This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/5e4aba0a-1c2c-4f8a-a4b4-ea72d9b2a60a/0/C4632299E016D269164FA40AEF99CC8602E2B7C1.mft
File:                     C4632299E016D269164FA40AEF99CC8602E2B7C1.mft (raw, json)
Hash identifier:          Lw+4Sb87EeGwowAu+6MrToUdtsqW5aM93sPcjwYAqQ0=
Subject key identifier:   21:6E:36:DE:97:05:51:CE:F9:A9:EF:9C:A1:C4:C4:AC:A7:E5:E6:2F
Authority key identifier: C4:63:22:99:E0:16:D2:69:16:4F:A4:0A:EF:99:CC:86:02:E2:B7:C1
Certificate issuer:       /CN=C4632299E016D269164FA40AEF99CC8602E2B7C1
Certificate serial:       17C6C71AF74F0A16D9767D5629DFCD7B74787E29
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C4632299E016D269164FA40AEF99CC8602E2B7C1.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/5e4aba0a-1c2c-4f8a-a4b4-ea72d9b2a60a/0/C4632299E016D269164FA40AEF99CC8602E2B7C1.mft
Manifest number:          E8
Signing time:             Sat 06 Dec 2025 05:31:38 +0000
Manifest this update:     Sat 06 Dec 2025 05:26:38 +0000
Manifest next update:     Tue 09 Dec 2025 11:18:38 +0000
Files and hashes:         1: 3136302e32322e36342e302f32332d3234203d3e203435333035.roa (hash: gDEeaK4MqvoH1/Rybnd4HP4RdLEQVc8gkFhCRcLn6ys=)
                          2: C4632299E016D269164FA40AEF99CC8602E2B7C1.crl (hash: khlSnLGPjRRIxSKLyX6HMjYxygzvV46A3NdCYiHSYEg=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/5e4aba0a-1c2c-4f8a-a4b4-ea72d9b2a60a/0/C4632299E016D269164FA40AEF99CC8602E2B7C1.crl
                          rsync://repo-rpki.idnic.net/repo/5e4aba0a-1c2c-4f8a-a4b4-ea72d9b2a60a/0/C4632299E016D269164FA40AEF99CC8602E2B7C1.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C4632299E016D269164FA40AEF99CC8602E2B7C1.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 09 Dec 2025 06:55:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:c6:c7:1a:f7:4f:0a:16:d9:76:7d:56:29:df:cd:7b:74:78:7e:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C4632299E016D269164FA40AEF99CC8602E2B7C1
        Validity
            Not Before: Dec  6 05:26:38 2025 GMT
            Not After : Dec  9 11:18:38 2025 GMT
        Subject: CN=216E36DE970551CEF9A9EF9CA1C4C4ACA7E5E62F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:69:88:57:ed:9e:6e:6c:4b:7d:1b:a3:bb:cc:
                    e0:dd:5c:de:22:db:eb:1d:2b:76:3f:8f:96:e0:5c:
                    16:22:04:3c:83:e8:60:4f:6e:9a:86:42:1a:d0:b8:
                    86:22:93:80:68:3f:65:ae:95:f7:21:27:f0:7e:a7:
                    a7:6c:a9:b8:fa:3a:c3:6c:fd:6b:66:1a:ed:9f:29:
                    e2:e8:ef:8c:f2:f9:06:ab:4f:fd:bb:9a:c1:a2:59:
                    dc:a0:11:f9:df:a3:f4:6a:bd:19:e1:4a:72:b8:4b:
                    4e:b8:49:7d:dc:b6:6a:84:10:03:8e:03:b2:34:d7:
                    1a:d1:ff:40:32:d4:b3:2c:22:81:ae:95:ed:61:5a:
                    d3:47:83:bc:48:43:ea:91:9d:03:90:0f:5c:38:d0:
                    19:8a:4e:06:6f:eb:5a:1a:5d:67:91:b0:72:2b:ed:
                    ae:bc:3e:75:c7:60:eb:0a:db:29:89:25:24:ab:14:
                    ba:28:36:82:37:5d:90:d3:17:f3:ac:a3:21:83:94:
                    a3:70:7e:e2:29:a9:41:66:04:36:ba:2d:db:93:2c:
                    8f:96:dd:df:a6:c8:19:16:5a:b9:de:dc:d2:1f:a4:
                    8f:50:ef:d6:ea:e3:88:d8:88:36:c9:87:7b:70:5d:
                    63:f4:25:17:05:cf:a0:48:c1:da:09:12:88:a0:12:
                    c5:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:6E:36:DE:97:05:51:CE:F9:A9:EF:9C:A1:C4:C4:AC:A7:E5:E6:2F
            X509v3 Authority Key Identifier:
                keyid:C4:63:22:99:E0:16:D2:69:16:4F:A4:0A:EF:99:CC:86:02:E2:B7:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/5e4aba0a-1c2c-4f8a-a4b4-ea72d9b2a60a/0/C4632299E016D269164FA40AEF99CC8602E2B7C1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C4632299E016D269164FA40AEF99CC8602E2B7C1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5e4aba0a-1c2c-4f8a-a4b4-ea72d9b2a60a/0/C4632299E016D269164FA40AEF99CC8602E2B7C1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c4:4a:59:15:b8:7d:aa:c6:dc:e9:62:57:be:5b:f8:a5:dd:47:
         37:73:c4:b1:83:ee:b5:85:69:40:cd:a6:db:ab:2b:77:08:a3:
         b1:a1:fd:bb:d5:32:78:74:72:2b:61:5a:a8:a0:06:b0:a8:3a:
         aa:ed:db:01:dd:b0:20:51:81:7c:90:95:fc:39:cc:ae:8a:47:
         2c:bc:0a:4d:50:4f:2b:27:95:80:6a:d8:1f:5e:39:3b:f7:f3:
         32:9c:43:dc:ad:d1:41:fc:61:19:41:d8:fc:9c:d8:ad:98:7b:
         2e:09:4c:52:d9:b3:fe:d7:ff:d7:f1:ae:47:4b:12:3c:eb:57:
         a2:2c:76:ff:4b:af:95:ea:c6:82:5e:73:51:4c:0e:c0:81:40:
         cb:0b:36:96:34:17:c3:8c:90:16:62:d9:57:c0:49:1c:c2:5a:
         1d:dc:f2:02:45:c7:db:54:09:66:1a:55:f5:fb:f2:76:a5:65:
         4b:2d:35:41:dc:79:2b:c2:2b:d3:1b:a0:5b:02:9f:8f:e0:95:
         ad:69:49:9a:af:2a:7c:81:51:dd:00:04:e6:b9:e4:18:0f:a5:
         bf:df:3b:5c:f4:f9:c1:80:39:5b:26:ae:de:1f:fd:08:47:50:
         d6:a1:3e:1c:c6:94:3d:9c:73:b9:56:4e:92:0e:7f:8c:07:d1:
         ee:af:08:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 23:26:04 2025 by rpki-client