This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/338d2755-380d-477e-bf25-0af29026bd70/0/E5A907C4EC6DA6D9342613280CCAF26E98DBEB98.mft
File:                     E5A907C4EC6DA6D9342613280CCAF26E98DBEB98.mft (raw, json)
Hash identifier:          VwoFgaI/HxvPUHqi/WDUHxfENlckOmHxjxyk2JDYF4c=
Subject key identifier:   A3:2B:03:29:D3:37:43:65:0F:6C:27:CF:F2:89:C8:1A:0D:D9:A9:CB
Authority key identifier: E5:A9:07:C4:EC:6D:A6:D9:34:26:13:28:0C:CA:F2:6E:98:DB:EB:98
Certificate issuer:       /CN=E5A907C4EC6DA6D9342613280CCAF26E98DBEB98
Certificate serial:       371899CACAEA5A0EE18C4C4F68D3D8977D74D0C6
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E5A907C4EC6DA6D9342613280CCAF26E98DBEB98.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/338d2755-380d-477e-bf25-0af29026bd70/0/E5A907C4EC6DA6D9342613280CCAF26E98DBEB98.mft
Manifest number:          054C
Signing time:             Wed 17 Dec 2025 09:51:37 +0000
Manifest this update:     Wed 17 Dec 2025 09:46:37 +0000
Manifest next update:     Sat 20 Dec 2025 20:11:37 +0000
Files and hashes:         1: E5A907C4EC6DA6D9342613280CCAF26E98DBEB98.crl (hash: l4F9aXYGoEbAntTuD/nBRG3wXfMpYz+JizZSbruSjmY=)
                          2: 3136332e35332e3139322e302f32342d3234203d3e203538333831.roa (hash: yZc1iS4QoDixBleI5zCzNqJxlWUKStGiBLindHs1iEI=)
                          3: 3136332e35332e3139322e302f32322d3234203d3e203538333831.roa (hash: da+6m2Ao8Np4pQ1E/E3mUNsxrZ/EVmn5FouVzksz9c8=)
                          4: 3130332e352e35302e302f32342d3234203d3e203538333831.roa (hash: it/SzipXfJLThyc3J7HfzvzUSlGSxUAWhA/O+pawjWg=)
                          5: 3136332e35332e3139332e302f32342d3234203d3e203538333831.roa (hash: vA7wUsbitPXQ/g+uEYWZCPKwK0C5BXMnrLidIFEb1Os=)
                          6: 3130332e352e35312e302f32342d3234203d3e203538333831.roa (hash: 8JW2i4QARgl0zJX/bSzH4du3GV59x2527JCrnJKQbAc=)
                          7: 3130332e32302e39302e302f32342d3234203d3e203538333831.roa (hash: U8zMaSQ7+KDj9JX6Jxw28z4BWL6cFt7T425dsrSW9yo=)
                          8: 3136332e35332e3139352e302f32342d3234203d3e203538333831.roa (hash: hvbDj3oW0Ulg1k85u9jkPnoGdFUSrxAWB+C8nIEEK6o=)
                          9: 3130332e352e35302e302f32332d3234203d3e203538333831.roa (hash: vUQFNtw/Wx42/8lzOcd3z8v6J/NH0/1TKrlG8NlfvWA=)
                          10: 3130332e32302e39312e302f32342d3234203d3e203538333831.roa (hash: euk9OJMoqKJ/PoRjzKpkFgAP821pupDkAT5Pdi0akjA=)
                          11: 3130332e32302e39302e302f32332d3234203d3e203538333831.roa (hash: 5K/CSCkpnd8IXIfswWl0TeD0OpMXzsyDAU0E28APGJ4=)
                          12: 3136332e35332e3139342e302f32342d3234203d3e203538333831.roa (hash: sWFHDQkTsVJom3rOu9Mf9y3OJpTKgRwn5bDfHA2Pw9Y=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/338d2755-380d-477e-bf25-0af29026bd70/0/E5A907C4EC6DA6D9342613280CCAF26E98DBEB98.crl
                          rsync://repo-rpki.idnic.net/repo/338d2755-380d-477e-bf25-0af29026bd70/0/E5A907C4EC6DA6D9342613280CCAF26E98DBEB98.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E5A907C4EC6DA6D9342613280CCAF26E98DBEB98.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Dec 2025 20:11:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:18:99:ca:ca:ea:5a:0e:e1:8c:4c:4f:68:d3:d8:97:7d:74:d0:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E5A907C4EC6DA6D9342613280CCAF26E98DBEB98
