This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/66b87feb-0fe2-418a-a37a-be3dd1f0e63c/0/E9F7A0AA6DCCA1FF7D3D61460D5534A004AB2C61.mft
File:                     E9F7A0AA6DCCA1FF7D3D61460D5534A004AB2C61.mft (raw, json)
Hash identifier:          C24hQnC2zlLSrgLuhwHGsyd2DqKcrO1VtB5UOicS2Ew=
Subject key identifier:   BB:41:B0:A8:5E:F3:6F:5A:66:72:D7:C7:E7:89:C0:2B:7A:A4:AB:2A
Authority key identifier: E9:F7:A0:AA:6D:CC:A1:FF:7D:3D:61:46:0D:55:34:A0:04:AB:2C:61
Certificate issuer:       /CN=E9F7A0AA6DCCA1FF7D3D61460D5534A004AB2C61
Certificate serial:       53E79969B0BCFCC30472E22430E2C5769735DD08
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E9F7A0AA6DCCA1FF7D3D61460D5534A004AB2C61.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/66b87feb-0fe2-418a-a37a-be3dd1f0e63c/0/E9F7A0AA6DCCA1FF7D3D61460D5534A004AB2C61.mft
Manifest number:          0530
Signing time:             Thu 18 Dec 2025 06:31:47 +0000
Manifest this update:     Thu 18 Dec 2025 06:26:47 +0000
Manifest next update:     Sun 21 Dec 2025 15:40:47 +0000
Files and hashes:         1: 3138332e38312e3135322e302f32312d3234203d3e203234353237.roa (hash: HrGCjeL9LpaajCgOCMCFmtzXiHgvf2onAjSq9sq+a5M=)
                          2: E9F7A0AA6DCCA1FF7D3D61460D5534A004AB2C61.crl (hash: 1NlgVciaxNTlFoaZmCZ6+UK0syXYUqFxJgaUNJLfnqk=)
                          3: 323430353a366334303a3a2f33322d3438203d3e203234353237.roa (hash: sdUNTLR9jp0dwpPELDIKx4SufivRxg0Tg+/QbjfBOQs=)
                          4: 3130332e3134382e34362e302f32332d3234203d3e203234353237.roa (hash: eQEzsyxVfpTHgHfaMJEWpEAU8ae5FhvdVXRN2kONR8w=)
                          5: 3230332e3136302e35362e302f32312d3234203d3e203234353237.roa (hash: P99HVIzqHVCWDBqJ4r8v17rUky9V8VmAdjN3/2RrLPI=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/66b87feb-0fe2-418a-a37a-be3dd1f0e63c/0/E9F7A0AA6DCCA1FF7D3D61460D5534A004AB2C61.crl
                          rsync://repo-rpki.idnic.net/repo/66b87feb-0fe2-418a-a37a-be3dd1f0e63c/0/E9F7A0AA6DCCA1FF7D3D61460D5534A004AB2C61.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E9F7A0AA6DCCA1FF7D3D61460D5534A004AB2C61.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 21 Dec 2025 15:40:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:e7:99:69:b0:bc:fc:c3:04:72:e2:24:30:e2:c5:76:97:35:dd:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E9F7A0AA6DCCA1FF7D3D61460D5534A004AB2C61
        Validity
            Not Before: Dec 18 06:26:47 2025 GMT
            Not After : Dec 21 15:40:47 2025 GMT
        Subject: CN=BB41B0A85EF36F5A6672D7C7E789C02B7AA4AB2A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:df:0f:90:81:31:e2:5f:c0:e7:69:ae:96:58:
                    df:4d:68:77:33:0b:38:86:20:c5:f2:28:a9:ed:f2:
