This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/2049c210-f365-432f-a7ca-0b5eb86b01c6/0/E475A8B018BAE58448DDE55D9487442B3BD31D1D.mft
File:                     E475A8B018BAE58448DDE55D9487442B3BD31D1D.mft (raw, json)
Hash identifier:          vpisMwbGwjzw1+iaDfcv8W+xSKJ+eYtrFDT7YPY4HAI=
Subject key identifier:   75:86:7A:FF:E4:33:EF:51:08:A3:CD:B1:55:6C:70:87:03:81:F9:08
Authority key identifier: E4:75:A8:B0:18:BA:E5:84:48:DD:E5:5D:94:87:44:2B:3B:D3:1D:1D
Certificate issuer:       /CN=E475A8B018BAE58448DDE55D9487442B3BD31D1D
Certificate serial:       59521E1425C9E10FF5B8AD28AFA977D028A97E06
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E475A8B018BAE58448DDE55D9487442B3BD31D1D.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/2049c210-f365-432f-a7ca-0b5eb86b01c6/0/E475A8B018BAE58448DDE55D9487442B3BD31D1D.mft
Manifest number:          03BD
Signing time:             Sun 14 Dec 2025 03:50:43 +0000
Manifest this update:     Sun 14 Dec 2025 03:45:43 +0000
Manifest next update:     Wed 17 Dec 2025 09:05:43 +0000
Files and hashes:         1: 3230332e37392e32392e302f32342d3234203d3e203435373138.roa (hash: ILlvOWLN9Xs8cUbwHU8Z2NUUNxyuB2q6+J4DPU9EvmQ=)
                          2: 3130332e33312e3230342e302f32332d3234203d3e203435373138.roa (hash: VoMnlv1vt+phfoqqSj3NlhfZbmojrA8l7T65WTVbYMM=)
                          3: 3130332e3139382e39332e302f32342d3234203d3e203435373138.roa (hash: wa+1RTscgoKKgYWFX2arn9cWcToBF6A/kXjZvyHLVV8=)
                          4: 3131372e3130332e36342e302f32322d3234203d3e203435373138.roa (hash: dcaXEHmtpvgdp2B+61+9NSsaEhu3dJ+pR5a99XJxHq0=)
                          5: 3130332e33312e3230362e302f32342d3234203d3e203435373138.roa (hash: w1mWD70iTqDZcL+qWJT3UxUlTEt3Oeyv9uC8w3hj0HU=)
                          6: 323030313a6466303a62333a3a2f34382d3438203d3e203435373138.roa (hash: goKqtOANx7qYkuYC16JMyOMD7wMXtPJ41zk+xa8C7PI=)
                          7: E475A8B018BAE58448DDE55D9487442B3BD31D1D.crl (hash: GPWdGcvPW0wmx2upMCQEi3KWTMq7Pd8L639s6rzmg/s=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/2049c210-f365-432f-a7ca-0b5eb86b01c6/0/E475A8B018BAE58448DDE55D9487442B3BD31D1D.crl
                          rsync://repo-rpki.idnic.net/repo/2049c210-f365-432f-a7ca-0b5eb86b01c6/0/E475A8B018BAE58448DDE55D9487442B3BD31D1D.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E475A8B018BAE58448DDE55D9487442B3BD31D1D.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 17 Dec 2025 09:05:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:52:1e:14:25:c9:e1:0f:f5:b8:ad:28:af:a9:77:d0:28:a9:7e:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E475A8B018BAE58448DDE55D9487442B3BD31D1D
        Validity
            Not Before: Dec 14 03:45:43 2025 GMT
            Not After : Dec 17 09:05:43 2025 GMT
        Subject: CN=75867AFFE433EF5108A3CDB1556C70870381F908
