This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/5fcc1ef6-769f-4aaf-9d14-2e5b15a6ff23/0/1A8D5C5C95DA1BAB593AA71D0CB6B22684161633.mft
File:                     1A8D5C5C95DA1BAB593AA71D0CB6B22684161633.mft (raw, json)
Hash identifier:          GcwOVK574PimhI82c608OXBp7WVNAm/gBD8g/BAzAOI=
Subject key identifier:   E0:12:4E:5F:60:17:14:E2:72:8B:AA:F7:B2:B0:5F:B6:0A:B2:B9:2C
Authority key identifier: 1A:8D:5C:5C:95:DA:1B:AB:59:3A:A7:1D:0C:B6:B2:26:84:16:16:33
Certificate issuer:       /CN=1A8D5C5C95DA1BAB593AA71D0CB6B22684161633
Certificate serial:       7F163878190BAA3192CE6ECC0EA21E75A28861CC
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1A8D5C5C95DA1BAB593AA71D0CB6B22684161633.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/5fcc1ef6-769f-4aaf-9d14-2e5b15a6ff23/0/1A8D5C5C95DA1BAB593AA71D0CB6B22684161633.mft
Manifest number:          020E
Signing time:             Sun 14 Dec 2025 00:40:54 +0000
Manifest this update:     Sun 14 Dec 2025 00:35:54 +0000
Manifest next update:     Wed 17 Dec 2025 06:07:54 +0000
Files and hashes:         1: 3130332e32302e38382e302f32342d3234203d3e20313530313837.roa (hash: Ad9vTNOJwKofaap6S433q9PQ++RzqFFroze72orM9pE=)
                          2: 1A8D5C5C95DA1BAB593AA71D0CB6B22684161633.crl (hash: mNRrLN7h0YazqctkYyuh/z+7wrxllNIHu4tiNLkTq7o=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/5fcc1ef6-769f-4aaf-9d14-2e5b15a6ff23/0/1A8D5C5C95DA1BAB593AA71D0CB6B22684161633.crl
                          rsync://repo-rpki.idnic.net/repo/5fcc1ef6-769f-4aaf-9d14-2e5b15a6ff23/0/1A8D5C5C95DA1BAB593AA71D0CB6B22684161633.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1A8D5C5C95DA1BAB593AA71D0CB6B22684161633.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 17 Dec 2025 06:07:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:16:38:78:19:0b:aa:31:92:ce:6e:cc:0e:a2:1e:75:a2:88:61:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1A8D5C5C95DA1BAB593AA71D0CB6B22684161633
        Validity
            Not Before: Dec 14 00:35:54 2025 GMT
            Not After : Dec 17 06:07:54 2025 GMT
        Subject: CN=E0124E5F601714E2728BAAF7B2B05FB60AB2B92C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:a5:2e:1d:a0:65:20:34:16:02:a6:74:2e:38:
                    47:21:65:01:f1:58:36:f7:0b:20:5b:a4:5a:51:96:
                    a3:01:7e:04:88:d6:be:d1:b4:ea:4a:7c:5c:4a:d2:
                    fc:94:2f:5b:6b:5e:aa:0e:6d:e1:97:0e:a2:c9:67:
                    8f:1e:1e:2c:9a:30:47:10:32:cf:41:0b:68:d1:f7:
                    d0:50:5a:10:d0:2a:7d:f6:98:f3:06:70:b5:d0:ca:
                    c6:78:82:c5:67:eb:c3:8a:02:d8:59:5c:a0:ed:05:
                    37:3b:aa:b3:d5:89:1d:44:5f:e7:36:da:ee:b7:b6:
                    33:55:a3:ba:9b:d7:26:6e:3c:99:49:42:fb:f0:4c:
                    9f:a1:06:6e:c3:41:d0:3b:f0:35:da:a2:e0:30:78:
                    c2:d3:90:93:f6:c3:69:a9:63:73:03:c5:02:03:31:
                    83:76:d7:31:e2:57:76:67:eb:26:29:88:e5:92:82:
                    c2:46:a5:8d:a7:e0:05:32:5b:70:7e:4c:24:9a:2e:
                    80:c2:74:d1:ef:a1:0b:31:7e:e7:e7:e6:d1:3c:e6:
                    e8:72:2b:da:ae:41:2a:d5:c4:1a:c7:7d:0b:1e:12:
                    99:37:1d:d8:23:34:0c:40:2c:88:cb:86:a7:a8:5e:
                    ac:7a:98:2b:75:14:cb:1b:30:5f:d1:4b:45:a1:c7:
                    1f:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:12:4E:5F:60:17:14:E2:72:8B:AA:F7:B2:B0:5F:B6:0A:B2:B9:2C
            X509v3 Authority Key Identifier:
                keyid:1A:8D:5C:5C:95:DA:1B:AB:59:3A:A7:1D:0C:B6:B2:26:84:16:16:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/5fcc1ef6-769f-4aaf-9d14-2e5b15a6ff23/0/1A8D5C5C95DA1BAB593AA71D0CB6B22684161633.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1A8D5C5C95DA1BAB593AA71D0CB6B22684161633.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5fcc1ef6-769f-4aaf-9d14-2e5b15a6ff23/0/1A8D5C5C95DA1BAB593AA71D0CB6B22684161633.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:c5:91:b3:88:00:43:72:46:13:9b:92:6d:a3:a8:31:6f:93:
         7e:d2:cc:c5:bd:de:76:0d:88:0f:b5:ef:00:ea:54:84:30:fa:
         e4:e2:20:ec:0f:0b:53:09:0c:50:07:fe:f5:18:69:87:cb:2e:
         e7:f1:07:fa:d1:4d:a6:ff:d8:ac:06:b4:56:e4:14:f3:fd:4d:
         51:01:94:71:5e:a4:70:73:d2:8e:f7:62:b3:d4:72:f0:db:97:
         68:d2:8a:6a:62:73:38:4f:e6:f7:05:6b:e1:a7:0c:3e:8c:73:
         28:17:30:75:bf:25:9e:6e:9f:21:d6:dc:87:5b:61:42:16:21:
         28:37:dd:6d:30:6d:47:31:bc:6a:c1:a7:c9:b6:ba:e4:96:76:
         b8:11:8a:c0:21:62:0a:9b:ab:da:4f:70:30:cc:a5:fd:40:cf:
         fe:33:ac:14:98:06:4b:ce:6e:06:32:2c:19:45:fb:3f:bf:7f:
         0e:a9:bc:c9:b8:6a:79:8a:99:98:de:56:3b:44:b2:e9:b3:d1:
         3b:f9:4a:4f:7d:14:16:aa:d2:0e:2d:b7:e2:18:78:75:0d:ed:
         69:67:44:e1:ba:6b:40:cd:23:8f:2b:8f:24:0d:7a:a1:62:48:
         39:c2:a6:72:43:87:3f:a5:f8:47:df:f1:bf:a3:b7:8f:63:a5:
         02:b3:00:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 14 07:48:34 2025 by rpki-client