This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/214676cd-de39-468a-ad25-675e1b910fac/0/E8DA87F34A550D0047EEC039A20C8441F066EC5B.mft
File:                     E8DA87F34A550D0047EEC039A20C8441F066EC5B.mft (raw, json)
Hash identifier:          3tjwKrbvoEgE7DFWrkSVXrDy5ZzGKHN9y2/Av/GU15w=
Subject key identifier:   47:A6:19:F3:62:05:D9:77:D7:16:0D:C1:96:AC:55:65:F8:08:41:E4
Authority key identifier: E8:DA:87:F3:4A:55:0D:00:47:EE:C0:39:A2:0C:84:41:F0:66:EC:5B
Certificate issuer:       /CN=E8DA87F34A550D0047EEC039A20C8441F066EC5B
Certificate serial:       1DACFD5B5CD912EA909C4EA177D4041AD80D3B15
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E8DA87F34A550D0047EEC039A20C8441F066EC5B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/214676cd-de39-468a-ad25-675e1b910fac/0/E8DA87F34A550D0047EEC039A20C8441F066EC5B.mft
Manifest number:          0334
Signing time:             Sat 06 Dec 2025 19:10:40 +0000
Manifest this update:     Sat 06 Dec 2025 19:05:40 +0000
Manifest next update:     Wed 10 Dec 2025 04:52:40 +0000
Files and hashes:         1: E8DA87F34A550D0047EEC039A20C8441F066EC5B.crl (hash: 2JjQPTKJzPP4pvZCrAM+DhFZ24dHWXpqrySnsqD0Nuw=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/214676cd-de39-468a-ad25-675e1b910fac/0/E8DA87F34A550D0047EEC039A20C8441F066EC5B.crl
                          rsync://repo-rpki.idnic.net/repo/214676cd-de39-468a-ad25-675e1b910fac/0/E8DA87F34A550D0047EEC039A20C8441F066EC5B.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E8DA87F34A550D0047EEC039A20C8441F066EC5B.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 09 Dec 2025 15:57:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:ac:fd:5b:5c:d9:12:ea:90:9c:4e:a1:77:d4:04:1a:d8:0d:3b:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E8DA87F34A550D0047EEC039A20C8441F066EC5B
        Validity
            Not Before: Dec  6 19:05:40 2025 GMT
            Not After : Dec 10 04:52:40 2025 GMT
        Subject: CN=47A619F36205D977D7160DC196AC5565F80841E4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:93:b2:74:43:b8:95:1f:93:ba:b4:05:94:35:
                    a4:00:0c:13:a6:a5:02:63:72:a8:98:80:29:c6:05:
                    92:9e:59:d0:2e:e0:6d:4c:be:aa:c2:e6:86:24:1b:
                    e4:f6:5f:a8:59:f1:c5:c9:2a:89:b1:8b:e8:33:1d:
                    e3:c7:80:a9:f2:a1:97:0b:f3:5f:d5:6d:dd:dc:88:
                    ae:88:36:43:7f:46:a1:0d:7f:4c:48:f6:98:8b:26:
                    08:e5:60:c1:9a:00:08:8a:8f:5d:81:19:ec:fd:d6:
                    20:e6:a5:c8:28:97:88:61:1a:3b:17:f6:d8:be:f3:
                    ba:d7:ed:74:a2:8b:86:93:d5:44:56:39:48:6a:34:
                    95:a5:44:72:df:15:90:3f:39:3a:02:bb:82:f9:34:
                    01:5e:77:b8:4c:39:dd:19:f4:e6:ea:e0:21:e9:bc:
                    53:d8:da:d1:b6:e4:33:7b:9c:39:2d:29:37:b1:7e:
                    0f:8e:a0:6f:a5:ac:57:3c:94:d8:3b:61:14:28:dc:
                    29:22:cf:a0:6b:c8:d2:7b:d9:b7:d7:0e:2d:31:92:
                    59:48:e7:31:ab:53:76:47:29:e1:03:ce:fc:49:71:
                    8c:8c:de:38:4e:4c:9e:aa:01:86:62:ff:90:af:e2:
                    ce:cb:a5:f5:a6:43:bd:4b:b7:95:56:7d:2b:0c:83:
                    fa:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:A6:19:F3:62:05:D9:77:D7:16:0D:C1:96:AC:55:65:F8:08:41:E4
            X509v3 Authority Key Identifier:
                keyid:E8:DA:87:F3:4A:55:0D:00:47:EE:C0:39:A2:0C:84:41:F0:66:EC:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/214676cd-de39-468a-ad25-675e1b910fac/0/E8DA87F34A550D0047EEC039A20C8441F066EC5B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E8DA87F34A550D0047EEC039A20C8441F066EC5B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/214676cd-de39-468a-ad25-675e1b910fac/0/E8DA87F34A550D0047EEC039A20C8441F066EC5B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:b3:fb:5c:39:0e:04:5a:fd:dd:c0:20:33:58:a6:a5:15:c2:
         7e:eb:c3:d8:21:13:10:67:31:d5:5e:97:9d:78:27:ac:a1:ca:
         22:81:1c:a4:2f:72:ed:15:1a:b4:cb:1d:da:d9:a7:60:a4:6f:
         33:54:24:18:f3:8b:8b:11:6a:ca:bf:9e:5f:e9:f8:84:e0:52:
         c2:6a:ea:0a:c6:b3:96:d1:81:f7:c2:a0:82:82:3d:3f:10:85:
         5c:2d:83:d0:bb:f9:a3:9e:1a:84:60:2a:d3:0d:c4:e1:30:e3:
         eb:f9:37:ba:e5:ed:ce:e7:ae:bc:ea:2e:28:f6:ef:38:03:92:
         95:bc:79:4c:65:7e:f4:e2:29:9a:4b:f9:bb:2c:bc:0b:73:34:
         70:40:55:6a:4b:40:30:9f:97:52:26:26:b0:00:b4:0c:87:78:
         a4:fb:01:53:32:b3:5a:4b:ef:c9:09:69:d2:c4:c5:73:71:e2:
         bd:03:02:35:b6:00:c2:46:b3:7f:52:6b:7a:9b:3b:da:49:78:
         42:da:00:4a:07:a2:50:d7:4b:22:fe:02:52:66:3e:61:f2:3a:
         0d:99:ea:32:b8:21:70:60:5c:c5:3f:95:0a:de:b3:f3:fb:ab:
         9f:61:54:99:14:56:24:2e:be:08:64:84:e2:50:3a:a4:03:6c:
         b3:f1:a9:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 05:40:49 2025 by rpki-client