E4:B7:25:63:B4:65:30:1E:E9:66:88:5E:5B:E2:12:EE:92:B9:73:05
Certificate issuer:       /CN=E4B72563B465301EE966885E5BE212EE92B97305
Certificate serial:       7734BC38F2375968C9E941E3FF48590A933EADAA
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4B72563B465301EE966885E5BE212EE92B97305.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/187ade9f-6b79-4723-9949-96de7e41db70/0/E4B72563B465301EE966885E5BE212EE92B97305.mft
Manifest number:          0260
Signing time:             Tue 23 Dec 2025 23:13:39 +0000
Manifest this update:     Tue 23 Dec 2025 23:08:39 +0000
Manifest next update:     Sat 27 Dec 2025 09:42:39 +0000
Files and hashes:         1: E4B72563B465301EE966885E5BE212EE92B97305.crl (hash: PblfLo6XHklVVgGz9/ottxhBIcS7gKICVSgg8Pft6Tc=)
                          2: 3130332e31312e32322e302f32332d3234203d3e203538333930.roa (hash: FtcYNnQ+tpgDczZdWAIIZbO3eWyrmnKrL3Da652AKfg=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/187ade9f-6b79-4723-9949-96de7e41db70/0/E4B72563B465301EE966885E5BE212EE92B97305.crl
                          rsync://repo-rpki.idnic.net/repo/187ade9f-6b79-4723-9949-96de7e41db70/0/E4B72563B465301EE966885E5BE212EE92B97305.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4B72563B465301EE966885E5BE212EE92B97305.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 27 Dec 2025 09:42:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:34:bc:38:f2:37:59:68:c9:e9:41:e3:ff:48:59:0a:93:3e:ad:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E4B72563B465301EE966885E5BE212EE92B97305
        Validity
            Not Before: Dec 23 23:08:39 2025 GMT
            Not After : Dec 27 09:42:39 2025 GMT
        Subject: CN=E023E68DB3034ED36A2BA4F6F6D3E53D802AF5EE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:90:b5:dc:d2:de:60:50:6b:68:d3:76:f0:a1:
                    0b:ca:e7:c5:a3:0b:4b:bb:9b:99:67:32:67:ac:49:
                    fa:9f:00:d5:84:73:c0:17:07:cd:0d:18:a6:47:eb:
                    62:e5:52:1d:52:54:07:9e:f6:02:50:30:c0:4e:e6:
                    07:83:c6:8b:1c:9d:bc:e5:db:ff:aa:30:87:06:a4:
                    fa:24:85:b5:45:08:c8:ca:e2:05:98:fa:06:dd:b1:
                    50:19:2d:4c:76:9d:7a:1e:94:34:f7:c1:d1:e0:d4:
                    ec:51:6f:07:70:76:d0:89:6a:a3:12:28:d3:13:ad:
                    54:52:a1:42:b6:1c:d7:e8:86:d0:02:5a:de:89:b5:
                    c0:20:18:e8:b6:a2:c5:46:a3:4a:20:a0:e6:59:db:
                    e1:e8:90:4b:ad:4c:4f:0d:45:8e:05:fa:c6:d6:3f:
                    a0:b4:a6:c9:73:c3:80:a2:b9:87:66:aa:03:aa:47:
                    6f:9b:f0:93:04:9c:09:e3:f3:33:b9:28:a4:22:35:
                    ed:bf:5e:1d:52:96:42:14:f1:b5:4b:3a:3b:72:a8:
                    5a:7c:f7:19:69:9a:1f:a4:cd:c4:1a:c7:06:a4:5b:
                    3c:5a:6f:3e:59:0e:db:fd:ec:98:ad:e9:16:d3:ef:
                    54:b4:53:6f:1e:cb:61:05:a6:27:64:d7:82:91:51:
                    d1:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:23:E6:8D:B3:03:4E:D3:6A:2B:A4:F6:F6:D3:E5:3D:80:2A:F5:EE
            X509v3 Authority Key Identifier:
                keyid:E4:B7:25:63:B4:65:30:1E:E9:66:88:5E:5B:E2:12:EE:92:B9:73:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/187ade9f-6b79-4723-9949-96de7e41db70/0/E4B72563B465301EE966885E5BE212EE92B97305.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4B72563B465301EE966885E5BE212EE92B97305.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/187ade9f-6b79-4723-9949-96de7e41db70/0/E4B72563B465301EE966885E5BE212EE92B97305.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:e5:f3:5a:55:b4:c6:5d:b9:b5:81:f1:f5:f2:9c:23:e9:f9:
         01:d2:2b:5d:f2:b4:9c:ed:07:41:d2:b0:b4:6a:a1:b9:60:c2:
         ed:93:20:f4:11:fb:f0:47:f8:e8:fc:19:bb:14:e9:74:47:ef:
         87:3f:e1:e7:3c:cb:a9:8e:65:6a:e0:29:4a:d9:f1:80:66:9f:
         38:39:b2:9a:6f:fa:76:76:9d:c3:e9:3a:50:8f:5e:ea:09:b7:
         ac:1e:1a:a7:97:a0:59:93:53:2d:8d:23:2d:93:6f:d3:f5:fb:
         a0:19:88:b6:9b:c9:c3:d7:fa:b4:d6:8b:80:6e:a7:68:3f:e0:
         0c:5f:ef:de:62:78:f5:e5:93:2d:f0:ef:7b:53:05:33:fa:41:
         41:0e:00:e8:30:5a:17:9c:47:d3:e5:b0:c1:d1:b7:f4:04:51:
         fa:8e:6c:fd:3f:53:f7:74:31:0b:1a:08:7e:00:4b:b0:25:07:
         7c:7c:a0:f5:7c:04:53:6b:4d:67:b5:4b:16:a5:b7:40:2f:3c:
         4c:a2:b3:63:be:41:16:07:71:d5:39:65:ce:89:48:5b:19:22:
         93:12:42:c9:aa:92:34:83:3f:6e:f6:40:04:c7:11:af:6e:e4:
         8b:7c:9b:13:91:87:81:71:25:30:3b:ae:98:d3:c7:de:7e:e1:
         79:d4:2f:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 11:29:49 2025 by rpki-client