This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/0eb96005-83a9-41e4-af5b-f3eaa8f23651/0/E84DB44F0008624F8E7693BC3BE1F9BFCDDFA280.mft
File:                     E84DB44F0008624F8E7693BC3BE1F9BFCDDFA280.mft (raw, json)
Hash identifier:          DiNLBXcha0pfris2L6bFrshNlnoRFtM1+NFiLKa15mg=
Subject key identifier:   C1:39:F7:F6:87:F4:5E:93:AF:E6:5E:2F:F9:F4:8D:55:41:8D:7E:06
Authority key identifier: E8:4D:B4:4F:00:08:62:4F:8E:76:93:BC:3B:E1:F9:BF:CD:DF:A2:80
Certificate issuer:       /CN=E84DB44F0008624F8E7693BC3BE1F9BFCDDFA280
Certificate serial:       4D0187C6CDAF0B64429D74DE7AB74CFE5A96811B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E84DB44F0008624F8E7693BC3BE1F9BFCDDFA280.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/0eb96005-83a9-41e4-af5b-f3eaa8f23651/0/E84DB44F0008624F8E7693BC3BE1F9BFCDDFA280.mft
Manifest number:          04FC
Signing time:             Fri 05 Dec 2025 18:21:09 +0000
Manifest this update:     Fri 05 Dec 2025 18:16:09 +0000
Manifest next update:     Mon 08 Dec 2025 20:55:09 +0000
Files and hashes:         1: 3130332e3132302e3133382e302f32342d3234203d3e20313338303537.roa (hash: i3kLGZdC4b7g0r22OaWIQLyO15cZEfzn1gqotYUiYWU=)
                          2: E84DB44F0008624F8E7693BC3BE1F9BFCDDFA280.crl (hash: GRBlvvzZQUOkJu5lQxVe4CJuQUfJKMY1POUD+Q1Xs3o=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/0eb96005-83a9-41e4-af5b-f3eaa8f23651/0/E84DB44F0008624F8E7693BC3BE1F9BFCDDFA280.crl
                          rsync://repo-rpki.idnic.net/repo/0eb96005-83a9-41e4-af5b-f3eaa8f23651/0/E84DB44F0008624F8E7693BC3BE1F9BFCDDFA280.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E84DB44F0008624F8E7693BC3BE1F9BFCDDFA280.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 08 Dec 2025 20:55:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:01:87:c6:cd:af:0b:64:42:9d:74:de:7a:b7:4c:fe:5a:96:81:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E84DB44F0008624F8E7693BC3BE1F9BFCDDFA280
        Validity
            Not Before: Dec  5 18:16:09 2025 GMT
            Not After : Dec  8 20:55:09 2025 GMT
        Subject: CN=C139F7F687F45E93AFE65E2FF9F48D55418D7E06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:c4:b6:47:e8:e1:91:18:8c:e2:76:cc:82:c1:
                    ad:8c:2e:03:a9:46:08:49:b1:b4:88:e2:7f:a3:29:
                    c0:4e:c1:f4:c1:e2:6b:18:4c:b6:88:a0:ee:1e:51:
                    09:23:b4:57:c8:88:cc:09:58:c7:38:1d:9c:d9:22:
                    fa:c1:9b:c7:03:ee:42:8a:5a:e2:18:5e:6d:e4:62:
                    c9:5c:99:e6:e5:9e:00:52:ee:f2:75:4f:71:13:2f:
                    8a:73:c1:2e:21:fb:1e:f1:c4:91:99:2a:5a:3e:f9:
                    93:83:3f:0d:0d:8a:2a:dc:29:16:70:a7:5d:64:b8:
                    f7:a8:6d:d3:31:7d:4d:b5:0c:f0:56:f1:51:37:ea:
                    df:2b:d5:b1:7e:ab:33:5d:72:47:12:67:9f:06:9b:
                    19:c1:74:c8:24:1f:e2:d9:37:b9:e9:2a:54:98:de:
                    15:b4:55:7d:75:c7:9d:b9:13:5d:d2:fa:ef:90:59:
                    27:2a:1b:f7:c5:4d:28:b1:a4:09:36:3a:c9:6d:9e:
                    6e:84:95:11:b7:d2:e3:73:a3:7b:08:58:06:d4:90:
                    b5:66:85:8d:48:45:ae:88:1a:82:02:21:a0:37:a7:
                    3e:08:81:a0:82:27:77:85:9e:47:6b:6f:6f:e0:76:
                    fd:b2:b7:04:a4:6a:ab:65:a2:bb:6e:41:e1:dd:4d:
                    9c:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:39:F7:F6:87:F4:5E:93:AF:E6:5E:2F:F9:F4:8D:55:41:8D:7E:06
            X509v3 Authority Key Identifier:
                keyid:E8:4D:B4:4F:00:08:62:4F:8E:76:93:BC:3B:E1:F9:BF:CD:DF:A2:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/0eb96005-83a9-41e4-af5b-f3eaa8f23651/0/E84DB44F0008624F8E7693BC3BE1F9BFCDDFA280.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E84DB44F0008624F8E7693BC3BE1F9BFCDDFA280.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0eb96005-83a9-41e4-af5b-f3eaa8f23651/0/E84DB44F0008624F8E7693BC3BE1F9BFCDDFA280.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:c9:c1:e6:8c:e8:38:1f:8a:f3:35:a0:17:c9:88:56:09:a3:
         12:db:5a:53:88:fa:74:6b:f2:20:4b:fd:66:48:ca:ea:bd:a9:
         bd:59:14:78:b6:be:c6:0d:35:2a:0d:88:6d:61:6c:43:7e:b2:
         15:8c:28:2a:16:01:eb:30:97:da:49:c4:30:26:4d:e5:f0:7f:
         60:b8:54:50:9d:53:f9:35:f9:c9:b8:e5:37:ae:0d:1f:f8:02:
         bf:f9:cf:1b:29:86:ca:a7:f5:fd:88:d2:be:c2:b1:86:a0:a9:
         d8:e4:a2:6b:c2:f5:a4:24:a5:02:04:4b:9c:2e:95:ac:12:d2:
         50:27:bf:e7:65:a5:18:3d:28:36:f5:5b:09:fd:67:c2:03:8f:
         f0:83:d9:21:9c:eb:f1:7e:03:0d:6c:08:30:52:46:79:89:bf:
         67:71:a1:9c:bf:71:c1:9a:dc:fa:21:b3:e2:91:ad:e6:87:13:
         ee:47:7e:c5:89:fe:40:d3:f3:a9:b8:45:dc:90:29:da:ab:34:
         e8:bd:a8:99:d5:de:6c:6e:ae:ce:cc:ac:c4:ca:3e:28:94:3d:
         72:61:38:d0:6d:8a:6b:88:d5:3d:36:8d:46:8d:ef:2f:4c:dd:
         fc:9a:73:25:1b:67:5e:f7:43:3b:c2:0e:4e:ef:76:34:97:fb:
         63:5f:12:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 07:29:29 2025 by rpki-client