This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/287f8f82-37bb-4983-93ca-5e0670ab02e3/0/EC62A94970E56AC9FE8B828A542B7EDBA3D116D5.mft
File:                     EC62A94970E56AC9FE8B828A542B7EDBA3D116D5.mft (raw, json)
Hash identifier:          5EdEM1rLRTm1+cXw8ID3mEeM9YE4OiTsLYrIHDOFO3I=
Subject key identifier:   DC:B7:A5:D8:40:59:04:B5:E8:7D:18:23:4E:CD:E7:34:66:52:34:35
Authority key identifier: EC:62:A9:49:70:E5:6A:C9:FE:8B:82:8A:54:2B:7E:DB:A3:D1:16:D5
Certificate issuer:       /CN=EC62A94970E56AC9FE8B828A542B7EDBA3D116D5
Certificate serial:       23226780D95D60C711B54EB121DDA2F970880647
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EC62A94970E56AC9FE8B828A542B7EDBA3D116D5.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/287f8f82-37bb-4983-93ca-5e0670ab02e3/0/EC62A94970E56AC9FE8B828A542B7EDBA3D116D5.mft
Manifest number:          052F
Signing time:             Sat 06 Dec 2025 03:01:43 +0000
Manifest this update:     Sat 06 Dec 2025 02:56:43 +0000
Manifest next update:     Tue 09 Dec 2025 07:18:43 +0000
Files and hashes:         1: EC62A94970E56AC9FE8B828A542B7EDBA3D116D5.crl (hash: jLT7B9PiajvRg3DQa6Jp2KyxSI2NSPkg+ixbOt7S6os=)
                          2: 3130332e362e3231342e302f32342d3234203d3e20313331313132.roa (hash: F0a3JFzr6TEGFg4XROWEIEBL9cNyd2bfiVU6lzFtCLY=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/287f8f82-37bb-4983-93ca-5e0670ab02e3/0/EC62A94970E56AC9FE8B828A542B7EDBA3D116D5.crl
                          rsync://repo-rpki.idnic.net/repo/287f8f82-37bb-4983-93ca-5e0670ab02e3/0/EC62A94970E56AC9FE8B828A542B7EDBA3D116D5.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EC62A94970E56AC9FE8B828A542B7EDBA3D116D5.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 09 Dec 2025 07:18:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:22:67:80:d9:5d:60:c7:11:b5:4e:b1:21:dd:a2:f9:70:88:06:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EC62A94970E56AC9FE8B828A542B7EDBA3D116D5
        Validity
            Not Before: Dec  6 02:56:43 2025 GMT
            Not After : Dec  9 07:18:43 2025 GMT
        Subject: CN=DCB7A5D8405904B5E87D18234ECDE73466523435
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:72:2f:c7:ed:a1:84:76:33:c3:e5:43:70:87:
                    02:19:c3:d1:40:ed:d1:8d:ba:54:2d:30:cd:a0:49:
                    d9:d8:de:24:d8:fa:24:02:4e:0e:f7:f9:22:bf:f4:
                    4d:f8:21:a2:e4:ad:a5:ec:2d:8f:c1:d3:3f:a8:dc:
                    6c:ae:58:b4:f8:d1:3c:13:4d:30:69:fc:97:3a:a1:
                    8f:95:5f:03:7c:2d:f4:88:28:73:52:51:eb:72:20:
                    7f:f5:98:1c:65:18:44:a4:ce:51:e3:47:17:87:90:
                    ff:4a:6d:83:d7:bc:68:6b:6a:d2:45:12:27:98:ef:
                    fe:e7:27:2f:a1:49:51:8d:6f:ae:f8:04:5e:db:b0:
                    cd:4b:06:b2:93:fd:8f:19:33:03:92:08:31:99:f3:
                    d9:ef:50:56:ab:98:e5:27:41:88:84:3c:14:a5:3e:
                    4b:b4:59:84:8b:1c:03:82:4a:5e:12:aa:44:ce:d4:
                    bd:28:5d:5c:1e:ec:e7:33:9a:e1:df:0b:f1:1a:4b:
                    ac:34:d4:b3:0f:5a:05:b0:c9:c3:e2:89:fe:73:52:
                    ed:4c:72:7b:cb:75:57:57:92:39:73:11:c4:8b:c9:
                    f6:d6:dd:89:1d:4e:c4:57:55:4e:13:36:4f:70:9e:
                    e7:32:91:85:88:2a:28:e9:ba:32:2f:32:f8:74:36:
