This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/63c8f4d7-e4b3-4b41-a685-514940fec819/0/E01F80F5B6C41210CA0370AEEFC9794EF0F0644A.mft
File:                     E01F80F5B6C41210CA0370AEEFC9794EF0F0644A.mft (raw, json)
Hash identifier:          ChHOSEtaThXm/SDlcLhi6yxAD1MsdBAWuclCZC6ydCE=
Subject key identifier:   A3:75:7B:6B:FB:DE:BF:61:20:79:95:0A:57:5E:9F:EF:4F:65:A9:27
Authority key identifier: E0:1F:80:F5:B6:C4:12:10:CA:03:70:AE:EF:C9:79:4E:F0:F0:64:4A
Certificate issuer:       /CN=E01F80F5B6C41210CA0370AEEFC9794EF0F0644A
Certificate serial:       58D6A3D17E22176A5A644BA543E80F9ADE015C84
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E01F80F5B6C41210CA0370AEEFC9794EF0F0644A.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/63c8f4d7-e4b3-4b41-a685-514940fec819/0/E01F80F5B6C41210CA0370AEEFC9794EF0F0644A.mft
Manifest number:          050C
Signing time:             Sun 21 Dec 2025 01:50:01 +0000
Manifest this update:     Sun 21 Dec 2025 01:45:01 +0000
Manifest next update:     Wed 24 Dec 2025 02:20:01 +0000
Files and hashes:         1: 323430363a663138303a3a2f33322d3332203d3e20313335343734.roa (hash: 44GqV7+aifA6Y8Xw0PSqLbP9VTgKoGRYNbouCHxnZKc=)
                          2: 3130332e37332e37372e302f32342d3234203d3e20313335343734.roa (hash: /pWCYTDigUVssgWBr2vt+99KFCUmi9P1Av9eMKxPKMw=)
                          3: 323430363a663138303a31303a3a2f34382d3438203d3e20313335343734.roa (hash: rUQSiT3dkKPXkOBoezZqlfXKo+zy3zNzDxs4QPbn2Js=)
                          4: E01F80F5B6C41210CA0370AEEFC9794EF0F0644A.crl (hash: Pi7LLtjRDkWJzYmZaYNwkvC+SC4s198XkEVWUYKxe/s=)
                          5: 3130332e37332e37392e302f32342d3234203d3e20313335343734.roa (hash: 92vwgErRdgoZkW+X9kpw27QJGoI5j0NzvIHXl5PFvNM=)
                          6: 3130332e37332e37382e302f32342d3234203d3e20313335343734.roa (hash: /+qgUP1FzBqyIlX852+AoUrW1x1q8UQGT+rmfMidTQ8=)
                          7: 3130332e37332e37362e302f32342d3234203d3e20313335343734.roa (hash: 5Ndlq/+1JhO5LRCuBGurul0wd0jOL8PkLP0IS65Rxjc=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/63c8f4d7-e4b3-4b41-a685-514940fec819/0/E01F80F5B6C41210CA0370AEEFC9794EF0F0644A.crl
                          rsync://repo-rpki.idnic.net/repo/63c8f4d7-e4b3-4b41-a685-514940fec819/0/E01F80F5B6C41210CA0370AEEFC9794EF0F0644A.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E01F80F5B6C41210CA0370AEEFC9794EF0F0644A.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 24 Dec 2025 02:20:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:d6:a3:d1:7e:22:17:6a:5a:64:4b:a5:43:e8:0f:9a:de:01:5c:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E01F80F5B6C41210CA0370AEEFC9794EF0F0644A
        Validity
            Not Before: Dec 21 01:45:01 2025 GMT
            Not After : Dec 24 02:20:01 2025 GMT
        Subject: CN=A3757B6BFBDEBF612079950A575E9FEF4F65A927
