This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/f0976e26-9513-48ff-9f7f-ea3fdcf3e2e8/0/E4C33FFA425046D044E7F503AC8065468BAF739E.mft
File:                     E4C33FFA425046D044E7F503AC8065468BAF739E.mft (raw, json)
Hash identifier:          IhXpq6Ufqq3UtLykL7fp1AJpcTRhW3Qy8kgzx/nMvmE=
Subject key identifier:   8A:3F:0E:53:E3:36:A2:E3:C6:73:2F:6C:23:E4:EF:78:14:3D:47:39
Authority key identifier: E4:C3:3F:FA:42:50:46:D0:44:E7:F5:03:AC:80:65:46:8B:AF:73:9E
Certificate issuer:       /CN=E4C33FFA425046D044E7F503AC8065468BAF739E
Certificate serial:       7E92422CCFE8207CF11148B96F5AD75892EDC49F
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4C33FFA425046D044E7F503AC8065468BAF739E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/f0976e26-9513-48ff-9f7f-ea3fdcf3e2e8/0/E4C33FFA425046D044E7F503AC8065468BAF739E.mft
Manifest number:          01E2
Signing time:             Wed 03 Dec 2025 05:22:10 +0000
Manifest this update:     Wed 03 Dec 2025 05:17:10 +0000
Manifest next update:     Sat 06 Dec 2025 10:04:10 +0000
Files and hashes:         1: E4C33FFA425046D044E7F503AC8065468BAF739E.crl (hash: Ahb3p33ibrMz7Uv2Q5P5X2Qd76rXmfVe9Dijm1VbLYw=)
                          2: 3130332e39392e32372e302f32342d3234203d3e20313530323739.roa (hash: fFWzPgou/ECKiXU5DKj/fTCFyECWSQWhIu1tavvJN+Q=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/f0976e26-9513-48ff-9f7f-ea3fdcf3e2e8/0/E4C33FFA425046D044E7F503AC8065468BAF739E.crl
                          rsync://repo-rpki.idnic.net/repo/f0976e26-9513-48ff-9f7f-ea3fdcf3e2e8/0/E4C33FFA425046D044E7F503AC8065468BAF739E.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4C33FFA425046D044E7F503AC8065468BAF739E.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 06 Dec 2025 10:04:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:92:42:2c:cf:e8:20:7c:f1:11:48:b9:6f:5a:d7:58:92:ed:c4:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E4C33FFA425046D044E7F503AC8065468BAF739E
        Validity
            Not Before: Dec  3 05:17:10 2025 GMT
            Not After : Dec  6 10:04:10 2025 GMT
        Subject: CN=8A3F0E53E336A2E3C6732F6C23E4EF78143D4739
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:c5:f8:cd:7e:69:fa:f4:1e:fa:d5:81:ca:5b:
                    9a:d2:1f:32:2b:91:66:17:3e:9a:7c:4e:b6:f2:ae:
                    20:82:fe:80:e4:1f:26:e2:1a:0c:0d:5d:bb:11:48:
                    0f:79:d6:81:78:67:2a:33:4e:e8:45:20:1f:47:72:
                    b3:b9:82:d4:83:7e:49:11:df:eb:63:d8:3c:17:f3:
                    b3:a1:92:8b:0e:5a:59:d1:32:82:3f:e0:16:98:9c:
                    ad:7a:5e:45:cc:8d:06:29:ed:28:32:d0:36:cb:9d:
                    94:ed:ba:a2:4c:3a:e6:87:e6:b6:b8:ae:0f:af:ba:
                    88:a2:fc:da:a6:85:df:96:06:37:56:24:7f:1a:db:
                    54:8f:c4:3b:f7:d0:f6:d9:c2:9b:2a:5c:ce:ff:ca:
                    67:c3:a1:75:d5:ed:f9:9b:54:9a:bb:85:a5:76:05:
                    93:6c:6e:22:fb:e3:49:42:8b:79:d2:a2:54:1b:d0:
                    5c:b9:2a:22:3a:f2:7a:3a:1c:d5:42:db:36:cf:8d:
                    e6:0b:40:3b:41:fb:f1:06:55:4e:e6:bc:d1:a4:bc:
                    c5:fa:5e:cf:47:a5:38:51:24:da:87:34:86:17:b3:
                    f3:bf:e5:d5:3d:e3:16:72:82:87:87:b5:c4:72:73:
                    17:b9:09:24:a5:51:1c:39:84:f7:fc:49:8b:c4:91:
                    9c:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:3F:0E:53:E3:36:A2:E3:C6:73:2F:6C:23:E4:EF:78:14:3D:47:39
            X509v3 Authority Key Identifier:
                keyid:E4:C3:3F:FA:42:50:46:D0:44:E7:F5:03:AC:80:65:46:8B:AF:73:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/f0976e26-9513-48ff-9f7f-ea3fdcf3e2e8/0/E4C33FFA425046D044E7F503AC8065468BAF739E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4C33FFA425046D044E7F503AC8065468BAF739E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f0976e26-9513-48ff-9f7f-ea3fdcf3e2e8/0/E4C33FFA425046D044E7F503AC8065468BAF739E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:10:21:0d:8f:d6:c8:ba:07:12:80:5e:00:49:0b:7d:41:5d:
         67:d9:ee:91:34:43:c0:a1:1f:53:d5:02:ee:0f:48:f3:f5:33:
         5f:a8:70:3b:60:c9:7f:1a:b4:1c:ea:dd:43:8b:7a:ce:60:59:
         bc:e1:62:e6:92:6e:16:1e:fb:e6:6e:ad:4d:ba:c3:f6:38:96:
         08:ba:f3:d3:6c:f6:46:84:57:0f:78:3a:8c:a2:e6:34:e1:48:
         68:65:a4:8f:b9:93:a1:61:22:85:8b:4b:ad:ef:1f:48:0e:80:
         16:0d:dc:d8:d9:c2:d1:95:42:df:15:42:22:44:09:f0:78:28:
         e2:da:d6:19:b9:31:ea:f5:30:d3:22:1e:03:86:7f:5a:64:fc:
         08:f9:10:62:9c:8b:e3:21:21:26:ef:0f:3e:1f:e6:0b:1e:f0:
         06:0e:62:83:95:2e:a0:66:81:0a:c4:59:c6:16:eb:2e:ff:26:
         d2:f9:84:43:5c:f2:49:a2:91:c9:ce:67:4d:bd:67:72:d6:05:
         34:7e:3f:a9:ce:76:d1:a6:56:9e:ca:49:e4:75:a1:f1:7a:6d:
         7b:f7:f7:3e:87:62:12:0e:a3:41:1e:a8:17:3d:ef:3c:56:60:
         9c:18:23:5f:13:53:c1:93:fe:64:92:bb:79:b6:e7:1f:bf:f4:
         95:bf:58:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 14:44:01 2025 by rpki-client