This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/26d7ede1-3fd0-4624-bef8-0e73e84994bc/0/5AB2F048BCF9D60D6323A72EF7255F38A81A93BE.mft
File:                     5AB2F048BCF9D60D6323A72EF7255F38A81A93BE.mft (raw, json)
Hash identifier:          rWySDZ/rX9NwjAY9LAmOlax4ALz1hABP20VJHZVY6xo=
Subject key identifier:   9A:99:41:B6:3B:FC:F6:4D:70:FB:13:1C:F3:D0:53:F2:BF:AA:92:7F
Authority key identifier: 5A:B2:F0:48:BC:F9:D6:0D:63:23:A7:2E:F7:25:5F:38:A8:1A:93:BE
Certificate issuer:       /CN=5AB2F048BCF9D60D6323A72EF7255F38A81A93BE
Certificate serial:       388F6518792ACA2D894066C27514D8BE30ABE886
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5AB2F048BCF9D60D6323A72EF7255F38A81A93BE.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/26d7ede1-3fd0-4624-bef8-0e73e84994bc/0/5AB2F048BCF9D60D6323A72EF7255F38A81A93BE.mft
Manifest number:          04B4
Signing time:             Tue 02 Dec 2025 01:11:24 +0000
Manifest this update:     Tue 02 Dec 2025 01:06:24 +0000
Manifest next update:     Fri 05 Dec 2025 03:28:24 +0000
Files and hashes:         1: 323430363a313363303a3a2f34382d3438203d3e20313430343133.roa (hash: Gz+C+7FnVXoz+0qojAP+rNq+YbCJXPtNpRa9xBnME7I=)
                          2: 323430363a313363303a343a3a2f34382d3438203d3e20313430343133.roa (hash: hUSefMFAZSv+SA3wPW8iCnypYrFgNGsQ492Jx7YTC9s=)
                          3: 323430363a313363303a363a3a2f34382d3438203d3e20313430343133.roa (hash: tSvzNHHOTLE+PeD8SAArmYqhO7Ztwcuk/62pX8Gu/y0=)
                          4: 323430363a313363303a353a3a2f34382d3438203d3e20313430343133.roa (hash: ONf62+DvPOIB+a7e+YLFywaVigksQeK89X9Q/CSQVX4=)
                          5: 323430363a313363303a313a3a2f34382d3438203d3e20313430343133.roa (hash: tDG6Iti0PLnRCu0mbkQzT0b2dqDqUbKctSFPSn5Mn7g=)
                          6: 323430363a313363303a333a3a2f34382d3438203d3e20313430343133.roa (hash: IFLXJKN/cIbd/Oh+HOkULz+7XgZ+889cBvLbuXP+Xf8=)
                          7: 323430363a313363303a633a3a2f34382d3438203d3e20313430343133.roa (hash: SDN3qm6IB8N9HF40taceNvsGv3NpAGXMiVjPo6QgiNc=)
                          8: 323430363a313363303a613a3a2f34382d3438203d3e20313430343133.roa (hash: E2mbQLtIdlxnYM18Po7s4O6v53R2Qoc6GrMKhL2r4OI=)
                          9: 3130332e3135312e33342e302f32342d3234203d3e20313430343133.roa (hash: bZM4rUbr/5eo/XLmWgfcXg1DbTPNYjhGuHArrlKmdos=)
                          10: 3130332e3135312e33352e302f32342d3234203d3e20313430343133.roa (hash: EILyPmlWJ7Ald971q91eFzzx7IL4/UbfGOvQ+dEFrSA=)
                          11: 3130332e3135312e33342e302f32332d3233203d3e20313430343133.roa (hash: pWG6S1U7mazV8YnSvTsXbW1HfQiM8AMh4bxaqVSo3rk=)
                          12: 323430363a313363303a623a3a2f34382d3438203d3e20313430343133.roa (hash: osu6cgVTsajhQgGRr72GUTVIcDtvbcTR6pfscBo/Vjg=)
                          13: 323430363a313363303a663a3a2f34382d3438203d3e20313430343133.roa (hash: 1JMzXaJrugo1xCZjzMePjdBBw5qjt3/pxwhlGnC/exU=)
                          14: 5AB2F048BCF9D60D6323A72EF7255F38A81A93BE.crl (hash: kzhhiFJ4uOQO51TLbZ/laX0YcM86T4TWtt4MZtya61U=)
                          15: 323430363a313363303a373a3a2f34382d3438203d3e20313430343133.roa (hash: k6Z1cqOikqx8t9RPh+24QqZnUDFGexk4c6jfFeIucPQ=)
                          16: 323430363a313363303a643a3a2f34382d3438203d3e20313430343133.roa (hash: AHvcTCMLEy/XIp7laYrrKnghYH6iwtgODIRCAU7uthM=)
                          17: 323430363a313363303a323a3a2f34382d3438203d3e20313430343133.roa (hash: CHuhT91L4Bx2gvkmrXL92lkeo0HaZ7kmUtg30YZ0MWM=)
                          18: 323430363a313363303a653a3a2f34382d3438203d3e20313430343133.roa (hash: f4HuOcLxZFUEjT9VvTe4bqIT2DldLAxhqn5BGEuGaVY=)
                          19: 323430363a313363303a3a2f33322d3332203d3e20313430343133.roa (hash: htuRYgwO+/oesGX5fEx8u0E0zBo0A2TVpj6idfUe6I4=)
