This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/188e3a17-1c91-4793-83c4-211d4210aea8/0/E1FE69A34216C24D1870F5CED3A4309234A0F1B2.mft
File:                     E1FE69A34216C24D1870F5CED3A4309234A0F1B2.mft (raw, json)
Hash identifier:          w6NNh0xMVk8xUBcM8RyR+NqhydbNu4fQvtSw6u2OrNA=
Subject key identifier:   8A:CB:45:48:40:DC:B4:55:BA:FA:E0:E2:AA:AA:7B:22:27:8F:B5:61
Authority key identifier: E1:FE:69:A3:42:16:C2:4D:18:70:F5:CE:D3:A4:30:92:34:A0:F1:B2
Certificate issuer:       /CN=E1FE69A34216C24D1870F5CED3A4309234A0F1B2
Certificate serial:       45D83948E507730BE17FE42C19314F21D87E9CC6
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E1FE69A34216C24D1870F5CED3A4309234A0F1B2.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/188e3a17-1c91-4793-83c4-211d4210aea8/0/E1FE69A34216C24D1870F5CED3A4309234A0F1B2.mft
Manifest number:          015B
Signing time:             Tue 23 Dec 2025 09:02:29 +0000
Manifest this update:     Tue 23 Dec 2025 08:57:29 +0000
Manifest next update:     Fri 26 Dec 2025 19:40:29 +0000
Files and hashes:         1: 3130332e3138392e3232322e302f32342d3234203d3e20313439383831.roa (hash: LJVWK744DaCLalz0/Sl7Gt/PYQWV0FOVmOX8NAlnD4I=)
                          2: 323030313a6466313a396563303a3a2f34382d3438203d3e20313439383831.roa (hash: icoM+EmZmnaUSNYe+M3YT7QPi2377uDTJ5GrlCTs7Lw=)
                          3: 3130332e3138392e3232332e302f32342d3234203d3e20313439383831.roa (hash: Y71EeD959aIr9ucCZApJALClmCCepz1YWwy1H6B20+w=)
                          4: E1FE69A34216C24D1870F5CED3A4309234A0F1B2.crl (hash: +rIPUFtHiL7F9sgUu61qVWZaj3ljoWymZ4DfovTj0b4=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/188e3a17-1c91-4793-83c4-211d4210aea8/0/E1FE69A34216C24D1870F5CED3A4309234A0F1B2.crl
                          rsync://repo-rpki.idnic.net/repo/188e3a17-1c91-4793-83c4-211d4210aea8/0/E1FE69A34216C24D1870F5CED3A4309234A0F1B2.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E1FE69A34216C24D1870F5CED3A4309234A0F1B2.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 26 Dec 2025 19:40:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:d8:39:48:e5:07:73:0b:e1:7f:e4:2c:19:31:4f:21:d8:7e:9c:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E1FE69A34216C24D1870F5CED3A4309234A0F1B2
        Validity
            Not Before: Dec 23 08:57:29 2025 GMT
            Not After : Dec 26 19:40:29 2025 GMT
        Subject: CN=8ACB454840DCB455BAFAE0E2AAAA7B22278FB561
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:e7:84:fb:3c:69:d4:3b:da:e9:5f:26:bb:e8:
                    d6:48:05:79:4d:5e:4c:16:a1:8f:52:7b:f2:fd:ca:
                    ea:15:74:5d:3a:72:f9:57:09:e7:dc:6d:55:9e:f9:
                    04:63:4a:f1:61:05:f4:75:56:3d:be:7f:ca:31:4e:
                    fe:c5:4e:e1:5f:b7:7b:61:87:44:bf:14:c0:9c:33:
                    8c:b6:27:97:75:ff:c5:b4:88:1a:5e:92:b2:aa:0e:
                    61:39:9a:86:a7:67:32:d6:00:30:17:6a:06:cd:09:
                    08:52:6f:7b:f1:3e:c2:cf:75:6c:57:3a:2a:62:e2:
                    80:1d:bd:53:55:07:fa:10:cd:45:f1:ce:d4:e4:96:
                    f0:ae:aa:74:de:69:0b:31:8d:4d:ce:9b:8c:5c:06:
                    a7:22:c1:ab:32:5e:85:06:51:8d:f0:e2:f9:b7:66:
                    95:24:55:93:c0:7a:88:ae:61:f0:9a:b3:b8:f3:ac:
                    a7:9f:c5:cb:aa:b8:97:99:0b:91:80:5e:0a:5f:79:
                    2b:b5:f9:91:85:de:ba:73:e2:b1:1f:ae:ed:3f:84:
                    8e:1a:46:4c:b1:ef:68:09:54:f4:12:c6:8d:02:cb:
                    af:b7:cc:2d:db:5c:bc:8b:e3:71:49:8b:21:2c:3d:
                    82:6d:1a:7b:4f:b0:0f:0a:fa:d5:4c:e5:1f:13:01:
                    46:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:CB:45:48:40:DC:B4:55:BA:FA:E0:E2:AA:AA:7B:22:27:8F:B5:61
            X509v3 Authority Key Identifier:
                keyid:E1:FE:69:A3:42:16:C2:4D:18:70:F5:CE:D3:A4:30:92:34:A0:F1:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/188e3a17-1c91-4793-83c4-211d4210aea8/0/E1FE69A34216C24D1870F5CED3A4309234A0F1B2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E1FE69A34216C24D1870F5CED3A4309234A0F1B2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/188e3a17-1c91-4793-83c4-211d4210aea8/0/E1FE69A34216C24D1870F5CED3A4309234A0F1B2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         da:fb:df:12:26:ae:b6:d7:ec:b2:0c:82:89:ca:6e:95:4b:6c:
         1b:16:14:2c:22:b2:60:2d:bb:46:97:b4:28:47:f5:84:97:37:
         ec:c2:66:1d:8f:9d:49:b0:06:0c:87:75:4a:3d:ff:d0:1d:31:
         cf:af:e6:c9:2e:07:4c:24:49:80:27:0c:01:1b:15:8b:dd:8d:
         0a:38:ef:5a:b7:b7:17:48:28:06:5c:6d:81:6f:33:66:d6:96:
         7d:2f:d3:09:ce:7e:96:44:5f:77:00:3f:48:02:49:05:2c:1f:
         02:3d:fe:68:b9:93:0a:de:1d:cf:77:01:5b:bc:3a:02:37:d1:
         b2:18:e3:ec:a8:a6:84:60:0b:76:09:f7:8b:d2:61:16:7b:8a:
         dd:db:df:66:50:15:c6:c4:38:82:12:3b:d1:52:33:3c:7a:a1:
         bc:bd:5f:cf:0d:e0:90:99:5a:92:76:f2:da:23:03:4e:70:35:
         a5:50:0f:f4:ea:b9:58:a2:cc:4c:34:af:75:e7:80:a8:c9:bd:
         ae:79:ad:d9:a9:69:4b:f7:bd:b0:f7:09:91:ff:05:aa:a2:ba:
         3b:f2:90:ab:d0:26:45:2a:05:2c:f0:5d:60:33:64:77:10:78:
         5e:89:43:ca:01:50:ae:47:8b:8c:e6:b2:0b:99:a3:16:96:9b:
         31:62:15:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 20:25:13 2025 by rpki-client