This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/f7cc5ffa-5f62-44e5-8fe2-ee8750f2221d/0/E511E1480615E7AFC915B8E0430D70CA0B31D0F0.mft
File:                     E511E1480615E7AFC915B8E0430D70CA0B31D0F0.mft (raw, json)
Hash identifier:          hTHQo1SP6v8z3wSBHwCfBslKlOOeyIVoxyx7x65ttOc=
Subject key identifier:   8B:4B:D2:59:DB:EC:A1:F0:64:E0:EB:57:61:E2:F6:D5:2F:68:28:28
Authority key identifier: E5:11:E1:48:06:15:E7:AF:C9:15:B8:E0:43:0D:70:CA:0B:31:D0:F0
Certificate issuer:       /CN=E511E1480615E7AFC915B8E0430D70CA0B31D0F0
Certificate serial:       72A615EE9D23C559118328275DB3AC0C66ECED0D
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E511E1480615E7AFC915B8E0430D70CA0B31D0F0.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/f7cc5ffa-5f62-44e5-8fe2-ee8750f2221d/0/E511E1480615E7AFC915B8E0430D70CA0B31D0F0.mft
Manifest number:          0531
Signing time:             Fri 19 Dec 2025 17:41:46 +0000
Manifest this update:     Fri 19 Dec 2025 17:36:46 +0000
Manifest next update:     Tue 23 Dec 2025 01:10:46 +0000
Files and hashes:         1: E511E1480615E7AFC915B8E0430D70CA0B31D0F0.crl (hash: kSxQYccx5AJEOmOW7OytcL3gjwXIQdtWMM2BjWAW+tk=)
                          2: 3130332e35312e34342e302f32322d3234203d3e20313333383139.roa (hash: SXrkhdImUQOOYfFjSDTXHsQonvkd7MTnrISJrdKtg94=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/f7cc5ffa-5f62-44e5-8fe2-ee8750f2221d/0/E511E1480615E7AFC915B8E0430D70CA0B31D0F0.crl
                          rsync://repo-rpki.idnic.net/repo/f7cc5ffa-5f62-44e5-8fe2-ee8750f2221d/0/E511E1480615E7AFC915B8E0430D70CA0B31D0F0.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E511E1480615E7AFC915B8E0430D70CA0B31D0F0.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 23 Dec 2025 00:38:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:a6:15:ee:9d:23:c5:59:11:83:28:27:5d:b3:ac:0c:66:ec:ed:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E511E1480615E7AFC915B8E0430D70CA0B31D0F0
        Validity
            Not Before: Dec 19 17:36:46 2025 GMT
            Not After : Dec 23 01:10:46 2025 GMT
        Subject: CN=8B4BD259DBECA1F064E0EB5761E2F6D52F682828
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:e5:63:e8:76:7c:91:a1:35:67:6e:0e:15:74:
                    b0:af:7a:3d:e7:ee:49:4e:6e:61:59:a3:f3:7d:d9:
                    ad:72:77:41:a9:5c:f9:e5:69:3a:00:47:b1:94:b4:
                    63:b5:a0:b7:bf:61:7c:20:d1:2d:19:7f:3c:8a:e2:
                    d5:58:1d:22:45:ea:c6:b2:90:49:e0:3b:10:e4:a2:
                    a0:af:b1:ac:75:dc:35:a4:00:69:03:6c:19:14:04:
                    2e:92:97:5d:c2:51:9e:be:ed:a3:e7:dd:c7:54:bc:
                    6c:77:1c:c0:7e:0c:ff:73:d3:7f:2d:32:99:5a:46:
                    eb:c2:7a:98:d9:58:e3:30:e3:22:8f:9c:f4:5e:67:
                    f1:8d:bf:3d:33:ac:36:ce:7f:26:97:d9:b2:03:4f:
                    4f:39:c9:67:82:7b:07:c3:30:30:d0:72:07:9d:0a:
                    7e:a8:c1:38:0e:97:89:ac:ae:99:52:fd:02:63:82:
                    16:70:ed:2b:54:85:b0:e5:2d:9c:51:a7:46:4f:07:
                    de:68:bb:8b:26:cb:f5:10:e8:eb:e9:0e:76:1d:3a:
                    47:e0:9e:40:44:94:4b:9d:2c:7a:75:ac:de:ec:2c:
                    18:5b:b6:e4:8d:8b:36:cd:1f:24:0b:80:9a:c9:7a:
                    02:a2:62:55:ac:f3:d2:86:bc:d2:41:42:91:e1:52:
