This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/66b87feb-0fe2-418a-a37a-be3dd1f0e63c/0/E9F7A0AA6DCCA1FF7D3D61460D5534A004AB2C61.mft
File:                     E9F7A0AA6DCCA1FF7D3D61460D5534A004AB2C61.mft (raw, json)
Hash identifier:          riQ/huFq20g5IrxvQhaJdogI/nx/CVEyMHlqOz6J/sM=
Subject key identifier:   2D:77:45:05:9E:0D:1B:B2:BA:D5:36:A5:F5:C7:81:9B:3C:EB:B7:0F
Authority key identifier: E9:F7:A0:AA:6D:CC:A1:FF:7D:3D:61:46:0D:55:34:A0:04:AB:2C:61
Certificate issuer:       /CN=E9F7A0AA6DCCA1FF7D3D61460D5534A004AB2C61
Certificate serial:       61A43768CA820565996A490DE8013D90278918A8
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E9F7A0AA6DCCA1FF7D3D61460D5534A004AB2C61.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/66b87feb-0fe2-418a-a37a-be3dd1f0e63c/0/E9F7A0AA6DCCA1FF7D3D61460D5534A004AB2C61.mft
Manifest number:          0529
Signing time:             Tue 02 Dec 2025 07:31:46 +0000
Manifest this update:     Tue 02 Dec 2025 07:26:46 +0000
Manifest next update:     Fri 05 Dec 2025 15:48:46 +0000
Files and hashes:         1: 323430353a366334303a3a2f33322d3438203d3e203234353237.roa (hash: sdUNTLR9jp0dwpPELDIKx4SufivRxg0Tg+/QbjfBOQs=)
                          2: 3130332e3134382e34362e302f32332d3234203d3e203234353237.roa (hash: eQEzsyxVfpTHgHfaMJEWpEAU8ae5FhvdVXRN2kONR8w=)
                          3: 3138332e38312e3135322e302f32312d3234203d3e203234353237.roa (hash: HrGCjeL9LpaajCgOCMCFmtzXiHgvf2onAjSq9sq+a5M=)
                          4: E9F7A0AA6DCCA1FF7D3D61460D5534A004AB2C61.crl (hash: CyE8S43C/c4GAMhg4pYwfGIoeFH4lBsr8oAT+16iaQ0=)
                          5: 3230332e3136302e35362e302f32312d3234203d3e203234353237.roa (hash: P99HVIzqHVCWDBqJ4r8v17rUky9V8VmAdjN3/2RrLPI=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/66b87feb-0fe2-418a-a37a-be3dd1f0e63c/0/E9F7A0AA6DCCA1FF7D3D61460D5534A004AB2C61.crl
                          rsync://repo-rpki.idnic.net/repo/66b87feb-0fe2-418a-a37a-be3dd1f0e63c/0/E9F7A0AA6DCCA1FF7D3D61460D5534A004AB2C61.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E9F7A0AA6DCCA1FF7D3D61460D5534A004AB2C61.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 05 Dec 2025 15:48:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:a4:37:68:ca:82:05:65:99:6a:49:0d:e8:01:3d:90:27:89:18:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E9F7A0AA6DCCA1FF7D3D61460D5534A004AB2C61
        Validity
            Not Before: Dec  2 07:26:46 2025 GMT
            Not After : Dec  5 15:48:46 2025 GMT
        Subject: CN=2D7745059E0D1BB2BAD536A5F5C7819B3CEBB70F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:1a:c4:9d:4a:34:ae:69:a7:de:65:2f:67:6f:
                    12:67:76:81:b5:5f:24:19:6d:a5:aa:3f:7b:30:a2:
                    a0:14:dc:74:8d:5c:15:f2:e1:e3:dc:60:03:54:06:
                    2e:1e:0d:ca:19:e5:a6:b7:5e:79:09:b5:2f:fa:9a:
                    b6:8f:49:ca:13:ed:cc:f2:80:c1:98:22:ca:ef:0e:
                    4d:53:e0:52:6c:6e:ca:c8:ae:55:12:cb:ad:2a:30:
                    f5:c1:c0:15:e3:21:fe:36:89:41:90:9b:c3:68:d7:
                    90:ff:02:d1:9c:17:e1:8d:41:0d:d0:09:79:ae:59:
                    a1:f7:9b:41:ca:7a:33:db:b3:9c:d2:66:f5:07:c5:
                    7b:d4:b4:0a:85:b4:08:ea:f6:b6:d0:cd:67:b4:6a:
                    48:77:e2:8b:73:5c:6e:2a:22:4d:e7:c8:9a:03:c7:
                    f1:98:e5:b4:cf:09:01:a9:48:39:11:ae:d4:d5:ab:
                    ca:46:05:8b:45:02:08:18:29:74:7f:34:61:a2:84:
                    1e:49:b0:1f:af:c7:d4:85:6f:80:1e:3d:62:59:9f:
                    6e:3b:67:ed:c2:f2:bf:2d:e3:3f:59:9b:99:13:e7:
                    d4:26:a8:1f:82:8d:3f:81:b8:45:83:5e:13:34:50:
                    75:8e:4b:96:e9:68:e4:9d:b7:19:10:e4:95:55:33:
                    95:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:77:45:05:9E:0D:1B:B2:BA:D5:36:A5:F5:C7:81:9B:3C:EB:B7:0F
            X509v3 Authority Key Identifier:
                keyid:E9:F7:A0:AA:6D:CC:A1:FF:7D:3D:61:46:0D:55:34:A0:04:AB:2C:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/66b87feb-0fe2-418a-a37a-be3dd1f0e63c/0/E9F7A0AA6DCCA1FF7D3D61460D5534A004AB2C61.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E9F7A0AA6DCCA1FF7D3D61460D5534A004AB2C61.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/66b87feb-0fe2-418a-a37a-be3dd1f0e63c/0/E9F7A0AA6DCCA1FF7D3D61460D5534A004AB2C61.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:e1:f1:79:3d:3f:a6:7e:82:43:0a:a3:1d:e4:67:3f:38:75:
         9e:04:f4:5b:ab:c9:ba:10:51:71:69:68:c6:99:10:05:c4:17:
         2b:88:1a:e9:7c:b1:36:f7:bc:1c:ab:a0:d6:a7:9a:14:d4:02:
         94:21:ab:00:fe:eb:77:1e:4b:e5:3f:f0:1d:93:25:96:df:00:
         c3:47:1f:2f:0e:3c:a4:26:89:c4:19:55:01:bb:48:c1:cd:d9:
         c6:ff:89:ca:5f:34:bc:bc:5d:01:c9:25:9d:03:2c:1c:bc:b9:
         75:6a:82:4d:50:0e:18:ce:67:33:96:9e:31:78:89:7a:58:11:
         5c:ab:06:02:19:c8:0d:72:00:8f:dc:df:e5:73:22:b8:35:88:
         a6:d3:66:dc:e8:aa:87:e1:07:e7:ec:46:a6:2c:b0:be:c8:1d:
         54:83:6e:52:5b:72:44:33:59:40:82:f2:fa:85:95:24:12:ee:
         f3:a7:fb:ac:de:6d:b5:63:cd:f6:c9:3b:ab:eb:ac:eb:dc:a5:
         75:3c:33:09:98:15:51:4c:f6:78:d6:01:53:35:14:cf:37:11:
         c9:c3:a1:dc:ef:f1:c7:d6:5f:8d:32:ec:bb:81:ba:0f:a6:1e:
         cb:97:40:17:a6:31:63:68:b7:51:04:03:de:18:ce:f8:1b:d8:
         1e:1c:b1:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 14:42:49 2025 by rpki-client