This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/e0c55034-5f36-4173-b64c-a975e323138a/0/0E7BF2CE27D899D8E985DBD9311DF8B250C58581.mft
File:                     0E7BF2CE27D899D8E985DBD9311DF8B250C58581.mft (raw, json)
Hash identifier:          UwrKmurBvqtJTpAqTNTkjjbNTwqto528GXM1HfxZAG4=
Subject key identifier:   DD:C1:09:8A:A2:45:A8:52:0D:F0:14:5B:98:45:87:D6:A4:45:11:B5
Authority key identifier: 0E:7B:F2:CE:27:D8:99:D8:E9:85:DB:D9:31:1D:F8:B2:50:C5:85:81
Certificate issuer:       /CN=0E7BF2CE27D899D8E985DBD9311DF8B250C58581
Certificate serial:       04B3CB242C617CD3F3912B258D4A95323E06B30D
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0E7BF2CE27D899D8E985DBD9311DF8B250C58581.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/e0c55034-5f36-4173-b64c-a975e323138a/0/0E7BF2CE27D899D8E985DBD9311DF8B250C58581.mft
Manifest number:          011F
Signing time:             Fri 05 Dec 2025 11:51:23 +0000
Manifest this update:     Fri 05 Dec 2025 11:46:23 +0000
Manifest next update:     Mon 08 Dec 2025 16:52:23 +0000
Files and hashes:         1: 3130332e3235322e3130302e302f32332d3233203d3e203539313437.roa (hash: 7Av//tJaFwT8z6GFSW7uk6ehjT5V0e5+FTRipECyI0I=)
                          2: 0E7BF2CE27D899D8E985DBD9311DF8B250C58581.crl (hash: S9J+Tm5WnC0/4CBd8OPkPnm6vbFaOKUb1HOdR3JTSsE=)
                          3: 3130332e3235322e3130302e302f32342d3234203d3e203539313437.roa (hash: YM9KbHhAudmxJLriUiNFwnyRKQIeMezebhltKdO9iVg=)
                          4: 3130332e3235322e3130312e302f32342d3234203d3e203539313437.roa (hash: MWGkE6CsRSWqMBYLVPUy9HMPTSzmfg1RhCwIFa2snrk=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/e0c55034-5f36-4173-b64c-a975e323138a/0/0E7BF2CE27D899D8E985DBD9311DF8B250C58581.crl
                          rsync://repo-rpki.idnic.net/repo/e0c55034-5f36-4173-b64c-a975e323138a/0/0E7BF2CE27D899D8E985DBD9311DF8B250C58581.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0E7BF2CE27D899D8E985DBD9311DF8B250C58581.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 08 Dec 2025 16:52:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:b3:cb:24:2c:61:7c:d3:f3:91:2b:25:8d:4a:95:32:3e:06:b3:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E7BF2CE27D899D8E985DBD9311DF8B250C58581
        Validity
            Not Before: Dec  5 11:46:23 2025 GMT
            Not After : Dec  8 16:52:23 2025 GMT
        Subject: CN=DDC1098AA245A8520DF0145B984587D6A44511B5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:14:87:05:25:3d:67:d8:3e:be:11:29:5b:98:
                    4e:72:4c:62:d9:e5:0b:9f:8d:62:11:1a:69:26:16:
                    db:8e:dd:f2:2b:80:0b:b7:3f:a3:fb:5d:dd:d5:57:
                    3a:54:08:89:d5:45:47:e5:31:6a:49:e6:e7:c3:1d:
                    0b:83:f7:d3:cf:d0:53:aa:40:fe:eb:b0:f1:d6:ab:
                    16:f9:e7:b4:76:6e:8a:24:60:3d:88:fe:55:b5:fd:
                    64:41:c3:c2:c3:7c:34:32:40:17:21:40:21:6f:a3:
                    d2:79:ac:23:71:57:1f:dc:00:65:95:50:ee:c5:cf:
                    cf:45:18:61:d6:23:1d:fd:fa:62:dd:03:4b:e1:23:
                    b0:09:51:72:ee:25:66:b6:a2:39:7c:da:a0:79:ce:
                    ed:0c:3a:0e:aa:f6:8c:86:2e:ae:83:e4:18:51:4e:
                    9f:49:60:7f:b0:17:db:f4:b8:2c:3f:7a:c4:9f:c0:
                    2b:46:bb:1a:ed:0e:32:bc:63:da:fb:1c:55:45:8b:
                    d5:9d:f0:61:06:c9:fe:10:46:0c:8d:51:d2:95:60:
                    83:80:a0:f9:e6:2b:0d:e8:e3:c1:ab:37:72:97:97:
                    18:d1:a5:48:e6:bf:94:eb:a5:b1:5f:d0:d7:ec:54:
                    25:84:44:76:ed:47:d1:0b:12:bf:48:37:12:7c:7f:
                    ff:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:C1:09:8A:A2:45:A8:52:0D:F0:14:5B:98:45:87:D6:A4:45:11:B5
            X509v3 Authority Key Identifier:
                keyid:0E:7B:F2:CE:27:D8:99:D8:E9:85:DB:D9:31:1D:F8:B2:50:C5:85:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/e0c55034-5f36-4173-b64c-a975e323138a/0/0E7BF2CE27D899D8E985DBD9311DF8B250C58581.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0E7BF2CE27D899D8E985DBD9311DF8B250C58581.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e0c55034-5f36-4173-b64c-a975e323138a/0/0E7BF2CE27D899D8E985DBD9311DF8B250C58581.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:e2:d2:17:0c:c0:e5:24:d7:6c:4c:23:f1:f8:4f:d8:ce:a3:
         4f:74:da:2b:37:8c:29:f4:e1:66:13:ae:be:bc:39:ab:a6:f3:
         68:2e:b1:39:77:02:35:6e:be:c6:54:ab:92:3d:ef:3f:ab:78:
         ab:d5:3d:52:04:ce:74:32:21:30:cf:c0:68:a7:2c:ba:77:e0:
         fa:9e:3d:6a:ed:bb:5d:dd:a3:93:08:03:08:a1:d8:be:d9:d0:
         bb:25:76:b4:4c:7d:7a:5e:0e:ee:02:e0:9d:f2:a5:a7:65:86:
         20:ee:6a:4d:45:14:17:f9:99:f8:04:85:18:7c:18:61:be:5e:
         56:0f:2c:49:45:8f:26:90:d1:2f:96:30:7c:2b:ec:8b:b3:65:
         12:11:df:b6:79:a2:9c:96:27:cf:17:b0:38:b6:72:18:48:6f:
         f8:11:3f:e6:69:9a:8d:d6:46:11:4f:45:bf:20:2e:3b:7b:ce:
         ab:ac:81:cf:56:ce:ad:35:33:85:88:43:e3:0a:7f:7d:91:e7:
         39:49:65:e0:c2:df:4f:32:61:b6:3d:72:49:1c:c6:2e:d4:32:
         13:4d:c1:dd:df:0b:a3:34:a3:37:44:f4:82:5f:21:36:cf:8c:
         6a:19:ac:1d:9a:13:14:c5:d1:4b:1c:c7:5f:4c:a1:69:6b:e7:
         ef:a8:eb:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 23:56:22 2025 by rpki-client