This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/8daa4c0f-9992-42fc-a542-eff74091b334/0/E1A24B098E9AC07C658F6AFEE0990751CDB692A4.mft
File:                     E1A24B098E9AC07C658F6AFEE0990751CDB692A4.mft (raw, json)
Hash identifier:          tqiOZQ6/tKp/VYTffMlTCatm3yU40YiDOSrsj13dgB8=
Subject key identifier:   00:A9:D6:CE:BD:D9:89:9E:0B:8D:AB:9D:38:9A:2F:9F:D1:5F:35:79
Authority key identifier: E1:A2:4B:09:8E:9A:C0:7C:65:8F:6A:FE:E0:99:07:51:CD:B6:92:A4
Certificate issuer:       /CN=E1A24B098E9AC07C658F6AFEE0990751CDB692A4
Certificate serial:       7415173584B05E3C1908555499A9EE86A58608B8
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E1A24B098E9AC07C658F6AFEE0990751CDB692A4.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/8daa4c0f-9992-42fc-a542-eff74091b334/0/E1A24B098E9AC07C658F6AFEE0990751CDB692A4.mft
Manifest number:          02E5
Signing time:             Wed 03 Dec 2025 07:21:33 +0000
Manifest this update:     Wed 03 Dec 2025 07:16:33 +0000
Manifest next update:     Sat 06 Dec 2025 18:54:33 +0000
Files and hashes:         1: 3130332e3230332e37362e302f32342d3234203d3e20313334363230.roa (hash: Brdn2dLUZTxd6fnM4xWw5E67aagF7MF4tCt2gy0nMwM=)
                          2: 3130332e3230332e37382e302f32342d3234203d3e20313334363230.roa (hash: s+fqkugTUtrfTnYLMhS2gRWf2sStTpZQt4ymRPeizms=)
                          3: 3130332e3230332e37362e302f32322d3232203d3e20313334363230.roa (hash: rkQIsU4mH+wmPkEwMYQGKlUQJZpq5skC0u2AtTeyAJY=)
                          4: 3130332e3230332e37372e302f32342d3234203d3e20313334363230.roa (hash: Kwtm71D/Z6NhSfdr0MOgpN01lazOwL/r2/rIVuBoO7I=)
                          5: 3130332e3230332e37392e302f32342d3234203d3e20313334363230.roa (hash: XFCtvmMAAUBkMVCFTzI1cVSJed8FZNsw+FTnuaIBLa8=)
                          6: E1A24B098E9AC07C658F6AFEE0990751CDB692A4.crl (hash: SD9l6BWnX/4u1hfXE1IEA1/mpxVWFHfGjFEiCTem3Hc=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/8daa4c0f-9992-42fc-a542-eff74091b334/0/E1A24B098E9AC07C658F6AFEE0990751CDB692A4.crl
                          rsync://repo-rpki.idnic.net/repo/8daa4c0f-9992-42fc-a542-eff74091b334/0/E1A24B098E9AC07C658F6AFEE0990751CDB692A4.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E1A24B098E9AC07C658F6AFEE0990751CDB692A4.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 06 Dec 2025 18:40:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:15:17:35:84:b0:5e:3c:19:08:55:54:99:a9:ee:86:a5:86:08:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E1A24B098E9AC07C658F6AFEE0990751CDB692A4
        Validity
            Not Before: Dec  3 07:16:33 2025 GMT
            Not After : Dec  6 18:54:33 2025 GMT
        Subject: CN=00A9D6CEBDD9899E0B8DAB9D389A2F9FD15F3579
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:0e:6e:cf:11:a1:f4:a0:04:07:8e:f5:71:87:
                    54:62:07:df:a8:01:e0:48:50:2e:97:77:54:69:53:
                    a0:69:dc:15:54:8c:cf:3c:30:7d:0c:3c:e1:ba:d4:
                    f1:86:52:a8:ad:a5:99:61:49:d9:3d:10:fd:03:8c:
                    63:00:2b:20:28:c1:1b:af:76:31:11:f4:2a:43:60:
                    f6:73:93:6b:b5:20:4c:b6:0b:68:ad:9a:93:d2:49:
                    3f:0d:c5:c9:6d:79:4b:59:43:36:e4:b6:25:80:b3:
                    0a:64:41:cd:7f:43:96:54:71:f3:26:3a:e7:6c:f8:
                    53:ab:89:18:f9:0a:97:a7:36:9e:2d:ee:53:f1:2c:
                    44:41:ed:67:90:db:9c:46:a1:1c:3b:b4:32:05:35:
                    24:89:70:8b:4e:48:df:2b:e9:fd:d3:80:2c:ae:f9:
                    bd:63:38:56:0a:fc:e6:aa:98:21:5b:c3:1c:59:0f:
                    86:c8:6f:b0:fd:d8:7a:7c:50:9c:16:24:55:88:31:
                    f8:ce:96:0e:31:25:52:18:9a:fe:b5:81:c9:d9:d5:
                    a6:12:ac:6f:5b:5c:25:c6:17:ac:da:ee:c6:37:81:
                    be:78:c4:eb:99:3f:ca:6f:e0:8f:53:3f:8c:f5:27:
                    3b:5c:5e:62:f7:d2:f8:c3:cf:82:4c:d6:eb:80:71:
                    3e:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:A9:D6:CE:BD:D9:89:9E:0B:8D:AB:9D:38:9A:2F:9F:D1:5F:35:79
            X509v3 Authority Key Identifier:
                keyid:E1:A2:4B:09:8E:9A:C0:7C:65:8F:6A:FE:E0:99:07:51:CD:B6:92:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/8daa4c0f-9992-42fc-a542-eff74091b334/0/E1A24B098E9AC07C658F6AFEE0990751CDB692A4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E1A24B098E9AC07C658F6AFEE0990751CDB692A4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8daa4c0f-9992-42fc-a542-eff74091b334/0/E1A24B098E9AC07C658F6AFEE0990751CDB692A4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:30:b8:b5:4f:e3:c9:01:9f:79:42:dc:3f:c0:50:56:c2:eb:
         7a:a5:34:b8:37:7f:c0:92:b3:ef:19:cb:a3:7d:92:fb:22:71:
         66:83:61:02:2d:f8:30:d0:19:94:6d:63:0d:c4:13:d9:84:0e:
         ac:8c:fd:d9:5e:75:96:3f:c6:40:72:2c:21:92:1b:69:0f:fe:
         11:e6:2a:c5:f1:20:1f:39:fe:26:57:e0:fb:88:7f:07:23:2b:
         54:13:da:94:ab:9b:f8:75:64:4e:57:38:e2:6c:fd:34:c0:63:
         93:65:d1:79:b6:26:4b:75:96:ec:ea:bf:27:71:81:28:08:11:
         25:16:3b:fa:4d:4a:51:88:c8:6e:79:c6:2c:fe:cb:56:0c:07:
         50:6f:1b:66:d9:70:a6:9f:03:84:6b:bc:1f:ec:35:82:16:92:
         0d:2a:11:0f:51:8a:47:a3:b4:bc:c7:58:23:5c:93:6e:83:f3:
         25:36:07:ef:28:0d:0e:06:20:dd:f7:7c:75:15:ad:fc:59:cd:
         50:34:2e:2c:c8:1e:0f:13:c5:cd:27:c2:f0:8e:8e:40:46:c1:
         da:32:da:33:83:79:8a:e1:2a:ba:04:01:a9:d4:33:25:7a:f1:
         b0:26:d3:79:dd:d6:22:63:41:a2:7e:6a:ed:52:00:d7:5b:08:
         01:13:a1:58
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUdBUXNYSwXjwZCFVUmanuhqWGCLgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTFBMjRCMDk4RTlBQzA3QzY1OEY2QUZFRTA5OTA3NTFD
REI2OTJBNDAeFw0yNTEyMDMwNzE2MzNaFw0yNTEyMDYxODU0MzNaMDMxMTAvBgNV
BAMTKDAwQTlENkNFQkREOTg5OUUwQjhEQUI5RDM4OUEyRjlGRDE1RjM1NzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDsDm7PEaH0oAQHjvVxh1RiB9+o
AeBIUC6Xd1RpU6Bp3BVUjM88MH0MPOG61PGGUqitpZlhSdk9EP0DjGMAKyAowRuv
djER9CpDYPZzk2u1IEy2C2itmpPSST8NxclteUtZQzbktiWAswpkQc1/Q5ZUcfMm
Ouds+FOriRj5CpenNp4t7lPxLERB7WeQ25xGoRw7tDIFNSSJcItOSN8r6f3TgCyu
+b1jOFYK/OaqmCFbwxxZD4bIb7D92Hp8UJwWJFWIMfjOlg4xJVIYmv61gcnZ1aYS
rG9bXCXGF6za7sY3gb54xOuZP8pv4I9TP4z1JztcXmL30vjDz4JM1uuAcT5vAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUAKnWzr3ZiZ4LjaudOJovn9FfNXkwHwYDVR0j
BBgwFoAU4aJLCY6awHxlj2r+4JkHUc22kqQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84
ZGFhNGMwZi05OTkyLTQyZmMtYTU0Mi1lZmY3NDA5MWIzMzQvMC9FMUEyNEIwOThF
OUFDMDdDNjU4RjZBRkVFMDk5MDc1MUNEQjY5MkE0LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvRTFBMjRCMDk4RTlBQzA3QzY1OEY2QUZFRTA5OTA3NTFDREI2
OTJBNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGRhYTRjMGYtOTk5Mi00MmZjLWE1
NDItZWZmNzQwOTFiMzM0LzAvRTFBMjRCMDk4RTlBQzA3QzY1OEY2QUZFRTA5OTA3
NTFDREI2OTJBNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAC0wuLVP48kBn3lC3D/AUFbC63qlNLg3f8CS
s+8Zy6N9kvsicWaDYQIt+DDQGZRtYw3EE9mEDqyM/dledZY/xkByLCGSG2kP/hHm
KsXxIB85/iZX4PuIfwcjK1QT2pSrm/h1ZE5XOOJs/TTAY5Nl0Xm2Jkt1luzqvydx
gSgIESUWO/pNSlGIyG55xiz+y1YMB1BvG2bZcKafA4RrvB/sNYIWkg0qEQ9Rikej
tLzHWCNck26D8yU2B+8oDQ4GIN33fHUVrfxZzVA0LizIHg8Txc0nwvCOjkBGwdoy
2jODeYrhKroEAanUMyV68bAm03nd1iJjQaJ+au1SANdbCAEToVg=
-----END CERTIFICATE-----
Generated at Wed Dec 3 15:31:48 2025 by rpki-client