This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/63c8f4d7-e4b3-4b41-a685-514940fec819/0/E01F80F5B6C41210CA0370AEEFC9794EF0F0644A.mft
File:                     E01F80F5B6C41210CA0370AEEFC9794EF0F0644A.mft (raw, json)
Hash identifier:          kqRq9qG7cAC8wXdWeJXdKABDKXmuyhdk3D3GVZk+Mz0=
Subject key identifier:   37:69:E9:06:29:59:F5:5F:EC:0C:CB:28:67:A9:8D:33:B7:D5:01:84
Authority key identifier: E0:1F:80:F5:B6:C4:12:10:CA:03:70:AE:EF:C9:79:4E:F0:F0:64:4A
Certificate issuer:       /CN=E01F80F5B6C41210CA0370AEEFC9794EF0F0644A
Certificate serial:       6A2158BA24A25FC34AC3128D982360D514428968
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E01F80F5B6C41210CA0370AEEFC9794EF0F0644A.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/63c8f4d7-e4b3-4b41-a685-514940fec819/0/E01F80F5B6C41210CA0370AEEFC9794EF0F0644A.mft
Manifest number:          0505
Signing time:             Fri 05 Dec 2025 03:20:01 +0000
Manifest this update:     Fri 05 Dec 2025 03:15:01 +0000
Manifest next update:     Mon 08 Dec 2025 11:41:01 +0000
Files and hashes:         1: E01F80F5B6C41210CA0370AEEFC9794EF0F0644A.crl (hash: HfNgygD1YSMzYcwAo6Ioss4nFIY16E7hpGDqT+O9/R4=)
                          2: 3130332e37332e37372e302f32342d3234203d3e20313335343734.roa (hash: /pWCYTDigUVssgWBr2vt+99KFCUmi9P1Av9eMKxPKMw=)
                          3: 3130332e37332e37392e302f32342d3234203d3e20313335343734.roa (hash: 92vwgErRdgoZkW+X9kpw27QJGoI5j0NzvIHXl5PFvNM=)
                          4: 3130332e37332e37362e302f32342d3234203d3e20313335343734.roa (hash: 5Ndlq/+1JhO5LRCuBGurul0wd0jOL8PkLP0IS65Rxjc=)
                          5: 323430363a663138303a31303a3a2f34382d3438203d3e20313335343734.roa (hash: rUQSiT3dkKPXkOBoezZqlfXKo+zy3zNzDxs4QPbn2Js=)
                          6: 3130332e37332e37382e302f32342d3234203d3e20313335343734.roa (hash: /+qgUP1FzBqyIlX852+AoUrW1x1q8UQGT+rmfMidTQ8=)
                          7: 323430363a663138303a3a2f33322d3332203d3e20313335343734.roa (hash: 44GqV7+aifA6Y8Xw0PSqLbP9VTgKoGRYNbouCHxnZKc=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/63c8f4d7-e4b3-4b41-a685-514940fec819/0/E01F80F5B6C41210CA0370AEEFC9794EF0F0644A.crl
                          rsync://repo-rpki.idnic.net/repo/63c8f4d7-e4b3-4b41-a685-514940fec819/0/E01F80F5B6C41210CA0370AEEFC9794EF0F0644A.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E01F80F5B6C41210CA0370AEEFC9794EF0F0644A.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 08 Dec 2025 11:41:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:21:58:ba:24:a2:5f:c3:4a:c3:12:8d:98:23:60:d5:14:42:89:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E01F80F5B6C41210CA0370AEEFC9794EF0F0644A
        Validity
            Not Before: Dec  5 03:15:01 2025 GMT
            Not After : Dec  8 11:41:01 2025 GMT
        Subject: CN=3769E9062959F55FEC0CCB2867A98D33B7D50184
