This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/187ade9f-6b79-4723-9949-96de7e41db70/0/E4B72563B465301EE966885E5BE212EE92B97305.mft
File:                     E4B72563B465301EE966885E5BE212EE92B97305.mft (raw, json)
Hash identifier:          RNBdKJbbrk0xVAc3P+qcCCUejiih6XsfcHXnEzBSaTQ=
Subject key identifier:   55:D5:EE:DC:84:F3:71:24:25:52:63:69:DF:FD:7B:C2:26:E6:82:40
Authority key identifier: E4:B7:25:63:B4:65:30:1E:E9:66:88:5E:5B:E2:12:EE:92:B9:73:05
Certificate issuer:       /CN=E4B72563B465301EE966885E5BE212EE92B97305
Certificate serial:       012887DCE6214CD65287F88A9120316CB4C4D749
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4B72563B465301EE966885E5BE212EE92B97305.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/187ade9f-6b79-4723-9949-96de7e41db70/0/E4B72563B465301EE966885E5BE212EE92B97305.mft
Manifest number:          0257
Signing time:             Fri 05 Dec 2025 17:12:01 +0000
Manifest this update:     Fri 05 Dec 2025 17:07:01 +0000
Manifest next update:     Mon 08 Dec 2025 19:54:01 +0000
Files and hashes:         1: E4B72563B465301EE966885E5BE212EE92B97305.crl (hash: zO53/fV3Mmju9N1s8rxzOKzBT900JQ0YR4gMuKYbi78=)
                          2: 3130332e31312e32322e302f32332d3234203d3e203538333930.roa (hash: LYswcn8qPihQgugQgV3QSAqvaMoaJ8Ak/kLhePchypk=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/187ade9f-6b79-4723-9949-96de7e41db70/0/E4B72563B465301EE966885E5BE212EE92B97305.crl
                          rsync://repo-rpki.idnic.net/repo/187ade9f-6b79-4723-9949-96de7e41db70/0/E4B72563B465301EE966885E5BE212EE92B97305.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4B72563B465301EE966885E5BE212EE92B97305.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 08 Dec 2025 19:54:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:28:87:dc:e6:21:4c:d6:52:87:f8:8a:91:20:31:6c:b4:c4:d7:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E4B72563B465301EE966885E5BE212EE92B97305
        Validity
            Not Before: Dec  5 17:07:01 2025 GMT
            Not After : Dec  8 19:54:01 2025 GMT
        Subject: CN=55D5EEDC84F3712425526369DFFD7BC226E68240
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:98:b3:c3:e8:12:12:97:3e:77:2f:6b:55:2b:
                    2e:3d:49:0c:1e:4c:b7:ed:14:7e:42:20:e0:92:ed:
                    e4:e4:43:2a:eb:cb:db:b0:fc:be:1e:61:42:1d:34:
                    2e:60:43:d4:3c:e6:67:ef:4b:60:1e:be:57:95:01:
                    bf:a6:a5:a0:de:78:3c:54:3c:e7:3b:ec:3e:32:5f:
                    3e:10:41:f9:b8:28:51:b6:67:0f:9e:c5:3e:9f:e5:
                    26:59:f4:de:bf:04:1c:ec:fe:c2:fc:01:6d:61:a1:
                    11:4f:3d:fd:ee:04:ad:6c:c4:57:57:f4:e5:8c:15:
                    81:b1:d5:f7:23:1b:9c:74:64:37:db:9c:9c:a9:93:
                    ee:7d:66:ad:e8:ae:bd:22:5e:ad:d6:c6:3f:d4:7b:
                    39:fb:fb:6a:d0:bc:2a:10:18:8c:7b:10:32:f8:4a:
                    1c:f3:80:0a:3a:d4:6d:07:bd:e4:8e:f9:a9:28:99:
                    24:59:92:59:5a:ae:31:fb:7f:8f:4a:77:83:a8:16:
                    0f:b7:cf:b4:83:0c:20:16:fc:86:4b:e3:79:6d:3b:
                    49:0d:ea:df:2f:a9:60:22:5f:f5:32:67:54:ef:c6:
                    c6:a5:09:71:f0:02:3e:cb:90:fd:5b:35:39:9b:e1:
                    48:0a:be:f6:10:0a:03:91:a0:26:06:30:e2:03:e9:
