This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/a5481606-d5fd-4196-abcd-58e6c76243c5/0/73AF945EFF5EA9D1EFDC2617FA43430E87E19AB6.mft
File:                     73AF945EFF5EA9D1EFDC2617FA43430E87E19AB6.mft (raw, json)
Hash identifier:          OmtZXiwmcwLvZA+dx+vo38PgMJxt07GoycVcbbos5R8=
Subject key identifier:   AA:3D:03:D0:1A:A5:16:1F:B7:F5:2C:1E:4C:07:1D:6D:BA:38:F7:20
Authority key identifier: 73:AF:94:5E:FF:5E:A9:D1:EF:DC:26:17:FA:43:43:0E:87:E1:9A:B6
Certificate issuer:       /CN=73AF945EFF5EA9D1EFDC2617FA43430E87E19AB6
Certificate serial:       0A5F9B2617E4EF012F9EAD6E8BEE91AA84AA0F94
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/73AF945EFF5EA9D1EFDC2617FA43430E87E19AB6.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/a5481606-d5fd-4196-abcd-58e6c76243c5/0/73AF945EFF5EA9D1EFDC2617FA43430E87E19AB6.mft
Manifest number:          EB
Signing time:             Sat 20 Dec 2025 23:01:24 +0000
Manifest this update:     Sat 20 Dec 2025 22:56:24 +0000
Manifest next update:     Wed 24 Dec 2025 07:30:24 +0000
Files and hashes:         1: 3135372e36362e3137302e302f32332d3233203d3e20313532373737.roa (hash: bCp+hfr7ROEtQWyvQHaGucdWFI7N+d4ip6n9SavuoOk=)
                          2: 3135372e36362e3137312e302f32342d3234203d3e20313532373737.roa (hash: uOA4jTwlkcqlsjP32WwaK900NFV6wePG9q2fIgGqlJw=)
                          3: 3135372e36362e3137302e302f32342d3234203d3e20313532373737.roa (hash: mWn5DPCiekSxGNB8RumBKf5syIxB4d7+KUn6ZNJHctk=)
                          4: 73AF945EFF5EA9D1EFDC2617FA43430E87E19AB6.crl (hash: 6ezqJDVOhq6DXRhqJRMNXoXbwEdV0EeysxbrZKd/UCs=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:5f:9b:26:17:e4:ef:01:2f:9e:ad:6e:8b:ee:91:aa:84:aa:0f:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73AF945EFF5EA9D1EFDC2617FA43430E87E19AB6
        Validity
            Not Before: Dec 20 22:56:24 2025 GMT
            Not After : Dec 24 07:30:24 2025 GMT
        Subject: CN=AA3D03D01AA5161FB7F52C1E4C071D6DBA38F720
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:f9:e9:c1:7c:7d:f6:42:b7:90:e2:df:60:7e:
                    43:80:49:00:57:83:45:d8:03:30:bb:1e:66:01:53:
                    21:a0:2a:4f:0a:e9:ca:ca:29:74:e3:7b:c6:a2:67:
                    fa:63:a4:a8:ea:d8:27:f0:13:9f:6f:72:03:b2:57:
                    9a:1d:b3:b0:e5:4b:31:26:8d:b7:93:c5:f0:65:6c:
                    d6:c3:63:4e:45:6c:b4:f7:d9:2f:58:16:fd:9a:97:
                    79:14:b1:95:cf:f8:19:40:69:91:4e:11:17:9f:a6:
                    bb:c3:05:d0:61:a5:7d:49:51:49:44:3a:9e:9b:1e:
                    d2:07:c3:e2:63:96:b3:c7:59:e9:d4:34:89:03:d0:
                    1f:c1:8d:cf:57:01:be:06:6f:98:78:4d:78:1b:4a:
                    f9:e7:50:66:7b:e4:51:37:92:fb:6a:ec:5c:aa:17:
                    25:1a:e2:9d:4f:45:e1:a3:33:36:b8:16:b9:0f:3d:
                    d9:49:94:83:bd:9a:f3:d3:38:ba:83:93:a9:5f:1b:
                    35:27:8d:5b:31:a0:7e:80:7d:e7:d8:42:37:32:27:
                    48:3e:ef:ca:89:33:61:c9:93:94:64:c6:0f:8c:89:
                    03:c3:b6:68:e7:e7:73:d6:43:ed:15:4f:5f:4f:df:
                    26:1f:76:85:30:22:fb:24:7d:6c:39:8d:2d:f1:ac:
                    d8:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:3D:03:D0:1A:A5:16:1F:B7:F5:2C:1E:4C:07:1D:6D:BA:38:F7:20
            X509v3 Authority Key Identifier:
                keyid:73:AF:94:5E:FF:5E:A9:D1:EF:DC:26:17:FA:43:43:0E:87:E1:9A:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/a5481606-d5fd-4196-abcd-58e6c76243c5/0/73AF945EFF5EA9D1EFDC2617FA43430E87E19AB6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/73AF945EFF5EA9D1EFDC2617FA43430E87E19AB6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a5481606-d5fd-4196-abcd-58e6c76243c5/0/73AF945EFF5EA9D1EFDC2617FA43430E87E19AB6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:fc:9d:13:32:65:4f:2a:24:56:dd:84:30:4a:16:41:1c:19:
         1b:80:14:35:04:0c:3e:39:03:b3:31:44:83:8f:12:fb:1a:44:
         d2:5f:27:c6:f4:7a:27:24:b9:d3:46:75:e8:41:03:84:25:7e:
         9a:86:28:7e:0c:d6:a1:89:ad:bf:7d:68:ea:7a:8f:6f:09:67:
         d7:98:4f:16:0b:23:c9:7a:f4:06:ed:46:8a:f5:0b:ae:95:74:
         78:ae:1c:cf:0b:77:ba:c6:b2:e9:4f:38:c1:60:44:e3:4a:00:
         e8:5d:84:b8:4a:c5:41:d8:08:17:2a:ab:53:16:80:83:d8:3c:
         26:11:51:85:fd:9e:5a:52:6a:a3:e3:13:a3:6d:30:e6:67:90:
         37:4c:94:bb:4c:a4:70:8c:66:1c:8a:1b:66:86:9a:97:b5:f9:
         24:1a:ac:fb:6b:41:3f:d2:d5:e9:bb:89:47:b4:ab:e6:7c:08:
         bb:0a:93:38:9c:88:f9:b3:38:1a:9e:6c:e3:33:89:e3:de:7a:
         2a:b9:e9:fb:95:e2:ea:1e:ba:f5:4b:8c:88:ec:29:0b:95:05:
         8e:70:3d:3c:88:86:dd:da:aa:1d:cf:92:c3:1c:8a:b1:9d:0a:
         28:07:62:77:72:fe:33:04:64:b6:bb:d4:0a:26:eb:21:d4:64:
         4e:65:44:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 00:12:13 2025 by rpki-client