This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/cd7c7ac2-5a9b-492a-a4c5-1f13590dae06/0/C554E891C583CE2ABF2DB5DEE821F6B630BFF5DF.mft
File:                     C554E891C583CE2ABF2DB5DEE821F6B630BFF5DF.mft (raw, json)
Hash identifier:          53zyvU0nsEe127hUpB1XAzUlYJeA/7HAKk7r1EThBus=
Subject key identifier:   82:05:C0:48:3E:87:43:67:17:01:7E:7B:67:38:18:35:1D:D8:57:EA
Authority key identifier: C5:54:E8:91:C5:83:CE:2A:BF:2D:B5:DE:E8:21:F6:B6:30:BF:F5:DF
Certificate issuer:       /CN=C554E891C583CE2ABF2DB5DEE821F6B630BFF5DF
Certificate serial:       0F3C905FFE499631708A8916DC8FE1C9065426E1
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C554E891C583CE2ABF2DB5DEE821F6B630BFF5DF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/cd7c7ac2-5a9b-492a-a4c5-1f13590dae06/0/C554E891C583CE2ABF2DB5DEE821F6B630BFF5DF.mft
Manifest number:          0410
Signing time:             Tue 02 Dec 2025 10:02:10 +0000
Manifest this update:     Tue 02 Dec 2025 09:57:10 +0000
Manifest next update:     Fri 05 Dec 2025 18:04:10 +0000
Files and hashes:         1: 3130332e3135382e3235302e302f32332d3234203d3e20313431313334.roa (hash: M93Ni1T1Tbr7xBYmfCDNgdw5xr36AB/YVcpH7A2lVoA=)
                          2: C554E891C583CE2ABF2DB5DEE821F6B630BFF5DF.crl (hash: tiWKEJox12rQZMzeEdtL/s9arrB/39PBsoByS//FXMo=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/cd7c7ac2-5a9b-492a-a4c5-1f13590dae06/0/C554E891C583CE2ABF2DB5DEE821F6B630BFF5DF.crl
                          rsync://repo-rpki.idnic.net/repo/cd7c7ac2-5a9b-492a-a4c5-1f13590dae06/0/C554E891C583CE2ABF2DB5DEE821F6B630BFF5DF.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C554E891C583CE2ABF2DB5DEE821F6B630BFF5DF.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 05 Dec 2025 18:04:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:3c:90:5f:fe:49:96:31:70:8a:89:16:dc:8f:e1:c9:06:54:26:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C554E891C583CE2ABF2DB5DEE821F6B630BFF5DF
        Validity
            Not Before: Dec  2 09:57:10 2025 GMT
            Not After : Dec  5 18:04:10 2025 GMT
        Subject: CN=8205C0483E87436717017E7B673818351DD857EA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:f9:e7:eb:f4:a9:a7:7d:fb:d2:4b:10:d8:6b:
                    b8:17:74:e5:37:09:06:e8:f0:5f:72:91:79:40:ac:
                    82:f7:b0:af:9f:4e:2c:53:b8:05:dd:79:84:8a:2e:
                    9d:62:95:b0:58:e7:51:4f:4b:8c:70:ee:d3:f6:55:
                    c6:d1:68:7d:be:1d:75:8a:81:20:6c:5d:3c:ca:a3:
                    16:0c:1e:d5:90:5a:83:b7:84:d3:18:07:82:1b:7b:
                    81:09:74:6a:ab:a7:15:7f:2c:da:b5:ef:ed:0e:ae:
                    ac:bf:b5:01:a2:24:1d:e6:d0:3d:78:8e:05:35:d9:
                    35:ea:cf:25:01:7e:2d:fa:43:a3:3b:e1:bd:a6:6f:
                    d0:3b:22:b9:56:2d:79:c4:1b:0c:1b:e0:ac:70:6f:
                    ef:1d:45:c7:b8:b2:96:0b:8b:b7:bd:18:27:ae:68:
                    8d:e8:64:6b:f1:26:ea:a8:0d:de:56:18:e4:ec:7c:
                    42:38:1a:9a:5e:b9:d9:05:5c:a6:45:f1:e5:d3:40:
                    03:7b:42:21:22:e0:3d:d2:74:ad:cf:be:8e:81:b1:
                    38:86:88:aa:1b:83:1a:59:a1:17:c4:b0:ef:99:03:
                    cf:97:70:b1:ea:62:7b:02:80:79:c6:20:5e:ed:d4:
                    19:a5:d5:ca:42:56:e3:00:6b:d5:4f:30:90:6b:6f:
                    83:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:05:C0:48:3E:87:43:67:17:01:7E:7B:67:38:18:35:1D:D8:57:EA
            X509v3 Authority Key Identifier:
                keyid:C5:54:E8:91:C5:83:CE:2A:BF:2D:B5:DE:E8:21:F6:B6:30:BF:F5:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/cd7c7ac2-5a9b-492a-a4c5-1f13590dae06/0/C554E891C583CE2ABF2DB5DEE821F6B630BFF5DF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C554E891C583CE2ABF2DB5DEE821F6B630BFF5DF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cd7c7ac2-5a9b-492a-a4c5-1f13590dae06/0/C554E891C583CE2ABF2DB5DEE821F6B630BFF5DF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:3c:0d:ec:e3:e4:3d:f4:35:3a:df:09:66:a8:85:44:47:eb:
         03:22:6a:e9:fc:b6:4b:99:d0:69:dc:a9:c0:fc:69:a7:96:2e:
         08:69:26:95:9b:13:4e:63:67:f2:c6:c3:7e:b0:dd:42:69:8b:
         e0:70:78:22:ce:b9:78:a4:c2:7d:9f:25:81:d9:da:bb:e1:a7:
         0e:56:1d:15:c4:f2:f1:1b:52:20:8b:72:b7:81:13:ca:58:72:
         23:67:03:00:83:39:f3:d1:35:94:2b:63:00:bb:8b:54:4b:93:
         04:65:91:fb:cd:6d:97:31:a1:f4:7c:76:ef:88:b9:90:64:b9:
         e5:5b:b9:64:4a:92:30:4e:82:c5:19:0c:c8:ba:b3:74:09:f3:
         db:5d:a4:09:e6:ab:e7:98:0c:bb:95:bf:3e:63:71:be:d2:fc:
         4e:d4:cf:3b:a8:e7:b9:2c:dd:b4:da:cc:13:76:83:46:ac:65:
         69:1f:c8:a3:10:38:55:46:bd:42:9e:05:43:28:7d:69:c5:af:
         37:ae:84:6f:74:4f:df:78:f2:f8:4a:a9:04:bc:4d:df:ca:76:
         33:d0:e5:ac:7e:ff:5d:d1:b6:62:1c:72:22:cf:ea:e8:59:d5:
         75:e3:92:0c:45:86:4f:16:bb:75:46:ec:22:f5:41:31:4d:00:
         e7:9e:b1:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 14:41:43 2025 by rpki-client