This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/0eb96005-83a9-41e4-af5b-f3eaa8f23651/0/E84DB44F0008624F8E7693BC3BE1F9BFCDDFA280.mft
File:                     E84DB44F0008624F8E7693BC3BE1F9BFCDDFA280.mft (raw, json)
Hash identifier:          aQDUBirG+UJeipY/v4I47gCH9Qa7/Ibb9uHrWwIo6zk=
Subject key identifier:   99:41:F0:15:7E:45:CE:D4:CD:E7:A2:0F:4B:36:F5:7A:74:F0:E5:C3
Authority key identifier: E8:4D:B4:4F:00:08:62:4F:8E:76:93:BC:3B:E1:F9:BF:CD:DF:A2:80
Certificate issuer:       /CN=E84DB44F0008624F8E7693BC3BE1F9BFCDDFA280
Certificate serial:       2F0FC196C60A2917238D2F147540279603BED5D5
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E84DB44F0008624F8E7693BC3BE1F9BFCDDFA280.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/0eb96005-83a9-41e4-af5b-f3eaa8f23651/0/E84DB44F0008624F8E7693BC3BE1F9BFCDDFA280.mft
Manifest number:          04FB
Signing time:             Wed 03 Dec 2025 08:01:10 +0000
Manifest this update:     Wed 03 Dec 2025 07:56:10 +0000
Manifest next update:     Sat 06 Dec 2025 18:18:10 +0000
Files and hashes:         1: 3130332e3132302e3133382e302f32342d3234203d3e20313338303537.roa (hash: i3kLGZdC4b7g0r22OaWIQLyO15cZEfzn1gqotYUiYWU=)
                          2: E84DB44F0008624F8E7693BC3BE1F9BFCDDFA280.crl (hash: mvisTFr64qxVbqS/R/XfM0zRnlAXjqsRVxYVTOmee18=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/0eb96005-83a9-41e4-af5b-f3eaa8f23651/0/E84DB44F0008624F8E7693BC3BE1F9BFCDDFA280.crl
                          rsync://repo-rpki.idnic.net/repo/0eb96005-83a9-41e4-af5b-f3eaa8f23651/0/E84DB44F0008624F8E7693BC3BE1F9BFCDDFA280.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E84DB44F0008624F8E7693BC3BE1F9BFCDDFA280.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 06 Dec 2025 12:07:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:0f:c1:96:c6:0a:29:17:23:8d:2f:14:75:40:27:96:03:be:d5:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E84DB44F0008624F8E7693BC3BE1F9BFCDDFA280
        Validity
            Not Before: Dec  3 07:56:10 2025 GMT
            Not After : Dec  6 18:18:10 2025 GMT
        Subject: CN=9941F0157E45CED4CDE7A20F4B36F57A74F0E5C3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:02:57:b9:d6:74:8d:70:1d:83:1d:c6:97:fc:
                    2d:8d:41:4d:05:cb:c8:b3:d2:73:72:6f:e8:b7:b8:
                    ca:fe:8b:79:0a:bd:9a:6e:4b:ba:5d:db:e0:8c:2f:
                    64:f2:f3:f7:84:13:82:02:f1:4f:73:24:f9:51:fb:
                    a4:36:f0:bf:be:7e:fa:c8:b2:f4:d4:18:28:95:fe:
                    b3:e9:12:40:29:4b:21:ad:8d:3a:95:ee:cf:ff:3f:
                    10:4b:79:42:db:8a:81:9d:f8:43:1e:b9:0c:5c:2a:
                    8d:04:2a:ad:ea:63:4e:eb:9b:73:d5:8f:b0:cc:33:
                    ad:86:9f:24:58:35:11:90:40:da:51:07:1e:76:9c:
                    e8:ba:80:16:6a:3f:9d:8a:a2:47:22:98:25:0e:f5:
                    fc:4c:53:12:e1:41:84:42:94:cd:3a:2f:63:56:b7:
                    f5:da:49:06:6c:35:fa:02:b5:b4:97:47:74:5b:fc:
                    a4:be:f0:9d:76:e9:8c:70:45:28:61:37:2b:14:6a:
                    d8:42:55:d6:24:79:de:54:b4:74:63:cc:cc:53:67:
                    ea:ae:8a:46:0b:dc:37:d4:8d:b2:3f:8c:35:7f:a8:
                    cf:0b:43:20:2f:e8:1d:4e:e1:3b:51:bb:9f:5c:9e:
                    a0:10:8c:6e:b6:07:1b:2b:4d:ab:c6:65:15:cc:ef:
                    2b:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:41:F0:15:7E:45:CE:D4:CD:E7:A2:0F:4B:36:F5:7A:74:F0:E5:C3
            X509v3 Authority Key Identifier:
                keyid:E8:4D:B4:4F:00:08:62:4F:8E:76:93:BC:3B:E1:F9:BF:CD:DF:A2:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/0eb96005-83a9-41e4-af5b-f3eaa8f23651/0/E84DB44F0008624F8E7693BC3BE1F9BFCDDFA280.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E84DB44F0008624F8E7693BC3BE1F9BFCDDFA280.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0eb96005-83a9-41e4-af5b-f3eaa8f23651/0/E84DB44F0008624F8E7693BC3BE1F9BFCDDFA280.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:1d:06:c8:b1:dd:c5:70:1e:5e:a1:cd:f7:7b:c6:9b:49:f3:
         77:56:13:94:e2:29:72:b9:18:66:31:a0:37:15:2c:b1:8d:a4:
         6e:53:40:b9:87:23:51:6d:76:5c:6c:4d:dc:1d:ce:73:9c:02:
         79:76:34:9a:34:67:6b:2b:fa:e5:c7:ef:93:82:7a:80:d4:5b:
         fc:d1:3a:f8:82:a9:0f:20:1a:e2:2b:58:e4:14:8f:a8:2e:1e:
         c8:d6:8e:04:4b:9c:27:ca:75:3c:0e:aa:ae:09:1f:46:75:12:
         50:8e:7e:44:78:88:1e:e6:02:04:88:18:50:bf:5e:49:67:69:
         1d:2c:ca:be:12:20:1c:e1:6d:10:ea:6e:be:cf:8a:1e:6e:01:
         a2:b8:be:0c:0f:54:56:b5:7b:73:0d:e3:f5:4b:5a:c7:6b:06:
         0c:69:70:a6:5e:6f:3a:a1:ab:5c:c3:28:07:0c:76:e2:65:fc:
         fc:52:eb:ad:6e:e0:9b:e2:7b:75:17:e2:d4:3c:8d:1d:26:d1:
         95:24:12:20:f1:bc:20:0c:de:19:05:05:9d:4f:a8:ee:55:90:
         fc:37:8c:d2:4e:ca:5b:b7:0d:9c:b3:a9:10:0d:a7:57:75:b9:
         04:83:2b:af:23:fa:14:1a:ac:3f:a6:84:7f:bf:ee:08:00:87:
         0b:99:77:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 14:55:06 2025 by rpki-client