This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/a8f285ef-3453-4179-a553-f19597de9ded/0/E07F0E8DE2572DC7B8137EC0679F42645D695A54.mft
File:                     E07F0E8DE2572DC7B8137EC0679F42645D695A54.mft (raw, json)
Hash identifier:          3bfFVCsTLYYh3YcMm6h/f0ReG5l0TK7yvCx9Jc1uhmU=
Subject key identifier:   7C:01:05:5D:4E:7F:2A:59:9B:4F:28:33:0B:E4:8A:E4:16:38:74:87
Authority key identifier: E0:7F:0E:8D:E2:57:2D:C7:B8:13:7E:C0:67:9F:42:64:5D:69:5A:54
Certificate issuer:       /CN=E07F0E8DE2572DC7B8137EC0679F42645D695A54
Certificate serial:       78A08AFB3EADDBCE8CC5C45F0762AAC01C15DFF0
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E07F0E8DE2572DC7B8137EC0679F42645D695A54.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/a8f285ef-3453-4179-a553-f19597de9ded/0/E07F0E8DE2572DC7B8137EC0679F42645D695A54.mft
Manifest number:          E6
Signing time:             Tue 02 Dec 2025 09:50:44 +0000
Manifest this update:     Tue 02 Dec 2025 09:45:44 +0000
Manifest next update:     Fri 05 Dec 2025 11:01:44 +0000
Files and hashes:         1: 323030313a6466333a666434303a3a2f34382d3438203d3e20313532303535.roa (hash: nQLud3Jn262khF6pI+ZrfSTaiFCpRTXR0OL4+TzR7ac=)
                          2: E07F0E8DE2572DC7B8137EC0679F42645D695A54.crl (hash: lWhBFlW4x+OFBlkoNkXc7PothU+J5ztTrjmIhtIZqaM=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/a8f285ef-3453-4179-a553-f19597de9ded/0/E07F0E8DE2572DC7B8137EC0679F42645D695A54.crl
                          rsync://repo-rpki.idnic.net/repo/a8f285ef-3453-4179-a553-f19597de9ded/0/E07F0E8DE2572DC7B8137EC0679F42645D695A54.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E07F0E8DE2572DC7B8137EC0679F42645D695A54.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 05 Dec 2025 11:01:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:a0:8a:fb:3e:ad:db:ce:8c:c5:c4:5f:07:62:aa:c0:1c:15:df:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E07F0E8DE2572DC7B8137EC0679F42645D695A54
        Validity
            Not Before: Dec  2 09:45:44 2025 GMT
            Not After : Dec  5 11:01:44 2025 GMT
        Subject: CN=7C01055D4E7F2A599B4F28330BE48AE416387487
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:28:43:0c:e7:1c:95:b8:2b:d4:0b:c5:17:68:
                    4a:7c:e0:a7:c5:90:e8:20:b2:94:11:91:b2:46:94:
                    27:7b:0e:75:ff:7c:db:63:1a:7c:c4:a5:e0:55:ba:
                    40:c3:ab:ad:50:40:c1:44:b2:f2:0b:0a:69:f1:cf:
                    ed:1e:05:dd:c2:b4:4f:7d:54:79:9b:c8:b6:dc:20:
                    3e:78:db:30:cf:66:f2:e6:e8:7a:60:ef:73:47:90:
                    1f:c0:8b:36:a3:3c:37:13:98:47:bf:56:27:7a:46:
                    12:ce:4e:0a:b8:57:fb:4f:54:79:5d:13:6a:cf:1a:
                    a7:07:18:53:15:e5:bc:e1:22:5f:4f:15:fb:75:7a:
                    09:2a:fd:ec:a2:16:24:b4:13:46:e9:c3:da:6a:f3:
                    16:e8:17:b6:5e:15:52:1a:cb:22:ed:3a:ce:f3:97:
                    8e:07:e9:fa:26:7d:96:c7:53:c3:fe:b7:4e:6a:12:
                    e1:fb:45:68:30:d0:01:65:c3:43:7d:df:8e:ef:a2:
                    14:32:26:a9:59:1b:c3:1e:05:b7:d9:56:e7:be:48:
                    85:d9:f9:c6:9c:6d:8d:63:3e:9f:45:66:2e:90:0b:
                    0b:bc:d7:5c:f2:b5:0e:02:40:66:85:6c:ab:b7:09:
                    78:9d:a5:56:77:7f:f9:e3:e1:fd:b0:fb:51:72:16:
                    5b:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:01:05:5D:4E:7F:2A:59:9B:4F:28:33:0B:E4:8A:E4:16:38:74:87
            X509v3 Authority Key Identifier:
                keyid:E0:7F:0E:8D:E2:57:2D:C7:B8:13:7E:C0:67:9F:42:64:5D:69:5A:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/a8f285ef-3453-4179-a553-f19597de9ded/0/E07F0E8DE2572DC7B8137EC0679F42645D695A54.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E07F0E8DE2572DC7B8137EC0679F42645D695A54.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8f285ef-3453-4179-a553-f19597de9ded/0/E07F0E8DE2572DC7B8137EC0679F42645D695A54.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:9d:e8:4d:7c:cf:a5:13:2a:e7:6d:16:38:43:ba:88:91:b2:
         2b:88:4e:94:93:c3:45:95:48:4c:22:d0:2f:43:44:95:4b:12:
         dc:77:0f:f5:78:f8:0d:13:2d:75:9f:08:c2:24:b2:dd:cc:3d:
         de:0f:ad:3b:a9:ea:40:cb:3b:8a:ed:75:10:70:c9:98:d6:2b:
         0d:61:04:6e:53:4f:d3:50:e7:6d:4a:fa:12:d0:9b:32:73:c5:
         97:52:53:fc:94:1f:d7:2f:8d:4d:c3:6d:3b:c3:8e:2d:87:e4:
         70:49:f4:e2:49:a7:ec:01:6c:10:15:9f:37:08:ac:10:31:49:
         c2:af:8b:3c:bc:28:69:aa:4b:17:fe:2f:a1:dd:ae:35:ec:aa:
         84:7e:9d:fb:19:f3:2b:ff:ef:a9:48:f0:8e:51:c3:ec:4e:09:
         c5:80:5f:e6:15:e6:78:b7:f1:67:32:3b:a6:cd:a1:c6:3c:f5:
         3c:b6:ae:3b:18:9f:e4:07:35:1c:68:28:a7:58:4c:84:5a:d2:
         0a:0d:d8:13:f8:4c:4c:9f:35:2c:c0:a5:d0:f8:b5:9c:5f:bb:
         c1:3e:91:b6:bc:6c:8d:84:67:77:f5:e5:45:74:3b:e2:ed:4c:
         a7:e0:63:da:a5:42:89:8b:ae:f0:c5:2e:f0:eb:ea:d4:06:93:
         4b:8a:5c:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 16:11:02 2025 by rpki-client