This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/f40e1f20-b0cd-469b-9106-1ea000795f9f/0/E51A77F5DBFB16B1606DE1A4FF6DFD0573420E38.mft
File:                     E51A77F5DBFB16B1606DE1A4FF6DFD0573420E38.mft (raw, json)
Hash identifier:          FNpGoIISb6F46qZyDgICANhF7jLE8lSR3rOvY/Br5wA=
Subject key identifier:   F9:D5:3D:E4:92:09:5B:25:7B:BF:CF:1A:50:10:90:70:E7:BC:56:41
Authority key identifier: E5:1A:77:F5:DB:FB:16:B1:60:6D:E1:A4:FF:6D:FD:05:73:42:0E:38
Certificate issuer:       /CN=E51A77F5DBFB16B1606DE1A4FF6DFD0573420E38
Certificate serial:       268623D51C51EB463140B3DF2A064A4133E60901
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E51A77F5DBFB16B1606DE1A4FF6DFD0573420E38.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/f40e1f20-b0cd-469b-9106-1ea000795f9f/0/E51A77F5DBFB16B1606DE1A4FF6DFD0573420E38.mft
Manifest number:          0217
Signing time:             Tue 02 Dec 2025 18:40:54 +0000
Manifest this update:     Tue 02 Dec 2025 18:35:54 +0000
Manifest next update:     Fri 05 Dec 2025 23:56:54 +0000
Files and hashes:         1: 3130332e3139312e37312e302f32342d3234203d3e20313439393134.roa (hash: wWf96mUt4wCBbqfalQK0TLTz6ApBKN5hLe7UYoC3TzQ=)
                          2: 3130332e3139312e37302e302f32332d3233203d3e20313439393134.roa (hash: buLsY1iWxn5uAX/tlzA+XQSdGjGRQVTlyaSVt5UiGA8=)
                          3: E51A77F5DBFB16B1606DE1A4FF6DFD0573420E38.crl (hash: e0nHurAZz5ltI06jiG4+YEbP8zHdHsely2UKIHzIC1w=)
                          4: 3130332e3139312e37302e302f32342d3234203d3e20313439393134.roa (hash: LKby0ViyWSUSxyx6by+Sa+3JQIcYE0HMocb+PoIEh0U=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/f40e1f20-b0cd-469b-9106-1ea000795f9f/0/E51A77F5DBFB16B1606DE1A4FF6DFD0573420E38.crl
                          rsync://repo-rpki.idnic.net/repo/f40e1f20-b0cd-469b-9106-1ea000795f9f/0/E51A77F5DBFB16B1606DE1A4FF6DFD0573420E38.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E51A77F5DBFB16B1606DE1A4FF6DFD0573420E38.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 05 Dec 2025 23:56:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:86:23:d5:1c:51:eb:46:31:40:b3:df:2a:06:4a:41:33:e6:09:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E51A77F5DBFB16B1606DE1A4FF6DFD0573420E38
        Validity
            Not Before: Dec  2 18:35:54 2025 GMT
            Not After : Dec  5 23:56:54 2025 GMT
        Subject: CN=F9D53DE492095B257BBFCF1A50109070E7BC5641
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:06:c4:4e:b7:5f:97:18:cf:ca:0b:e6:e1:77:
                    af:a4:22:17:39:12:8b:0c:52:cf:d3:11:20:1f:05:
                    d2:b1:0c:4b:40:e1:7f:18:87:1c:fa:b1:2b:92:2b:
                    e5:5d:cb:f5:2d:d8:ff:03:5a:0a:84:43:7d:42:b8:
                    f0:dc:06:da:1b:f9:d1:31:71:5f:f3:d1:f5:02:c9:
                    5a:96:50:cc:cd:f6:e9:b9:73:9b:dd:8c:4f:ad:47:
                    3b:0c:01:f5:87:e9:69:6a:92:33:81:3e:d0:55:eb:
                    2c:e8:30:0f:9b:1a:59:d8:5f:a8:45:25:73:83:2c:
                    32:5a:e6:b6:d4:28:6c:6d:97:d5:bc:3e:52:31:e0:
                    db:2a:88:26:2c:17:64:00:c7:e9:69:29:91:89:ec:
                    35:58:8a:65:a6:5a:e3:13:dd:b6:49:54:99:88:fa:
                    94:76:47:23:19:73:1b:9e:80:57:b1:9c:92:2f:f3:
                    98:48:51:33:43:e3:45:97:90:ac:b7:ae:51:dc:f5:
                    b5:72:4f:24:ad:1e:c4:da:cc:d2:1c:65:4e:3f:d1:
                    8c:68:51:ba:b7:30:83:3f:c1:e2:ae:b0:18:30:c7:
                    2e:ac:e9:ad:59:b9:ac:d2:05:32:ed:21:13:8a:8a:
                    8c:00:88:71:53:fd:6b:33:b7:88:92:89:a3:cb:45:
                    b5:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:D5:3D:E4:92:09:5B:25:7B:BF:CF:1A:50:10:90:70:E7:BC:56:41
            X509v3 Authority Key Identifier:
                keyid:E5:1A:77:F5:DB:FB:16:B1:60:6D:E1:A4:FF:6D:FD:05:73:42:0E:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/f40e1f20-b0cd-469b-9106-1ea000795f9f/0/E51A77F5DBFB16B1606DE1A4FF6DFD0573420E38.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E51A77F5DBFB16B1606DE1A4FF6DFD0573420E38.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f40e1f20-b0cd-469b-9106-1ea000795f9f/0/E51A77F5DBFB16B1606DE1A4FF6DFD0573420E38.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:1b:cf:90:85:e1:75:bc:84:2c:a8:72:3f:2e:19:ca:cc:f2:
         ec:b2:2e:99:46:69:8c:02:6e:49:b9:27:a2:7d:3b:5f:6f:5d:
         1f:32:ef:b3:9f:52:11:31:9b:3a:90:24:49:f1:95:4b:df:83:
         54:93:40:29:a8:b6:4c:a6:d0:a0:fa:4a:32:34:e8:ac:61:ef:
         7c:a4:8d:9d:2f:82:ca:71:98:d9:1c:dd:e3:e2:7c:05:cf:42:
         21:9d:7e:99:7d:5f:37:25:81:0f:d0:db:3f:cb:db:bd:02:f9:
         5c:83:dd:3f:48:d5:3b:25:d1:6c:60:22:7a:21:9a:d0:ad:7c:
         ff:95:43:32:9a:23:83:0c:83:31:2a:3e:06:c3:e8:b8:ad:ee:
         b6:d0:ad:e8:89:dd:d4:da:a7:2e:16:93:f9:54:fc:66:ae:56:
         37:d8:1d:44:b0:2c:22:38:21:06:3b:4f:c1:78:06:e3:e9:0e:
         75:30:ce:b5:ca:21:16:44:f7:88:4e:73:64:41:fd:09:d4:3a:
         40:0c:5c:0c:e8:e7:21:7d:78:31:34:a3:78:29:59:b7:ed:8a:
         2b:59:8e:67:c5:74:ac:ce:bc:f0:08:cb:ec:41:53:60:f5:e0:
         20:e6:73:5e:9a:2c:b2:3e:d9:0f:60:cd:ee:bf:9b:35:26:20:
         69:50:9e:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 14:58:35 2025 by rpki-client