This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/46118f2b-9f94-4199-a241-8fc51d17e0c5/0/EA1FF21834CE2546B93FF7ABD7A24231492E6157.mft
File:                     EA1FF21834CE2546B93FF7ABD7A24231492E6157.mft (raw, json)
Hash identifier:          J2AdC6tzeh8mFYJT/TJrHaUcduPlQtRAz09F7qkJ/Vg=
Subject key identifier:   11:06:A7:82:F6:AF:75:65:34:36:03:EC:52:A1:9F:D9:05:98:37:B6
Authority key identifier: EA:1F:F2:18:34:CE:25:46:B9:3F:F7:AB:D7:A2:42:31:49:2E:61:57
Certificate issuer:       /CN=EA1FF21834CE2546B93FF7ABD7A24231492E6157
Certificate serial:       1EF566BEE40036690D9C624C1721091AA71A0352
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EA1FF21834CE2546B93FF7ABD7A24231492E6157.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/46118f2b-9f94-4199-a241-8fc51d17e0c5/0/EA1FF21834CE2546B93FF7ABD7A24231492E6157.mft
Manifest number:          04B9
Signing time:             Thu 04 Dec 2025 23:12:04 +0000
Manifest this update:     Thu 04 Dec 2025 23:07:04 +0000
Manifest next update:     Mon 08 Dec 2025 05:26:04 +0000
Files and hashes:         1: EA1FF21834CE2546B93FF7ABD7A24231492E6157.crl (hash: 8aZ96a6/Odtf00EGG0LTjvZqOMcGunlW+VK/ld8NjX4=)
                          2: 3130332e3136312e3134392e302f32342d3234203d3e20313431363137.roa (hash: aO5GUOOYzWayE1+nuqtYCqJb6iqD3aY2aScclOaaV0o=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/46118f2b-9f94-4199-a241-8fc51d17e0c5/0/EA1FF21834CE2546B93FF7ABD7A24231492E6157.crl
                          rsync://repo-rpki.idnic.net/repo/46118f2b-9f94-4199-a241-8fc51d17e0c5/0/EA1FF21834CE2546B93FF7ABD7A24231492E6157.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EA1FF21834CE2546B93FF7ABD7A24231492E6157.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 08 Dec 2025 05:26:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:f5:66:be:e4:00:36:69:0d:9c:62:4c:17:21:09:1a:a7:1a:03:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EA1FF21834CE2546B93FF7ABD7A24231492E6157
        Validity
            Not Before: Dec  4 23:07:04 2025 GMT
            Not After : Dec  8 05:26:04 2025 GMT
        Subject: CN=1106A782F6AF7565343603EC52A19FD9059837B6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:e2:f9:07:94:d2:25:c9:e3:9f:2f:bf:50:3a:
                    79:26:f5:e4:be:ac:bb:51:8a:21:11:97:54:2d:c8:
                    38:ba:4f:d1:39:c2:99:8c:75:7b:08:2b:9e:f1:59:
                    d2:c1:4e:e1:14:04:47:3a:21:f7:82:1f:ab:86:9c:
                    14:6b:7e:d1:eb:ce:7a:43:50:86:15:97:90:c7:0f:
                    4c:24:f9:d8:6c:01:03:50:6e:38:97:7e:bb:73:0b:
                    1f:8b:da:43:d1:bb:f8:4d:41:9c:fa:0f:6d:05:83:
                    2d:68:a7:cc:d1:fd:b0:f0:4b:2a:4b:0d:46:a4:b6:
                    0b:42:1d:79:09:2c:a7:ad:30:8a:1d:71:45:67:90:
                    36:1f:77:1d:5e:37:6b:7c:d6:aa:8a:7a:4e:f8:1d:
                    82:35:1f:36:4e:df:86:98:2a:52:06:bc:f0:a8:e1:
                    45:3a:42:e0:c5:65:d8:6d:bd:e4:0e:21:df:f6:5c:
                    74:4b:95:26:f1:f8:90:84:67:bc:42:0d:20:cc:49:
                    6b:e3:44:86:8b:c6:37:0c:f2:5e:30:38:97:38:58:
                    4e:9d:1a:fa:83:0e:85:7f:19:05:d8:88:c4:8f:0a:
                    82:30:30:ef:fe:b0:a3:b3:ae:64:60:7b:d6:ee:7a:
                    de:3d:54:14:6c:90:47:4d:4c:19:cc:5d:4f:e3:68:
                    0d:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:06:A7:82:F6:AF:75:65:34:36:03:EC:52:A1:9F:D9:05:98:37:B6
            X509v3 Authority Key Identifier:
                keyid:EA:1F:F2:18:34:CE:25:46:B9:3F:F7:AB:D7:A2:42:31:49:2E:61:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/46118f2b-9f94-4199-a241-8fc51d17e0c5/0/EA1FF21834CE2546B93FF7ABD7A24231492E6157.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EA1FF21834CE2546B93FF7ABD7A24231492E6157.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/46118f2b-9f94-4199-a241-8fc51d17e0c5/0/EA1FF21834CE2546B93FF7ABD7A24231492E6157.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:27:57:b8:9d:4f:e6:2f:b1:b3:36:b9:f8:a6:c9:e2:be:57:
         b5:e5:c1:9a:0e:61:57:5a:0b:8d:8c:17:44:d0:9b:96:ac:9c:
         c0:56:3c:eb:cd:76:26:70:c0:63:ee:2d:a0:0d:22:73:37:34:
         bc:fc:d5:95:d2:04:dc:ca:80:83:0e:25:a7:ec:aa:f4:30:30:
         27:ec:94:d4:cd:4e:a3:f2:88:65:43:8d:fe:c7:9f:3c:1a:6a:
         f0:86:ef:51:3b:b1:19:fd:20:16:86:ca:1e:ad:11:96:d5:05:
         1f:f6:55:45:a7:e4:87:47:29:83:e6:a0:cf:5d:2a:e1:ae:a1:
         73:11:76:84:f9:83:40:b1:e2:32:6a:60:00:cb:1a:cb:8b:0e:
         43:cc:20:19:2e:09:8d:b6:3e:aa:8f:80:c8:66:6f:97:dc:34:
         66:8e:b3:13:da:30:9c:86:fc:de:b5:12:34:aa:87:dc:b8:c4:
         45:58:75:95:80:42:fa:3a:5c:45:47:8c:3b:99:b4:c3:fb:2d:
         44:dc:ce:67:42:38:31:62:ea:85:00:b9:73:10:49:f0:96:f4:
         11:52:4a:e1:4f:61:39:13:d3:60:d2:42:32:2d:16:44:97:92:
         b7:18:3c:2d:fa:f5:2b:eb:53:56:eb:f6:8d:61:8d:a9:58:6d:
         70:69:27:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 01:10:30 2025 by rpki-client