This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/53de5035-84e1-44c6-9cf9-4ea0bbaa093f/0/E74A2346929DE84143E5DF0DD921764C285B01A2.mft
File:                     E74A2346929DE84143E5DF0DD921764C285B01A2.mft (raw, json)
Hash identifier:          qDJpgHK15YV+JB9gUvkdx0mI24N35lJjNM9M4/3P8wQ=
Subject key identifier:   B0:40:1E:4A:E7:F4:37:C4:03:D8:E4:95:EA:B6:BC:DE:55:46:7A:3B
Authority key identifier: E7:4A:23:46:92:9D:E8:41:43:E5:DF:0D:D9:21:76:4C:28:5B:01:A2
Certificate issuer:       /CN=E74A2346929DE84143E5DF0DD921764C285B01A2
Certificate serial:       45637295567437311A4D2F266BA174CE393D1F31
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E74A2346929DE84143E5DF0DD921764C285B01A2.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/53de5035-84e1-44c6-9cf9-4ea0bbaa093f/0/E74A2346929DE84143E5DF0DD921764C285B01A2.mft
Manifest number:          E0
Signing time:             Wed 17 Dec 2025 13:01:21 +0000
Manifest this update:     Wed 17 Dec 2025 12:56:21 +0000
Manifest next update:     Sat 20 Dec 2025 16:40:21 +0000
Files and hashes:         1: E74A2346929DE84143E5DF0DD921764C285B01A2.crl (hash: hNdZ7+vZZ4/BzDc8vHR5mqRM7VW8vwM2OyKhsRhO2ts=)
                          2: 3130332e3131302e3130302e302f32332d3233203d3e20313530393337.roa (hash: QWlvcWw+MqtfsyLo2e2j057MAyn4Zw7MQ10D6boTyYA=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/53de5035-84e1-44c6-9cf9-4ea0bbaa093f/0/E74A2346929DE84143E5DF0DD921764C285B01A2.crl
                          rsync://repo-rpki.idnic.net/repo/53de5035-84e1-44c6-9cf9-4ea0bbaa093f/0/E74A2346929DE84143E5DF0DD921764C285B01A2.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E74A2346929DE84143E5DF0DD921764C285B01A2.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Dec 2025 16:40:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:63:72:95:56:74:37:31:1a:4d:2f:26:6b:a1:74:ce:39:3d:1f:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E74A2346929DE84143E5DF0DD921764C285B01A2
        Validity
            Not Before: Dec 17 12:56:21 2025 GMT
            Not After : Dec 20 16:40:21 2025 GMT
        Subject: CN=B0401E4AE7F437C403D8E495EAB6BCDE55467A3B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:01:87:36:75:e7:0e:c2:2f:75:60:23:b1:e1:
                    ae:79:97:5e:5c:1e:e1:23:21:9f:e2:21:52:c5:7d:
                    54:23:c0:eb:45:46:87:d2:dd:e8:56:88:b6:71:69:
                    8b:68:b7:21:2c:b4:f3:ad:1c:43:1b:d2:b2:f5:9b:
                    08:c0:57:3a:78:6a:86:fc:51:4a:1f:52:b4:6e:53:
                    46:99:d8:27:41:7f:10:0c:8f:14:e9:dd:8d:f2:50:
                    d5:b5:cb:53:cb:fa:74:54:80:23:7f:fc:eb:0b:c9:
                    4a:23:b2:94:63:7b:3d:18:c8:72:a2:f7:ec:f8:77:
                    28:26:1d:08:ff:74:55:76:d8:7e:75:18:4f:86:d1:
                    d8:0b:26:4b:03:49:97:75:b4:12:98:8f:15:23:e2:
                    87:52:77:4a:3d:91:28:73:6a:5e:67:fe:fa:4b:ce:
                    ff:fe:a4:ca:e5:11:53:fd:42:bd:9e:f6:cc:ed:fb:
                    7d:fd:8a:b7:8a:d1:47:dd:86:18:37:e7:d7:b4:56:
                    e3:b6:7f:44:27:34:45:cb:c5:51:eb:50:fb:9e:b5:
                    f7:e2:7e:5d:52:d4:f3:fc:5f:2d:76:42:fe:b1:25:
                    ab:c5:1b:93:20:aa:b7:50:e8:6f:7d:13:f8:80:2d:
                    89:34:e3:f9:cb:3b:52:e6:bb:cb:f5:c0:00:e9:06:
                    a2:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:40:1E:4A:E7:F4:37:C4:03:D8:E4:95:EA:B6:BC:DE:55:46:7A:3B
            X509v3 Authority Key Identifier:
                keyid:E7:4A:23:46:92:9D:E8:41:43:E5:DF:0D:D9:21:76:4C:28:5B:01:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/53de5035-84e1-44c6-9cf9-4ea0bbaa093f/0/E74A2346929DE84143E5DF0DD921764C285B01A2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E74A2346929DE84143E5DF0DD921764C285B01A2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/53de5035-84e1-44c6-9cf9-4ea0bbaa093f/0/E74A2346929DE84143E5DF0DD921764C285B01A2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:54:32:e4:88:d0:87:b3:ca:81:be:f9:c9:bb:94:77:3e:e7:
         69:5b:14:46:44:a2:aa:b8:1f:42:f9:0f:c6:02:09:02:7a:46:
         b1:20:d0:df:ba:d5:d5:92:b8:a4:dc:a3:0a:9e:29:ed:97:96:
         43:ce:c6:81:40:3a:d9:4c:f5:bc:98:ab:2d:26:5c:71:dd:ff:
         7b:56:e1:3a:d6:67:54:bb:78:5e:40:6e:e8:3c:73:85:fc:90:
         7d:eb:de:b2:ee:49:18:78:35:6e:cf:bf:2d:1a:41:48:84:77:
         58:e9:4f:60:5d:3e:df:78:5d:c8:aa:1e:50:29:46:6c:80:a0:
         22:8d:0b:42:eb:c6:e0:12:07:0e:38:33:de:16:3b:dd:cc:e3:
         f5:c1:76:0e:67:3e:1d:05:7f:64:62:a3:47:d3:38:ed:da:41:
         9e:66:3d:5a:18:ed:0c:45:45:1b:c3:72:d6:87:d6:5a:5e:70:
         8c:77:04:4c:f0:a6:a5:97:24:c9:96:df:04:8f:9c:74:65:19:
         51:0d:04:d5:6a:75:f1:9c:25:8b:d6:3e:aa:82:d7:23:3d:96:
         1b:ad:b4:21:c6:92:2c:d8:e2:9c:58:95:04:32:f4:cd:bb:1f:
         44:75:db:68:14:52:86:59:7f:ac:24:ff:42:93:22:6d:1d:47:
         78:a9:8f:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 14:35:13 2025 by rpki-client