This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/49eca50b-5722-4918-8314-859d3c1f55a2/0/295131167768CC78482F796BB58CF5A01A014393.mft
File:                     295131167768CC78482F796BB58CF5A01A014393.mft (raw, json)
Hash identifier:          nU+AxvwNQ0N+8mXD6xKUIbpOqQwLGYBM2nG8AKZ/gWU=
Subject key identifier:   A6:0B:8A:A6:B9:40:9F:57:26:09:FF:68:D4:8E:CA:3C:CC:3F:17:1F
Authority key identifier: 29:51:31:16:77:68:CC:78:48:2F:79:6B:B5:8C:F5:A0:1A:01:43:93
Certificate issuer:       /CN=295131167768CC78482F796BB58CF5A01A014393
Certificate serial:       32757CFD2B006034B6FDB2D96A157394C713066C
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/295131167768CC78482F796BB58CF5A01A014393.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/49eca50b-5722-4918-8314-859d3c1f55a2/0/295131167768CC78482F796BB58CF5A01A014393.mft
Manifest number:          E8
Signing time:             Wed 17 Dec 2025 18:01:31 +0000
Manifest this update:     Wed 17 Dec 2025 17:56:31 +0000
Manifest next update:     Sun 21 Dec 2025 00:46:31 +0000
Files and hashes:         1: 3136302e32352e35302e302f32342d3234203d3e20313533303831.roa (hash: AX0lDEH6VgInN8VNyEQZ1Bf7VJ5RuPZOiclQbBxraVk=)
                          2: 3136302e32352e35312e302f32342d3234203d3e20313533303831.roa (hash: uRuK1ozamqcEn31L5IIaIYVkb8/xiqqqwMGA40t+cIA=)
                          3: 3136302e32352e35302e302f32342d3234203d3e20313439373436.roa (hash: 0V0z+LtHyEetsdKzNz3fDG9TWng43zw65Ia1bT84+ig=)
                          4: 3136302e32352e35302e302f32332d3234203d3e20313533303831.roa (hash: Jp+xzrLLFcNcdbgFIyqYkAF5UwOiimjyD2ApcObjIzI=)
                          5: 295131167768CC78482F796BB58CF5A01A014393.crl (hash: 7Fxv4O/SQ3cQrUrwNN36/nN3In/O9FuR8i1m64k8X5g=)
                          6: 3136302e32352e35302e302f32332d3233203d3e20313439373436.roa (hash: ItdPic80wypsThSkca8xGdGFm8YCN4V6loLuyuZH6qY=)
                          7: 3136302e32352e35312e302f32342d3234203d3e20313439373436.roa (hash: aIfX6W1wJsuWGyj92Zq4X0k5Z/7Dz5tO4tJOY1Wnlo8=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/49eca50b-5722-4918-8314-859d3c1f55a2/0/295131167768CC78482F796BB58CF5A01A014393.crl
                          rsync://repo-rpki.idnic.net/repo/49eca50b-5722-4918-8314-859d3c1f55a2/0/295131167768CC78482F796BB58CF5A01A014393.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/295131167768CC78482F796BB58CF5A01A014393.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 21 Dec 2025 00:46:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:75:7c:fd:2b:00:60:34:b6:fd:b2:d9:6a:15:73:94:c7:13:06:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=295131167768CC78482F796BB58CF5A01A014393
        Validity
            Not Before: Dec 17 17:56:31 2025 GMT
            Not After : Dec 21 00:46:31 2025 GMT
        Subject: CN=A60B8AA6B9409F572609FF68D48ECA3CCC3F171F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:0b:a7:7f:93:74:57:57:8f:fb:59:e6:4d:0d:
                    56:5e:4b:12:ac:cb:28:9c:14:d9:54:25:75:f6:df:
                    3b:cf:d6:28:63:ca:8e:54:13:c8:7d:01:90:48:79:
                    7d:b3:22:79:f0:dc:f7:97:2a:5c:7f:cf:cf:42:84:
                    b7:59:1f:81:c6:56:96:3c:af:fd:8e:49:0b:8f:82:
                    80:52:83:74:58:a8:42:dd:b1:ff:89:f8:60:a6:18:
                    d3:ca:00:16:16:ed:ea:54:28:66:0d:ca:f8:8c:c6:
                    dc:41:13:bb:16:b5:c8:e6:49:3f:ba:72:95:1c:9b:
                    77:06:ef:da:29:de:af:4a:04:e4:48:65:2d:fb:2b:
                    9b:75:7a:ab:54:89:1d:e9:a2:74:a5:13:87:3e:4a:
                    c0:20:d3:df:a6:ad:de:74:2f:41:4d:67:eb:89:6e:
                    6b:92:a2:ae:f9:d5:28:fb:0c:4d:d1:1b:82:3d:19:
                    f1:6b:b1:9c:97:fe:5e:e4:67:a9:59:7a:30:3b:47:
                    cf:6a:dc:de:d1:84:6c:d2:13:d9:d8:66:52:80:38:
                    04:71:3f:9d:41:11:a8:f3:5f:c4:97:87:8e:00:4a:
                    f3:54:14:0f:1e:d1:21:b0:30:78:7e:cb:74:6c:86:
                    9a:b7:bc:31:49:77:92:09:1c:79:5a:3a:e6:20:11:
                    b9:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:0B:8A:A6:B9:40:9F:57:26:09:FF:68:D4:8E:CA:3C:CC:3F:17:1F
            X509v3 Authority Key Identifier:
                keyid:29:51:31:16:77:68:CC:78:48:2F:79:6B:B5:8C:F5:A0:1A:01:43:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/49eca50b-5722-4918-8314-859d3c1f55a2/0/295131167768CC78482F796BB58CF5A01A014393.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/295131167768CC78482F796BB58CF5A01A014393.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/49eca50b-5722-4918-8314-859d3c1f55a2/0/295131167768CC78482F796BB58CF5A01A014393.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:a6:35:e7:b9:8d:5d:4f:a1:f9:45:14:19:3c:5d:3a:43:9d:
         07:08:19:ed:7d:f6:48:e2:68:f2:64:73:11:87:52:e4:ae:8a:
         42:b8:ae:db:3a:d4:2d:55:fb:38:b5:62:27:f5:68:ce:4f:83:
         0d:2c:99:23:62:a0:66:d2:63:d1:a9:19:7c:39:45:c3:58:6a:
         87:aa:e2:df:dd:75:e6:bf:49:fc:69:a2:16:16:d3:1e:15:ee:
         95:12:e4:37:39:ce:59:58:8a:f4:86:a7:13:99:8e:e1:22:8a:
         5d:ad:4c:5a:47:3a:28:8b:5b:c2:b1:c6:c4:ae:33:db:5f:74:
         d4:3f:73:39:2a:0d:61:a7:8b:21:e1:ad:0a:8f:b8:8b:3c:18:
         78:bb:10:16:bd:05:69:5c:c7:90:a1:a8:87:46:85:0f:8b:66:
         03:47:19:6c:c5:af:2e:d0:2a:b6:d0:98:d7:d7:50:52:14:15:
         b0:53:bc:3a:de:b1:d1:62:33:85:74:72:9e:46:68:46:c6:6f:
         0c:50:22:43:76:3a:e4:60:81:f9:78:41:56:e8:19:ee:be:31:
         64:58:14:5c:cc:34:0b:f7:91:98:7f:b2:5d:67:a2:e5:d1:93:
         70:a9:cd:a0:92:08:9d:25:5c:ac:66:ae:b1:78:df:85:af:89:
         41:94:dc:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 19:55:40 2025 by rpki-client