This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/912a3f28-8273-4dd5-87fc-1ef00acac9b6/0/E17A5EB94156DE23FCDC8F29B210FCDEDCF08F52.mft
File:                     E17A5EB94156DE23FCDC8F29B210FCDEDCF08F52.mft (raw, json)
Hash identifier:          N+/rJeB3rXFJzXjDadn+wIhRQBLueMf4vhmkthvNslU=
Subject key identifier:   BE:07:52:9A:4F:AE:80:1A:E1:E7:93:A4:FC:AE:36:18:AA:2E:71:5F
Authority key identifier: E1:7A:5E:B9:41:56:DE:23:FC:DC:8F:29:B2:10:FC:DE:DC:F0:8F:52
Certificate issuer:       /CN=E17A5EB94156DE23FCDC8F29B210FCDEDCF08F52
Certificate serial:       278694F7F6583D731D96DCCF21F106E825CCA116
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E17A5EB94156DE23FCDC8F29B210FCDEDCF08F52.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/912a3f28-8273-4dd5-87fc-1ef00acac9b6/0/E17A5EB94156DE23FCDC8F29B210FCDEDCF08F52.mft
Manifest number:          0530
Signing time:             Wed 17 Dec 2025 06:22:12 +0000
Manifest this update:     Wed 17 Dec 2025 06:17:12 +0000
Manifest next update:     Sat 20 Dec 2025 14:39:12 +0000
Files and hashes:         1: E17A5EB94156DE23FCDC8F29B210FCDEDCF08F52.crl (hash: lYtIwel7K7WaVZslrvpGV5o+BMHejwmw02xAuBlfqc4=)
                          2: 3130332e3133302e36302e302f32332d3233203d3e20313338303739.roa (hash: t1GlQPTqCX0tSN2oGwnozLwYbWtyVQRe58xqkUEfAuQ=)
                          3: 3130332e3133302e36302e302f32322d3232203d3e20313338303739.roa (hash: dr1CQsFDr+grBIANLd3KqKBw7/lJxKh8r7O2jOMsoyE=)
                          4: 3130332e3133302e36302e302f32342d3234203d3e20313338303739.roa (hash: 8GAdTJuNR1Zetl+ziDhBJwBFLCcefBc1zOZpq/utdAc=)
                          5: 3130332e3133302e36312e302f32342d3234203d3e20313338303739.roa (hash: VmKn4H92OZlUtnRAAPlH3DAWvPgKEL7aXZz1kY1YrQ0=)
                          6: 3130332e3133302e36332e302f32342d3234203d3e20313338303739.roa (hash: BTJyyClQJ2ooNN9EN9agUZZ+ml+xViKf+qFHMjyGIK0=)
                          7: 3130332e3133302e36322e302f32342d3234203d3e20313338303739.roa (hash: gA/G4KU0S654m0JbYV6SpYNvybqVwcWtbGvUC8YnGdc=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/912a3f28-8273-4dd5-87fc-1ef00acac9b6/0/E17A5EB94156DE23FCDC8F29B210FCDEDCF08F52.crl
                          rsync://repo-rpki.idnic.net/repo/912a3f28-8273-4dd5-87fc-1ef00acac9b6/0/E17A5EB94156DE23FCDC8F29B210FCDEDCF08F52.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E17A5EB94156DE23FCDC8F29B210FCDEDCF08F52.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Dec 2025 14:39:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:86:94:f7:f6:58:3d:73:1d:96:dc:cf:21:f1:06:e8:25:cc:a1:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E17A5EB94156DE23FCDC8F29B210FCDEDCF08F52
        Validity
            Not Before: Dec 17 06:17:12 2025 GMT
            Not After : Dec 20 14:39:12 2025 GMT
