This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/d970e934-8751-4a61-9950-d4fa480cda41/0/F5A4534B74D0CEEECF5A05F09BC9EF4522FA326C.mft
File:                     F5A4534B74D0CEEECF5A05F09BC9EF4522FA326C.mft (raw, json)
Hash identifier:          7LzO1GNsI3RoDQxxeQsimpmzu4icKnos2bAQRFKd3aU=
Subject key identifier:   11:60:AE:C6:86:00:EE:1E:82:62:75:8A:82:A2:DB:12:DB:89:64:A2
Authority key identifier: F5:A4:53:4B:74:D0:CE:EE:CF:5A:05:F0:9B:C9:EF:45:22:FA:32:6C
Certificate issuer:       /CN=F5A4534B74D0CEEECF5A05F09BC9EF4522FA326C
Certificate serial:       53A76F90CB87DBD99E8A0CFC425304FC11A5520A
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F5A4534B74D0CEEECF5A05F09BC9EF4522FA326C.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/d970e934-8751-4a61-9950-d4fa480cda41/0/F5A4534B74D0CEEECF5A05F09BC9EF4522FA326C.mft
Manifest number:          012E
Signing time:             Fri 05 Dec 2025 21:51:33 +0000
Manifest this update:     Fri 05 Dec 2025 21:46:33 +0000
Manifest next update:     Tue 09 Dec 2025 01:46:33 +0000
Files and hashes:         1: 3135372e31302e3235322e302f32332d3234203d3e20313336303532.roa (hash: mpA7r4n5AsM3pCamORvl0shKqIyo/JWeKgRAvasmRM0=)
                          2: F5A4534B74D0CEEECF5A05F09BC9EF4522FA326C.crl (hash: J/oAIicI73tkKPHKOgEQhnbwyDPHi11p1JlZAe5crqw=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/d970e934-8751-4a61-9950-d4fa480cda41/0/F5A4534B74D0CEEECF5A05F09BC9EF4522FA326C.crl
                          rsync://repo-rpki.idnic.net/repo/d970e934-8751-4a61-9950-d4fa480cda41/0/F5A4534B74D0CEEECF5A05F09BC9EF4522FA326C.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F5A4534B74D0CEEECF5A05F09BC9EF4522FA326C.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 09 Dec 2025 01:46:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:a7:6f:90:cb:87:db:d9:9e:8a:0c:fc:42:53:04:fc:11:a5:52:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F5A4534B74D0CEEECF5A05F09BC9EF4522FA326C
        Validity
            Not Before: Dec  5 21:46:33 2025 GMT
            Not After : Dec  9 01:46:33 2025 GMT
        Subject: CN=1160AEC68600EE1E8262758A82A2DB12DB8964A2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:60:64:4d:8e:36:8c:52:c5:2e:a0:2a:ae:2b:
                    63:a8:67:c5:4d:19:07:d3:a5:d0:5a:17:9b:4d:d4:
                    51:94:4e:5e:10:19:bd:84:f1:73:0e:84:39:cd:b2:
                    2b:fb:17:61:55:cb:07:46:77:aa:da:b9:c6:6b:6c:
                    f2:d0:f0:f3:21:f8:8d:3f:06:7b:b7:b2:e4:49:ae:
                    24:df:8c:1d:73:89:5b:21:66:5d:67:5b:82:97:bd:
                    51:05:2d:8c:45:10:5a:cb:c8:9f:d4:83:eb:a6:55:
                    84:f2:09:71:ca:7b:e7:26:f5:da:6f:ea:6e:a1:ff:
                    11:03:c2:ea:d6:76:4b:bd:d1:69:26:33:44:e9:64:
                    a9:de:8e:38:e6:6c:17:03:85:af:2a:2e:00:1b:73:
                    64:64:e7:3f:df:48:59:69:fb:37:33:49:43:4d:5b:
                    05:32:eb:b0:21:73:79:dc:a9:ec:5d:b7:2b:1c:31:
                    ce:19:0d:52:8d:df:ef:82:72:6e:47:15:73:a9:f6:
                    69:a3:25:a4:a4:21:b4:93:a3:7e:b4:0d:a5:e1:6c:
                    02:00:f2:b2:23:b6:7f:8c:07:69:dc:df:16:60:0e:
                    c0:ba:0c:62:8d:a6:05:c6:12:df:1c:a3:70:16:3d:
                    1b:9c:03:b7:c5:8d:2b:27:94:51:b3:16:9f:75:3e:
                    ab:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:60:AE:C6:86:00:EE:1E:82:62:75:8A:82:A2:DB:12:DB:89:64:A2
            X509v3 Authority Key Identifier:
                keyid:F5:A4:53:4B:74:D0:CE:EE:CF:5A:05:F0:9B:C9:EF:45:22:FA:32:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/d970e934-8751-4a61-9950-d4fa480cda41/0/F5A4534B74D0CEEECF5A05F09BC9EF4522FA326C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F5A4534B74D0CEEECF5A05F09BC9EF4522FA326C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d970e934-8751-4a61-9950-d4fa480cda41/0/F5A4534B74D0CEEECF5A05F09BC9EF4522FA326C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:8c:ea:55:60:61:60:1e:8a:0d:ab:e6:06:57:06:b1:dd:f3:
         ae:60:ab:46:01:11:97:1c:4c:c8:ab:fa:b4:15:44:3f:4f:43:
         21:fa:a0:c3:cc:31:01:66:04:c9:89:85:03:a5:51:ea:6d:24:
         6e:3e:14:de:c7:c3:b2:3a:32:50:6c:00:31:ed:bb:48:5c:04:
         26:7d:ee:7a:3f:5f:05:fc:28:f9:13:d5:90:c6:1f:f1:c5:15:
         3b:84:01:c4:fe:f9:71:62:15:19:5f:b1:fd:8d:19:55:c2:01:
         b1:70:c7:95:38:1b:64:a9:53:b2:98:25:a5:10:36:3d:ac:9a:
         18:de:73:34:29:fb:e8:c8:a0:d9:8d:e4:60:d0:7b:45:63:d6:
         dc:08:9a:53:e5:a3:bb:3f:2e:d3:77:03:2f:a2:6b:fe:fa:92:
         b8:05:80:c1:79:02:85:54:85:32:69:4d:b0:2a:d6:f8:1e:87:
         fa:e1:fa:d3:16:17:40:43:a5:12:78:2a:bc:c4:08:1f:4b:0f:
         48:91:99:87:d9:bd:ce:af:7e:16:f0:5b:f0:cc:99:ac:0c:3c:
         90:f3:db:aa:15:4e:1a:92:b2:b8:c7:ab:99:98:9c:72:15:6a:
         79:75:0f:42:28:25:33:57:39:19:4b:6e:8b:39:5a:e8:61:32:
         59:e0:46:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 18:53:05 2025 by rpki-client