This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/76a002de-0cde-462e-9404-46bc6270e04f/0/E27F070B27EAB096E2B3523F1A1ACD7D018D0ADD.mft
File:                     E27F070B27EAB096E2B3523F1A1ACD7D018D0ADD.mft (raw, json)
Hash identifier:          ZZIdsrcT942KTjdkyO65e0OuRsqIrecvk39dXExPhaY=
Subject key identifier:   9B:E0:E9:75:F2:16:2E:D6:52:C9:D5:35:6B:73:25:62:CC:C4:8E:B3
Authority key identifier: E2:7F:07:0B:27:EA:B0:96:E2:B3:52:3F:1A:1A:CD:7D:01:8D:0A:DD
Certificate issuer:       /CN=E27F070B27EAB096E2B3523F1A1ACD7D018D0ADD
Certificate serial:       77FBB22F335E48730904E283DFA5C23CE69B84C9
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E27F070B27EAB096E2B3523F1A1ACD7D018D0ADD.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/76a002de-0cde-462e-9404-46bc6270e04f/0/E27F070B27EAB096E2B3523F1A1ACD7D018D0ADD.mft
Manifest number:          052B
Signing time:             Fri 05 Dec 2025 08:31:35 +0000
Manifest this update:     Fri 05 Dec 2025 08:26:35 +0000
Manifest next update:     Mon 08 Dec 2025 19:05:35 +0000
Files and hashes:         1: 3130332e3132392e3232302e302f32342d3234203d3e20313338303632.roa (hash: Mn5S3vv0y8H86n0LvhDe7TG0qE+zI4uaMffW/k9fqwM=)
                          2: 3130332e3132392e3232322e302f32342d3234203d3e20313338303632.roa (hash: miixVejqadzJoJUmMD6XBggcBXEaUqaEEMBzMvAqTNc=)
                          3: E27F070B27EAB096E2B3523F1A1ACD7D018D0ADD.crl (hash: 9b5S0ZJsFyh1YbD22Ep1jn7w8lxN5T5vozg4Qp8tzXk=)
                          4: 3130332e3132392e3232312e302f32342d3234203d3e20313338303632.roa (hash: 3vA9Os0MWzKrIxrdLvYkOp/ZA589dKUhNYNySSQbRyE=)
                          5: 3130332e3132392e3232332e302f32342d3234203d3e20313338303632.roa (hash: IzC9oagOHS4dTtSBILXnwVll7fkLpQc9RpoCIiKjX8I=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/76a002de-0cde-462e-9404-46bc6270e04f/0/E27F070B27EAB096E2B3523F1A1ACD7D018D0ADD.crl
                          rsync://repo-rpki.idnic.net/repo/76a002de-0cde-462e-9404-46bc6270e04f/0/E27F070B27EAB096E2B3523F1A1ACD7D018D0ADD.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E27F070B27EAB096E2B3523F1A1ACD7D018D0ADD.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 08 Dec 2025 19:05:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:fb:b2:2f:33:5e:48:73:09:04:e2:83:df:a5:c2:3c:e6:9b:84:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E27F070B27EAB096E2B3523F1A1ACD7D018D0ADD
        Validity
            Not Before: Dec  5 08:26:35 2025 GMT
            Not After : Dec  8 19:05:35 2025 GMT
        Subject: CN=9BE0E975F2162ED652C9D5356B732562CCC48EB3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:1d:fc:64:3b:14:67:83:1f:3c:84:d7:a6:e5:
                    15:ad:6c:bb:fc:7a:e0:61:88:61:21:74:d6:86:fc:
                    1b:ba:00:a6:ff:ab:48:ac:d0:54:00:45:fb:f7:f9:
                    08:9a:ff:ef:48:78:35:b3:bc:75:d4:c5:49:74:09:
                    d6:c7:67:e8:12:4e:9e:dd:2f:ff:1d:89:d3:dd:df:
                    05:33:97:30:34:b7:b7:9e:31:a1:c8:af:df:cd:6d:
                    bd:b5:32:72:8d:92:34:3e:f7:ba:0a:d2:97:77:24:
                    0b:27:e2:47:31:c0:d0:ce:4f:85:37:c3:f4:b1:d6:
                    10:f6:e1:33:26:c0:66:59:7a:4c:93:89:33:cf:9b:
                    93:44:04:80:86:49:c9:df:2f:44:fc:9f:af:06:9d:
                    a2:b5:d2:14:9e:7e:2d:0d:a1:f0:0e:fc:ab:6f:71:
                    9b:53:79:6b:87:fe:6c:9a:8c:27:23:a6:40:cb:b2:
                    47:ca:9e:63:09:52:0c:a8:9e:21:cd:de:7a:eb:4c:
                    9f:03:41:ae:c3:48:2b:0e:2f:bb:5c:06:cd:d1:49:
                    29:51:35:d3:0c:72:9a:60:dc:e6:27:3e:ea:8f:48:
                    1d:05:7c:e5:d4:6e:bc:98:e0:64:2e:6e:a2:39:10:
                    eb:55:0a:36:81:37:e6:6d:a8:59:45:25:c8:27:a5:
                    ea:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:E0:E9:75:F2:16:2E:D6:52:C9:D5:35:6B:73:25:62:CC:C4:8E:B3
            X509v3 Authority Key Identifier:
                keyid:E2:7F:07:0B:27:EA:B0:96:E2:B3:52:3F:1A:1A:CD:7D:01:8D:0A:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/76a002de-0cde-462e-9404-46bc6270e04f/0/E27F070B27EAB096E2B3523F1A1ACD7D018D0ADD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E27F070B27EAB096E2B3523F1A1ACD7D018D0ADD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/76a002de-0cde-462e-9404-46bc6270e04f/0/E27F070B27EAB096E2B3523F1A1ACD7D018D0ADD.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:80:6a:b5:e0:7d:8f:af:52:4e:b9:d6:0f:ce:99:39:bc:fe:
         f1:6e:4c:45:24:9d:67:7a:1a:3a:b4:31:50:58:33:9b:1e:fa:
         91:97:b5:6b:a3:72:9b:55:6a:ee:31:da:45:b6:49:70:e7:01:
         8d:ba:32:42:99:25:7d:66:fb:a8:6c:02:0c:f0:8b:00:3c:bd:
         5c:5a:61:0f:cf:a1:f2:37:81:52:50:09:b6:6a:b0:78:06:8a:
         bf:71:e1:1a:bf:40:f6:82:29:68:ab:fa:f1:82:43:01:f5:15:
         a3:b7:fd:02:6d:56:8f:25:db:e3:a9:d5:d8:53:af:bc:6a:fa:
         ca:43:0b:45:08:53:24:2e:80:f1:d5:ae:6e:fd:b3:62:10:03:
         ac:27:70:df:d0:8a:24:3b:ff:84:1c:f6:d0:45:b7:12:d7:30:
         e7:c3:40:7c:1c:48:a9:13:41:11:65:5a:c8:e7:a3:c0:a9:62:
         83:37:38:4a:bc:ad:cf:20:87:8e:9c:70:8e:37:5d:c4:7f:d3:
         14:c3:86:8b:eb:33:bc:f7:1a:a3:7a:42:ff:14:25:68:23:9b:
         53:30:08:51:b0:c5:d2:77:0c:f9:4e:6e:76:7d:7c:bf:d2:6e:
         e1:6d:48:31:93:3b:31:5e:b4:0d:a8:71:c6:64:99:0d:1a:bf:
         8f:b5:17:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 00:14:30 2025 by rpki-client