This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/e87aee7f-d65b-46ec-a781-7cbef5aaeb80/0/1A0FC4695466F0034FDC7BD35D97BF935042446D.mft
File:                     1A0FC4695466F0034FDC7BD35D97BF935042446D.mft (raw, json)
Hash identifier:          J6YbAkDnJca9xIUQMO4dfzq0Jh1aru0kWJMcRPho5Tg=
Subject key identifier:   73:AB:85:91:F5:11:3B:C5:7F:D5:1B:39:A9:A6:BD:AA:A6:9E:1C:8E
Authority key identifier: 1A:0F:C4:69:54:66:F0:03:4F:DC:7B:D3:5D:97:BF:93:50:42:44:6D
Certificate issuer:       /CN=1A0FC4695466F0034FDC7BD35D97BF935042446D
Certificate serial:       7BE4C6402CAE2C4A4B626B9F6973E20E111F2FE7
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1A0FC4695466F0034FDC7BD35D97BF935042446D.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/e87aee7f-d65b-46ec-a781-7cbef5aaeb80/0/1A0FC4695466F0034FDC7BD35D97BF935042446D.mft
Manifest number:          052E
Signing time:             Sat 06 Dec 2025 22:32:10 +0000
Manifest this update:     Sat 06 Dec 2025 22:27:10 +0000
Manifest next update:     Tue 09 Dec 2025 22:48:10 +0000
Files and hashes:         1: 1A0FC4695466F0034FDC7BD35D97BF935042446D.crl (hash: X7e4CEPvtnNMEiHwN2qiADsguSPn3hkYdgd+Q3LlsiU=)
                          2: 3130332e32302e3139362e302f32332d3234203d3e203538353536.roa (hash: q1jYn7Xb50WmP2uCHt9tAsO6LxmkwzEXjSuX+S7nEvI=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/e87aee7f-d65b-46ec-a781-7cbef5aaeb80/0/1A0FC4695466F0034FDC7BD35D97BF935042446D.crl
                          rsync://repo-rpki.idnic.net/repo/e87aee7f-d65b-46ec-a781-7cbef5aaeb80/0/1A0FC4695466F0034FDC7BD35D97BF935042446D.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1A0FC4695466F0034FDC7BD35D97BF935042446D.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 09 Dec 2025 15:57:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:e4:c6:40:2c:ae:2c:4a:4b:62:6b:9f:69:73:e2:0e:11:1f:2f:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1A0FC4695466F0034FDC7BD35D97BF935042446D
        Validity
            Not Before: Dec  6 22:27:10 2025 GMT
            Not After : Dec  9 22:48:10 2025 GMT
        Subject: CN=73AB8591F5113BC57FD51B39A9A6BDAAA69E1C8E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:5e:ff:80:23:f7:e2:45:ff:58:37:6d:af:a9:
                    4a:dc:65:a6:8f:96:66:a9:e8:b2:69:97:57:86:c9:
                    a2:f1:0b:53:a1:38:31:b8:fe:38:9d:de:17:ec:ad:
                    9c:21:d1:28:84:02:d8:7e:10:cc:cf:0d:4c:79:28:
                    e4:9e:4f:3f:55:f4:58:e9:1f:fe:03:99:44:1b:44:
                    cd:eb:c5:a3:3d:78:b2:32:46:8e:71:f6:e5:89:73:
                    09:af:e1:7c:85:ce:28:f7:71:52:13:c6:bf:40:54:
                    f1:13:a8:7b:2a:89:63:fe:2c:46:24:e1:8c:f8:51:
                    bc:e0:85:6e:52:45:08:c9:59:db:67:4a:21:89:15:
                    fb:fb:65:bd:a8:05:1c:be:29:b2:8a:28:58:a2:82:
                    ea:d0:4a:7d:0f:39:a5:e9:98:19:6b:ca:7e:4a:01:
                    1b:39:9f:c9:53:06:58:ae:18:af:1d:48:ac:e0:fc:
                    41:5a:d0:3f:10:34:9e:18:94:0e:72:f3:92:31:d6:
                    7a:4a:fb:fe:d0:8c:15:5c:79:73:fa:01:4c:60:8d:
                    0d:c8:42:7e:64:37:ed:4b:94:72:01:c6:40:2f:e0:
                    73:4d:2d:4c:fe:38:fa:6b:e6:ae:f0:98:28:96:25:
                    85:d0:75:87:00:df:39:e3:36:3f:4b:8d:a7:8d:f7:
                    ab:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:AB:85:91:F5:11:3B:C5:7F:D5:1B:39:A9:A6:BD:AA:A6:9E:1C:8E
            X509v3 Authority Key Identifier:
                keyid:1A:0F:C4:69:54:66:F0:03:4F:DC:7B:D3:5D:97:BF:93:50:42:44:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/e87aee7f-d65b-46ec-a781-7cbef5aaeb80/0/1A0FC4695466F0034FDC7BD35D97BF935042446D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1A0FC4695466F0034FDC7BD35D97BF935042446D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e87aee7f-d65b-46ec-a781-7cbef5aaeb80/0/1A0FC4695466F0034FDC7BD35D97BF935042446D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:23:51:1d:e6:cf:87:ce:4f:2a:c7:f0:c2:f5:0a:50:f7:b1:
         d9:8c:92:15:f8:d4:1f:68:66:47:09:57:52:c6:b4:d4:35:9a:
         6a:6e:85:30:31:38:44:34:aa:62:b3:de:3e:79:36:f8:9e:53:
         e4:c9:ff:30:c4:05:7c:6e:e1:d9:3c:60:46:84:72:f0:50:fc:
         eb:e0:3c:a1:34:36:10:47:11:fa:14:19:6f:11:a5:fb:79:ab:
         84:55:e5:1a:c4:ff:8f:cc:0c:99:e0:f3:7c:2a:15:d0:63:6d:
         9d:fb:5a:9e:b6:1a:ce:c6:5b:42:4a:6d:f0:c8:3c:5d:a0:f7:
         68:1d:bc:a8:86:b5:00:0d:87:d7:ab:e6:f5:82:33:68:bf:4d:
         36:a8:1b:5f:fe:41:1e:91:55:15:29:18:30:6e:2f:e2:6f:26:
         5a:e7:a5:7e:a6:9d:3f:ee:50:c3:46:2c:55:e5:9d:59:0a:be:
         51:f9:ab:50:ca:db:f4:10:7f:17:31:3a:6d:e2:12:25:54:f1:
         43:93:dd:db:34:25:4e:89:b7:bb:1e:2c:48:d8:56:0a:50:40:
         15:e3:c7:70:fc:d8:fa:e8:94:5c:f7:2c:0e:15:1a:65:04:39:
         bf:9f:d6:95:76:63:d2:ff:84:8b:c8:7c:60:9f:b8:b1:1d:1b:
         e8:ba:f7:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 01:36:26 2025 by rpki-client