                          20: 323430363a313363303a383a3a2f34382d3438203d3e20313430343133.roa (hash: f6hlVhcf22KoU870LdZr8ofD9JQqnnfyvKLr6j1Qgic=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/26d7ede1-3fd0-4624-bef8-0e73e84994bc/0/5AB2F048BCF9D60D6323A72EF7255F38A81A93BE.crl
                          rsync://repo-rpki.idnic.net/repo/26d7ede1-3fd0-4624-bef8-0e73e84994bc/0/5AB2F048BCF9D60D6323A72EF7255F38A81A93BE.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5AB2F048BCF9D60D6323A72EF7255F38A81A93BE.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 05 Dec 2025 03:28:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:8f:65:18:79:2a:ca:2d:89:40:66:c2:75:14:d8:be:30:ab:e8:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5AB2F048BCF9D60D6323A72EF7255F38A81A93BE
        Validity
            Not Before: Dec  2 01:06:24 2025 GMT
            Not After : Dec  5 03:28:24 2025 GMT
        Subject: CN=9A9941B63BFCF64D70FB131CF3D053F2BFAA927F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:63:96:e2:6f:de:5d:e1:4b:88:28:42:d5:c0:
                    53:8f:bc:a9:50:28:db:a1:6f:c7:66:40:74:d8:2d:
                    46:14:6b:9e:16:c7:a7:17:91:5a:5a:83:f8:ac:5a:
                    2a:75:45:b6:6d:13:3b:61:85:ae:df:b4:7b:83:52:
                    43:98:7f:70:53:7c:c5:07:35:58:a0:a5:01:45:b9:
                    8a:70:c1:5f:63:74:d5:12:03:9e:b2:63:c3:56:cd:
                    71:7f:76:75:ae:2a:6c:e7:51:e2:71:12:f6:73:97:
                    9d:28:f1:16:ef:86:06:d5:f2:ee:a9:6c:06:63:6b:
                    eb:7e:8b:e1:67:0a:b9:ab:54:83:17:71:0f:fc:00:
                    0d:7f:40:bc:d0:19:22:89:d1:09:ae:73:41:37:32:
                    c1:b9:01:50:d9:07:86:98:14:d3:77:ac:c2:19:0a:
                    2e:c7:ce:00:4f:75:49:4c:42:a5:32:10:33:bc:45:
                    72:70:a0:47:02:cd:39:f5:da:c5:a0:98:4e:0f:79:
                    b2:3f:ac:83:22:2a:56:c1:1a:b8:70:4f:26:bc:97:
                    c9:6a:ff:2d:39:68:1c:4b:8a:a8:1f:99:2b:03:10:
                    18:60:c5:35:67:d4:4d:3c:00:53:b0:b3:00:71:45:
                    18:24:ad:11:94:97:7a:40:36:c5:b5:dd:8e:b3:a2:
                    45:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:99:41:B6:3B:FC:F6:4D:70:FB:13:1C:F3:D0:53:F2:BF:AA:92:7F
            X509v3 Authority Key Identifier:
                keyid:5A:B2:F0:48:BC:F9:D6:0D:63:23:A7:2E:F7:25:5F:38:A8:1A:93:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/26d7ede1-3fd0-4624-bef8-0e73e84994bc/0/5AB2F048BCF9D60D6323A72EF7255F38A81A93BE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5AB2F048BCF9D60D6323A72EF7255F38A81A93BE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/26d7ede1-3fd0-4624-bef8-0e73e84994bc/0/5AB2F048BCF9D60D6323A72EF7255F38A81A93BE.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:68:7b:80:97:ac:41:f5:1c:6d:fc:00:6b:b5:55:04:53:b5:
         12:a0:7c:81:12:10:8d:49:a7:07:af:bd:bb:a4:9d:7b:06:4b:
         ff:52:76:1d:ef:ec:c8:20:fc:a3:5d:3f:b2:51:ca:3c:47:6c:
         b5:7a:0e:c0:96:4d:ef:13:90:0b:c7:39:a3:d2:32:3c:02:cd:
         b6:d6:11:85:b0:cc:a0:f8:e1:97:6c:a6:a7:05:47:0d:15:5e:
         17:17:65:9b:d6:ee:17:51:1f:aa:cd:67:88:ca:67:81:31:61:
         f0:c9:dd:23:de:cf:be:94:de:1d:31:d9:d5:e9:40:5e:22:8a:
         ec:c5:43:5b:a1:11:05:9b:a8:17:93:92:f3:f8:63:3e:e0:e5:
         ba:97:3a:c3:c5:d8:d0:02:d3:8b:60:31:1d:2b:e4:1f:e4:7f:
         36:b7:66:5b:3d:98:af:99:a2:13:8c:0e:1c:cb:94:e2:13:3e:
         c8:89:28:ec:4d:29:b4:4d:2d:7f:2f:6c:d2:a4:c4:b4:00:f0:
         3e:ec:8d:06:b0:be:37:12:c1:5e:07:79:3f:b9:4c:6e:90:9e:
         78:00:38:0c:57:e4:20:f8:6d:de:17:07:37:8d:56:70:6a:f5:
         ed:90:a9:0b:ea:da:12:20:8b:9c:b9:70:20:3c:c2:0e:8f:f3:
         e0:f9:ea:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 16:10:50 2025 by rpki-client