This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/31b433a5-72b1-4653-99d3-9469c8b8b762/0/EAD173629E4F955F44EC781A3739775E738ACCFD.mft
File:                     EAD173629E4F955F44EC781A3739775E738ACCFD.mft (raw, json)
Hash identifier:          lO1RGNOBF3myMJl9w320vSXXl9tXjwlTaWJGQnRqCFM=
Subject key identifier:   03:52:4E:04:86:E4:C6:22:C7:E8:2F:AA:E2:0A:5E:A5:8B:5E:77:88
Authority key identifier: EA:D1:73:62:9E:4F:95:5F:44:EC:78:1A:37:39:77:5E:73:8A:CC:FD
Certificate issuer:       /CN=EAD173629E4F955F44EC781A3739775E738ACCFD
Certificate serial:       32CA735A27F8BD9BEA5FDBD5ED9F4215801D3080
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/EAD173629E4F955F44EC781A3739775E738ACCFD.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/31b433a5-72b1-4653-99d3-9469c8b8b762/0/EAD173629E4F955F44EC781A3739775E738ACCFD.mft
Manifest number:          0100
Signing time:             Sun 07 Dec 2025 16:20:46 +0000
Manifest this update:     Sun 07 Dec 2025 16:15:46 +0000
Manifest next update:     Wed 10 Dec 2025 22:52:46 +0000
Files and hashes:         1: 3135372e36362e32392e302f32342d3234203d3e203539323831.roa (hash: zTHLGAwQAsHOZagfs3+O24ipzV4m2EM9CneqRLVHTaQ=)
                          2: EAD173629E4F955F44EC781A3739775E738ACCFD.crl (hash: n/pmPKTqWh69mibRjuyyL4I9MNccL5k2nmiz7Wq0pP0=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/31b433a5-72b1-4653-99d3-9469c8b8b762/0/EAD173629E4F955F44EC781A3739775E738ACCFD.crl
                          rsync://repo-rpki.idnic.net/repo/31b433a5-72b1-4653-99d3-9469c8b8b762/0/EAD173629E4F955F44EC781A3739775E738ACCFD.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/EAD173629E4F955F44EC781A3739775E738ACCFD.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 09 Dec 2025 06:55:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:ca:73:5a:27:f8:bd:9b:ea:5f:db:d5:ed:9f:42:15:80:1d:30:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EAD173629E4F955F44EC781A3739775E738ACCFD
        Validity
            Not Before: Dec  7 16:15:46 2025 GMT
            Not After : Dec 10 22:52:46 2025 GMT
        Subject: CN=03524E0486E4C622C7E82FAAE20A5EA58B5E7788
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:f4:bc:92:45:41:41:e8:0a:d6:56:f2:81:a6:
                    af:34:68:1d:17:b7:d4:5a:4f:0b:d8:89:39:74:ae:
                    d3:05:93:b6:e9:47:9d:d9:c9:7b:5e:3d:6c:4e:fe:
                    ce:47:b7:3c:c2:c2:b9:26:98:6f:dc:22:cd:0d:23:
                    78:bd:16:1a:7f:26:ec:df:be:d1:48:89:af:60:4c:
                    5e:2a:74:c2:fd:50:89:86:60:54:3e:dc:2e:3a:af:
                    10:a6:c4:84:cb:d0:33:c3:df:3b:c2:dc:9e:02:8a:
                    65:28:68:85:4b:03:e0:00:35:ff:9a:a6:6b:90:9f:
                    de:af:b3:68:b8:35:50:e4:3b:4f:5a:b8:6c:73:43:
                    58:6b:b2:3c:24:3d:f0:ea:96:5a:c6:13:2e:18:19:
                    6e:3b:34:18:b0:d8:e5:af:fa:7e:0d:2b:d0:dc:47:
                    5b:c9:0f:35:3e:94:42:50:05:06:2e:a8:e7:93:d6:
                    cc:33:17:b6:76:92:0b:57:00:5d:77:fa:b2:86:d7:
                    0e:55:7b:b5:15:22:bd:f2:5c:f5:9f:e5:1b:a8:91:
                    10:d1:a4:a8:e5:fa:4b:55:f6:b8:c8:4e:b3:dd:a5:
                    47:f7:c7:be:7d:d3:fd:6c:c6:bc:3f:e7:9c:04:34:
                    ec:93:95:dc:8f:8a:d7:60:e4:0e:54:02:de:a3:52:
