This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/6ef0013b-59a6-4733-89f8-28fa3d88579f/0/E0AC9F73542C4FA1E52F9E565EED952D4528ABD5.mft
File:                     E0AC9F73542C4FA1E52F9E565EED952D4528ABD5.mft (raw, json)
Hash identifier:          rxeMR7PeXFicFJbP1uEMpBZA/eJ03ZsRLWFZToe0yUY=
Subject key identifier:   E0:50:B1:C8:7E:B3:10:C4:DE:74:1C:FF:86:40:50:E4:7C:6F:1B:17
Authority key identifier: E0:AC:9F:73:54:2C:4F:A1:E5:2F:9E:56:5E:ED:95:2D:45:28:AB:D5
Certificate issuer:       /CN=E0AC9F73542C4FA1E52F9E565EED952D4528ABD5
Certificate serial:       7B358A3DB6FB9D25872D6B2966BC7CABB0795546
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E0AC9F73542C4FA1E52F9E565EED952D4528ABD5.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/6ef0013b-59a6-4733-89f8-28fa3d88579f/0/E0AC9F73542C4FA1E52F9E565EED952D4528ABD5.mft
Manifest number:          01BE
Signing time:             Fri 05 Dec 2025 12:41:59 +0000
Manifest this update:     Fri 05 Dec 2025 12:36:59 +0000
Manifest next update:     Mon 08 Dec 2025 23:39:59 +0000
Files and hashes:         1: 3130332e3130312e3231382e302f32332d3234203d3e20313432333437.roa (hash: bfGWWBYLFdBS0ipwVQx4h+wBe1EIqVM2TX2GM2uhPGQ=)
                          2: E0AC9F73542C4FA1E52F9E565EED952D4528ABD5.crl (hash: um7UkKr35hhEuXq1R32wXmTJu8nsgY8SXNLtsn7sSK8=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/6ef0013b-59a6-4733-89f8-28fa3d88579f/0/E0AC9F73542C4FA1E52F9E565EED952D4528ABD5.crl
                          rsync://repo-rpki.idnic.net/repo/6ef0013b-59a6-4733-89f8-28fa3d88579f/0/E0AC9F73542C4FA1E52F9E565EED952D4528ABD5.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E0AC9F73542C4FA1E52F9E565EED952D4528ABD5.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 08 Dec 2025 23:39:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:35:8a:3d:b6:fb:9d:25:87:2d:6b:29:66:bc:7c:ab:b0:79:55:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E0AC9F73542C4FA1E52F9E565EED952D4528ABD5
        Validity
            Not Before: Dec  5 12:36:59 2025 GMT
            Not After : Dec  8 23:39:59 2025 GMT
        Subject: CN=E050B1C87EB310C4DE741CFF864050E47C6F1B17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:a3:35:ad:65:d8:03:36:07:f1:38:99:87:ef:
                    82:88:b7:98:24:19:06:5f:87:46:9d:33:eb:86:60:
                    3b:26:dc:7a:13:35:9f:d0:b6:f7:46:c9:57:f7:c3:
                    6f:44:22:ea:5e:b4:65:96:ef:a1:a3:15:ae:19:15:
                    dc:eb:40:e0:39:82:ff:40:58:5b:d0:f8:9a:e2:b2:
                    7b:1b:dc:77:12:cd:5f:d7:6c:c1:49:fb:47:f2:51:
                    de:ed:d4:58:de:03:87:58:c2:62:cd:2b:15:06:4a:
                    43:ac:14:44:61:62:3e:7d:0f:e1:72:f0:88:59:8d:
                    7f:ea:ab:20:53:87:08:13:c9:c8:3c:37:90:f4:7e:
                    83:7e:3e:7e:dc:71:0e:81:63:f8:19:6a:fb:79:9a:
                    90:0d:32:b9:e0:72:df:99:65:a9:78:c8:62:c0:65:
                    db:6f:f0:f6:2a:76:4d:8a:de:3e:9d:0e:eb:6b:e3:
                    19:8a:a2:4f:d2:b0:d5:35:fa:de:58:be:9f:00:6f:
                    c1:4a:9a:e1:69:b0:9e:18:be:7c:ff:b5:e3:af:90:
                    71:d7:d4:52:19:f2:f0:d1:f6:b2:db:cd:5c:f6:dc:
                    b3:51:f7:a6:a0:ba:75:6a:bc:9b:22:88:45:5e:29:
                    3e:cd:71:95:1a:5d:af:82:2f:ed:3f:85:51:76:0a:
                    d7:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:50:B1:C8:7E:B3:10:C4:DE:74:1C:FF:86:40:50:E4:7C:6F:1B:17
            X509v3 Authority Key Identifier:
                keyid:E0:AC:9F:73:54:2C:4F:A1:E5:2F:9E:56:5E:ED:95:2D:45:28:AB:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/6ef0013b-59a6-4733-89f8-28fa3d88579f/0/E0AC9F73542C4FA1E52F9E565EED952D4528ABD5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E0AC9F73542C4FA1E52F9E565EED952D4528ABD5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6ef0013b-59a6-4733-89f8-28fa3d88579f/0/E0AC9F73542C4FA1E52F9E565EED952D4528ABD5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:f4:13:6a:af:c4:86:aa:22:71:53:be:8d:39:f6:f8:06:4e:
         f4:2d:6a:51:c4:1f:7f:79:0a:d6:f2:4c:21:9b:7a:d3:2f:c4:
         bb:05:46:35:a8:ca:97:1b:00:43:34:83:7a:d8:0b:83:f7:b7:
         14:e8:5b:cf:55:54:b7:d2:34:95:18:cf:2d:8e:8e:b9:40:f2:
         e0:df:65:02:7f:3e:a1:6b:79:eb:5d:d2:9a:3b:fc:68:75:bb:
         c3:4d:3e:92:00:ed:6e:8e:ef:89:50:84:19:1c:c1:dc:9e:86:
         49:31:08:a2:dc:0f:af:8f:69:44:f2:c9:0b:bb:76:e9:6a:f8:
         d2:84:4a:a3:6d:be:4a:9f:8d:b5:b5:ea:af:1d:34:ae:b5:37:
         0a:87:03:81:a4:5e:2a:ce:60:70:20:5f:c4:0d:5d:0d:fc:e6:
         ac:77:43:60:d2:56:a3:7d:67:b3:e3:17:ff:48:c4:b7:d4:54:
         f4:2f:ed:e0:31:bd:f2:81:1b:3c:cc:0f:99:de:4a:53:0c:09:
         72:18:c1:95:2a:36:28:86:0a:44:2b:05:90:0c:d7:7f:77:f2:
         a6:56:7e:a1:b0:57:a2:65:05:43:d1:c4:72:90:b8:5f:27:1e:
         f6:31:06:3b:26:3e:19:6b:80:11:f1:ac:4d:65:e8:ed:3e:4d:
         e9:fd:d0:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 03:16:34 2025 by rpki-client