This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/63c8f4d7-e4b3-4b41-a685-514940fec819/0/E01F80F5B6C41210CA0370AEEFC9794EF0F0644A.mft
File:                     E01F80F5B6C41210CA0370AEEFC9794EF0F0644A.mft (raw, json)
Hash identifier:          JGYLbfO4JqaPwPeR+j/4Vx8uXGObhYjm0OrlZhUFMBI=
Subject key identifier:   2A:E6:02:95:D3:91:FD:AE:82:A5:18:3D:99:C0:35:25:6E:92:EF:B1
Authority key identifier: E0:1F:80:F5:B6:C4:12:10:CA:03:70:AE:EF:C9:79:4E:F0:F0:64:4A
Certificate issuer:       /CN=E01F80F5B6C41210CA0370AEEFC9794EF0F0644A
Certificate serial:       43AF3570B108800FB86B699AF2E2BAF3FB694476
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E01F80F5B6C41210CA0370AEEFC9794EF0F0644A.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/63c8f4d7-e4b3-4b41-a685-514940fec819/0/E01F80F5B6C41210CA0370AEEFC9794EF0F0644A.mft
Manifest number:          050D
Signing time:             Tue 23 Dec 2025 02:20:01 +0000
Manifest this update:     Tue 23 Dec 2025 02:15:01 +0000
Manifest next update:     Fri 26 Dec 2025 13:28:01 +0000
Files and hashes:         1: 3130332e37332e37362e302f32342d3234203d3e20313335343734.roa (hash: 5Ndlq/+1JhO5LRCuBGurul0wd0jOL8PkLP0IS65Rxjc=)
                          2: 3130332e37332e37372e302f32342d3234203d3e20313335343734.roa (hash: /pWCYTDigUVssgWBr2vt+99KFCUmi9P1Av9eMKxPKMw=)
                          3: 3130332e37332e37382e302f32342d3234203d3e20313335343734.roa (hash: /+qgUP1FzBqyIlX852+AoUrW1x1q8UQGT+rmfMidTQ8=)
                          4: 323430363a663138303a3a2f33322d3332203d3e20313335343734.roa (hash: 44GqV7+aifA6Y8Xw0PSqLbP9VTgKoGRYNbouCHxnZKc=)
                          5: E01F80F5B6C41210CA0370AEEFC9794EF0F0644A.crl (hash: Q1T3iXybA3v9WruyEtSmE7jEJxjJcNJsqZeKHwXokdM=)
                          6: 3130332e37332e37392e302f32342d3234203d3e20313335343734.roa (hash: 92vwgErRdgoZkW+X9kpw27QJGoI5j0NzvIHXl5PFvNM=)
                          7: 323430363a663138303a31303a3a2f34382d3438203d3e20313335343734.roa (hash: rUQSiT3dkKPXkOBoezZqlfXKo+zy3zNzDxs4QPbn2Js=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/63c8f4d7-e4b3-4b41-a685-514940fec819/0/E01F80F5B6C41210CA0370AEEFC9794EF0F0644A.crl
                          rsync://repo-rpki.idnic.net/repo/63c8f4d7-e4b3-4b41-a685-514940fec819/0/E01F80F5B6C41210CA0370AEEFC9794EF0F0644A.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E01F80F5B6C41210CA0370AEEFC9794EF0F0644A.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 26 Dec 2025 13:28:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:af:35:70:b1:08:80:0f:b8:6b:69:9a:f2:e2:ba:f3:fb:69:44:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E01F80F5B6C41210CA0370AEEFC9794EF0F0644A
        Validity
            Not Before: Dec 23 02:15:01 2025 GMT
            Not After : Dec 26 13:28:01 2025 GMT
