This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/187ade9f-6b79-4723-9949-96de7e41db70/0/E4B72563B465301EE966885E5BE212EE92B97305.mft
File:                     E4B72563B465301EE966885E5BE212EE92B97305.mft (raw, json)
Hash identifier:          ScYtGctsIoOuacpJV1We7nGYlWC9XE9XWgs7JMNl7Bo=
Subject key identifier:   7F:E5:68:12:1F:9E:84:50:AC:ED:20:81:C0:32:8D:D9:1A:7F:8D:A2
Authority key identifier: E4:B7:25:63:B4:65:30:1E:E9:66:88:5E:5B:E2:12:EE:92:B9:73:05
Certificate issuer:       /CN=E4B72563B465301EE966885E5BE212EE92B97305
Certificate serial:       16AFF0EC3BDB628B41AF6785F7102AD975535397
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4B72563B465301EE966885E5BE212EE92B97305.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/187ade9f-6b79-4723-9949-96de7e41db70/0/E4B72563B465301EE966885E5BE212EE92B97305.mft
Manifest number:          0256
Signing time:             Wed 03 Dec 2025 08:52:01 +0000
Manifest this update:     Wed 03 Dec 2025 08:47:01 +0000
Manifest next update:     Sat 06 Dec 2025 17:11:01 +0000
Files and hashes:         1: E4B72563B465301EE966885E5BE212EE92B97305.crl (hash: ovzAral49okB7S07SysrZd++ENXRH/UTLp2Zbaq0z2g=)
                          2: 3130332e31312e32322e302f32332d3234203d3e203538333930.roa (hash: LYswcn8qPihQgugQgV3QSAqvaMoaJ8Ak/kLhePchypk=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/187ade9f-6b79-4723-9949-96de7e41db70/0/E4B72563B465301EE966885E5BE212EE92B97305.crl
                          rsync://repo-rpki.idnic.net/repo/187ade9f-6b79-4723-9949-96de7e41db70/0/E4B72563B465301EE966885E5BE212EE92B97305.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4B72563B465301EE966885E5BE212EE92B97305.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 06 Dec 2025 12:07:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:af:f0:ec:3b:db:62:8b:41:af:67:85:f7:10:2a:d9:75:53:53:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E4B72563B465301EE966885E5BE212EE92B97305
        Validity
            Not Before: Dec  3 08:47:01 2025 GMT
            Not After : Dec  6 17:11:01 2025 GMT
        Subject: CN=7FE568121F9E8450ACED2081C0328DD91A7F8DA2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:05:26:dd:7c:99:78:57:de:4d:e8:9d:f8:7b:
                    76:2f:80:b6:1e:1f:6f:c5:a9:37:4f:32:21:a3:6a:
                    1c:43:fc:d0:32:5e:fe:21:f9:e9:7f:a0:f8:e9:e6:
                    0a:4f:5b:10:b8:3c:9d:15:b5:dd:e7:a8:43:80:63:
                    40:c2:51:b2:f5:d3:dc:64:0d:ae:79:74:1b:52:8c:
                    a1:ff:eb:19:83:62:c3:93:eb:5b:fd:48:2d:fb:71:
                    a5:a2:ee:e4:85:ff:52:31:f0:fe:25:2f:0e:a1:ed:
                    37:49:c7:99:01:8e:31:78:56:3c:50:d2:88:69:5a:
                    01:18:eb:78:f0:fe:6b:29:dc:12:c5:f6:d0:57:ac:
                    d8:1a:50:2c:5d:b7:c9:63:ea:92:f1:c3:8f:42:8e:
                    89:ae:12:25:df:b3:0b:8d:d3:ad:79:e3:97:d7:cb:
                    d7:40:ef:ba:69:f4:7b:43:0e:72:f4:ec:8e:1c:9e:
                    72:31:4b:ad:df:44:d9:09:df:0c:07:9b:85:ea:06:
                    bc:70:c7:32:54:4f:ab:ef:52:f4:3b:1f:52:26:90:
                    f6:e0:04:4b:d7:ed:c3:38:db:22:a5:e6:ad:01:3a:
                    85:42:b6:8b:af:c7:a2:f7:1e:46:70:db:fb:1b:d5:
                    18:5b:9d:b7:47:67:86:0a:e6:3c:b3:31:4b:86:cc:
                    6c:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:E5:68:12:1F:9E:84:50:AC:ED:20:81:C0:32:8D:D9:1A:7F:8D:A2
            X509v3 Authority Key Identifier:
                keyid:E4:B7:25:63:B4:65:30:1E:E9:66:88:5E:5B:E2:12:EE:92:B9:73:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/187ade9f-6b79-4723-9949-96de7e41db70/0/E4B72563B465301EE966885E5BE212EE92B97305.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4B72563B465301EE966885E5BE212EE92B97305.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/187ade9f-6b79-4723-9949-96de7e41db70/0/E4B72563B465301EE966885E5BE212EE92B97305.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:cf:09:7e:9b:9d:82:88:25:26:d2:a9:da:0d:24:0b:dd:07:
         a8:84:1d:0f:8c:29:ba:89:a9:f7:73:ef:8d:6f:50:50:e6:9c:
         d2:2e:c6:bb:96:57:f0:ec:4c:d9:9f:ff:67:67:d7:03:67:b5:
         c4:10:3c:d2:28:38:95:a8:b0:76:43:82:e7:f4:16:77:bc:11:
         5c:02:c2:a2:24:05:10:51:68:d2:c6:b0:f6:b2:e5:51:36:c0:
         7b:98:5d:34:dd:ae:fd:af:35:ee:58:d4:85:b8:11:a5:12:0f:
         10:53:ff:c2:ad:ef:1a:a8:be:93:36:d0:02:68:37:81:7e:6b:
         db:47:1b:ad:8d:3b:05:c6:61:ea:5c:f0:2d:4d:4b:2a:c4:d9:
         56:60:1d:38:fa:f3:ba:ea:8c:d1:5d:9f:ba:00:ef:05:de:ee:
         2b:f7:2f:1a:fd:d1:fd:c7:3a:13:ce:c1:ab:dd:4d:c2:a6:cb:
         8e:30:60:69:8c:31:09:00:50:26:65:b1:5f:d5:70:4b:f3:37:
         17:b8:3c:20:85:0f:fb:3e:5a:d2:d5:a4:22:75:8a:99:ad:81:
         d4:a5:c6:fc:f4:da:8c:61:7f:ad:54:fb:c8:9d:74:62:8b:a4:
         40:d0:87:2e:80:14:ee:08:a2:57:28:ca:b3:27:6a:12:00:f3:
         a3:80:d1:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 14:14:27 2025 by rpki-client