This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/53de5035-84e1-44c6-9cf9-4ea0bbaa093f/0/E74A2346929DE84143E5DF0DD921764C285B01A2.mft
File:                     E74A2346929DE84143E5DF0DD921764C285B01A2.mft (raw, json)
Hash identifier:          RdisdDt4hAMdc7KOcQSTFxWB2GUmvDLO6/28rSTflvA=
Subject key identifier:   83:57:2F:52:36:81:F0:9E:DF:E9:F2:D1:30:9E:21:B9:2E:54:F5:18
Authority key identifier: E7:4A:23:46:92:9D:E8:41:43:E5:DF:0D:D9:21:76:4C:28:5B:01:A2
Certificate issuer:       /CN=E74A2346929DE84143E5DF0DD921764C285B01A2
Certificate serial:       19CC33225A1EE0DBF3743FED4914B1794A485485
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E74A2346929DE84143E5DF0DD921764C285B01A2.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/53de5035-84e1-44c6-9cf9-4ea0bbaa093f/0/E74A2346929DE84143E5DF0DD921764C285B01A2.mft
Manifest number:          DA
Signing time:             Wed 03 Dec 2025 10:11:20 +0000
Manifest this update:     Wed 03 Dec 2025 10:06:20 +0000
Manifest next update:     Sat 06 Dec 2025 17:56:20 +0000
Files and hashes:         1: 3130332e3131302e3130302e302f32332d3233203d3e20313530393337.roa (hash: QWlvcWw+MqtfsyLo2e2j057MAyn4Zw7MQ10D6boTyYA=)
                          2: E74A2346929DE84143E5DF0DD921764C285B01A2.crl (hash: VFU9BCG374emCvjjPQyXXjdnjbVt4W3IIMhmsVV2Nhs=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/53de5035-84e1-44c6-9cf9-4ea0bbaa093f/0/E74A2346929DE84143E5DF0DD921764C285B01A2.crl
                          rsync://repo-rpki.idnic.net/repo/53de5035-84e1-44c6-9cf9-4ea0bbaa093f/0/E74A2346929DE84143E5DF0DD921764C285B01A2.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E74A2346929DE84143E5DF0DD921764C285B01A2.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 06 Dec 2025 12:07:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:cc:33:22:5a:1e:e0:db:f3:74:3f:ed:49:14:b1:79:4a:48:54:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E74A2346929DE84143E5DF0DD921764C285B01A2
        Validity
            Not Before: Dec  3 10:06:20 2025 GMT
            Not After : Dec  6 17:56:20 2025 GMT
        Subject: CN=83572F523681F09EDFE9F2D1309E21B92E54F518
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:83:6a:28:99:2f:76:e3:60:e3:c4:59:01:53:
                    cc:54:c1:d4:c5:70:25:89:35:73:0b:ba:c7:70:db:
                    f2:45:26:c1:86:e1:44:5a:5e:3d:79:7a:82:e9:15:
                    82:de:6f:25:ef:d4:89:be:52:24:bb:15:04:be:58:
                    00:f2:2c:be:bb:ee:b8:e0:51:a7:e5:af:eb:64:48:
                    33:84:73:38:cd:b3:db:09:e7:8e:7e:21:9a:3e:60:
                    b0:72:a9:db:9c:af:99:cf:6a:50:06:2f:52:94:3c:
                    35:4e:c3:9e:9a:3a:0f:38:20:c3:ba:66:a7:74:45:
                    f6:0e:c2:be:95:3e:4f:6b:a0:f8:4a:e6:cf:ce:41:
                    c3:af:7f:7e:fc:50:23:d8:b1:8f:1e:41:9d:19:4f:
                    d3:93:2a:27:a8:64:7d:97:81:74:37:64:82:b2:78:
                    a6:e8:a6:d1:8c:db:5b:09:50:2c:36:27:70:c2:ab:
                    28:38:ea:08:12:00:fb:8f:2a:ca:9a:9c:0e:8c:7f:
                    fa:83:97:ec:00:fe:20:06:fe:ad:48:10:7a:ce:13:
                    eb:e4:f4:e2:b1:a3:ae:8a:e7:f9:17:16:be:b4:86:
                    59:3d:4b:c5:3d:81:09:d1:ab:40:27:ae:4a:22:af:
                    41:3c:ed:6f:d4:d8:a2:be:59:62:f4:b8:b0:38:a9:
                    28:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:57:2F:52:36:81:F0:9E:DF:E9:F2:D1:30:9E:21:B9:2E:54:F5:18
            X509v3 Authority Key Identifier:
                keyid:E7:4A:23:46:92:9D:E8:41:43:E5:DF:0D:D9:21:76:4C:28:5B:01:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/53de5035-84e1-44c6-9cf9-4ea0bbaa093f/0/E74A2346929DE84143E5DF0DD921764C285B01A2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E74A2346929DE84143E5DF0DD921764C285B01A2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/53de5035-84e1-44c6-9cf9-4ea0bbaa093f/0/E74A2346929DE84143E5DF0DD921764C285B01A2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:ea:e5:85:0a:22:1a:55:33:da:99:de:c6:85:60:86:87:e3:
         6c:4a:4b:71:4d:dc:61:c7:ce:c2:05:92:03:0a:14:3b:f0:9c:
         c0:11:36:df:51:68:d9:f5:bb:4b:7a:e7:60:d9:40:00:22:6c:
         62:14:e3:05:37:4a:80:e6:31:d5:1f:57:00:c8:68:72:1b:dc:
         59:ad:f1:d0:88:98:62:eb:7c:4c:bc:a8:02:19:f2:d1:d2:65:
         e3:43:64:32:fd:4b:8e:c3:01:90:34:ae:5d:eb:e4:7b:ee:b0:
         db:de:94:6f:4d:a5:ba:56:fc:45:0c:a4:6f:38:ca:67:05:e0:
         1d:ba:4b:62:63:09:07:81:a5:5e:eb:c5:e0:ae:15:3d:b8:39:
         fc:58:21:22:b5:2f:97:1e:57:be:70:79:4b:58:5c:24:04:1e:
         d0:ab:1a:75:a4:d1:8f:26:ed:59:1f:2f:d3:7d:3e:00:df:36:
         7c:a6:bf:76:0b:db:e9:13:c2:a6:97:a8:8f:9e:72:a7:55:62:
         14:85:8f:ce:30:86:c2:f2:e6:a4:7d:cc:5a:23:ab:b7:3a:e4:
         0d:90:87:9e:1e:42:60:c2:8e:e0:36:5a:53:48:d4:d7:d4:7b:
         85:b5:f7:67:43:44:6a:d8:7b:f7:0d:d7:39:5e:c9:e1:ad:f3:
         f5:77:18:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 13:58:07 2025 by rpki-client