This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/32a98c8b-cad9-49e1-b178-1daf3b62ef59/0/F520C5AEC051FBD03954D15F7A52EAB852DC4D63.mft
File:                     F520C5AEC051FBD03954D15F7A52EAB852DC4D63.mft (raw, json)
Hash identifier:          Q3ybmSWmfWfD2Z+zS7Qb/J4K9HKUlr55XmLYbR+AUxM=
Subject key identifier:   57:4D:38:9D:29:D7:87:E6:E1:53:F6:9F:68:82:2F:A5:AF:0A:50:FB
Authority key identifier: F5:20:C5:AE:C0:51:FB:D0:39:54:D1:5F:7A:52:EA:B8:52:DC:4D:63
Certificate issuer:       /CN=F520C5AEC051FBD03954D15F7A52EAB852DC4D63
Certificate serial:       47077F057BAF1B7901116BD21316469BF979BC1F
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F520C5AEC051FBD03954D15F7A52EAB852DC4D63.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/32a98c8b-cad9-49e1-b178-1daf3b62ef59/0/F520C5AEC051FBD03954D15F7A52EAB852DC4D63.mft
Manifest number:          052E
Signing time:             Sat 13 Dec 2025 01:00:49 +0000
Manifest this update:     Sat 13 Dec 2025 00:55:49 +0000
Manifest next update:     Tue 16 Dec 2025 01:25:49 +0000
Files and hashes:         1: 3130332e3134322e3230302e302f32332d3234203d3e20313339333739.roa (hash: CW38hcQKuGx3OYMIBYq8S0wTy4MYcrKf3ZrGBJO/Jz8=)
                          2: F520C5AEC051FBD03954D15F7A52EAB852DC4D63.crl (hash: YrsXzwBF7e2Q4ZErlMWkiFbOlQqDy9vuXAY9tNWB1u4=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/32a98c8b-cad9-49e1-b178-1daf3b62ef59/0/F520C5AEC051FBD03954D15F7A52EAB852DC4D63.crl
                          rsync://repo-rpki.idnic.net/repo/32a98c8b-cad9-49e1-b178-1daf3b62ef59/0/F520C5AEC051FBD03954D15F7A52EAB852DC4D63.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F520C5AEC051FBD03954D15F7A52EAB852DC4D63.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 16 Dec 2025 01:25:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:07:7f:05:7b:af:1b:79:01:11:6b:d2:13:16:46:9b:f9:79:bc:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F520C5AEC051FBD03954D15F7A52EAB852DC4D63
        Validity
            Not Before: Dec 13 00:55:49 2025 GMT
            Not After : Dec 16 01:25:49 2025 GMT
        Subject: CN=574D389D29D787E6E153F69F68822FA5AF0A50FB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:8f:98:2c:c9:a3:0c:8d:d9:ee:f0:29:17:a9:
                    c1:5e:24:c2:87:08:e0:47:db:8c:cb:ed:7a:6c:d1:
                    83:c7:f5:ea:e6:3d:ed:59:04:2c:83:7c:94:37:6c:
                    13:ca:67:56:1d:25:c6:93:00:1a:8d:e6:b3:f2:ae:
                    c4:6e:57:0e:9e:ac:a7:f5:01:41:fc:23:b3:f7:59:
                    24:5d:97:89:c3:ff:26:e3:3e:49:86:7b:da:97:46:
                    3d:d2:dd:e6:c6:79:a9:82:ec:08:e8:e3:17:86:61:
                    30:27:1d:a1:82:99:eb:98:bb:a1:5c:e4:d0:12:1c:
                    6b:7b:ac:e2:85:71:53:ba:40:bc:6f:9c:f7:56:de:
                    24:98:4f:b7:72:b8:a4:3f:a4:00:c0:11:2f:d1:cb:
                    09:cf:1b:53:33:62:c9:0b:5a:ab:f8:2a:09:07:d0:
                    f0:80:b8:61:fc:7a:df:19:c3:e5:8b:69:2d:2c:81:
                    12:73:9e:16:b0:b1:4b:53:f8:87:49:e0:99:19:dd:
                    df:38:b8:d9:96:e9:31:92:c8:8d:97:16:74:d1:39:
                    90:37:42:21:f2:05:39:fe:8c:3a:f8:f5:7c:99:75:
                    0f:ae:52:33:02:fb:50:4b:b0:ed:c4:46:cf:e8:68:
                    71:2b:73:39:e0:7d:4c:5e:70:19:22:b8:06:b6:f8:
                    3f:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:4D:38:9D:29:D7:87:E6:E1:53:F6:9F:68:82:2F:A5:AF:0A:50:FB
            X509v3 Authority Key Identifier:
                keyid:F5:20:C5:AE:C0:51:FB:D0:39:54:D1:5F:7A:52:EA:B8:52:DC:4D:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/32a98c8b-cad9-49e1-b178-1daf3b62ef59/0/F520C5AEC051FBD03954D15F7A52EAB852DC4D63.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F520C5AEC051FBD03954D15F7A52EAB852DC4D63.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/32a98c8b-cad9-49e1-b178-1daf3b62ef59/0/F520C5AEC051FBD03954D15F7A52EAB852DC4D63.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:5c:fd:f8:10:47:db:25:0a:fe:ce:c0:cb:97:ab:00:23:b7:
         73:12:da:de:fc:ce:3a:9a:32:65:c7:e3:f5:05:2c:69:46:ea:
         b8:69:40:17:cf:1f:e0:ad:e1:a2:c1:80:0b:24:37:04:8f:52:
         20:7d:fa:b5:c8:4c:e0:c9:f1:36:8d:3a:a8:33:32:28:63:d0:
         d1:39:c3:63:07:1a:71:3d:ee:16:74:57:66:8a:8e:e1:d1:c0:
         e1:c7:06:33:b5:a2:b8:c9:90:d3:e2:7d:ea:cf:b3:60:b3:e9:
         00:b7:cf:2e:f1:a8:fd:7e:22:82:45:be:9a:14:ea:77:7a:f7:
         ea:4b:05:ff:22:31:89:75:88:14:c5:03:5f:05:ab:7b:3d:08:
         cd:f2:3c:16:2e:4a:10:11:7b:63:02:9e:f9:3c:73:7d:1c:74:
         ef:b6:6c:63:81:a8:2f:32:c6:74:ba:d8:53:c3:bd:e9:bb:6e:
         08:54:8b:0a:1f:68:17:fc:06:11:7b:10:b6:aa:b4:e0:8f:fc:
         80:2f:cb:6f:8a:62:3f:f2:16:f6:fb:c3:64:c8:39:82:b3:54:
         18:08:15:c0:3b:ee:f9:c7:75:41:91:b8:ce:64:0f:bb:43:a3:
         a3:98:02:5c:ab:3f:73:7b:64:b3:b0:dc:0b:7e:20:bd:d2:5e:
         36:a7:8e:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 14 03:30:05 2025 by rpki-client