This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/e5c8b9e3-b44f-490b-bf51-99f2dd2a1364/0/27114CFC585C5DB2E0AC5DA74F04C66C319492F1.mft
File:                     27114CFC585C5DB2E0AC5DA74F04C66C319492F1.mft (raw, json)
Hash identifier:          EnQXB+gIf4wsPMEK3o23pvKMaAlkmhadHv8bWMoVue8=
Subject key identifier:   36:E4:F6:3B:6C:B3:A6:B1:27:0C:B9:45:FB:F2:E9:4A:67:80:E9:9E
Authority key identifier: 27:11:4C:FC:58:5C:5D:B2:E0:AC:5D:A7:4F:04:C6:6C:31:94:92:F1
Certificate issuer:       /CN=27114CFC585C5DB2E0AC5DA74F04C66C319492F1
Certificate serial:       721FF2A1D71189B2413F1F2025A3633F7D275F58
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/27114CFC585C5DB2E0AC5DA74F04C66C319492F1.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/e5c8b9e3-b44f-490b-bf51-99f2dd2a1364/0/27114CFC585C5DB2E0AC5DA74F04C66C319492F1.mft
Manifest number:          01E6
Signing time:             Wed 17 Dec 2025 16:51:05 +0000
Manifest this update:     Wed 17 Dec 2025 16:46:05 +0000
Manifest next update:     Sat 20 Dec 2025 22:57:05 +0000
Files and hashes:         1: 27114CFC585C5DB2E0AC5DA74F04C66C319492F1.crl (hash: Bv3K1YO8ZWSSMo5e7Wwd9l7F9nIOKCyAYI1g7wMGuic=)
                          2: 3130332e37392e3132382e302f32342d3234203d3e20313339393531.roa (hash: f2QS2bkCAnvcHZRI/qOVoXk+1PJl2qNtEtgN6wxB1DM=)
                          3: 3130332e37392e3132392e302f32342d3234203d3e20313339393531.roa (hash: KEbEalVEafBDzV3MLE/Git/FoIDPkOruC23YgT8hoVA=)
                          4: 3130332e37392e3132382e302f32332d3234203d3e20313339393531.roa (hash: ZL34hhxgSVm8YMiIofnGZ8eIEEK0rTf5wpsCzmwT6wA=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/e5c8b9e3-b44f-490b-bf51-99f2dd2a1364/0/27114CFC585C5DB2E0AC5DA74F04C66C319492F1.crl
                          rsync://repo-rpki.idnic.net/repo/e5c8b9e3-b44f-490b-bf51-99f2dd2a1364/0/27114CFC585C5DB2E0AC5DA74F04C66C319492F1.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/27114CFC585C5DB2E0AC5DA74F04C66C319492F1.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Dec 2025 22:57:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:1f:f2:a1:d7:11:89:b2:41:3f:1f:20:25:a3:63:3f:7d:27:5f:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27114CFC585C5DB2E0AC5DA74F04C66C319492F1
        Validity
            Not Before: Dec 17 16:46:05 2025 GMT
            Not After : Dec 20 22:57:05 2025 GMT
        Subject: CN=36E4F63B6CB3A6B1270CB945FBF2E94A6780E99E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:90:e7:da:0e:75:d3:80:7f:f0:b8:d4:d8:76:
                    06:8f:2c:e2:d5:56:86:85:03:2f:98:48:3c:9f:5d:
                    2b:35:44:f0:64:4a:7f:95:ce:08:50:dd:e8:f5:cb:
                    2d:ba:f2:6a:77:80:45:85:08:c4:bf:23:af:a6:78:
                    9f:b4:ad:8d:82:ed:58:d8:07:c4:68:32:32:5f:8d:
                    48:55:9a:23:14:00:23:82:a7:2d:a9:b4:07:54:54:
                    ef:59:dc:2b:06:98:60:09:ac:d5:2d:8c:8a:cf:e9:
                    b0:46:ca:d9:72:10:d1:63:fa:14:bd:0b:c7:39:c0:
                    a2:a9:c5:f3:1e:f1:7e:14:82:f2:35:9a:37:fb:fb:
                    6f:06:b6:21:b1:b9:5d:9b:d2:f0:ee:69:e3:e3:c1:
                    d3:5d:33:3e:e0:34:36:de:23:96:ca:1b:8f:ed:ce:
                    fb:35:12:29:19:7b:67:0d:47:6e:b6:6b:7a:60:36:
                    6b:16:36:f3:14:b5:62:99:90:2b:80:73:d0:af:dd:
                    e5:cb:3c:b8:ee:cf:26:a6:83:16:e3:35:48:ed:77:
                    33:0c:c1:32:66:a1:75:52:72:e0:64:9c:ef:31:20:
                    74:77:12:57:32:fe:91:e5:6a:c9:4e:22:26:26:8e:
                    8f:9e:b8:88:27:6e:09:1d:77:96:c0:4f:4f:03:c3:
                    d5:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:E4:F6:3B:6C:B3:A6:B1:27:0C:B9:45:FB:F2:E9:4A:67:80:E9:9E
            X509v3 Authority Key Identifier:
                keyid:27:11:4C:FC:58:5C:5D:B2:E0:AC:5D:A7:4F:04:C6:6C:31:94:92:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/e5c8b9e3-b44f-490b-bf51-99f2dd2a1364/0/27114CFC585C5DB2E0AC5DA74F04C66C319492F1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/27114CFC585C5DB2E0AC5DA74F04C66C319492F1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e5c8b9e3-b44f-490b-bf51-99f2dd2a1364/0/27114CFC585C5DB2E0AC5DA74F04C66C319492F1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:41:48:0c:a9:61:b1:bd:9c:bc:7a:87:75:15:44:a1:7d:1f:
         c9:cb:a9:03:29:11:4a:4b:32:00:74:fa:9b:ac:11:28:7b:d5:
         69:52:5b:2c:a7:e8:fc:09:0d:d5:1c:3e:7b:00:20:8e:e9:f1:
         22:94:aa:2b:89:89:35:86:1e:ab:bb:89:e9:0b:1a:16:a1:93:
         e3:a6:a6:29:a5:82:6e:56:c8:e6:2c:57:9b:56:d9:9a:1a:f5:
         69:75:22:1b:94:2f:20:ee:5e:d5:75:7f:69:82:75:29:3b:0a:
         2c:88:c1:77:13:a3:3b:c7:f1:f0:b3:65:74:40:36:01:9e:8e:
         68:8c:f6:4e:90:4f:62:57:36:3e:7d:09:ea:61:f8:6b:be:79:
         6c:5c:ad:6c:b3:ef:29:be:75:5f:a2:ec:71:3b:a1:08:40:70:
         03:c3:d1:65:f4:36:e8:a8:d0:61:34:3e:dc:ab:68:3a:8d:ba:
         1f:86:b5:7c:3d:66:23:9b:73:27:13:62:1e:bb:bf:98:19:80:
         3c:9d:33:bb:29:bc:eb:4b:69:b3:41:27:59:39:e9:36:10:da:
         ce:51:97:5c:6b:c7:39:60:0c:cc:ee:ba:c0:06:79:f4:f5:4d:
         51:39:1b:77:3c:b2:42:70:b8:66:84:ee:70:10:60:77:ef:88:
         52:10:fc:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 09:45:04 2025 by rpki-client