        Validity
            Not Before: Dec 17 09:46:37 2025 GMT
            Not After : Dec 20 20:11:37 2025 GMT
        Subject: CN=A32B0329D33743650F6C27CFF289C81A0DD9A9CB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:a5:42:cc:19:b3:d6:96:d4:4f:fb:0c:2b:92:
                    fe:14:4a:3e:8c:c9:29:32:74:8d:bc:e2:ce:59:1a:
                    71:ca:ab:11:ba:42:bc:fd:3f:bb:c5:ff:24:ed:bd:
                    c5:98:f9:d2:79:1a:27:76:77:29:e3:5d:b0:01:ad:
                    6d:cd:d7:02:7e:a5:3e:29:79:19:0f:28:b0:9c:e1:
                    3a:62:c8:1e:a6:d3:9d:bd:af:da:bf:9f:53:02:a3:
                    71:01:15:fa:68:ad:c2:7d:8a:f7:5f:7a:4e:4f:80:
                    17:c9:ee:19:4c:02:16:67:18:5b:8c:06:77:d6:4b:
                    20:f9:3d:90:b4:c8:70:59:49:7a:bf:37:07:85:38:
                    21:46:44:ce:0d:6a:66:ba:6d:1d:21:4d:0b:80:71:
                    94:13:db:2e:7e:9f:5f:78:ab:33:33:5f:2a:fb:45:
                    82:82:c8:76:9b:9b:a3:91:a4:d6:bd:c1:aa:c5:8d:
                    09:12:70:ba:b9:03:31:6f:b2:b4:5e:40:7d:1f:da:
                    b3:91:1a:d0:da:90:9b:61:35:b1:97:1e:16:c1:0c:
                    b2:b7:a0:fe:03:8b:21:3d:8c:87:31:62:53:14:50:
                    51:fc:77:d1:85:32:5a:38:fb:35:ab:f2:01:0e:58:
                    15:49:e3:7a:08:2b:ca:d8:16:c3:e0:19:5f:a0:43:
                    35:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:2B:03:29:D3:37:43:65:0F:6C:27:CF:F2:89:C8:1A:0D:D9:A9:CB
            X509v3 Authority Key Identifier:
                keyid:E5:A9:07:C4:EC:6D:A6:D9:34:26:13:28:0C:CA:F2:6E:98:DB:EB:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/338d2755-380d-477e-bf25-0af29026bd70/0/E5A907C4EC6DA6D9342613280CCAF26E98DBEB98.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E5A907C4EC6DA6D9342613280CCAF26E98DBEB98.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/338d2755-380d-477e-bf25-0af29026bd70/0/E5A907C4EC6DA6D9342613280CCAF26E98DBEB98.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:34:b4:1c:39:8b:ee:69:15:82:db:74:05:4f:7d:3a:8b:b4:
         c9:97:ea:a7:c7:66:f8:6c:c1:4d:b5:aa:88:45:b3:8e:a8:e1:
         c6:d6:80:82:b7:1e:fe:0d:90:1b:e9:42:de:57:34:a4:8a:a6:
         fc:56:02:54:71:ba:eb:ff:86:27:46:cf:fb:7c:e0:aa:83:a8:
         ee:5c:66:a4:e4:89:e4:47:40:08:f6:86:23:e7:d1:56:ab:96:
         f8:3c:60:2e:70:ff:9b:34:b7:75:d8:68:78:77:4f:9b:85:a6:
         97:e2:20:98:7c:45:0c:09:01:05:c5:57:f1:f5:1d:72:42:91:
         52:60:bf:74:39:e9:43:00:40:83:c4:5c:5c:e3:6d:68:8b:0e:
         03:50:2f:dd:d5:d6:08:99:ae:ff:35:2a:ad:e7:e6:51:32:aa:
         1c:2f:90:2b:5d:8d:f5:d1:08:64:3c:0f:7b:b8:f1:c4:dc:a4:
         04:ee:67:6c:78:8e:b0:e9:12:3a:d3:10:0f:6b:4c:1b:20:c8:
         28:8b:39:72:ee:ae:63:2c:3f:02:43:37:4e:95:fa:0b:a5:35:
         46:57:2d:e9:68:dd:4c:06:f0:cc:6a:1d:ee:97:c2:c7:a7:91:
         9a:9b:e7:cf:12:27:6e:ab:d5:79:6e:e8:45:be:61:bc:9f:2f:
         54:04:2b:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 03:07:45 2025 by rpki-client