                    34:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:4B:D2:59:DB:EC:A1:F0:64:E0:EB:57:61:E2:F6:D5:2F:68:28:28
            X509v3 Authority Key Identifier:
                keyid:E5:11:E1:48:06:15:E7:AF:C9:15:B8:E0:43:0D:70:CA:0B:31:D0:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/f7cc5ffa-5f62-44e5-8fe2-ee8750f2221d/0/E511E1480615E7AFC915B8E0430D70CA0B31D0F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E511E1480615E7AFC915B8E0430D70CA0B31D0F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f7cc5ffa-5f62-44e5-8fe2-ee8750f2221d/0/E511E1480615E7AFC915B8E0430D70CA0B31D0F0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:f1:71:b1:62:f6:30:b4:49:33:da:9c:e8:6e:4d:ab:bd:b6:
         bf:01:20:43:25:08:e1:53:14:68:fe:4e:02:1e:1a:43:c5:91:
         28:a6:57:d1:0e:07:01:65:e0:3f:2c:24:c0:9e:d9:00:1f:e4:
         09:54:fb:96:78:ef:10:20:87:95:61:81:f3:bb:1a:1e:29:c9:
         79:c8:cb:b5:ae:e8:e0:8d:00:50:64:35:86:2a:64:f0:7c:ed:
         5e:bf:b7:3d:31:9b:28:06:b9:5b:1a:9d:70:7b:4e:b7:03:0d:
         5b:70:d4:e2:5a:94:24:58:1a:a3:f1:33:95:f8:36:4f:ab:a3:
         0c:20:e8:0e:05:1b:e9:2b:df:43:0b:3c:8d:39:c4:bd:4d:96:
         25:4d:4f:76:7d:7f:44:91:09:a8:9c:66:04:ed:ff:32:b6:54:
         19:9d:28:62:6c:f3:df:b7:5b:7c:33:29:32:72:b9:32:dc:a1:
         b0:4e:b1:7b:99:ee:fe:9c:3e:7b:f6:7c:7c:a0:5a:16:b9:07:
         18:aa:0f:87:9b:e0:20:41:d7:b5:bd:aa:86:7c:d2:65:f6:61:
         55:60:50:a4:75:a1:97:99:79:ac:bf:0f:d7:8f:84:61:95:47:
         18:6c:9c:05:81:ee:05:05:fe:04:2b:e4:e9:b9:08:28:17:7e:
         66:48:ff:e8
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUcqYV7p0jxVkRgygnXbOsDGbs7Q0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTUxMUUxNDgwNjE1RTdBRkM5MTVCOEUwNDMwRDcwQ0Ew
QjMxRDBGMDAeFw0yNTEyMTkxNzM2NDZaFw0yNTEyMjMwMTEwNDZaMDMxMTAvBgNV
BAMTKDhCNEJEMjU5REJFQ0ExRjA2NEUwRUI1NzYxRTJGNkQ1MkY2ODI4MjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDN5WPodnyRoTVnbg4VdLCvej3n
7klObmFZo/N92a1yd0GpXPnlaToAR7GUtGO1oLe/YXwg0S0ZfzyK4tVYHSJF6say
kEngOxDkoqCvsax13DWkAGkDbBkUBC6Sl13CUZ6+7aPn3cdUvGx3HMB+DP9z038t
MplaRuvCepjZWOMw4yKPnPReZ/GNvz0zrDbOfyaX2bIDT085yWeCewfDMDDQcged
Cn6owTgOl4msrplS/QJjghZw7StUhbDlLZxRp0ZPB95ou4smy/UQ6OvpDnYdOkfg
nkBElEudLHp1rN7sLBhbtuSNizbNHyQLgJrJegKiYlWs89KGvNJBQpHhUjQJAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUi0vSWdvsofBk4OtXYeL21S9oKCgwHwYDVR0j
BBgwFoAU5RHhSAYV56/JFbjgQw1wygsx0PAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m
N2NjNWZmYS01ZjYyLTQ0ZTUtOGZlMi1lZTg3NTBmMjIyMWQvMC9FNTExRTE0ODA2
MTVFN0FGQzkxNUI4RTA0MzBENzBDQTBCMzFEMEYwLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvRTUxMUUxNDgwNjE1RTdBRkM5MTVCOEUwNDMwRDcwQ0EwQjMx
RDBGMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjdjYzVmZmEtNWY2Mi00NGU1LThm
ZTItZWU4NzUwZjIyMjFkLzAvRTUxMUUxNDgwNjE1RTdBRkM5MTVCOEUwNDMwRDcw
Q0EwQjMxRDBGMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAHzxcbFi9jC0STPanOhuTau9tr8BIEMlCOFT
FGj+TgIeGkPFkSimV9EOBwFl4D8sJMCe2QAf5AlU+5Z47xAgh5VhgfO7Gh4pyXnI
y7Wu6OCNAFBkNYYqZPB87V6/tz0xmygGuVsanXB7TrcDDVtw1OJalCRYGqPxM5X4
Nk+rowwg6A4FG+kr30MLPI05xL1NliVNT3Z9f0SRCaicZgTt/zK2VBmdKGJs89+3
W3wzKTJyuTLcobBOsXuZ7v6cPnv2fHygWha5BxiqD4eb4CBB17W9qoZ80mX2YVVg
UKR1oZeZeay/D9ePhGGVRxhsnAWB7gUF/gQr5Om5CCgXfmZI/+g=
-----END CERTIFICATE-----
Generated at Sat Dec 20 12:37:02 2025 by rpki-client