This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/d0962c6e-595a-47c4-aa7c-ef8e77cae642/0/EADA0AEE51F3910B50A065D57D946E3EAFA8BD11.mft
File:                     EADA0AEE51F3910B50A065D57D946E3EAFA8BD11.mft (raw, json)
Hash identifier:          /Ibh5vyZDTG6C6Rg56CHfKWqZk0ggTkU/Il+ZF3iKBE=
Subject key identifier:   7D:DC:A6:86:C4:AE:A9:4D:FD:41:09:C4:50:3E:1C:7E:0C:AB:65:C4
Authority key identifier: EA:DA:0A:EE:51:F3:91:0B:50:A0:65:D5:7D:94:6E:3E:AF:A8:BD:11
Certificate issuer:       /CN=EADA0AEE51F3910B50A065D57D946E3EAFA8BD11
Certificate serial:       3ED08AFB14D928706EA9EEE804F99DA049D41F4D
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EADA0AEE51F3910B50A065D57D946E3EAFA8BD11.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/d0962c6e-595a-47c4-aa7c-ef8e77cae642/0/EADA0AEE51F3910B50A065D57D946E3EAFA8BD11.mft
Manifest number:          0536
Signing time:             Mon 01 Dec 2025 21:51:44 +0000
Manifest this update:     Mon 01 Dec 2025 21:46:44 +0000
Manifest next update:     Fri 05 Dec 2025 05:45:44 +0000
Files and hashes:         1: 3130332e3131342e35332e302f32342d3234203d3e20313337333439.roa (hash: L0aGyUwEYHJDyRetS6plSaGHfNVoM/NqZGtNJzzztcc=)
                          2: EADA0AEE51F3910B50A065D57D946E3EAFA8BD11.crl (hash: 8oz1pvoSSJersPHgV4xZ0GGR50qvYwWzFVTg3qP0Qd8=)
                          3: 3130332e3131342e35322e302f32342d3234203d3e20313337333439.roa (hash: PbzUEe0UQr8XKfElcqOIqamd3OJjVX7VfL4ViGWOAc4=)
                          4: 323030313a6466343a663330303a3a2f34382d3438203d3e20313337333439.roa (hash: bM2bCiWvvR67fLAxEBLdbaa9UVbcM3IM7NopO4JRa9U=)
                          5: 3130332e3131342e35322e302f32332d3234203d3e20313337333439.roa (hash: IHRMKls6bDo6efJZc4SPr2h5Nej24aqy+WpwVULn5ZQ=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/d0962c6e-595a-47c4-aa7c-ef8e77cae642/0/EADA0AEE51F3910B50A065D57D946E3EAFA8BD11.crl
                          rsync://repo-rpki.idnic.net/repo/d0962c6e-595a-47c4-aa7c-ef8e77cae642/0/EADA0AEE51F3910B50A065D57D946E3EAFA8BD11.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EADA0AEE51F3910B50A065D57D946E3EAFA8BD11.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 05 Dec 2025 05:45:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:d0:8a:fb:14:d9:28:70:6e:a9:ee:e8:04:f9:9d:a0:49:d4:1f:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EADA0AEE51F3910B50A065D57D946E3EAFA8BD11
        Validity
            Not Before: Dec  1 21:46:44 2025 GMT
            Not After : Dec  5 05:45:44 2025 GMT
        Subject: CN=7DDCA686C4AEA94DFD4109C4503E1C7E0CAB65C4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:a9:38:dd:63:51:51:96:a2:65:ae:3b:6f:7c:
                    0a:b1:2c:16:99:7b:e4:97:04:2b:58:d5:19:15:1a:
                    d8:d7:b6:c5:ed:47:8e:89:bc:db:88:09:69:31:d0:
                    1d:09:bb:74:a1:2e:67:1d:d6:4b:ba:bc:65:fd:44:
                    20:d8:05:cf:4c:72:cd:ed:d4:33:f0:ca:44:ce:28:
                    55:36:9f:c9:6d:34:a0:44:e8:a7:80:29:45:c7:89:
                    40:9c:b4:0f:dd:e3:0e:84:02:05:35:d2:93:36:e3:
                    32:46:4c:92:82:67:fd:d6:4d:62:e6:13:27:c8:79:
                    2a:48:37:f9:f8:71:44:8d:9b:77:45:60:aa:2a:f6:
                    77:e2:55:63:f1:20:35:5b:9c:02:01:79:62:c9:5c:
                    df:0a:5f:f4:11:84:f6:58:51:84:4c:70:1e:82:87:
                    ed:19:2e:d1:d9:e8:22:82:21:25:64:d8:b9:a4:7d:
                    b0:55:e3:ea:2e:08:50:96:32:61:22:6c:3a:6a:d8:
                    10:9b:46:65:01:88:73:74:8c:dd:92:47:98:50:af:
                    18:d2:63:63:c2:29:5a:fa:f2:c8:95:8d:34:9b:4a:
                    f5:16:2e:66:8c:37:bf:20:6e:8a:fc:97:b7:00:99:
                    3a:5a:4e:c3:71:67:18:2b:1d:af:be:34:40:4d:f3:
                    4f:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:DC:A6:86:C4:AE:A9:4D:FD:41:09:C4:50:3E:1C:7E:0C:AB:65:C4
            X509v3 Authority Key Identifier:
                keyid:EA:DA:0A:EE:51:F3:91:0B:50:A0:65:D5:7D:94:6E:3E:AF:A8:BD:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/d0962c6e-595a-47c4-aa7c-ef8e77cae642/0/EADA0AEE51F3910B50A065D57D946E3EAFA8BD11.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EADA0AEE51F3910B50A065D57D946E3EAFA8BD11.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d0962c6e-595a-47c4-aa7c-ef8e77cae642/0/EADA0AEE51F3910B50A065D57D946E3EAFA8BD11.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:4a:10:bb:1d:31:98:07:03:51:5e:3a:e9:60:dd:ec:9f:a8:
         91:9e:97:f2:a2:4c:29:de:b9:21:b8:97:0a:95:d8:45:74:e9:
         4a:de:80:8f:39:75:fa:70:7e:13:21:25:23:6a:e2:be:78:e3:
         c8:38:1e:a4:3e:e4:98:6a:49:6c:64:33:10:f1:c8:52:4d:a6:
         35:2b:d3:4a:3c:9c:34:68:39:52:23:ef:1b:67:41:5a:5f:e7:
         f6:bc:d6:1b:7a:3a:a6:59:33:3a:ac:42:6a:0d:24:5c:bc:d6:
         af:3d:68:e8:dc:d8:73:8b:87:4d:fb:0c:cf:65:1a:ee:cd:32:
         0c:2e:a2:68:99:dd:14:b8:72:00:04:e2:a0:ed:2f:d0:10:c5:
         b2:6e:07:06:4c:35:5b:88:67:55:f2:21:75:6e:ea:12:9f:9f:
         bf:82:57:9f:c7:71:01:28:dc:eb:b1:84:0a:cb:e8:2e:4e:a7:
         ba:0e:7f:32:9e:69:99:33:cc:cc:cc:ff:ac:82:e2:9a:9b:2c:
         cd:c9:0f:ff:a2:6f:5c:6b:d6:99:5c:6d:24:1b:2e:da:c9:4f:
         7e:25:04:57:d6:93:38:94:49:e3:09:e1:ad:0f:fe:db:28:56:
         52:f7:43:52:6b:09:97:4d:92:75:68:e5:0b:9d:de:7b:13:48:
         c3:fa:48:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 13:56:22 2025 by rpki-client