This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/74bf07cf-50a9-428a-90d2-d44d6b762b55/0/E1F7E739D5E92CEFAAF8DB4FDE24B402DF2F5F12.mft
File:                     E1F7E739D5E92CEFAAF8DB4FDE24B402DF2F5F12.mft (raw, json)
Hash identifier:          2TKYym8kUmIqfd/dDtrMUMpzFJZiNfVWxCBoHTXASCc=
Subject key identifier:   12:36:20:B2:00:AB:69:5A:32:62:60:32:28:DF:A1:34:22:91:B3:10
Authority key identifier: E1:F7:E7:39:D5:E9:2C:EF:AA:F8:DB:4F:DE:24:B4:02:DF:2F:5F:12
Certificate issuer:       /CN=E1F7E739D5E92CEFAAF8DB4FDE24B402DF2F5F12
Certificate serial:       0A729017188E930CE95279A9FB46D26AE8FF0DA9
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E1F7E739D5E92CEFAAF8DB4FDE24B402DF2F5F12.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/74bf07cf-50a9-428a-90d2-d44d6b762b55/0/E1F7E739D5E92CEFAAF8DB4FDE24B402DF2F5F12.mft
Manifest number:          01BA
Signing time:             Mon 15 Dec 2025 04:40:54 +0000
Manifest this update:     Mon 15 Dec 2025 04:35:54 +0000
Manifest next update:     Thu 18 Dec 2025 05:50:54 +0000
Files and hashes:         1: 3130332e3131302e33352e302f32342d3234203d3e20313530393336.roa (hash: uQLjUBISMtz6q/VlBRFK79+EJlW80V1U4JVUQySqyvM=)
                          2: 3130332e3131302e33352e302f32342d3234203d3e203438343635.roa (hash: t5FEbOLpmmiM+pm5xNk45bS+68qbBIUF8y4AW5jVQqc=)
                          3: E1F7E739D5E92CEFAAF8DB4FDE24B402DF2F5F12.crl (hash: AOIGGskkhi2hDqEKLuueSMhPXEukVbet5CmgD8MVnvo=)
                          4: 3130332e3131302e33342e302f32332d3234203d3e20313530393336.roa (hash: 2f4uu7IrkIZq7UTq+ptH1NLF5HW0iMlWBn9DqvPnp4U=)
                          5: 3130332e3131302e33342e302f32342d3234203d3e203438343635.roa (hash: PfXBdlYDWEtVezNTe8gChl6D2vjrU0fVmVCcz01D0ac=)
                          6: 3130332e3131302e33342e302f32342d3234203d3e20313530393336.roa (hash: CzAMVi4LI/hA4dEq+gFLf1t2OAe5Bjc5LnZkwOWw6KQ=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/74bf07cf-50a9-428a-90d2-d44d6b762b55/0/E1F7E739D5E92CEFAAF8DB4FDE24B402DF2F5F12.crl
                          rsync://repo-rpki.idnic.net/repo/74bf07cf-50a9-428a-90d2-d44d6b762b55/0/E1F7E739D5E92CEFAAF8DB4FDE24B402DF2F5F12.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E1F7E739D5E92CEFAAF8DB4FDE24B402DF2F5F12.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 18 Dec 2025 05:50:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:72:90:17:18:8e:93:0c:e9:52:79:a9:fb:46:d2:6a:e8:ff:0d:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E1F7E739D5E92CEFAAF8DB4FDE24B402DF2F5F12
        Validity
            Not Before: Dec 15 04:35:54 2025 GMT
            Not After : Dec 18 05:50:54 2025 GMT
        Subject: CN=123620B200AB695A3262603228DFA1342291B310
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:91:ec:e9:60:0b:4b:1f:fb:3e:8c:c4:cf:1c:
                    82:66:08:5a:0f:fb:f1:85:d5:ca:89:63:61:e6:47:
                    d0:43:8f:c2:2d:0a:35:fb:3b:29:4b:b1:b1:a0:74:
                    eb:cb:f3:19:80:b2:99:45:cb:a2:f5:ba:88:80:62:
                    3c:4c:94:cc:d1:44:b8:d5:7f:4c:83:79:88:ad:fa:
                    14:23:3c:04:6b:55:49:03:80:16:19:36:b1:c4:ad:
                    fd:5e:93:4a:ba:69:b1:67:92:0c:e7:36:94:2a:2e:
                    2c:e5:2b:09:de:7f:90:b9:b7:05:ec:7c:7b:2b:10:
                    a3:35:ed:5d:b1:3e:90:10:56:ff:53:20:d0:dc:a7:
                    a2:8e:fb:44:89:2a:de:17:94:f5:b1:13:f5:20:af:
                    2c:3e:39:9e:5d:c3:5f:e6:64:a1:42:f6:a3:5a:f2:
                    e8:4f:4c:bf:6f:5f:10:93:64:bb:1b:e8:ac:0d:fd:
                    8e:83:8a:43:68:be:81:7f:df:30:20:c5:57:d3:85:
                    91:e5:c9:ae:4c:dc:c1:d4:f7:66:d1:ff:26:94:7c:
                    48:4d:87:2b:d6:87:8d:9b:d0:25:6b:89:d3:eb:1f:
                    c8:dd:af:75:a2:9c:25:c0:90:a5:25:f3:06:60:06:
                    dc:bc:02:5e:a9:a3:53:85:2d:d4:e4:d0:b6:db:f1:
                    98:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:36:20:B2:00:AB:69:5A:32:62:60:32:28:DF:A1:34:22:91:B3:10
            X509v3 Authority Key Identifier:
                keyid:E1:F7:E7:39:D5:E9:2C:EF:AA:F8:DB:4F:DE:24:B4:02:DF:2F:5F:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/74bf07cf-50a9-428a-90d2-d44d6b762b55/0/E1F7E739D5E92CEFAAF8DB4FDE24B402DF2F5F12.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E1F7E739D5E92CEFAAF8DB4FDE24B402DF2F5F12.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/74bf07cf-50a9-428a-90d2-d44d6b762b55/0/E1F7E739D5E92CEFAAF8DB4FDE24B402DF2F5F12.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:65:41:12:54:e5:08:25:08:84:c3:d5:cb:5e:f7:97:27:d0:
         98:6d:df:59:9d:59:6d:ac:96:8e:36:68:e9:11:2e:9f:6e:1d:
         28:5a:e1:20:85:9d:bf:1c:9d:ee:1d:02:3d:f1:73:ff:a1:4a:
         38:18:d8:12:52:43:2c:c7:7c:fe:4a:d7:27:c0:aa:e5:72:51:
         27:72:0b:ab:f0:a6:74:a1:fb:d1:9b:d7:b8:d3:75:8e:a4:f2:
         d7:3f:4c:76:ce:74:f5:04:f8:9f:2d:47:45:94:13:6a:3d:32:
         f1:c8:51:01:c9:81:9b:cd:09:c6:9e:1c:af:be:7f:10:86:a2:
         81:28:a9:54:b1:97:13:10:ef:91:92:86:27:7a:7f:9e:e7:74:
         d2:b3:2e:85:dd:38:4c:41:e4:5f:b9:39:75:31:86:51:32:e4:
         9e:49:63:74:08:9c:2a:1c:2f:d2:0d:26:b5:27:96:c3:62:66:
         8c:be:2b:fa:48:b1:75:b9:94:6f:77:5c:9a:27:6b:0a:8b:fc:
         c0:e6:00:84:da:b1:18:5b:4a:7a:b5:75:3c:a3:0e:64:e2:fe:
         d0:5a:cb:cd:f7:83:56:9f:70:b0:d0:3a:9d:f3:1c:ee:16:73:
         20:1a:3a:40:9a:c5:8f:39:c7:56:76:96:47:40:dd:0b:b1:b6:
         79:88:d0:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 16 06:03:29 2025 by rpki-client