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:29:47:e5:ca:14:be:37:a1:a0:10:80:e4:2f:
                    8f:9f:38:92:8d:94:d8:96:25:97:da:82:9e:90:04:
                    05:89:f6:49:a1:1e:b9:95:a2:d5:5f:23:2f:5b:f7:
                    28:de:fb:2c:22:56:01:ee:c0:f5:10:95:75:eb:ae:
                    a3:66:a9:51:33:45:13:b6:4c:2e:51:21:98:fb:58:
                    05:a0:8c:d9:f0:de:36:7f:55:20:08:d2:c6:5e:2f:
                    4d:4e:75:c8:e8:66:5b:c8:87:d7:41:ce:28:ef:e2:
                    36:45:06:07:e6:d9:97:cc:8c:94:c0:16:ec:2a:88:
                    bc:c7:b0:0c:7a:fb:97:8d:4b:2e:d1:95:a7:9a:b4:
                    94:bb:e7:9f:56:90:1d:0e:3f:05:1a:d6:cf:6a:bf:
                    32:a4:99:6a:65:64:32:42:8e:50:ee:a6:c8:68:4a:
                    7c:63:3f:c5:97:0e:73:47:76:b4:98:82:a2:70:8a:
                    7b:31:66:0f:4e:d6:f9:fd:a8:94:1e:4c:e8:ed:f6:
                    7d:3b:7f:b7:8b:ef:8f:2e:a9:b9:8c:5a:a2:7b:85:
                    81:7e:d6:02:3f:46:78:7b:a6:d8:4e:37:66:7e:01:
                    89:07:07:92:51:9c:8d:be:10:d8:6a:0b:a6:fb:74:
                    e8:90:c2:f1:98:59:03:59:82:e9:2d:c2:15:54:04:
                    78:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:69:E9:06:29:59:F5:5F:EC:0C:CB:28:67:A9:8D:33:B7:D5:01:84
            X509v3 Authority Key Identifier:
                keyid:E0:1F:80:F5:B6:C4:12:10:CA:03:70:AE:EF:C9:79:4E:F0:F0:64:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/63c8f4d7-e4b3-4b41-a685-514940fec819/0/E01F80F5B6C41210CA0370AEEFC9794EF0F0644A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E01F80F5B6C41210CA0370AEEFC9794EF0F0644A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/63c8f4d7-e4b3-4b41-a685-514940fec819/0/E01F80F5B6C41210CA0370AEEFC9794EF0F0644A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:f5:5c:22:c0:f2:67:f3:6e:fa:66:a4:fd:ac:7d:5d:73:27:
         1a:73:45:d7:ef:3c:6d:26:2d:39:3a:7d:c4:07:e7:ae:73:35:
         81:b5:d2:aa:70:11:cf:f7:52:f8:47:6c:a0:e9:25:d3:54:17:
         3d:fd:8d:51:06:be:f0:87:7c:1d:10:69:7c:3b:f3:c9:9c:9f:
         d3:87:28:1c:6f:73:e4:27:77:d9:65:19:49:be:bc:2b:36:2c:
         90:af:fa:df:47:19:27:68:28:9a:78:47:08:93:a3:55:44:7d:
         ab:80:82:d0:af:a7:e0:b9:d7:36:7d:ad:76:e1:dd:b1:c0:89:
         1d:2a:7c:2c:1b:30:14:3b:c0:ef:76:9f:0d:b1:8c:77:f9:f6:
         e0:f4:bb:1c:fd:9b:40:83:18:fe:9d:d1:e8:56:52:40:60:fe:
         9b:b6:28:5b:33:5a:b1:df:a2:f2:ba:3e:1d:c2:83:8b:b8:7a:
         73:89:23:ec:7f:fb:a6:48:07:da:a3:7e:fb:47:b3:02:89:d1:
         83:4e:8d:e4:ec:a2:2a:13:34:e4:10:6d:df:a4:53:0f:bc:dc:
         29:e1:7d:1b:36:a9:c5:18:2e:b1:6b:fa:6a:62:70:d5:f5:5d:
         b6:45:a4:5d:e0:a6:bd:67:53:bf:d5:4d:8f:96:00:e1:f6:1f:
         10:c4:bc:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 04:57:14 2025 by rpki-client