This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/e0c55034-5f36-4173-b64c-a975e323138a/0/0E7BF2CE27D899D8E985DBD9311DF8B250C58581.mft
File:                     0E7BF2CE27D899D8E985DBD9311DF8B250C58581.mft (raw, json)
Hash identifier:          eCCa5ktrgRF33NEkdIioWzzKrtV6NvVdDLwusEpFfDg=
Subject key identifier:   01:13:1B:F0:A6:53:F8:A2:58:10:13:A0:02:08:B4:A0:3F:25:3A:EA
Authority key identifier: 0E:7B:F2:CE:27:D8:99:D8:E9:85:DB:D9:31:1D:F8:B2:50:C5:85:81
Certificate issuer:       /CN=0E7BF2CE27D899D8E985DBD9311DF8B250C58581
Certificate serial:       7745B42A312390D05C24414D9CB42EBC91EC67D4
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0E7BF2CE27D899D8E985DBD9311DF8B250C58581.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/e0c55034-5f36-4173-b64c-a975e323138a/0/0E7BF2CE27D899D8E985DBD9311DF8B250C58581.mft
Manifest number:          011E
Signing time:             Wed 03 Dec 2025 04:03:05 +0000
Manifest this update:     Wed 03 Dec 2025 03:58:05 +0000
Manifest next update:     Sat 06 Dec 2025 11:46:05 +0000
Files and hashes:         1: 3130332e3235322e3130312e302f32342d3234203d3e203539313437.roa (hash: MWGkE6CsRSWqMBYLVPUy9HMPTSzmfg1RhCwIFa2snrk=)
                          2: 3130332e3235322e3130302e302f32342d3234203d3e203539313437.roa (hash: YM9KbHhAudmxJLriUiNFwnyRKQIeMezebhltKdO9iVg=)
                          3: 0E7BF2CE27D899D8E985DBD9311DF8B250C58581.crl (hash: 85ae3VWOs7S2HvFkF+7ENjWgWMvBXJvbrX6VjE0t9d4=)
                          4: 3130332e3235322e3130302e302f32332d3233203d3e203539313437.roa (hash: 7Av//tJaFwT8z6GFSW7uk6ehjT5V0e5+FTRipECyI0I=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/e0c55034-5f36-4173-b64c-a975e323138a/0/0E7BF2CE27D899D8E985DBD9311DF8B250C58581.crl
                          rsync://repo-rpki.idnic.net/repo/e0c55034-5f36-4173-b64c-a975e323138a/0/0E7BF2CE27D899D8E985DBD9311DF8B250C58581.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0E7BF2CE27D899D8E985DBD9311DF8B250C58581.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 06 Dec 2025 11:46:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:45:b4:2a:31:23:90:d0:5c:24:41:4d:9c:b4:2e:bc:91:ec:67:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E7BF2CE27D899D8E985DBD9311DF8B250C58581
        Validity
            Not Before: Dec  3 03:58:05 2025 GMT
            Not After : Dec  6 11:46:05 2025 GMT
        Subject: CN=01131BF0A653F8A2581013A00208B4A03F253AEA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:a8:6d:11:91:66:1a:58:d5:0f:9a:b6:cd:9a:
                    93:09:42:cf:ed:13:e1:8b:5f:06:97:4f:a5:88:a4:
                    10:8c:bb:d8:03:2c:0b:61:b7:45:c8:e9:01:0f:6b:
                    d7:44:ae:89:81:56:42:ed:63:06:58:b3:c1:a2:3f:
                    40:2c:64:d4:4e:af:9b:ac:a3:a3:e0:5a:f9:72:68:
                    28:cc:aa:14:77:3c:66:75:66:dc:62:e2:36:8e:96:
                    a3:5e:21:58:36:27:fc:39:e5:43:a4:18:e7:d9:56:
                    93:88:a0:c2:d7:aa:88:f8:08:92:6a:59:c0:a4:53:
                    f7:99:62:51:c4:70:cb:64:41:e5:df:76:1b:8e:ab:
                    4e:0e:b2:a6:af:8f:7f:1b:51:0f:62:b2:34:d3:47:
                    db:c2:0f:ff:d6:3b:f4:39:c3:8e:a0:b7:57:ca:ef:
                    97:86:90:e2:48:78:78:0c:d8:3f:d6:71:15:af:0b:
                    23:ec:20:20:b3:9e:dd:15:ee:e2:b5:b5:d7:50:7d:
                    b7:c5:6e:6e:76:b8:c5:82:ec:1f:15:54:0b:37:c7:
                    5b:7a:25:ce:ca:05:31:71:8c:fb:03:8e:ef:30:3a:
                    dd:3d:7d:ed:b2:c1:a1:d9:0d:28:17:24:bb:9e:ce:
                    63:2f:bf:88:7c:4f:f5:1b:b6:e8:31:cd:60:1d:b0:
                    ad:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:13:1B:F0:A6:53:F8:A2:58:10:13:A0:02:08:B4:A0:3F:25:3A:EA
            X509v3 Authority Key Identifier:
                keyid:0E:7B:F2:CE:27:D8:99:D8:E9:85:DB:D9:31:1D:F8:B2:50:C5:85:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/e0c55034-5f36-4173-b64c-a975e323138a/0/0E7BF2CE27D899D8E985DBD9311DF8B250C58581.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0E7BF2CE27D899D8E985DBD9311DF8B250C58581.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e0c55034-5f36-4173-b64c-a975e323138a/0/0E7BF2CE27D899D8E985DBD9311DF8B250C58581.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:77:a1:1c:ed:0d:42:92:36:b7:86:d8:48:3d:ba:38:e9:70:
         32:b3:dc:2f:19:bf:7f:cb:ec:8d:6e:78:da:ba:3f:a0:e5:64:
         7f:3d:8a:d3:e3:7a:16:0a:92:62:7e:c8:ed:e5:35:d1:a1:8c:
         b8:d6:a1:8b:ad:56:01:73:cf:2c:0b:0d:7a:6c:2c:34:2a:b2:
         e9:e1:5f:09:61:23:1a:78:e1:56:2c:3c:be:3f:c3:3f:b4:ea:
         a2:26:ad:da:db:28:c7:7f:1f:08:f6:7e:9e:00:cc:1f:15:60:
         e8:21:22:f6:b7:e7:a6:9f:60:71:3c:c0:10:29:ea:9b:be:e5:
         ae:8e:9d:d6:a5:5f:fd:76:76:70:c4:cd:43:33:29:77:a8:45:
         0a:de:81:90:3c:be:59:90:d7:78:d9:d7:43:5e:44:2c:9a:bb:
         b0:3b:a6:d1:89:e2:ed:df:02:91:89:ac:db:4c:3c:c9:15:90:
         bd:9d:27:34:5c:d6:89:da:66:66:a4:25:3d:7f:07:23:f7:d9:
         38:d1:ee:ce:e0:df:dc:b6:94:27:5f:23:e6:22:76:0c:0d:f7:
         7f:b0:d9:91:8b:b6:d5:94:42:54:dd:24:69:5e:b9:08:3d:36:
         be:c6:d2:66:37:48:d9:78:85:60:22:6f:34:10:a7:b3:ff:28:
         89:0b:b8:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 16:21:57 2025 by rpki-client