This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/31b433a5-72b1-4653-99d3-9469c8b8b762/0/EAD173629E4F955F44EC781A3739775E738ACCFD.mft
File:                     EAD173629E4F955F44EC781A3739775E738ACCFD.mft (raw, json)
Hash identifier:          HGMoLvCSvdfNE07k73D81Xiq/fLDRYsCedqptS1Vodk=
Subject key identifier:   AA:EF:61:A0:FB:34:2F:E8:A8:A0:C6:54:11:2C:5A:37:6A:3B:4B:BD
Authority key identifier: EA:D1:73:62:9E:4F:95:5F:44:EC:78:1A:37:39:77:5E:73:8A:CC:FD
Certificate issuer:       /CN=EAD173629E4F955F44EC781A3739775E738ACCFD
Certificate serial:       148D20BE5B7BDE48B9A3B5A71CF56EC70BAFB09F
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/EAD173629E4F955F44EC781A3739775E738ACCFD.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/31b433a5-72b1-4653-99d3-9469c8b8b762/0/EAD173629E4F955F44EC781A3739775E738ACCFD.mft
Manifest number:          0103
Signing time:             Sun 14 Dec 2025 11:40:45 +0000
Manifest this update:     Sun 14 Dec 2025 11:35:45 +0000
Manifest next update:     Wed 17 Dec 2025 22:14:45 +0000
Files and hashes:         1: EAD173629E4F955F44EC781A3739775E738ACCFD.crl (hash: 9zpIXlXSmODgkeU8942XGlq2N+FQa0q73RMyesROopI=)
                          2: 3135372e36362e32392e302f32342d3234203d3e203539323831.roa (hash: zTHLGAwQAsHOZagfs3+O24ipzV4m2EM9CneqRLVHTaQ=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/31b433a5-72b1-4653-99d3-9469c8b8b762/0/EAD173629E4F955F44EC781A3739775E738ACCFD.crl
                          rsync://repo-rpki.idnic.net/repo/31b433a5-72b1-4653-99d3-9469c8b8b762/0/EAD173629E4F955F44EC781A3739775E738ACCFD.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/EAD173629E4F955F44EC781A3739775E738ACCFD.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 17 Dec 2025 22:14:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:8d:20:be:5b:7b:de:48:b9:a3:b5:a7:1c:f5:6e:c7:0b:af:b0:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EAD173629E4F955F44EC781A3739775E738ACCFD
        Validity
            Not Before: Dec 14 11:35:45 2025 GMT
            Not After : Dec 17 22:14:45 2025 GMT
        Subject: CN=AAEF61A0FB342FE8A8A0C654112C5A376A3B4BBD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:2c:09:d3:0d:21:4a:4b:83:e1:26:67:9c:93:
                    30:6d:03:bf:0a:e8:7c:ae:79:cb:59:eb:a2:4b:fa:
                    07:15:b5:2b:be:d9:c3:99:b0:1d:81:c2:18:d1:1d:
                    64:58:47:11:53:ba:e0:07:85:87:e1:e5:7d:ac:fa:
                    38:ec:a2:d5:5b:ed:9c:65:0a:52:f4:cf:37:24:5b:
                    28:0c:52:10:35:61:7a:fc:89:6e:34:57:5f:7a:e6:
                    4e:70:d3:6b:68:4d:e8:a0:84:6f:df:a7:cf:f5:7b:
                    09:5d:a1:66:e3:dc:6e:47:e7:53:88:04:4c:93:cc:
                    93:4a:c8:e9:71:02:6b:65:52:78:71:d9:0c:77:96:
                    56:26:8e:79:3a:35:40:5a:b1:49:bf:44:11:b2:e0:
                    6a:70:99:e7:82:1e:e8:a8:a7:53:b9:26:71:4c:c6:
                    d3:8e:80:57:90:0c:d8:f4:95:a3:8b:e7:b6:7c:93:
                    d6:95:dd:33:7b:14:76:ad:e9:14:8d:28:dd:97:64:
                    f6:01:65:c1:5e:68:7d:ab:71:bc:ef:b9:93:a2:e1:
                    5e:a0:d7:96:ba:a5:23:4f:f2:ff:89:25:c0:4a:10:
                    31:6f:e2:52:71:6a:ea:57:d3:6f:7a:1b:5c:50:5a:
                    84:81:29:d0:c7:8a:22:9e:4c:83:a1:7d:2b:fb:fd:
                    4b:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:EF:61:A0:FB:34:2F:E8:A8:A0:C6:54:11:2C:5A:37:6A:3B:4B:BD
            X509v3 Authority Key Identifier:
                keyid:EA:D1:73:62:9E:4F:95:5F:44:EC:78:1A:37:39:77:5E:73:8A:CC:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/31b433a5-72b1-4653-99d3-9469c8b8b762/0/EAD173629E4F955F44EC781A3739775E738ACCFD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/EAD173629E4F955F44EC781A3739775E738ACCFD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/31b433a5-72b1-4653-99d3-9469c8b8b762/0/EAD173629E4F955F44EC781A3739775E738ACCFD.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:42:ad:bc:53:4f:01:b8:a6:41:7e:6c:a5:c7:fc:6f:67:bb:
         c8:c8:ee:d0:16:04:04:62:6f:15:f0:c0:41:7f:c8:6a:69:e1:
         58:ff:eb:dc:77:de:70:a3:78:23:c5:33:83:a9:0a:1e:1f:16:
         a4:a2:53:35:4e:21:19:f2:51:42:5d:06:11:be:7e:6d:ce:2f:
         8d:72:89:60:8a:10:5f:63:30:04:af:a5:07:38:f7:31:3d:b2:
         4c:88:98:6a:ba:8c:75:62:ae:f4:1d:90:4f:6b:e1:2f:77:ad:
         91:8a:22:f2:f6:14:02:3c:0b:79:50:d4:35:42:d6:e1:ac:7d:
         3c:ce:6c:aa:bb:fa:62:93:e8:1c:5d:bd:15:14:e9:d9:42:fa:
         6e:cd:e3:29:be:5b:4d:53:37:da:f7:5a:62:36:68:ce:5d:fe:
         70:19:73:04:c0:b3:b1:bf:18:0b:ac:f3:44:bf:5a:bb:81:49:
         8c:1b:fe:a7:ad:f0:f0:72:14:64:8c:2b:74:55:26:2b:2f:1a:
         85:a1:2f:27:0b:b8:74:67:ab:9f:fd:14:12:bb:e6:15:40:54:
         a9:90:23:73:d3:20:19:07:03:8d:2f:ff:20:a2:fd:12:37:8c:
         be:9b:8f:68:f9:56:0b:3c:c7:ac:12:79:62:18:b0:0d:c7:43:
         21:27:b0:96
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUFI0gvlt73ki5o7WnHPVuxwuvsJ8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUFEMTczNjI5RTRGOTU1RjQ0RUM3ODFBMzczOTc3NUU3
MzhBQ0NGRDAeFw0yNTEyMTQxMTM1NDVaFw0yNTEyMTcyMjE0NDVaMDMxMTAvBgNV
BAMTKEFBRUY2MUEwRkIzNDJGRThBOEEwQzY1NDExMkM1QTM3NkEzQjRCQkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3LAnTDSFKS4PhJmeckzBtA78K
6HyuectZ66JL+gcVtSu+2cOZsB2BwhjRHWRYRxFTuuAHhYfh5X2s+jjsotVb7Zxl
ClL0zzckWygMUhA1YXr8iW40V1965k5w02toTeighG/fp8/1ewldoWbj3G5H51OI
BEyTzJNKyOlxAmtlUnhx2Qx3llYmjnk6NUBasUm/RBGy4GpwmeeCHuiop1O5JnFM
xtOOgFeQDNj0laOL57Z8k9aV3TN7FHat6RSNKN2XZPYBZcFeaH2rcbzvuZOi4V6g
15a6pSNP8v+JJcBKEDFv4lJxaupX0296G1xQWoSBKdDHiiKeTIOhfSv7/UuxAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUqu9hoPs0L+iooMZUESxaN2o7S70wHwYDVR0j
BBgwFoAU6tFzYp5PlV9E7HgaNzl3XnOKzP0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z
MWI0MzNhNS03MmIxLTQ2NTMtOTlkMy05NDY5YzhiOGI3NjIvMC9FQUQxNzM2MjlF
NEY5NTVGNDRFQzc4MUEzNzM5Nzc1RTczOEFDQ0ZELmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzEvRUFEMTczNjI5RTRGOTU1RjQ0RUM3ODFBMzczOTc3NUU3MzhB
Q0NGRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzFiNDMzYTUtNzJiMS00NjUzLTk5
ZDMtOTQ2OWM4YjhiNzYyLzAvRUFEMTczNjI5RTRGOTU1RjQ0RUM3ODFBMzczOTc3
NUU3MzhBQ0NGRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAIJCrbxTTwG4pkF+bKXH/G9nu8jI7tAWBARi
bxXwwEF/yGpp4Vj/69x33nCjeCPFM4OpCh4fFqSiUzVOIRnyUUJdBhG+fm3OL41y
iWCKEF9jMASvpQc49zE9skyImGq6jHVirvQdkE9r4S93rZGKIvL2FAI8C3lQ1DVC
1uGsfTzObKq7+mKT6BxdvRUU6dlC+m7N4ym+W01TN9r3WmI2aM5d/nAZcwTAs7G/
GAus80S/WruBSYwb/qet8PByFGSMK3RVJisvGoWhLycLuHRnq5/9FBK75hVAVKmQ
I3PTIBkHA40v/yCi/RI3jL6bj2j5Vgs8x6wSeWIYsA3HQyEnsJY=
-----END CERTIFICATE-----
Generated at Mon Dec 15 22:45:28 2025 by rpki-client