                    5f:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:D5:EE:DC:84:F3:71:24:25:52:63:69:DF:FD:7B:C2:26:E6:82:40
            X509v3 Authority Key Identifier:
                keyid:E4:B7:25:63:B4:65:30:1E:E9:66:88:5E:5B:E2:12:EE:92:B9:73:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/187ade9f-6b79-4723-9949-96de7e41db70/0/E4B72563B465301EE966885E5BE212EE92B97305.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4B72563B465301EE966885E5BE212EE92B97305.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/187ade9f-6b79-4723-9949-96de7e41db70/0/E4B72563B465301EE966885E5BE212EE92B97305.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:8b:25:23:a9:a8:1e:68:23:87:d6:fe:50:85:64:28:ba:34:
         71:11:93:80:2d:42:63:35:96:33:54:ff:cc:5e:17:a5:ba:dc:
         fc:65:66:ba:58:09:66:34:7c:11:a4:94:b5:57:94:80:42:27:
         af:25:cd:f5:56:68:b5:8e:40:b4:e4:3a:ad:36:d2:1c:66:7d:
         ef:f2:46:58:68:e0:90:9c:b5:ed:60:62:a9:df:59:dc:8f:6c:
         b7:ae:60:52:17:94:cf:c5:48:48:93:53:3c:27:8d:2a:d8:fe:
         3b:9f:03:93:4f:19:b6:88:57:cd:d5:d0:70:3c:55:85:b4:48:
         ff:5f:72:41:a9:98:21:67:f8:ad:95:c8:01:db:1e:ae:00:33:
         95:49:de:69:3a:75:82:6f:9b:f7:0c:02:f4:ba:07:e4:1e:4d:
         9a:54:73:5e:aa:b9:b6:6c:9d:82:0d:c1:d0:21:68:d2:8c:0c:
         60:55:f4:f9:a9:2e:04:ec:1c:9f:47:77:be:2d:f3:f6:fe:df:
         7d:d8:59:0a:75:ac:b8:87:e9:20:7a:ff:5f:20:29:4a:f8:92:
         65:30:91:6a:f9:ab:fd:4d:71:a8:01:8b:88:5d:82:d1:73:cf:
         b5:6b:2d:c2:32:0d:30:cf:15:27:8d:98:c0:52:3e:0f:f8:a9:
         7a:d0:6a:68
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUASiH3OYhTNZSh/iKkSAxbLTE10kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTRCNzI1NjNCNDY1MzAxRUU5NjY4ODVFNUJFMjEyRUU5
MkI5NzMwNTAeFw0yNTEyMDUxNzA3MDFaFw0yNTEyMDgxOTU0MDFaMDMxMTAvBgNV
BAMTKDU1RDVFRURDODRGMzcxMjQyNTUyNjM2OURGRkQ3QkMyMjZFNjgyNDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTmLPD6BISlz53L2tVKy49SQwe
TLftFH5CIOCS7eTkQyrry9uw/L4eYUIdNC5gQ9Q85mfvS2AevleVAb+mpaDeeDxU
POc77D4yXz4QQfm4KFG2Zw+exT6f5SZZ9N6/BBzs/sL8AW1hoRFPPf3uBK1sxFdX
9OWMFYGx1fcjG5x0ZDfbnJypk+59Zq3orr0iXq3Wxj/Uezn7+2rQvCoQGIx7EDL4
ShzzgAo61G0HveSO+akomSRZkllarjH7f49Kd4OoFg+3z7SDDCAW/IZL43ltO0kN
6t8vqWAiX/UyZ1TvxsalCXHwAj7LkP1bNTmb4UgKvvYQCgORoCYGMOID6V/5AgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUVdXu3ITzcSQlUmNp3/17wibmgkAwHwYDVR0j
BBgwFoAU5LclY7RlMB7pZoheW+IS7pK5cwUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x
ODdhZGU5Zi02Yjc5LTQ3MjMtOTk0OS05NmRlN2U0MWRiNzAvMC9FNEI3MjU2M0I0
NjUzMDFFRTk2Njg4NUU1QkUyMTJFRTkyQjk3MzA1LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvRTRCNzI1NjNCNDY1MzAxRUU5NjY4ODVFNUJFMjEyRUU5MkI5
NzMwNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTg3YWRlOWYtNmI3OS00NzIzLTk5
NDktOTZkZTdlNDFkYjcwLzAvRTRCNzI1NjNCNDY1MzAxRUU5NjY4ODVFNUJFMjEy
RUU5MkI5NzMwNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAFOLJSOpqB5oI4fW/lCFZCi6NHERk4AtQmM1
ljNU/8xeF6W63PxlZrpYCWY0fBGklLVXlIBCJ68lzfVWaLWOQLTkOq020hxmfe/y
Rlho4JCcte1gYqnfWdyPbLeuYFIXlM/FSEiTUzwnjSrY/jufA5NPGbaIV83V0HA8
VYW0SP9fckGpmCFn+K2VyAHbHq4AM5VJ3mk6dYJvm/cMAvS6B+QeTZpUc16qubZs
nYINwdAhaNKMDGBV9PmpLgTsHJ9Hd74t8/b+333YWQp1rLiH6SB6/18gKUr4kmUw
kWr5q/1NcagBi4hdgtFzz7VrLcIyDTDPFSeNmMBSPg/4qXrQamg=
-----END CERTIFICATE-----
Generated at Sun Dec 7 02:14:08 2025 by rpki-client