This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/bed736dc-e5db-4381-971f-62436741854b/0/E6E710DACC1F6D6DD9D78FA6117E43626642E6F6.mft
File:                     E6E710DACC1F6D6DD9D78FA6117E43626642E6F6.mft (raw, json)
Hash identifier:          FyuRW/6Dm8RNobGTYxTLirBs/vXNbZFkcwlKH9hddRI=
Subject key identifier:   3F:36:1E:53:E7:38:C6:12:0C:53:D5:0D:B2:26:82:9B:F2:5E:88:0B
Authority key identifier: E6:E7:10:DA:CC:1F:6D:6D:D9:D7:8F:A6:11:7E:43:62:66:42:E6:F6
Certificate issuer:       /CN=E6E710DACC1F6D6DD9D78FA6117E43626642E6F6
Certificate serial:       2048B151D1DF7E9B8E75677D7B5199224AEE3D8D
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/E6E710DACC1F6D6DD9D78FA6117E43626642E6F6.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/bed736dc-e5db-4381-971f-62436741854b/0/E6E710DACC1F6D6DD9D78FA6117E43626642E6F6.mft
Manifest number:          0120
Signing time:             Tue 23 Dec 2025 15:51:31 +0000
Manifest this update:     Tue 23 Dec 2025 15:46:31 +0000
Manifest next update:     Fri 26 Dec 2025 21:14:31 +0000
Files and hashes:         1: 3135372e31352e3131382e302f32342d3234203d3e20313532343031.roa (hash: jDuBPuo8FXkwHvuSx3l3NpRnjG6RnX6zvR23Pm7QMR8=)
                          2: E6E710DACC1F6D6DD9D78FA6117E43626642E6F6.crl (hash: d3v0o+SWJ9m3Z1E3wVI6RoBGkFTzYnRet/pnxCFBES4=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/bed736dc-e5db-4381-971f-62436741854b/0/E6E710DACC1F6D6DD9D78FA6117E43626642E6F6.crl
                          rsync://repo-rpki.idnic.net/repo/bed736dc-e5db-4381-971f-62436741854b/0/E6E710DACC1F6D6DD9D78FA6117E43626642E6F6.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/E6E710DACC1F6D6DD9D78FA6117E43626642E6F6.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 26 Dec 2025 21:14:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:48:b1:51:d1:df:7e:9b:8e:75:67:7d:7b:51:99:22:4a:ee:3d:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E6E710DACC1F6D6DD9D78FA6117E43626642E6F6
        Validity
            Not Before: Dec 23 15:46:31 2025 GMT
            Not After : Dec 26 21:14:31 2025 GMT
        Subject: CN=3F361E53E738C6120C53D50DB226829BF25E880B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:7d:e8:ec:52:cc:9c:24:f0:71:55:9b:26:14:
                    27:46:24:80:56:92:59:88:f3:e4:17:07:88:5f:ae:
                    cc:0a:c5:f6:dc:9e:0e:0f:58:a4:24:34:01:9e:4d:
                    b4:42:f0:59:f8:1c:70:43:84:54:db:7c:f1:2b:d8:
                    4f:35:9a:ab:45:91:00:79:6c:f7:31:e6:46:0d:60:
                    cb:12:da:07:4a:1e:29:f8:1f:a9:51:59:74:76:21:
                    61:c5:4a:2b:95:1c:af:d9:27:b5:96:8a:ac:4b:d2:
                    23:9a:12:6a:4d:1b:ca:98:07:4b:7b:db:e7:ce:66:
                    26:f2:5f:7f:1c:19:ce:0d:85:ca:8b:b1:18:ba:ea:
                    7d:ff:56:8d:e7:54:e2:1b:10:a1:17:2a:e2:24:46:
                    11:91:14:90:06:da:4f:3a:dc:0b:c9:eb:e7:96:ff:
                    0e:c1:84:9c:6f:59:81:bf:36:3d:b0:cc:40:d4:d9:
                    3a:bc:82:62:e5:8f:03:a6:8b:32:1c:d6:d1:1c:29:
                    b6:0d:b2:04:c3:93:f1:10:3b:88:da:45:b3:ed:e1:
                    a4:e0:2e:71:e5:9c:8d:d6:69:52:ca:3e:5f:8d:b2:
                    7d:b5:d1:92:41:04:e4:4f:9b:57:d3:57:b2:b3:61:
                    2a:e6:c4:fe:5e:90:93:52:6a:ff:d0:c6:9d:77:bb:
                    cd:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:36:1E:53:E7:38:C6:12:0C:53:D5:0D:B2:26:82:9B:F2:5E:88:0B
            X509v3 Authority Key Identifier:
                keyid:E6:E7:10:DA:CC:1F:6D:6D:D9:D7:8F:A6:11:7E:43:62:66:42:E6:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/bed736dc-e5db-4381-971f-62436741854b/0/E6E710DACC1F6D6DD9D78FA6117E43626642E6F6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/E6E710DACC1F6D6DD9D78FA6117E43626642E6F6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bed736dc-e5db-4381-971f-62436741854b/0/E6E710DACC1F6D6DD9D78FA6117E43626642E6F6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ba:85:01:cb:a4:f4:67:5a:76:b7:a9:cb:ed:f2:09:ff:cb:1c:
         ca:66:36:ea:d7:47:8d:6e:fc:d4:99:e7:be:cc:ec:ec:55:00:
         39:91:54:9c:53:8c:94:a5:4f:c1:3d:40:ff:9e:d0:52:4b:55:
         79:14:b7:da:cf:a4:a0:5a:ad:30:e3:59:14:07:f5:3a:c4:1c:
         de:79:83:45:0c:2a:c4:85:04:a6:b2:df:c4:0e:ca:cd:92:38:
         36:05:f0:cb:53:82:0f:f3:11:d2:2a:87:07:fb:95:c2:53:e9:
         ca:02:ee:2d:b5:ac:66:a5:d3:35:34:d1:43:c3:45:7f:38:0d:
         6c:97:4c:3b:7b:c3:8c:57:16:45:cd:7c:66:de:f3:ee:d6:35:
         3a:73:50:30:79:be:d4:74:16:38:e0:18:17:27:d5:b8:bd:94:
         e7:36:18:1f:17:64:dc:13:0f:58:e7:51:7c:9e:0f:6b:53:65:
         7c:7f:c6:85:a0:2c:4f:49:a0:3c:40:c5:cf:1b:cb:16:71:50:
         c1:e1:10:0a:78:7d:77:18:96:ce:69:be:06:60:3d:72:a3:aa:
         d5:a6:1d:61:bb:f4:1b:21:60:0b:f0:71:63:f0:09:66:77:31:
         54:5b:6f:38:a4:65:3a:e5:aa:b3:ef:60:f7:70:ce:33:5f:23:
         69:b1:95:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 25 00:59:59 2025 by rpki-client