This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/7b3eabb4-4db3-4373-a348-fb1ed7055651/0/5C413D56294D9D20E64978B7296A9DA893C32CAB.mft
File:                     5C413D56294D9D20E64978B7296A9DA893C32CAB.mft (raw, json)
Hash identifier:          lwFRybROVkzcLaAA8QRFxBxKxWJBfFshTIrqnGC/zLA=
Subject key identifier:   3D:F0:80:DD:07:7C:C9:35:77:E1:0C:DC:5A:AB:E4:A2:A1:F9:B0:14
Authority key identifier: 5C:41:3D:56:29:4D:9D:20:E6:49:78:B7:29:6A:9D:A8:93:C3:2C:AB
Certificate issuer:       /CN=5C413D56294D9D20E64978B7296A9DA893C32CAB
Certificate serial:       65EA460BA69D00249AB761755C2DAF9155A3083E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5C413D56294D9D20E64978B7296A9DA893C32CAB.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/7b3eabb4-4db3-4373-a348-fb1ed7055651/0/5C413D56294D9D20E64978B7296A9DA893C32CAB.mft
Manifest number:          03C4
Signing time:             Sat 13 Dec 2025 18:52:30 +0000
Manifest this update:     Sat 13 Dec 2025 18:47:30 +0000
Manifest next update:     Tue 16 Dec 2025 18:55:30 +0000
Files and hashes:         1: 3130332e3135302e36312e302f32342d3234203d3e20313430333839.roa (hash: PlY/JnUtAv2FxS5Soe3wZCn6MzuK/JWnFyPZQrX/fuQ=)
                          2: 5C413D56294D9D20E64978B7296A9DA893C32CAB.crl (hash: 0EFhd2/mYWL8/UhJGc9zmfhutpdH8+neNPF/CqHUyx0=)
                          3: 3130332e3135302e36302e302f32342d3234203d3e20313430333839.roa (hash: 4ZQwGn11qHNiVrKpaqE6sqxjVoPVYCbt4H6xntr7VWc=)
                          4: 323030313a6466333a356238303a3a2f34382d3438203d3e20313430333839.roa (hash: 2Fp4Lwy8mON7FVeMJE/4PvZDu17XhYrM2gPfMF99PL4=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/7b3eabb4-4db3-4373-a348-fb1ed7055651/0/5C413D56294D9D20E64978B7296A9DA893C32CAB.crl
                          rsync://repo-rpki.idnic.net/repo/7b3eabb4-4db3-4373-a348-fb1ed7055651/0/5C413D56294D9D20E64978B7296A9DA893C32CAB.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5C413D56294D9D20E64978B7296A9DA893C32CAB.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 16 Dec 2025 18:55:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:ea:46:0b:a6:9d:00:24:9a:b7:61:75:5c:2d:af:91:55:a3:08:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5C413D56294D9D20E64978B7296A9DA893C32CAB
        Validity
            Not Before: Dec 13 18:47:30 2025 GMT
            Not After : Dec 16 18:55:30 2025 GMT
        Subject: CN=3DF080DD077CC93577E10CDC5AABE4A2A1F9B014
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:47:db:80:f3:c9:06:fd:e2:0b:bd:ca:4a:98:
                    96:7e:75:65:17:53:4b:b4:f8:c4:6a:a9:53:9f:a9:
                    7e:5f:83:2d:86:ed:14:28:a4:61:ea:9d:a8:fb:f3:
                    7b:12:04:ad:f5:bb:ba:e4:54:ea:18:99:37:6c:7f:
                    e3:28:32:54:78:4f:78:f1:ab:4f:e4:56:cf:7a:3b:
                    20:88:43:82:0f:60:57:84:78:4c:e4:8e:22:ea:b9:
                    5b:5f:24:cb:ef:42:44:37:93:ef:d2:f5:53:69:e9:
                    e2:63:4d:19:5f:b9:f3:7d:51:45:3d:77:82:1e:2a:
                    3f:c2:35:35:ac:5a:1a:e7:bc:ff:d0:35:67:bf:35:
                    91:40:63:40:0b:62:c3:42:1b:3e:76:61:db:78:04:
                    41:6b:c2:b9:32:df:39:7d:35:77:7a:37:09:f6:13:
                    e2:33:ea:45:db:98:21:cd:5b:7a:09:a7:1b:27:9e:
                    f5:fa:03:8b:90:01:8f:e9:b4:64:fd:12:ef:b7:e3:
                    2d:70:31:46:f0:30:e1:3b:ea:5c:91:10:29:be:43:
                    3f:f7:4b:fe:a4:8a:00:5e:76:93:64:57:c3:78:ed:
                    25:b1:63:83:9e:3e:22:c8:02:85:0b:de:8b:99:39:
                    e8:13:bd:1b:e1:72:7d:4c:8e:b0:fe:3c:fb:0c:bc:
                    e1:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:F0:80:DD:07:7C:C9:35:77:E1:0C:DC:5A:AB:E4:A2:A1:F9:B0:14
            X509v3 Authority Key Identifier:
                keyid:5C:41:3D:56:29:4D:9D:20:E6:49:78:B7:29:6A:9D:A8:93:C3:2C:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/7b3eabb4-4db3-4373-a348-fb1ed7055651/0/5C413D56294D9D20E64978B7296A9DA893C32CAB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5C413D56294D9D20E64978B7296A9DA893C32CAB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7b3eabb4-4db3-4373-a348-fb1ed7055651/0/5C413D56294D9D20E64978B7296A9DA893C32CAB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:8c:67:3c:58:9b:1b:55:43:b4:3b:a7:95:81:3f:6d:50:f2:
         70:d3:d7:40:a4:33:e9:fa:63:b3:59:f1:a3:af:80:3f:9f:0f:
         1f:5b:87:f8:c7:c1:04:4d:f4:89:3c:cc:ef:a9:54:7a:9e:38:
         83:76:79:ab:59:71:b5:b4:44:2d:f0:86:7b:04:b3:18:97:fd:
         47:fb:0f:e0:5d:53:4f:b8:08:4e:19:fb:ef:c6:51:df:ab:84:
         fe:54:f8:75:65:dc:1e:a3:e9:18:c3:d9:ee:20:b3:2e:49:7c:
         37:18:45:75:61:8b:02:c9:87:5e:56:1d:be:6e:c8:d0:58:56:
         d8:13:00:24:db:c1:01:0d:f7:de:aa:6b:c2:a3:1c:1a:90:74:
         5b:2a:b2:6c:4b:e5:29:49:b1:5b:68:7c:95:02:3d:07:63:5c:
         3d:97:37:56:c5:8b:36:0c:7f:0d:01:83:65:16:ae:0a:74:f3:
         c3:b5:db:2a:16:c1:7a:04:df:bc:8b:5a:6a:0a:37:1d:94:2a:
         1e:54:8d:d8:6f:44:55:2b:57:44:36:76:22:23:c7:04:a2:97:
         0e:4f:ce:01:86:b2:5e:fd:50:02:ce:ce:63:f4:47:45:a9:ff:
         f5:5d:b9:7f:c9:64:5c:34:89:31:0a:86:7a:cc:4e:27:7a:ce:
         c5:1a:16:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 15 14:04:06 2025 by rpki-client