                    36:ee:dc:44:b9:76:b7:46:3e:ee:6e:2c:3a:4e:93:
                    a8:fc:e5:a1:49:c1:8c:04:f7:af:76:bd:5f:b1:20:
                    6b:d2:4e:d3:af:67:77:b4:a2:c8:fc:67:ca:e8:48:
                    b0:13:6e:0c:3b:21:c6:06:6a:9d:35:8c:ea:b7:86:
                    02:26:ae:1c:1d:88:9f:2e:c0:ea:e1:7c:97:ea:8b:
                    a1:ba:de:05:89:f6:01:fb:39:9f:87:2b:65:c1:1d:
                    b2:b2:73:a4:5d:ac:9b:e5:32:3a:0e:72:ab:d6:bd:
                    15:cc:52:6e:f8:46:0a:81:4a:fa:a3:39:c2:f8:5e:
                    c2:2c:61:05:3a:70:b6:9e:72:4e:ee:bc:62:b9:c1:
                    fa:b6:b6:56:1d:23:3d:d8:44:52:ca:08:24:6e:19:
                    ef:15:29:a4:24:2e:7b:f3:8e:d4:1a:c7:86:b8:ce:
                    63:5a:b2:73:d6:af:66:20:ed:09:6d:6b:dd:6e:94:
                    d0:72:f9:c5:83:b8:07:dc:82:3d:d7:2e:54:8a:7b:
                    b2:e9:f0:a0:70:c1:87:97:ff:2c:dc:00:13:6b:3a:
                    c4:75:13:b2:2f:2b:6b:63:49:9b:99:65:a7:c2:cf:
                    9f:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:41:B0:A8:5E:F3:6F:5A:66:72:D7:C7:E7:89:C0:2B:7A:A4:AB:2A
            X509v3 Authority Key Identifier:
                keyid:E9:F7:A0:AA:6D:CC:A1:FF:7D:3D:61:46:0D:55:34:A0:04:AB:2C:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/66b87feb-0fe2-418a-a37a-be3dd1f0e63c/0/E9F7A0AA6DCCA1FF7D3D61460D5534A004AB2C61.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E9F7A0AA6DCCA1FF7D3D61460D5534A004AB2C61.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/66b87feb-0fe2-418a-a37a-be3dd1f0e63c/0/E9F7A0AA6DCCA1FF7D3D61460D5534A004AB2C61.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:3c:18:b7:ad:11:0f:8e:b0:6e:13:64:6e:80:2b:b2:dc:8b:
         01:f9:2b:2a:2f:18:0a:a3:07:c9:52:bd:d1:af:3c:09:81:4f:
         ea:8c:e8:b1:88:cd:61:98:a8:f2:40:60:ed:d3:fa:6b:eb:83:
         8c:22:b8:f8:de:21:45:22:53:25:b0:1d:60:55:c2:70:82:8c:
         cc:7d:81:06:ca:d4:f1:0c:f9:5c:b0:77:b3:d9:e1:03:ec:95:
         c1:4f:0f:9b:02:f8:1d:9f:7f:0e:e6:55:fe:8e:22:2b:dd:0e:
         f9:90:c9:76:29:6a:bc:50:50:77:ee:ac:5c:17:ec:fd:42:7b:
         10:f3:36:fd:f2:3f:db:f4:53:d0:2b:13:89:79:43:40:e8:04:
         37:c6:5d:34:b1:a7:75:20:11:69:0a:57:1d:fd:f5:1c:cb:fe:
         be:31:05:5b:ff:28:41:4c:23:c1:fa:3f:0f:85:7a:83:80:ad:
         07:69:2f:bc:94:f2:32:57:6c:32:66:1f:fc:46:0e:f8:8b:38:
         a8:e4:e2:f9:bc:9e:27:26:72:43:e2:64:dd:d1:e8:e4:3c:fd:
         5e:9c:66:90:7a:6f:aa:83:68:6f:05:5c:14:cc:85:33:cc:5c:
         a3:9e:4c:50:56:f4:7a:81:fb:87:7e:bd:7e:de:4e:f5:d8:74:
         53:b5:56:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 11:18:14 2025 by rpki-client