This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/4402daa5-fb0c-4a24-9889-33bd50db4fe0/0/5F1EC0378C7B3A8912CA32E382D2C083E173E71C.mft
File:                     5F1EC0378C7B3A8912CA32E382D2C083E173E71C.mft (raw, json)
Hash identifier:          vq4TOV9h3AAUEnPC0J6PeK4ORJFwMFsHIrrAAHd39WI=
Subject key identifier:   EF:47:8D:C8:1B:96:B3:DD:49:6C:8E:D1:A7:0C:16:4A:35:B6:CF:0A
Authority key identifier: 5F:1E:C0:37:8C:7B:3A:89:12:CA:32:E3:82:D2:C0:83:E1:73:E7:1C
Certificate issuer:       /CN=5F1EC0378C7B3A8912CA32E382D2C083E173E71C
Certificate serial:       5EC88BF1D834349F7C8CE26E1BF83006DBD5FABC
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5F1EC0378C7B3A8912CA32E382D2C083E173E71C.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/4402daa5-fb0c-4a24-9889-33bd50db4fe0/0/5F1EC0378C7B3A8912CA32E382D2C083E173E71C.mft
Manifest number:          0534
Signing time:             Thu 18 Dec 2025 06:31:17 +0000
Manifest this update:     Thu 18 Dec 2025 06:26:17 +0000
Manifest next update:     Sun 21 Dec 2025 16:44:17 +0000
Files and hashes:         1: 3130332e31302e3134382e302f32322d3234203d3e20313336313032.roa (hash: YsAypY99u2UNps3UuTssVcjcS3FU5EYzwPP14rlgcWs=)
                          2: 3130332e39302e3235302e302f32332d3234203d3e20313336313032.roa (hash: ekJ6EWJjK3BnK95R5dRKHaTG8w4+znJQJhayH3/qkyg=)
                          3: 5F1EC0378C7B3A8912CA32E382D2C083E173E71C.crl (hash: spknzsgPW/9OoWdxTj+d/h/mjx/2DRZ27u1R1xCXyNo=)
                          4: 3130332e39302e3234382e302f32332d3234203d3e20313337323836.roa (hash: jxHxbJF/eRRjfrisoO0mVeSb4ItOk+aEiVd997Gm3wQ=)
                          5: 34392e3132382e3138382e302f32322d3234203d3e20313337323836.roa (hash: N5sKhHjRyw1prqGuj3p6kCsMHoe6+KpOpvfRWzLWflo=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/4402daa5-fb0c-4a24-9889-33bd50db4fe0/0/5F1EC0378C7B3A8912CA32E382D2C083E173E71C.crl
                          rsync://repo-rpki.idnic.net/repo/4402daa5-fb0c-4a24-9889-33bd50db4fe0/0/5F1EC0378C7B3A8912CA32E382D2C083E173E71C.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5F1EC0378C7B3A8912CA32E382D2C083E173E71C.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 21 Dec 2025 16:44:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:c8:8b:f1:d8:34:34:9f:7c:8c:e2:6e:1b:f8:30:06:db:d5:fa:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5F1EC0378C7B3A8912CA32E382D2C083E173E71C
        Validity
            Not Before: Dec 18 06:26:17 2025 GMT
            Not After : Dec 21 16:44:17 2025 GMT
        Subject: CN=EF478DC81B96B3DD496C8ED1A70C164A35B6CF0A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:c4:4a:69:6c:66:87:b1:f7:86:6c:67:9f:a2:
                    5c:bb:69:e4:11:44:e5:ba:a4:a9:8d:4f:a7:e6:75:
                    3c:a7:11:47:d5:44:6a:21:ee:2c:38:8f:53:3e:dc:
                    dd:3e:b4:75:f9:5b:56:09:71:f5:3c:dc:f9:45:b3:
                    41:32:86:69:80:5b:62:30:5f:a8:3e:4d:40:08:ba:
                    63:b6:67:d4:ec:00:d9:da:f8:45:79:82:67:23:f7:
                    09:44:7f:87:3a:7b:07:cd:61:9e:67:b4:18:cb:58:
                    05:78:3b:fb:08:77:57:8f:5f:6e:77:d2:16:c0:db:
                    4a:ad:bf:0c:fd:7e:c5:a4:f2:a1:a5:84:23:73:83:
                    3f:d0:1f:95:4d:64:5e:dc:7b:2c:d8:46:8a:d3:44:
                    2a:0f:f7:68:1d:56:65:fb:cc:e5:f2:30:0e:ed:cc:
                    83:8d:96:b0:35:4f:4e:cd:02:5f:10:0f:e7:e6:0c:
                    26:e4:2c:60:b3:25:ae:b7:17:cf:81:10:18:a8:61:
                    67:ae:4d:85:b1:b9:2a:44:c1:73:79:d8:25:29:ee:
                    68:ee:5b:fb:bc:69:32:c9:c0:fe:10:cb:48:bf:f6:
                    05:fd:59:1b:e3:83:82:6c:bb:5c:cf:45:4f:54:0d:
                    f5:6e:c3:f6:01:f9:80:b5:65:85:8d:66:2a:81:b0:
                    94:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:47:8D:C8:1B:96:B3:DD:49:6C:8E:D1:A7:0C:16:4A:35:B6:CF:0A
            X509v3 Authority Key Identifier:
                keyid:5F:1E:C0:37:8C:7B:3A:89:12:CA:32:E3:82:D2:C0:83:E1:73:E7:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/4402daa5-fb0c-4a24-9889-33bd50db4fe0/0/5F1EC0378C7B3A8912CA32E382D2C083E173E71C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5F1EC0378C7B3A8912CA32E382D2C083E173E71C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4402daa5-fb0c-4a24-9889-33bd50db4fe0/0/5F1EC0378C7B3A8912CA32E382D2C083E173E71C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:a1:d2:57:06:34:1a:e6:b3:0e:cb:87:8c:bd:06:8e:9d:c3:
         73:6a:70:ee:6a:a5:f0:6c:df:8b:aa:55:ca:04:0e:7c:2a:90:
         9d:9b:c3:41:d3:a8:86:6b:86:db:3e:c8:20:72:39:a3:a5:07:
         35:a6:d7:4d:5a:88:30:e1:2d:b6:8d:dd:ca:79:c1:b7:5c:fc:
         ea:6b:be:80:0a:fa:62:78:d0:76:ab:73:9c:4e:3d:10:d4:6d:
         86:94:1b:27:65:3b:ad:f9:b4:d0:ba:6e:ab:06:d1:1f:de:3c:
         43:8b:7e:a4:cd:26:fe:28:9b:f1:a8:61:94:9b:7a:8e:60:24:
         fd:8a:53:f9:f1:82:55:01:13:24:8f:27:c2:e1:42:c4:af:89:
         52:95:05:e8:2c:3a:68:ee:a6:af:52:3a:ca:ce:b5:37:7f:a8:
         e9:ae:87:3d:1a:6e:9b:d8:4f:d0:e7:7a:f9:43:d2:d5:01:ba:
         47:2c:a3:e5:7a:34:3c:74:52:c0:1e:5d:f6:6e:84:ab:81:fb:
         b0:87:74:54:c6:55:da:29:63:73:da:f3:06:52:7c:ed:35:2d:
         ac:e8:c6:7f:67:81:3e:50:01:02:0b:08:77:a1:37:d2:e5:08:
         0a:59:eb:4e:d3:e5:01:6f:37:f6:9e:99:3e:d6:10:74:e4:bd:
         79:43:e4:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 09:16:58 2025 by rpki-client