        Subject: CN=2AE60295D391FDAE82A5183D99C035256E92EFB1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:06:fd:53:93:3b:a2:bf:63:16:13:e9:cd:3f:
                    c6:94:49:87:f6:69:70:81:19:87:e5:cd:7e:bb:1b:
                    b7:b4:91:31:f1:1f:1e:b6:23:ed:4e:7e:90:6b:e4:
                    df:e5:5e:0a:ac:d7:30:8f:f7:5b:89:32:fa:2b:b0:
                    4c:20:59:e3:ee:47:0d:15:a2:97:6b:7d:c7:a7:81:
                    e3:cc:95:fe:d0:d4:1c:ed:60:a5:9b:00:5e:7a:bf:
                    a7:a1:c8:c1:91:21:45:0e:00:72:b0:57:36:18:18:
                    55:63:27:35:ef:55:42:de:68:58:e1:84:6f:73:ac:
                    d8:e7:f6:4e:58:ec:37:56:2b:d0:47:f0:31:e5:b6:
                    d8:b5:6f:50:d0:74:4d:40:59:bc:0d:33:92:c8:3c:
                    11:20:1d:17:d7:a3:75:46:36:7b:a4:a1:60:b0:07:
                    66:d2:17:2e:00:ad:56:67:59:ff:cb:08:fa:40:5e:
                    c2:d6:4e:90:51:dc:9d:9d:db:e2:08:ae:6a:38:f3:
                    b0:51:11:ea:91:ce:26:3f:2a:d0:eb:b6:be:08:2b:
                    85:ad:a6:7a:9a:b4:e2:23:2e:25:6a:49:a4:07:b8:
                    d6:7c:88:b1:f3:fd:79:45:5e:9e:4e:87:76:6d:11:
                    b3:6d:ad:ff:e6:d1:70:30:e5:ad:d1:b7:38:d8:9e:
                    86:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:E6:02:95:D3:91:FD:AE:82:A5:18:3D:99:C0:35:25:6E:92:EF:B1
            X509v3 Authority Key Identifier:
                keyid:E0:1F:80:F5:B6:C4:12:10:CA:03:70:AE:EF:C9:79:4E:F0:F0:64:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/63c8f4d7-e4b3-4b41-a685-514940fec819/0/E01F80F5B6C41210CA0370AEEFC9794EF0F0644A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E01F80F5B6C41210CA0370AEEFC9794EF0F0644A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/63c8f4d7-e4b3-4b41-a685-514940fec819/0/E01F80F5B6C41210CA0370AEEFC9794EF0F0644A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c6:77:3f:e6:b2:8b:8b:75:4e:4f:a7:d3:c2:67:cf:e9:74:de:
         ec:1a:9a:f1:6d:b0:35:7c:88:ff:c7:17:23:cf:c6:64:ac:3d:
         34:bd:19:ce:22:24:cb:f3:69:48:c0:29:30:c0:96:1d:14:63:
         5a:06:32:cf:89:1a:28:e9:89:2e:42:8d:cb:8f:a5:2e:8a:f4:
         6c:5e:14:52:7e:f5:3d:e1:43:a2:46:f3:44:f7:49:40:90:c6:
         88:4d:cb:89:9b:f6:cf:f1:91:fc:c6:9a:cc:3f:fe:e4:c5:15:
         50:51:e8:7a:f8:39:c5:50:57:54:a7:c8:74:8b:24:e3:22:e9:
         54:87:40:42:29:a2:0f:f3:ce:4a:fe:9f:f4:1a:b6:36:2c:44:
         6f:49:ec:07:75:ba:70:a1:a6:b4:c7:7c:ce:58:6c:56:3e:40:
         4f:2e:88:f5:0e:ef:9d:6e:64:ee:87:1e:5d:33:ce:2f:f6:eb:
         d7:69:2b:a1:f1:d1:37:93:60:a0:76:b7:4b:2a:d2:fb:05:e6:
         e1:7a:d6:1f:18:27:65:5c:87:af:8f:8c:a3:72:ec:d7:58:b8:
         99:41:44:e8:7b:5a:c8:b3:b2:31:e4:91:07:b3:98:db:e2:c0:
         f4:de:9a:9e:9a:1f:45:e9:5c:87:3a:1e:0f:71:42:79:f9:51:
         b8:52:fa:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 16:40:24 2025 by rpki-client