This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/46118f2b-9f94-4199-a241-8fc51d17e0c5/0/EA1FF21834CE2546B93FF7ABD7A24231492E6157.mft
File:                     EA1FF21834CE2546B93FF7ABD7A24231492E6157.mft (raw, json)
Hash identifier:          BbqgZZ1FEnpCRlF6ADTB3X+2pLiMhMrANV76bto10Kc=
Subject key identifier:   49:5D:A8:5E:D5:EE:AB:09:A1:87:C7:70:0F:0B:E8:59:8D:AB:9B:27
Authority key identifier: EA:1F:F2:18:34:CE:25:46:B9:3F:F7:AB:D7:A2:42:31:49:2E:61:57
Certificate issuer:       /CN=EA1FF21834CE2546B93FF7ABD7A24231492E6157
Certificate serial:       040E4561BEE653E71220B1DDB85E6BE797A3F75F
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EA1FF21834CE2546B93FF7ABD7A24231492E6157.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/46118f2b-9f94-4199-a241-8fc51d17e0c5/0/EA1FF21834CE2546B93FF7ABD7A24231492E6157.mft
Manifest number:          04C1
Signing time:             Tue 23 Dec 2025 06:42:40 +0000
Manifest this update:     Tue 23 Dec 2025 06:37:40 +0000
Manifest next update:     Fri 26 Dec 2025 11:37:40 +0000
Files and hashes:         1: EA1FF21834CE2546B93FF7ABD7A24231492E6157.crl (hash: MlyBRkwEAbydVLK6AQEpMJLBNEQmyjbf4hdJR500V9Y=)
                          2: 3130332e3136312e3134392e302f32342d3234203d3e20313431363137.roa (hash: aO5GUOOYzWayE1+nuqtYCqJb6iqD3aY2aScclOaaV0o=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/46118f2b-9f94-4199-a241-8fc51d17e0c5/0/EA1FF21834CE2546B93FF7ABD7A24231492E6157.crl
                          rsync://repo-rpki.idnic.net/repo/46118f2b-9f94-4199-a241-8fc51d17e0c5/0/EA1FF21834CE2546B93FF7ABD7A24231492E6157.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EA1FF21834CE2546B93FF7ABD7A24231492E6157.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 26 Dec 2025 11:37:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:0e:45:61:be:e6:53:e7:12:20:b1:dd:b8:5e:6b:e7:97:a3:f7:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EA1FF21834CE2546B93FF7ABD7A24231492E6157
        Validity
            Not Before: Dec 23 06:37:40 2025 GMT
            Not After : Dec 26 11:37:40 2025 GMT
        Subject: CN=495DA85ED5EEAB09A187C7700F0BE8598DAB9B27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:cd:93:f8:d5:33:82:69:40:91:06:ed:f1:ad:
                    50:5e:5a:b9:f1:d2:14:2d:44:3c:84:4d:ab:b5:4c:
                    11:22:66:f1:52:03:92:2a:f4:d2:f1:ce:e9:69:27:
                    1f:8c:2e:f4:69:bd:cb:76:98:89:ab:82:ab:87:b7:
                    a8:20:4f:1f:b6:2d:93:00:13:dc:28:9d:52:6f:b6:
                    0b:03:37:a6:19:0e:69:79:d3:5f:46:f4:0f:d6:95:
                    c8:b0:7c:74:62:17:1d:09:9f:e8:25:2d:07:60:79:
                    ec:e9:57:8d:34:3c:eb:1a:42:77:dc:e5:78:84:fb:
                    db:4f:af:77:e6:92:4d:63:c7:16:74:b7:fa:cb:db:
                    07:33:1d:fa:ff:85:e7:a0:b5:59:d5:44:26:f0:b9:
                    96:23:a6:82:ed:53:97:31:9d:87:58:8e:30:af:87:
                    2d:d2:0b:2c:ee:31:5b:c4:fd:b7:b6:c3:58:98:23:
                    bd:ef:3a:be:40:b2:36:9d:58:dd:82:00:ac:bf:11:
                    2a:e4:69:7f:f0:27:27:0c:c5:23:44:2d:54:69:19:
                    a0:15:ba:d7:47:2a:07:e0:00:5f:76:45:93:73:39:
                    fd:98:b7:10:50:eb:f2:87:8a:29:aa:99:a7:df:8c:
                    37:2a:19:b6:b4:62:97:7a:60:f9:b3:4c:35:17:86:
                    90:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:5D:A8:5E:D5:EE:AB:09:A1:87:C7:70:0F:0B:E8:59:8D:AB:9B:27
            X509v3 Authority Key Identifier:
                keyid:EA:1F:F2:18:34:CE:25:46:B9:3F:F7:AB:D7:A2:42:31:49:2E:61:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/46118f2b-9f94-4199-a241-8fc51d17e0c5/0/EA1FF21834CE2546B93FF7ABD7A24231492E6157.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EA1FF21834CE2546B93FF7ABD7A24231492E6157.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/46118f2b-9f94-4199-a241-8fc51d17e0c5/0/EA1FF21834CE2546B93FF7ABD7A24231492E6157.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:03:67:84:66:4c:b1:b3:cf:4c:dd:ec:ae:94:9e:c9:24:d9:
         c7:e5:4e:68:93:1b:b0:48:38:41:f4:ca:3e:e4:f8:67:c7:b2:
         34:6e:0d:ca:ce:80:4f:60:d0:17:d2:a8:33:78:44:1b:37:9b:
         12:b8:b9:6c:37:a0:49:cf:18:25:ba:f1:55:02:2b:2b:c8:df:
         e2:b4:b1:b5:5b:15:06:63:59:d4:d7:d9:50:c7:f9:aa:d2:f6:
         36:d1:03:b1:aa:73:29:8c:31:64:94:f0:a8:1e:16:4b:62:05:
         12:b6:af:15:d7:52:8a:6a:aa:2e:ca:4d:6f:ac:0e:12:dc:42:
         88:37:59:a2:9d:0b:6e:a2:8f:24:70:e8:f9:0f:ce:0a:95:fd:
         f3:7a:2e:61:fd:3d:2f:37:f5:b9:9a:cc:65:80:40:8f:01:e8:
         3b:03:22:61:d6:84:c5:95:67:9c:c1:8a:de:3c:59:f2:bb:a2:
         f3:29:35:82:55:6d:ac:71:8a:d1:4a:4b:b4:4e:d4:36:75:fa:
         c8:9c:9f:4e:71:25:b7:72:15:c6:f4:fd:48:b2:21:c9:a1:21:
         9d:60:09:6f:fa:d2:54:95:24:9d:0b:38:2e:ff:b4:77:72:4f:
         cc:c1:89:13:1e:b4:99:e9:4e:11:4a:f6:ef:82:e7:11:06:5d:
         ab:bc:c8:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 25 00:42:34 2025 by rpki-client