This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/74bf07cf-50a9-428a-90d2-d44d6b762b55/0/E1F7E739D5E92CEFAAF8DB4FDE24B402DF2F5F12.mft
File:                     E1F7E739D5E92CEFAAF8DB4FDE24B402DF2F5F12.mft (raw, json)
Hash identifier:          r5KDSAmhw+rJPBmgdNwW8DuHccID/BUaFStxVoxvgoo=
Subject key identifier:   B6:FC:AD:EC:51:C5:8A:34:A8:7A:5A:B7:BE:65:28:A4:EA:3F:DE:6E
Authority key identifier: E1:F7:E7:39:D5:E9:2C:EF:AA:F8:DB:4F:DE:24:B4:02:DF:2F:5F:12
Certificate issuer:       /CN=E1F7E739D5E92CEFAAF8DB4FDE24B402DF2F5F12
Certificate serial:       6BF9E14520DF4E9FC329E13177EDAE25599115FE
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E1F7E739D5E92CEFAAF8DB4FDE24B402DF2F5F12.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/74bf07cf-50a9-428a-90d2-d44d6b762b55/0/E1F7E739D5E92CEFAAF8DB4FDE24B402DF2F5F12.mft
Manifest number:          01BC
Signing time:             Fri 19 Dec 2025 09:10:57 +0000
Manifest this update:     Fri 19 Dec 2025 09:05:57 +0000
Manifest next update:     Mon 22 Dec 2025 13:49:57 +0000
Files and hashes:         1: 3130332e3131302e33352e302f32342d3234203d3e203438343635.roa (hash: t5FEbOLpmmiM+pm5xNk45bS+68qbBIUF8y4AW5jVQqc=)
                          2: 3130332e3131302e33342e302f32332d3234203d3e20313530393336.roa (hash: 2f4uu7IrkIZq7UTq+ptH1NLF5HW0iMlWBn9DqvPnp4U=)
                          3: 3130332e3131302e33352e302f32342d3234203d3e20313530393336.roa (hash: uQLjUBISMtz6q/VlBRFK79+EJlW80V1U4JVUQySqyvM=)
                          4: 3130332e3131302e33342e302f32342d3234203d3e20313530393336.roa (hash: CzAMVi4LI/hA4dEq+gFLf1t2OAe5Bjc5LnZkwOWw6KQ=)
                          5: E1F7E739D5E92CEFAAF8DB4FDE24B402DF2F5F12.crl (hash: IjLBaiz/34A+/UKebMwqfsQHrTtRe9NZIc0Rh7fxems=)
                          6: 3130332e3131302e33342e302f32342d3234203d3e203438343635.roa (hash: PfXBdlYDWEtVezNTe8gChl6D2vjrU0fVmVCcz01D0ac=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/74bf07cf-50a9-428a-90d2-d44d6b762b55/0/E1F7E739D5E92CEFAAF8DB4FDE24B402DF2F5F12.crl
                          rsync://repo-rpki.idnic.net/repo/74bf07cf-50a9-428a-90d2-d44d6b762b55/0/E1F7E739D5E92CEFAAF8DB4FDE24B402DF2F5F12.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E1F7E739D5E92CEFAAF8DB4FDE24B402DF2F5F12.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 22 Dec 2025 13:49:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:f9:e1:45:20:df:4e:9f:c3:29:e1:31:77:ed:ae:25:59:91:15:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E1F7E739D5E92CEFAAF8DB4FDE24B402DF2F5F12
        Validity
            Not Before: Dec 19 09:05:57 2025 GMT
            Not After : Dec 22 13:49:57 2025 GMT
        Subject: CN=B6FCADEC51C58A34A87A5AB7BE6528A4EA3FDE6E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:12:f3:2c:24:e9:cb:5a:ec:e7:34:02:3a:32:
                    64:b3:37:ab:11:8d:eb:38:43:f3:1c:11:e2:ca:71:
                    d8:29:70:16:63:60:07:40:83:5d:19:33:b5:a2:ed:
                    d9:23:50:44:10:d3:d1:63:8a:be:28:f1:80:ce:0a:
                    9e:34:c2:17:73:fc:cc:5d:4f:bc:01:1f:19:f0:0b:
                    0d:d1:1c:ee:a1:ce:ed:2f:7f:1f:81:66:fe:62:6d:
                    e6:f2:f7:47:f1:60:31:34:95:90:be:ef:22:de:21:
                    e0:c8:3f:e3:89:df:a7:0a:43:81:84:32:ae:f8:aa:
                    10:f7:c6:d4:d7:55:16:d4:52:c1:91:e3:5c:0b:a7:
                    f8:1b:59:d9:67:39:4d:f9:3b:9a:72:08:87:8e:1c:
                    8a:a1:79:25:39:1d:65:bb:07:c1:d5:83:57:1a:71:
                    58:f8:c3:08:97:ef:66:da:2e:67:05:28:55:fe:1b:
                    52:80:0e:ad:86:53:48:48:5f:34:6e:d0:7a:a5:93:
                    78:98:9c:56:f2:26:cd:2d:e9:aa:e8:8a:02:e3:c5:
                    99:16:29:7c:8a:05:10:3a:e2:0c:aa:81:93:5b:d0:
                    8e:da:28:1b:3f:2d:f7:70:8f:07:1c:d6:ac:42:9d:
                    35:08:fc:e4:bc:68:3c:3a:8c:05:d9:2e:95:35:8e:
                    96:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:FC:AD:EC:51:C5:8A:34:A8:7A:5A:B7:BE:65:28:A4:EA:3F:DE:6E
            X509v3 Authority Key Identifier:
                keyid:E1:F7:E7:39:D5:E9:2C:EF:AA:F8:DB:4F:DE:24:B4:02:DF:2F:5F:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/74bf07cf-50a9-428a-90d2-d44d6b762b55/0/E1F7E739D5E92CEFAAF8DB4FDE24B402DF2F5F12.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E1F7E739D5E92CEFAAF8DB4FDE24B402DF2F5F12.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/74bf07cf-50a9-428a-90d2-d44d6b762b55/0/E1F7E739D5E92CEFAAF8DB4FDE24B402DF2F5F12.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c3:7e:28:5b:5a:68:9f:c1:70:f4:bd:20:b4:3d:61:1a:b1:1a:
         f4:31:07:d0:e9:d4:ee:05:a2:1d:bb:41:2e:96:36:f4:f6:75:
         8f:46:99:58:0b:b4:ca:6b:9a:95:b8:35:a1:bf:0f:7d:cd:a8:
         43:44:b3:eb:e9:1e:32:c0:9e:b0:89:a5:1c:e1:df:5c:d3:08:
         77:3d:c2:87:6a:d8:97:ed:b2:39:37:4a:d4:b0:18:be:9a:79:
         92:bb:0a:27:9f:5e:6f:53:31:cb:32:43:4d:5a:fa:32:19:aa:
         5e:95:c3:b3:82:da:0d:71:cb:9e:f2:73:ec:22:ef:42:41:ae:
         e6:a7:59:a2:79:b6:7c:ba:f8:e8:80:6d:2c:72:46:d4:44:91:
         5c:69:de:f8:f8:ca:04:88:75:a1:9a:2e:1a:be:2b:23:3e:5b:
         15:f9:80:5a:4a:d1:0b:7d:d3:0b:00:17:99:9f:78:3b:35:80:
         a0:e1:0f:4c:b6:a8:71:86:58:19:45:9b:8d:cf:d4:ab:1c:63:
         ee:e6:76:20:f2:d6:30:7b:60:5d:f8:9a:c6:0b:be:53:23:0d:
         6e:3c:4d:46:05:ef:8b:94:b3:a4:80:36:85:b2:7c:17:2b:f2:
         2a:f7:77:63:94:0c:f0:43:3b:2e:c4:a3:6f:a0:96:05:a2:d0:
         57:ce:9c:95
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUa/nhRSDfTp/DKeExd+2uJVmRFf4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTFGN0U3MzlENUU5MkNFRkFBRjhEQjRGREUyNEI0MDJE
RjJGNUYxMjAeFw0yNTEyMTkwOTA1NTdaFw0yNTEyMjIxMzQ5NTdaMDMxMTAvBgNV
BAMTKEI2RkNBREVDNTFDNThBMzRBODdBNUFCN0JFNjUyOEE0RUEzRkRFNkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD2EvMsJOnLWuznNAI6MmSzN6sR
jes4Q/McEeLKcdgpcBZjYAdAg10ZM7Wi7dkjUEQQ09Fjir4o8YDOCp40whdz/Mxd
T7wBHxnwCw3RHO6hzu0vfx+BZv5ibeby90fxYDE0lZC+7yLeIeDIP+OJ36cKQ4GE
Mq74qhD3xtTXVRbUUsGR41wLp/gbWdlnOU35O5pyCIeOHIqheSU5HWW7B8HVg1ca
cVj4wwiX72baLmcFKFX+G1KADq2GU0hIXzRu0Hqlk3iYnFbyJs0t6aroigLjxZkW
KXyKBRA64gyqgZNb0I7aKBs/Lfdwjwcc1qxCnTUI/OS8aDw6jAXZLpU1jpZbAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUtvyt7FHFijSoelq3vmUopOo/3m4wHwYDVR0j
BBgwFoAU4ffnOdXpLO+q+NtP3iS0At8vXxIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83
NGJmMDdjZi01MGE5LTQyOGEtOTBkMi1kNDRkNmI3NjJiNTUvMC9FMUY3RTczOUQ1
RTkyQ0VGQUFGOERCNEZERTI0QjQwMkRGMkY1RjEyLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvRTFGN0U3MzlENUU5MkNFRkFBRjhEQjRGREUyNEI0MDJERjJG
NUYxMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzRiZjA3Y2YtNTBhOS00MjhhLTkw
ZDItZDQ0ZDZiNzYyYjU1LzAvRTFGN0U3MzlENUU5MkNFRkFBRjhEQjRGREUyNEI0
MDJERjJGNUYxMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAMN+KFtaaJ/BcPS9ILQ9YRqxGvQxB9Dp1O4F
oh27QS6WNvT2dY9GmVgLtMprmpW4NaG/D33NqENEs+vpHjLAnrCJpRzh31zTCHc9
wodq2Jftsjk3StSwGL6aeZK7CiefXm9TMcsyQ01a+jIZql6Vw7OC2g1xy57yc+wi
70JBruanWaJ5tny6+OiAbSxyRtREkVxp3vj4ygSIdaGaLhq+KyM+WxX5gFpK0Qt9
0wsAF5mfeDs1gKDhD0y2qHGGWBlFm43P1KscY+7mdiDy1jB7YF34msYLvlMjDW48
TUYF74uUs6SANoWyfBcr8ir3d2OUDPBDOy7Eo2+glgWi0FfOnJU=
-----END CERTIFICATE-----
Generated at Sat Dec 20 08:05:35 2025 by rpki-client