                    01:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:52:4E:04:86:E4:C6:22:C7:E8:2F:AA:E2:0A:5E:A5:8B:5E:77:88
            X509v3 Authority Key Identifier:
                keyid:EA:D1:73:62:9E:4F:95:5F:44:EC:78:1A:37:39:77:5E:73:8A:CC:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/31b433a5-72b1-4653-99d3-9469c8b8b762/0/EAD173629E4F955F44EC781A3739775E738ACCFD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/EAD173629E4F955F44EC781A3739775E738ACCFD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/31b433a5-72b1-4653-99d3-9469c8b8b762/0/EAD173629E4F955F44EC781A3739775E738ACCFD.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:0e:06:6a:b2:59:4d:62:fc:c3:7b:25:19:3d:59:d2:53:4f:
         b2:90:75:c5:de:34:b3:32:b9:2c:b6:04:5e:ad:30:43:d8:ef:
         72:d4:9c:77:da:c0:42:f9:bc:a4:30:b3:ea:f2:fe:50:34:5c:
         6d:c9:11:26:b0:c8:2e:65:2c:8e:1a:6f:85:69:b0:c7:ec:65:
         0a:00:70:ef:a9:a8:31:9d:86:22:85:13:c1:49:20:f9:c9:1c:
         c2:dd:7c:d2:aa:f2:f2:0e:d6:da:dd:19:31:9e:6f:8d:e2:45:
         b3:8d:6f:bf:35:3a:fa:ce:8a:ca:80:aa:a7:6e:83:98:f5:4e:
         ab:1f:58:71:c1:1d:89:81:fc:c1:7e:b1:92:af:2a:a0:a6:91:
         eb:48:15:59:11:ff:50:d5:e8:75:01:44:cf:19:06:89:37:d8:
         3a:54:d5:b5:71:39:b8:e2:27:70:f9:84:23:07:ef:dd:6c:f9:
         40:43:a4:ca:94:36:18:17:42:43:f9:be:30:25:ac:21:50:7d:
         58:b3:61:ab:96:7c:8b:c5:8e:b1:6b:a4:24:d3:a9:6f:91:3c:
         88:53:8e:82:36:92:8d:5d:8c:23:7d:77:af:54:d9:06:69:1a:
         88:b9:93:7f:76:39:ab:e9:e0:c3:4e:f2:72:83:10:69:fd:a8:
         53:e2:6a:68
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUMspzWif4vZvqX9vV7Z9CFYAdMIAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUFEMTczNjI5RTRGOTU1RjQ0RUM3ODFBMzczOTc3NUU3
MzhBQ0NGRDAeFw0yNTEyMDcxNjE1NDZaFw0yNTEyMTAyMjUyNDZaMDMxMTAvBgNV
BAMTKDAzNTI0RTA0ODZFNEM2MjJDN0U4MkZBQUUyMEE1RUE1OEI1RTc3ODgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCt9LySRUFB6ArWVvKBpq80aB0X
t9RaTwvYiTl0rtMFk7bpR53ZyXtePWxO/s5HtzzCwrkmmG/cIs0NI3i9Fhp/Juzf
vtFIia9gTF4qdML9UImGYFQ+3C46rxCmxITL0DPD3zvC3J4CimUoaIVLA+AANf+a
pmuQn96vs2i4NVDkO09auGxzQ1hrsjwkPfDqllrGEy4YGW47NBiw2OWv+n4NK9Dc
R1vJDzU+lEJQBQYuqOeT1swzF7Z2kgtXAF13+rKG1w5Ve7UVIr3yXPWf5RuokRDR
pKjl+ktV9rjITrPdpUf3x7590/1sxrw/55wENOyTldyPitdg5A5UAt6jUgFzAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUA1JOBIbkxiLH6C+q4gpepYted4gwHwYDVR0j
BBgwFoAU6tFzYp5PlV9E7HgaNzl3XnOKzP0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z
MWI0MzNhNS03MmIxLTQ2NTMtOTlkMy05NDY5YzhiOGI3NjIvMC9FQUQxNzM2MjlF
NEY5NTVGNDRFQzc4MUEzNzM5Nzc1RTczOEFDQ0ZELmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzEvRUFEMTczNjI5RTRGOTU1RjQ0RUM3ODFBMzczOTc3NUU3MzhB
Q0NGRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzFiNDMzYTUtNzJiMS00NjUzLTk5
ZDMtOTQ2OWM4YjhiNzYyLzAvRUFEMTczNjI5RTRGOTU1RjQ0RUM3ODFBMzczOTc3
NUU3MzhBQ0NGRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBACIOBmqyWU1i/MN7JRk9WdJTT7KQdcXeNLMy
uSy2BF6tMEPY73LUnHfawEL5vKQws+ry/lA0XG3JESawyC5lLI4ab4VpsMfsZQoA
cO+pqDGdhiKFE8FJIPnJHMLdfNKq8vIO1trdGTGeb43iRbONb781OvrOisqAqqdu
g5j1TqsfWHHBHYmB/MF+sZKvKqCmketIFVkR/1DV6HUBRM8ZBok32DpU1bVxObji
J3D5hCMH791s+UBDpMqUNhgXQkP5vjAlrCFQfVizYauWfIvFjrFrpCTTqW+RPIhT
joI2ko1djCN9d69U2QZpGoi5k392Oavp4MNO8nKDEGn9qFPiamg=
-----END CERTIFICATE-----
Generated at Sun Dec 7 18:27:01 2025 by rpki-client