        Subject: CN=BE07529A4FAE801AE1E793A4FCAE3618AA2E715F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:71:96:d3:3a:73:62:ba:10:62:da:fa:56:3d:
                    bf:f4:77:22:0b:d4:45:27:59:1b:43:7f:18:9b:3a:
                    b2:4e:1d:1b:37:ed:b5:0e:55:2f:b1:68:c7:1a:32:
                    4a:ff:c4:3c:12:46:84:64:45:7b:82:1e:28:82:5f:
                    4f:ac:aa:6b:d7:c3:45:0e:d6:58:cf:15:2e:1d:17:
                    4b:07:3a:a2:b3:2b:63:e1:93:95:1c:0e:12:c1:fa:
                    31:c6:b9:96:31:f7:cd:a2:b2:69:d3:36:fc:7a:8b:
                    13:cc:a2:5f:ef:7f:f2:74:d4:d4:09:6a:ac:39:5d:
                    0a:c4:4d:fe:1d:12:d9:87:b7:cd:df:21:9c:79:cf:
                    da:bd:e1:fb:5c:f3:3e:8a:d7:fe:33:01:6f:bd:c0:
                    89:34:60:74:ca:c7:5c:07:a8:3e:f1:e1:79:73:f6:
                    93:9d:42:8b:49:68:ef:b3:ac:7d:ad:cf:f4:9a:44:
                    fb:a0:6f:4d:d5:f4:58:17:e7:34:c9:f9:8d:51:05:
                    19:57:61:13:3b:df:4c:a9:6d:b5:c5:40:d4:8c:ef:
                    fd:10:22:63:2f:bd:4f:d3:99:f7:bd:13:d5:c1:1a:
                    c4:ef:79:98:b0:81:a8:15:d5:7b:ca:09:fb:bd:d4:
                    ba:3e:48:c2:49:b4:89:95:39:2b:f3:66:4e:b4:67:
                    94:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:07:52:9A:4F:AE:80:1A:E1:E7:93:A4:FC:AE:36:18:AA:2E:71:5F
            X509v3 Authority Key Identifier:
                keyid:E1:7A:5E:B9:41:56:DE:23:FC:DC:8F:29:B2:10:FC:DE:DC:F0:8F:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/912a3f28-8273-4dd5-87fc-1ef00acac9b6/0/E17A5EB94156DE23FCDC8F29B210FCDEDCF08F52.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E17A5EB94156DE23FCDC8F29B210FCDEDCF08F52.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/912a3f28-8273-4dd5-87fc-1ef00acac9b6/0/E17A5EB94156DE23FCDC8F29B210FCDEDCF08F52.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:ea:49:d2:37:2f:26:99:17:be:8c:8f:0d:e0:9d:23:42:9d:
         89:79:76:c5:9a:0e:31:66:25:98:0f:69:ea:93:98:a7:cd:77:
         b3:5c:46:7c:d8:6e:5c:09:22:60:67:a5:a2:d0:86:bb:6e:65:
         3e:82:69:dc:2b:da:67:87:5f:e1:25:25:df:73:05:e3:1c:21:
         17:59:7b:ac:ba:91:6c:1b:c6:d8:0b:f7:de:99:6c:a7:6e:df:
         c9:de:f9:c0:52:cf:26:b7:60:35:54:6b:0f:50:81:d5:2b:7f:
         ca:15:bd:b0:47:24:ef:28:54:dc:f4:31:a9:01:3b:2d:72:04:
         10:14:2e:f8:3b:8d:e0:17:44:b3:7b:bc:08:77:ed:58:f2:30:
         78:f3:14:29:75:30:24:ce:9a:0d:a7:41:82:d1:44:a4:b6:3e:
         0c:10:79:6b:a8:64:41:93:17:90:d7:34:19:85:24:84:6b:8a:
         5d:aa:3b:e2:c9:06:d1:ce:eb:7f:41:1b:94:26:9e:e9:55:ad:
         6b:9b:93:09:77:2f:19:fa:08:55:a3:06:94:64:00:0f:4f:4b:
         4f:07:95:67:4a:33:ba:a7:eb:01:95:e1:11:c8:98:0b:a5:59:
         ef:c8:6f:8d:04:4a:be:f7:3d:7b:15:4a:e2:a8:ce:1c:f9:4e:
         ce:72:0d:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 11:17:33 2025 by rpki-client