This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/4c7d3cbf-24d6-4b1c-86cb-1d48876f3c6b/0/44106068E5A5FC1973C8043D3B8F00105A9C9710.mft
File:                     44106068E5A5FC1973C8043D3B8F00105A9C9710.mft (raw, json)
Hash identifier:          59NFEc1F4csbReEXdWCW5z+y1k+DlSZcUUfJl++yOsQ=
Subject key identifier:   C2:E7:98:80:EA:2D:66:81:B3:DB:99:83:08:1F:E2:67:35:CE:6F:4B
Authority key identifier: 44:10:60:68:E5:A5:FC:19:73:C8:04:3D:3B:8F:00:10:5A:9C:97:10
Certificate issuer:       /CN=44106068E5A5FC1973C8043D3B8F00105A9C9710
Certificate serial:       610E81C17B8BF67D028AAFBFAA7E5BADCBABE39B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44106068E5A5FC1973C8043D3B8F00105A9C9710.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/4c7d3cbf-24d6-4b1c-86cb-1d48876f3c6b/0/44106068E5A5FC1973C8043D3B8F00105A9C9710.mft
Manifest number:          03EE
Signing time:             Mon 01 Dec 2025 08:41:08 +0000
Manifest this update:     Mon 01 Dec 2025 08:36:08 +0000
Manifest next update:     Thu 04 Dec 2025 13:22:08 +0000
Files and hashes:         1: 3130332e3135352e3234362e302f32342d3234203d3e20313431303738.roa (hash: HHkuN4t1A2wqx6T8Km6ZHp/fC31MGdbqwFI9Er2bSDg=)
                          2: 3130332e3135352e3234372e302f32342d3234203d3e20313431303738.roa (hash: ESAat/8qS/PvKipcKbnwRycidjZ185OjK8Jt6FCDeqM=)
                          3: 323430363a376163303a3a2f33322d3332203d3e20313431303738.roa (hash: qkme0GZQu5bcnD3S+kfBuJEGFLAAW5dhiAN/pZznR3U=)
                          4: 44106068E5A5FC1973C8043D3B8F00105A9C9710.crl (hash: 8qEseLv9Fh1k5LzmKzpEDM46vDjPqgcwzGil2C04Kvs=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/4c7d3cbf-24d6-4b1c-86cb-1d48876f3c6b/0/44106068E5A5FC1973C8043D3B8F00105A9C9710.crl
                          rsync://repo-rpki.idnic.net/repo/4c7d3cbf-24d6-4b1c-86cb-1d48876f3c6b/0/44106068E5A5FC1973C8043D3B8F00105A9C9710.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44106068E5A5FC1973C8043D3B8F00105A9C9710.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 04 Dec 2025 13:22:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:0e:81:c1:7b:8b:f6:7d:02:8a:af:bf:aa:7e:5b:ad:cb:ab:e3:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44106068E5A5FC1973C8043D3B8F00105A9C9710
        Validity
            Not Before: Dec  1 08:36:08 2025 GMT
            Not After : Dec  4 13:22:08 2025 GMT
        Subject: CN=C2E79880EA2D6681B3DB9983081FE26735CE6F4B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:e3:c4:e0:9c:c0:b4:06:95:4f:c2:35:ab:2f:
                    bc:63:e4:bd:e2:d8:eb:0c:ed:1f:b7:c5:6b:8c:79:
                    69:3f:56:4b:f8:e7:fd:ec:06:d3:e2:06:ce:7c:48:
                    6d:a8:6b:43:d9:0e:35:49:42:9a:db:15:fc:ea:d1:
                    a2:18:dd:6e:e9:b9:63:cd:ad:3d:f3:76:11:d6:2f:
                    53:6a:b7:fb:79:05:02:96:8e:f8:94:06:58:4e:39:
                    a5:30:30:9d:5c:aa:f2:11:16:8b:7b:d9:46:ec:06:
                    8f:73:08:0f:13:63:c7:3f:a6:3b:ca:31:8e:3c:21:
                    47:d9:2d:47:b1:ce:fe:30:fc:ce:92:09:f3:c8:99:
                    22:d5:9f:34:df:71:31:9b:4b:42:03:43:dc:85:01:
                    e3:7b:5e:3d:02:ac:73:7f:85:33:6f:b8:73:d0:6f:
                    58:b3:e4:87:47:04:32:f7:5d:1c:19:1a:1f:cd:7b:
                    3f:a7:0c:e7:94:0a:70:d5:3d:0e:aa:dd:a2:e5:9d:
                    0b:73:e7:2f:4b:31:bb:59:fe:8c:ec:44:bc:dc:10:
                    ef:6e:30:3a:df:fb:2e:02:82:f0:ac:cb:d7:64:0f:
                    4d:7b:c1:c6:fb:e5:99:a3:af:7c:2e:7d:f8:ae:05:
                    65:b8:7c:7f:95:d1:94:b8:0a:c8:df:25:3d:d2:66:
                    b6:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:E7:98:80:EA:2D:66:81:B3:DB:99:83:08:1F:E2:67:35:CE:6F:4B
            X509v3 Authority Key Identifier:
                keyid:44:10:60:68:E5:A5:FC:19:73:C8:04:3D:3B:8F:00:10:5A:9C:97:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/4c7d3cbf-24d6-4b1c-86cb-1d48876f3c6b/0/44106068E5A5FC1973C8043D3B8F00105A9C9710.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44106068E5A5FC1973C8043D3B8F00105A9C9710.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4c7d3cbf-24d6-4b1c-86cb-1d48876f3c6b/0/44106068E5A5FC1973C8043D3B8F00105A9C9710.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:e0:d8:f8:bf:c8:1d:87:74:d9:c9:ee:f6:a0:ef:1b:fd:1a:
         09:ca:80:0c:fe:a3:09:2b:00:0c:93:b1:0d:48:7a:83:67:9d:
         f7:02:ef:20:1d:6f:be:67:18:36:59:b6:ac:72:f8:e3:4a:92:
         3b:74:15:ab:bc:c2:72:b1:ac:d1:4a:68:57:5e:b1:d0:eb:b5:
         1b:f1:b7:5d:71:d4:e3:0e:9f:68:91:64:a9:65:f9:04:e9:58:
         c2:24:74:5c:7e:05:a8:fc:40:6d:3d:27:60:6a:a3:56:9d:d5:
         17:9a:04:8f:50:08:7f:e0:b5:da:2b:b1:6c:1e:53:70:d7:2b:
         9a:09:a9:07:07:87:46:71:49:99:09:13:3a:f4:9d:67:bf:63:
         1a:47:73:6e:7a:03:51:a9:9d:53:91:55:f8:a6:35:e4:76:62:
         a2:4e:c9:15:d9:0b:67:b7:94:b4:09:9c:48:e7:97:76:d9:21:
         5d:90:93:07:02:02:e4:63:db:e4:95:60:6e:a4:df:83:86:85:
         b1:3e:35:f0:3c:34:a7:69:8c:42:ed:87:95:f6:6f:38:c8:74:
         f6:7e:24:49:68:08:b6:9d:33:22:8c:88:e8:f4:3c:8f:4e:a9:
         6e:d1:60:01:d0:8e:d5:65:c9:82:01:57:f9:fd:ce:03:c0:73:
         37:c3:92:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 14:13:22 2025 by rpki-client