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:7a:20:e8:72:75:4c:03:56:94:d4:4f:d0:f6:
                    29:4e:c8:27:04:c4:5b:77:26:68:2f:c6:46:fc:1a:
                    10:7a:0f:40:25:e5:e7:0f:2b:50:ad:2e:41:7b:60:
                    b2:87:8c:89:19:b9:3a:b9:54:05:0e:06:04:dc:d6:
                    cd:a9:12:26:7d:fb:16:36:d0:43:8a:24:a8:18:c9:
                    c2:3b:b8:5c:31:4c:e7:4c:11:ec:6a:c7:05:4c:78:
                    83:cd:d7:47:78:ca:b4:72:52:43:8a:56:80:7f:ee:
                    3d:8d:cf:d4:fd:44:c6:8b:3f:55:87:e9:b9:52:81:
                    0d:e1:ef:cb:63:7e:6f:d4:df:29:76:b2:cf:57:5c:
                    94:2c:9d:16:82:d2:04:c8:95:eb:0a:e7:79:f5:77:
                    5f:17:b1:bc:bb:61:89:cb:60:d8:0b:9e:95:e7:90:
                    93:a9:a2:04:b7:97:de:a7:90:ee:99:4f:19:37:69:
                    e4:e5:d0:0d:c1:98:54:c9:68:80:40:b9:af:62:1b:
                    cf:8b:1d:6a:28:d7:c3:ad:9f:16:7e:5d:fc:d1:d5:
                    3a:84:a1:45:70:cf:62:c0:64:b8:0c:8b:a8:06:b2:
                    83:e6:53:01:d0:7a:d1:15:44:f6:5a:b6:cc:5b:23:
                    ec:42:de:67:04:eb:36:2f:c8:5a:f7:6b:ec:28:ca:
                    d7:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:86:7A:FF:E4:33:EF:51:08:A3:CD:B1:55:6C:70:87:03:81:F9:08
            X509v3 Authority Key Identifier:
                keyid:E4:75:A8:B0:18:BA:E5:84:48:DD:E5:5D:94:87:44:2B:3B:D3:1D:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/2049c210-f365-432f-a7ca-0b5eb86b01c6/0/E475A8B018BAE58448DDE55D9487442B3BD31D1D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E475A8B018BAE58448DDE55D9487442B3BD31D1D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2049c210-f365-432f-a7ca-0b5eb86b01c6/0/E475A8B018BAE58448DDE55D9487442B3BD31D1D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         da:2b:e2:b8:2b:ba:cb:83:fb:ea:ef:17:3e:ca:81:b5:b5:bb:
         b2:e8:df:3d:1a:7b:9e:b8:f4:76:2c:cc:3c:ee:c2:4e:26:c7:
         12:56:88:7d:e2:6a:2e:55:8d:4a:c1:07:20:7e:db:19:b5:95:
         fd:a0:a3:b1:dc:be:33:74:25:e7:f8:67:87:71:69:99:ca:d9:
         bf:f4:d5:2d:a6:ec:df:43:24:0e:67:43:4d:3e:05:b1:3a:10:
         39:fe:a8:13:4d:8e:b2:14:c8:d4:0b:12:b6:78:98:fc:17:52:
         1a:22:a4:40:79:5a:ce:8b:b1:5e:70:d5:04:ee:15:1f:fd:9e:
         ff:db:d4:d4:b7:7b:47:e1:31:18:59:65:8a:8a:2c:8b:51:87:
         57:ff:bf:9f:34:48:90:2a:f1:dc:75:b3:a0:5f:35:10:fa:6e:
         93:2a:6c:31:fe:71:90:1e:80:6d:bb:4c:ef:a0:85:84:03:74:
         1b:9a:60:43:81:95:8c:81:0a:65:e9:c1:5b:ce:69:c3:e4:35:
         f6:0d:2b:b5:e4:db:99:0e:7d:7a:c2:6c:fa:32:c0:29:12:cf:
         bd:52:b5:2b:1b:b4:a8:9c:c8:f6:13:99:f0:51:c4:94:08:3c:
         c8:4a:9e:e1:01:5a:9a:5f:d3:8a:a2:b0:b8:fa:b4:a8:02:1a:
         a7:83:33:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 15 14:45:12 2025 by rpki-client