This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/8988c0f2-2800-48da-a83e-ab54df65c574/0/977EA5118551E98AEAA8BB11C9D99D7196D3DEBA.mft
File:                     977EA5118551E98AEAA8BB11C9D99D7196D3DEBA.mft (raw, json)
Hash identifier:          WLBSNZWzUdjQ8ExeVd2VAGjid1GsBiLVWSaV9furzQA=
Subject key identifier:   EB:09:16:31:7D:2D:E7:B2:43:E0:DA:EB:D4:36:26:3B:CA:93:02:19
Authority key identifier: 97:7E:A5:11:85:51:E9:8A:EA:A8:BB:11:C9:D9:9D:71:96:D3:DE:BA
Certificate issuer:       /CN=977EA5118551E98AEAA8BB11C9D99D7196D3DEBA
Certificate serial:       621BAA3B1B844D79A1F48809FE1453E08D5C717D
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/977EA5118551E98AEAA8BB11C9D99D7196D3DEBA.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/8988c0f2-2800-48da-a83e-ab54df65c574/0/977EA5118551E98AEAA8BB11C9D99D7196D3DEBA.mft
Manifest number:          052E
Signing time:             Sat 06 Dec 2025 20:11:14 +0000
Manifest this update:     Sat 06 Dec 2025 20:06:14 +0000
Manifest next update:     Wed 10 Dec 2025 00:39:14 +0000
Files and hashes:         1: 3130332e3132332e3130382e302f32342d3234203d3e20313338303636.roa (hash: q9pcjfkInqPcGghxGeh0wF/8x9n+wp0JshUKi76J40w=)
                          2: 977EA5118551E98AEAA8BB11C9D99D7196D3DEBA.crl (hash: McgdyHSiegrCfeFqpQJU+CskG6mI9LQ0srGK3U1Juxg=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/8988c0f2-2800-48da-a83e-ab54df65c574/0/977EA5118551E98AEAA8BB11C9D99D7196D3DEBA.crl
                          rsync://repo-rpki.idnic.net/repo/8988c0f2-2800-48da-a83e-ab54df65c574/0/977EA5118551E98AEAA8BB11C9D99D7196D3DEBA.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/977EA5118551E98AEAA8BB11C9D99D7196D3DEBA.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 09 Dec 2025 15:57:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:1b:aa:3b:1b:84:4d:79:a1:f4:88:09:fe:14:53:e0:8d:5c:71:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=977EA5118551E98AEAA8BB11C9D99D7196D3DEBA
        Validity
            Not Before: Dec  6 20:06:14 2025 GMT
            Not After : Dec 10 00:39:14 2025 GMT
        Subject: CN=EB0916317D2DE7B243E0DAEBD436263BCA930219
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:6e:b7:1b:20:a2:f0:19:b1:66:2e:19:26:be:
                    79:0b:b1:67:be:0e:85:38:f1:6d:a0:e8:8c:6c:55:
                    74:5f:e7:ab:8d:8e:33:40:78:54:93:18:d3:15:79:
                    31:6a:24:f6:ce:a3:a3:50:bc:c6:42:23:fe:a3:37:
                    b1:c7:f4:ca:81:68:0a:d4:ec:d5:83:89:9b:07:7d:
                    50:3f:28:4f:f3:8b:86:26:b8:0b:ea:fc:93:61:e2:
                    a4:86:8e:c3:75:f8:df:10:61:69:8c:0d:9f:27:8c:
                    48:29:89:e9:02:b1:33:e9:58:56:23:ce:19:97:a0:
                    50:b8:67:e3:57:73:48:74:14:9e:e3:ca:6e:ec:96:
                    08:25:b2:81:e5:ef:26:50:86:d9:af:c8:c8:83:e0:
                    cf:43:71:0e:0c:92:ca:00:71:1d:45:79:23:6a:5a:
                    d9:68:8d:bc:90:23:f7:e1:68:3e:96:19:a8:58:d3:
                    a9:67:f1:f3:fb:20:14:36:d0:6e:ac:dd:6a:7c:98:
                    75:93:18:f5:83:5e:ba:87:e7:e1:05:b7:f9:dd:30:
                    d8:46:cb:8d:c2:fd:e9:4e:96:33:17:2d:3c:b6:e4:
                    f2:1f:b0:ab:9c:79:2e:b1:ea:2f:c8:fc:e6:5e:1d:
                    f2:a1:29:b5:8c:9b:ab:8e:4f:5c:8e:dd:27:4c:17:
                    73:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:09:16:31:7D:2D:E7:B2:43:E0:DA:EB:D4:36:26:3B:CA:93:02:19
            X509v3 Authority Key Identifier:
                keyid:97:7E:A5:11:85:51:E9:8A:EA:A8:BB:11:C9:D9:9D:71:96:D3:DE:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/8988c0f2-2800-48da-a83e-ab54df65c574/0/977EA5118551E98AEAA8BB11C9D99D7196D3DEBA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/977EA5118551E98AEAA8BB11C9D99D7196D3DEBA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8988c0f2-2800-48da-a83e-ab54df65c574/0/977EA5118551E98AEAA8BB11C9D99D7196D3DEBA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:52:b9:c0:25:06:5e:a9:ca:a4:a1:df:72:11:cf:8d:fd:a3:
         49:a0:93:b4:ca:ee:2a:ee:6d:67:e3:7c:87:75:17:9e:d8:f7:
         64:2b:f1:9b:fc:23:9c:f5:50:91:cf:22:ae:c9:3f:32:b6:21:
         da:3a:e2:dd:f3:d3:1f:c9:62:9d:c0:39:f6:2e:f9:64:60:6c:
         a2:9c:1c:a3:2a:17:0c:78:78:21:3e:a0:05:9b:7c:82:a7:5a:
         78:af:5e:2a:20:3b:ba:ea:0a:9b:78:ad:56:71:94:49:13:db:
         cb:9b:80:f7:b6:70:64:20:dd:7d:c4:0d:aa:95:d3:48:5b:77:
         97:96:f6:cb:44:61:fc:e5:64:66:cf:57:14:18:d7:41:a8:65:
         9f:63:b6:69:76:a5:1e:b4:48:7e:ed:2f:46:8a:ab:ee:3f:fa:
         94:1a:84:6a:69:98:bb:98:32:40:9b:88:55:b1:53:91:58:c2:
         f5:15:bd:5c:e8:d4:1b:3d:94:ae:b4:ab:38:06:ab:ea:3a:0f:
         35:c5:fc:2a:fa:94:01:2b:27:75:7a:7d:12:9e:ae:15:aa:17:
         c0:93:be:c1:5b:91:79:3f:f7:f5:63:ac:d8:fa:48:8d:1d:56:
         77:a2:91:78:52:a1:12:de:e9:80:c0:6b:85:88:9e:ab:cf:fb:
         18:3c:b7:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 02:18:21 2025 by rpki-client