This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/935f15c9-5843-4705-b694-fe5e7ce19808/0/ED47540CA812870D4CDBD150F71BACF636BC000E.mft
File:                     ED47540CA812870D4CDBD150F71BACF636BC000E.mft (raw, json)
Hash identifier:          FqcyKxWO3aUaw7Rq4MEzjpkTabjVxqVgHPP+UcXxEAA=
Subject key identifier:   EA:ED:D0:C7:22:62:AA:6D:77:4B:3A:6A:D5:32:47:1D:BE:01:E5:89
Authority key identifier: ED:47:54:0C:A8:12:87:0D:4C:DB:D1:50:F7:1B:AC:F6:36:BC:00:0E
Certificate issuer:       /CN=ED47540CA812870D4CDBD150F71BACF636BC000E
Certificate serial:       4E195C39447513A806ADD19E4A5AEB0DC2B965AE
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ED47540CA812870D4CDBD150F71BACF636BC000E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/935f15c9-5843-4705-b694-fe5e7ce19808/0/ED47540CA812870D4CDBD150F71BACF636BC000E.mft
Manifest number:          0232
Signing time:             Wed 24 Dec 2025 16:22:11 +0000
Manifest this update:     Wed 24 Dec 2025 16:17:11 +0000
Manifest next update:     Sat 27 Dec 2025 23:56:11 +0000
Files and hashes:         1: ED47540CA812870D4CDBD150F71BACF636BC000E.crl (hash: hcpOg7bGGHdmFUIhl9PVSZhIA5WDoZuhgDgU7+rerZ0=)
                          2: 3130332e3135392e3131362e302f32332d3234203d3e203338333230.roa (hash: vyZtldMTjMyu3iJ/orgojw8DEr5/d6xlea+iuDJEfRk=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/935f15c9-5843-4705-b694-fe5e7ce19808/0/ED47540CA812870D4CDBD150F71BACF636BC000E.crl
                          rsync://repo-rpki.idnic.net/repo/935f15c9-5843-4705-b694-fe5e7ce19808/0/ED47540CA812870D4CDBD150F71BACF636BC000E.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ED47540CA812870D4CDBD150F71BACF636BC000E.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 27 Dec 2025 23:56:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:19:5c:39:44:75:13:a8:06:ad:d1:9e:4a:5a:eb:0d:c2:b9:65:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ED47540CA812870D4CDBD150F71BACF636BC000E
        Validity
            Not Before: Dec 24 16:17:11 2025 GMT
            Not After : Dec 27 23:56:11 2025 GMT
        Subject: CN=EAEDD0C72262AA6D774B3A6AD532471DBE01E589
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:1a:3c:36:61:4d:a1:ed:59:7a:77:8f:5c:49:
                    c7:e3:73:c8:28:05:cc:bb:73:2f:2c:e8:30:ba:c0:
                    64:ba:d2:86:76:9a:79:82:6d:4d:1e:39:ce:52:ee:
                    fc:8e:c2:0d:e8:a3:12:b9:94:70:ba:bb:11:95:a5:
                    83:19:55:44:4c:2b:6e:a7:30:b7:37:f7:b0:8f:e8:
                    db:e0:5a:6f:34:ca:08:5c:4e:9d:7a:f8:04:9f:e9:
                    49:31:63:47:80:4f:53:91:c9:bd:7c:75:9e:99:f5:
                    a6:ea:87:44:4c:79:00:a2:9f:9e:14:58:ae:c3:1e:
                    da:d3:3b:46:23:31:0d:71:a1:c0:90:fc:ab:2e:1c:
                    32:cb:1b:ee:03:37:cc:3c:ed:b1:75:fe:87:ed:dc:
                    fa:cc:2e:d5:7c:d3:cc:10:41:70:d7:db:43:f9:4a:
                    e2:39:05:68:40:cb:b7:ca:d5:fb:76:28:e3:ea:59:
                    18:54:21:4e:ae:42:06:cd:fe:1f:92:4d:bf:0f:db:
                    27:5d:9f:c7:3d:05:bd:c4:57:65:d8:bc:2c:be:2d:
                    9c:59:8e:05:cc:bb:81:cc:d0:dc:77:88:07:f6:57:
                    68:4b:d5:ee:97:7f:ff:2f:b7:5d:c6:74:c3:15:f7:
                    49:00:89:72:56:86:35:73:20:c6:77:5c:e6:ae:21:
                    99:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:ED:D0:C7:22:62:AA:6D:77:4B:3A:6A:D5:32:47:1D:BE:01:E5:89
            X509v3 Authority Key Identifier:
                keyid:ED:47:54:0C:A8:12:87:0D:4C:DB:D1:50:F7:1B:AC:F6:36:BC:00:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/935f15c9-5843-4705-b694-fe5e7ce19808/0/ED47540CA812870D4CDBD150F71BACF636BC000E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ED47540CA812870D4CDBD150F71BACF636BC000E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/935f15c9-5843-4705-b694-fe5e7ce19808/0/ED47540CA812870D4CDBD150F71BACF636BC000E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:eb:75:f1:6d:bf:ca:6c:58:87:ad:d9:8c:73:13:dc:42:4b:
         e4:21:5a:46:44:67:e5:ca:b2:70:34:e5:56:51:0d:c2:6c:ff:
         9a:a6:4f:02:24:a8:4c:5c:0b:1b:6f:0e:86:c0:4a:18:c9:6f:
         ad:bb:92:16:4a:3b:6a:fb:ce:aa:26:68:69:f8:29:42:e5:3b:
         3a:5a:44:67:a7:08:52:3f:f4:98:10:fb:24:60:6d:dc:61:ad:
         16:2d:01:ef:34:d9:00:a0:3a:3c:9c:3e:82:69:83:7f:22:2c:
         b2:f8:07:7f:07:a3:d2:d9:ed:63:c7:1a:35:f6:8c:51:9c:06:
         1e:32:ba:70:50:55:ca:9e:5b:39:23:07:d6:b2:a8:2d:9b:9b:
         a2:33:69:b4:28:b2:30:1c:18:bd:d8:78:b7:f8:97:3c:38:7f:
         8d:43:a1:ad:36:67:8b:3e:5c:de:14:c1:4f:1e:61:05:40:71:
         03:d4:96:c8:03:4f:f1:6c:1b:34:db:99:3c:94:32:33:21:80:
         15:c6:51:10:c1:49:c7:6c:61:53:30:36:42:68:2d:bb:49:2e:
         c2:97:2a:a3:9c:0b:2d:d9:25:11:47:92:48:42:d2:54:c9:c7:
         54:9d:76:14:16:ca:93:1e:db:66:98:e2:7c:73:d7:19:d8:b7:
         4b:b5:9d:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 26 04:51:18 2025 by rpki-client