                    0e:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:B7:A5:D8:40:59:04:B5:E8:7D:18:23:4E:CD:E7:34:66:52:34:35
            X509v3 Authority Key Identifier:
                keyid:EC:62:A9:49:70:E5:6A:C9:FE:8B:82:8A:54:2B:7E:DB:A3:D1:16:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/287f8f82-37bb-4983-93ca-5e0670ab02e3/0/EC62A94970E56AC9FE8B828A542B7EDBA3D116D5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EC62A94970E56AC9FE8B828A542B7EDBA3D116D5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/287f8f82-37bb-4983-93ca-5e0670ab02e3/0/EC62A94970E56AC9FE8B828A542B7EDBA3D116D5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:b4:94:0b:3a:b6:fc:ed:bb:05:b7:b8:bd:16:79:8b:84:0f:
         a4:ad:90:bf:e9:d9:80:f4:74:a8:70:96:26:56:d4:60:a4:12:
         75:d4:3d:34:64:7a:a2:02:83:11:06:a8:50:ea:81:18:23:76:
         3c:d4:2c:68:72:df:65:e2:3e:ea:c7:07:4d:42:2d:66:4b:32:
         21:38:30:31:25:be:0f:9c:68:7a:d4:79:72:42:c7:14:17:83:
         ad:85:4e:a8:b4:fe:a9:20:97:96:0b:c5:71:07:22:e2:9e:74:
         d9:d6:34:4d:43:cb:2b:a2:8b:93:b1:b7:08:04:bb:6b:1a:0d:
         61:8c:b3:f0:ee:a8:c9:a9:47:cb:33:a2:c0:b4:a1:1d:9f:b6:
         a4:dd:e6:83:e4:83:90:cb:29:f6:56:1c:1b:4b:27:58:55:f8:
         ec:f1:9f:53:e6:7f:3a:c3:97:f4:51:7f:11:7d:7d:69:56:6e:
         6c:75:fb:77:55:e5:41:fd:c6:02:e7:fe:40:37:04:7e:4d:7c:
         cd:fa:5d:e1:7d:e5:b3:44:fc:29:47:be:39:3d:d8:25:4a:61:
         3b:a3:67:84:53:b8:d9:a1:cb:29:ff:9e:1b:eb:1f:54:d4:fb:
         ed:3b:15:56:cb:78:62:66:d6:f7:b4:04:cc:6b:f1:1b:dc:41:
         65:0d:25:d5
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUIyJngNldYMcRtU6xId2i+XCIBkcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUM2MkE5NDk3MEU1NkFDOUZFOEI4MjhBNTQyQjdFREJB
M0QxMTZENTAeFw0yNTEyMDYwMjU2NDNaFw0yNTEyMDkwNzE4NDNaMDMxMTAvBgNV
BAMTKERDQjdBNUQ4NDA1OTA0QjVFODdEMTgyMzRFQ0RFNzM0NjY1MjM0MzUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQci/H7aGEdjPD5UNwhwIZw9FA
7dGNulQtMM2gSdnY3iTY+iQCTg73+SK/9E34IaLkraXsLY/B0z+o3GyuWLT40TwT
TTBp/Jc6oY+VXwN8LfSIKHNSUetyIH/1mBxlGESkzlHjRxeHkP9KbYPXvGhratJF
EieY7/7nJy+hSVGNb674BF7bsM1LBrKT/Y8ZMwOSCDGZ89nvUFarmOUnQYiEPBSl
Pku0WYSLHAOCSl4SqkTO1L0oXVwe7OczmuHfC/EaS6w01LMPWgWwycPiif5zUu1M
cnvLdVdXkjlzEcSLyfbW3YkdTsRXVU4TNk9wnucykYWIKijpujIvMvh0Ng43AgMB
AAGjggI8MIICODAdBgNVHQ4EFgQU3Lel2EBZBLXofRgjTs3nNGZSNDUwHwYDVR0j
BBgwFoAU7GKpSXDlasn+i4KKVCt+26PRFtUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y
ODdmOGY4Mi0zN2JiLTQ5ODMtOTNjYS01ZTA2NzBhYjAyZTMvMC9FQzYyQTk0OTcw
RTU2QUM5RkU4QjgyOEE1NDJCN0VEQkEzRDExNkQ1LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvRUM2MkE5NDk3MEU1NkFDOUZFOEI4MjhBNTQyQjdFREJBM0Qx
MTZENS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjg3ZjhmODItMzdiYi00OTgzLTkz
Y2EtNWUwNjcwYWIwMmUzLzAvRUM2MkE5NDk3MEU1NkFDOUZFOEI4MjhBNTQyQjdF
REJBM0QxMTZENS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAE+0lAs6tvztuwW3uL0WeYuED6StkL/p2YD0
dKhwliZW1GCkEnXUPTRkeqICgxEGqFDqgRgjdjzULGhy32XiPurHB01CLWZLMiE4
MDElvg+caHrUeXJCxxQXg62FTqi0/qkgl5YLxXEHIuKedNnWNE1Dyyuii5OxtwgE
u2saDWGMs/DuqMmpR8szosC0oR2ftqTd5oPkg5DLKfZWHBtLJ1hV+Ozxn1PmfzrD
l/RRfxF9fWlWbmx1+3dV5UH9xgLn/kA3BH5NfM36XeF95bNE/ClHvjk92CVKYTuj
Z4RTuNmhyyn/nhvrH1TU++07FVbLeGJm1ve0BMxr8RvcQWUNJdU=
-----END CERTIFICATE-----
Generated at Sun Dec 7 02:53:54 2025 by rpki-client