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:b5:2d:47:3d:ca:c4:5b:19:68:e4:f9:cb:1e:
                    0e:fe:27:bb:db:f5:c7:9b:d4:a4:ac:40:af:76:70:
                    6c:a6:6b:24:66:e1:7e:e6:fc:37:13:f0:39:f8:1e:
                    ff:14:3e:fe:93:a6:1b:d4:57:29:bf:e9:f6:2d:47:
                    77:c0:bb:01:8d:cf:e0:95:63:81:dc:ef:5d:79:c2:
                    f2:13:aa:42:be:2e:94:63:77:7f:b3:de:8f:fb:15:
                    b3:39:14:86:44:6f:e8:3d:d9:5b:b7:6f:11:72:b9:
                    e7:12:c6:42:5a:ba:69:87:78:73:6a:25:42:f5:4e:
                    7d:71:b7:2e:72:8c:49:53:c8:93:4f:a9:7d:46:de:
                    58:50:40:af:3a:3d:67:06:b0:1a:b1:a7:88:c3:b4:
                    df:21:e6:fa:9b:b9:54:42:de:12:fc:4d:0f:32:a1:
                    29:fb:69:55:e8:62:ab:af:a6:f2:99:c4:4f:d7:46:
                    7b:cc:3c:b1:99:c8:af:21:a6:9a:7c:56:aa:26:a0:
                    80:86:4d:dd:e6:b4:31:b3:36:e8:e5:eb:ad:db:2c:
                    94:52:09:35:d0:7e:e9:56:c1:fd:a0:f0:72:09:e0:
                    42:2c:9e:56:60:2f:40:91:63:10:ec:6b:66:e7:fb:
                    a4:41:b5:fe:54:85:10:07:33:77:9a:92:8d:3e:ca:
                    5c:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:75:7B:6B:FB:DE:BF:61:20:79:95:0A:57:5E:9F:EF:4F:65:A9:27
            X509v3 Authority Key Identifier:
                keyid:E0:1F:80:F5:B6:C4:12:10:CA:03:70:AE:EF:C9:79:4E:F0:F0:64:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/63c8f4d7-e4b3-4b41-a685-514940fec819/0/E01F80F5B6C41210CA0370AEEFC9794EF0F0644A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E01F80F5B6C41210CA0370AEEFC9794EF0F0644A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/63c8f4d7-e4b3-4b41-a685-514940fec819/0/E01F80F5B6C41210CA0370AEEFC9794EF0F0644A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b7:3a:12:fb:21:d8:ad:80:e1:8c:c9:5f:f5:d1:89:c7:84:e4:
         bb:2c:f2:2e:e8:b4:b7:6c:96:cd:1b:30:74:a1:72:f9:aa:60:
         06:00:8d:cc:09:76:47:8c:de:2e:9e:52:62:5b:b8:69:fa:d1:
         71:4d:57:c8:28:87:c5:c9:85:68:85:f5:da:25:74:da:60:96:
         cd:97:f0:a1:b4:02:04:94:41:95:ee:1c:17:55:0b:ef:17:6a:
         d5:87:45:dc:f0:4b:a5:4f:32:cf:44:73:b4:23:17:bd:d1:8d:
         85:48:70:7e:df:53:d4:38:dd:db:92:fe:1a:ec:57:65:a3:a5:
         42:e0:26:35:59:24:f9:6c:1d:43:ed:6d:0b:f9:1c:e2:b2:cc:
         18:c2:fd:a3:24:64:fa:82:74:60:a4:b7:a1:ef:57:92:f7:b9:
         0e:1b:70:c5:03:57:dd:f4:72:7a:db:b6:6d:17:3a:a3:e9:1c:
         67:a8:bf:52:b5:2f:74:a3:51:55:44:72:df:27:32:04:c9:41:
         7b:fe:c0:40:aa:ba:68:ef:3c:9e:a7:00:75:41:4a:d8:cf:c2:
         6d:1e:06:6f:97:24:8b:64:0e:0d:a8:9f:b7:bd:80:26:ce:ba:
         08:75:1e:27:c3:6e:e9:24:32:d0:f3:9d:87:80:54:ce:8b:22:
         6f:e9:50:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 01:53:01 2025 by rpki-client