This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/74bf07cf-50a9-428a-90d2-d44d6b762b55/0/E1F7E739D5E92CEFAAF8DB4FDE24B402DF2F5F12.mft
File:                     E1F7E739D5E92CEFAAF8DB4FDE24B402DF2F5F12.mft (raw, json)
Hash identifier:          jJKIMNGPdNCrk3jh/5RyLhEldOv7jOU2s8k7RigITMg=
Subject key identifier:   85:12:CF:16:94:62:E8:43:3F:68:7E:82:9B:B9:AF:94:DB:EB:79:F1
Authority key identifier: E1:F7:E7:39:D5:E9:2C:EF:AA:F8:DB:4F:DE:24:B4:02:DF:2F:5F:12
Certificate issuer:       /CN=E1F7E739D5E92CEFAAF8DB4FDE24B402DF2F5F12
Certificate serial:       78A277E8ADA36422E2C3C2526FA3BA8C97A6C2FB
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E1F7E739D5E92CEFAAF8DB4FDE24B402DF2F5F12.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/74bf07cf-50a9-428a-90d2-d44d6b762b55/0/E1F7E739D5E92CEFAAF8DB4FDE24B402DF2F5F12.mft
Manifest number:          01BB
Signing time:             Wed 17 Dec 2025 05:50:54 +0000
Manifest this update:     Wed 17 Dec 2025 05:45:54 +0000
Manifest next update:     Sat 20 Dec 2025 09:01:54 +0000
Files and hashes:         1: 3130332e3131302e33342e302f32332d3234203d3e20313530393336.roa (hash: 2f4uu7IrkIZq7UTq+ptH1NLF5HW0iMlWBn9DqvPnp4U=)
                          2: 3130332e3131302e33352e302f32342d3234203d3e20313530393336.roa (hash: uQLjUBISMtz6q/VlBRFK79+EJlW80V1U4JVUQySqyvM=)
                          3: 3130332e3131302e33342e302f32342d3234203d3e20313530393336.roa (hash: CzAMVi4LI/hA4dEq+gFLf1t2OAe5Bjc5LnZkwOWw6KQ=)
                          4: 3130332e3131302e33342e302f32342d3234203d3e203438343635.roa (hash: PfXBdlYDWEtVezNTe8gChl6D2vjrU0fVmVCcz01D0ac=)
                          5: E1F7E739D5E92CEFAAF8DB4FDE24B402DF2F5F12.crl (hash: Ur8sLVWIRjxZibdJVyC1SuawjqCmCfA6+anXkik419I=)
                          6: 3130332e3131302e33352e302f32342d3234203d3e203438343635.roa (hash: t5FEbOLpmmiM+pm5xNk45bS+68qbBIUF8y4AW5jVQqc=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/74bf07cf-50a9-428a-90d2-d44d6b762b55/0/E1F7E739D5E92CEFAAF8DB4FDE24B402DF2F5F12.crl
                          rsync://repo-rpki.idnic.net/repo/74bf07cf-50a9-428a-90d2-d44d6b762b55/0/E1F7E739D5E92CEFAAF8DB4FDE24B402DF2F5F12.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E1F7E739D5E92CEFAAF8DB4FDE24B402DF2F5F12.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Dec 2025 09:01:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:a2:77:e8:ad:a3:64:22:e2:c3:c2:52:6f:a3:ba:8c:97:a6:c2:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E1F7E739D5E92CEFAAF8DB4FDE24B402DF2F5F12
        Validity
            Not Before: Dec 17 05:45:54 2025 GMT
            Not After : Dec 20 09:01:54 2025 GMT
        Subject: CN=8512CF169462E8433F687E829BB9AF94DBEB79F1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:c0:31:e3:a8:87:4d:9d:f6:ba:37:c7:4a:64:
                    4d:d0:af:d9:51:87:3a:b5:1d:b2:89:1a:f7:c7:cb:
                    25:13:2b:7d:53:27:26:d9:3c:99:d5:ac:74:51:06:
                    ce:7b:34:8e:60:2c:d0:6b:b7:7c:79:42:d8:41:85:
                    cc:b7:4a:c9:6f:64:a0:49:a8:e2:9b:05:de:20:5f:
                    28:ae:cf:5a:18:15:e9:d8:e4:55:9d:59:5d:7d:de:
                    cf:31:8c:3a:10:9c:74:b5:6c:e7:cc:76:1e:95:74:
                    54:a4:da:56:27:7d:23:08:f8:34:a5:3b:a7:6c:55:
                    af:93:1d:ab:62:89:2f:82:c0:b8:c9:14:0f:41:ab:
                    1d:e5:ab:e7:e5:47:45:5f:88:35:0f:75:6c:90:3f:
                    e8:c1:65:1f:61:0e:e8:8d:ec:4f:81:fe:01:85:26:
                    42:87:b6:20:1d:9f:1c:fb:fb:9d:40:63:9f:46:33:
                    4d:17:4b:63:9c:3e:5b:33:14:98:bc:e7:25:28:d6:
                    ce:60:37:d8:09:59:60:ed:82:a4:bb:d6:54:80:c6:
                    91:42:ba:ac:ea:e1:73:a0:e0:69:17:1c:23:7f:4d:
                    01:70:e3:62:3f:cf:53:84:0d:a8:c9:af:e0:94:90:
                    11:95:ab:6b:16:02:42:c3:1a:21:1b:5f:ba:6e:8d:
                    c9:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:12:CF:16:94:62:E8:43:3F:68:7E:82:9B:B9:AF:94:DB:EB:79:F1
            X509v3 Authority Key Identifier:
                keyid:E1:F7:E7:39:D5:E9:2C:EF:AA:F8:DB:4F:DE:24:B4:02:DF:2F:5F:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/74bf07cf-50a9-428a-90d2-d44d6b762b55/0/E1F7E739D5E92CEFAAF8DB4FDE24B402DF2F5F12.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E1F7E739D5E92CEFAAF8DB4FDE24B402DF2F5F12.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/74bf07cf-50a9-428a-90d2-d44d6b762b55/0/E1F7E739D5E92CEFAAF8DB4FDE24B402DF2F5F12.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:47:9d:37:44:31:06:10:dd:f7:43:b7:5f:98:52:0d:ee:16:
         34:83:4c:a7:d5:0e:54:da:77:f3:b9:78:0e:f6:15:52:f0:5a:
         fe:03:3a:83:ad:de:24:f0:0f:bf:5b:4f:de:80:6f:01:4b:48:
         1f:c4:6a:92:98:e9:5f:a2:92:f5:2a:fa:79:30:ea:bc:33:ae:
         d5:3a:c0:dc:b6:33:45:df:30:6a:0c:92:71:11:7c:0f:a0:d9:
         3b:ce:bb:a2:7b:64:ca:fc:34:81:ab:5d:cf:8d:a1:c5:ed:75:
         4e:70:8a:bf:1b:0a:46:75:62:bc:34:ea:0b:31:b2:ba:f3:12:
         20:28:1f:23:78:a5:9e:38:14:1f:99:8b:87:39:89:27:de:27:
         09:90:98:16:48:d2:3b:78:29:4e:03:cc:4d:55:61:d8:18:88:
         b5:94:dc:f9:0f:3d:c8:8a:3c:49:b5:c4:99:fe:d3:c3:41:39:
         dc:00:c2:ff:8e:a3:8f:4b:bd:b0:5e:08:4b:58:94:a8:bd:58:
         49:91:47:1a:dc:46:68:a4:00:63:a6:4a:4d:59:88:fa:ab:c5:
         7b:0b:d4:af:c3:c0:50:4d:c9:ec:b4:13:1f:c2:f9:69:c8:7d:
         0e:38:3a:79:0c:60:cc:51:d2:fe:9c:3a:91:23:e0:49:b0:e9:
         86:1a:b9:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 17 16:36:09 2025 by rpki-client