This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/e13eed2b-955e-4093-88a4-f4de3cc9b9cd/0/5ACB0F96C2B1255EABAAEBC1426ECD9E6DF6C4AD.mft
File:                     5ACB0F96C2B1255EABAAEBC1426ECD9E6DF6C4AD.mft (raw, json)
Hash identifier:          q1tKh2W3t2H4GhheuAwqfVvTvhTPxfB1gT3XkORlduQ=
Subject key identifier:   B6:02:14:D3:75:4D:26:7C:8A:35:D8:C9:83:CB:78:B4:1D:C0:DE:2E
Authority key identifier: 5A:CB:0F:96:C2:B1:25:5E:AB:AA:EB:C1:42:6E:CD:9E:6D:F6:C4:AD
Certificate issuer:       /CN=5ACB0F96C2B1255EABAAEBC1426ECD9E6DF6C4AD
Certificate serial:       50934020FD30AAE1594484C4903076F2471B4D0F
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5ACB0F96C2B1255EABAAEBC1426ECD9E6DF6C4AD.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/e13eed2b-955e-4093-88a4-f4de3cc9b9cd/0/5ACB0F96C2B1255EABAAEBC1426ECD9E6DF6C4AD.mft
Manifest number:          019E
Signing time:             Tue 02 Dec 2025 19:41:03 +0000
Manifest this update:     Tue 02 Dec 2025 19:36:03 +0000
Manifest next update:     Sat 06 Dec 2025 05:06:03 +0000
Files and hashes:         1: 3130332e3235322e34382e302f32342d3234203d3e20313530393931.roa (hash: 3eXzK+GorV6w9BT+6P2VQObNrkmn7G3kB6eMdcv66zE=)
                          2: 5ACB0F96C2B1255EABAAEBC1426ECD9E6DF6C4AD.crl (hash: ygs0YvlhKrQYQL+lUfgNfdWSlW6235YXYisXH4IJbcw=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/e13eed2b-955e-4093-88a4-f4de3cc9b9cd/0/5ACB0F96C2B1255EABAAEBC1426ECD9E6DF6C4AD.crl
                          rsync://repo-rpki.idnic.net/repo/e13eed2b-955e-4093-88a4-f4de3cc9b9cd/0/5ACB0F96C2B1255EABAAEBC1426ECD9E6DF6C4AD.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5ACB0F96C2B1255EABAAEBC1426ECD9E6DF6C4AD.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 06 Dec 2025 05:06:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:93:40:20:fd:30:aa:e1:59:44:84:c4:90:30:76:f2:47:1b:4d:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ACB0F96C2B1255EABAAEBC1426ECD9E6DF6C4AD
        Validity
            Not Before: Dec  2 19:36:03 2025 GMT
            Not After : Dec  6 05:06:03 2025 GMT
        Subject: CN=B60214D3754D267C8A35D8C983CB78B41DC0DE2E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:84:a1:12:65:8e:18:4e:e5:76:3e:71:0d:30:
                    b8:6c:96:b3:59:fe:27:58:bf:29:d0:60:8a:d0:2c:
                    ee:88:d3:33:a1:18:06:5b:d7:4d:84:e5:8a:3d:bb:
                    7d:b0:62:d9:14:d7:fa:86:20:5a:f3:6a:41:20:b9:
                    05:73:2f:43:58:39:af:79:11:12:4e:63:33:aa:64:
                    ce:f2:41:a1:c8:7e:4e:6c:11:24:cc:cb:1f:0c:0c:
                    32:bd:af:35:44:e1:cc:85:05:ca:6b:4a:29:0c:dc:
                    7e:eb:47:cc:99:0e:9b:60:4e:2d:dc:b0:66:02:11:
                    6a:f2:a9:05:fb:e0:b2:1f:68:c3:43:63:77:c1:db:
                    42:b1:04:f4:b4:b0:c4:82:43:a1:bf:10:32:32:b7:
                    ca:b7:52:2e:69:a9:88:76:59:df:b4:fb:25:5b:30:
                    bc:6d:50:80:82:46:3b:7b:09:a3:1e:66:52:43:c8:
                    c3:bd:4f:c6:22:33:91:53:9a:f2:27:c4:83:77:8c:
                    bf:ed:41:d1:89:23:b6:7b:d9:6e:a0:bc:bf:58:b2:
                    a3:96:7b:e6:c4:68:20:97:be:c6:4d:27:61:df:6b:
                    b0:c4:09:41:50:71:c7:a7:19:be:22:a2:37:ab:76:
                    b2:67:af:1f:1b:49:67:5d:83:5d:50:c0:aa:8e:07:
                    ca:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:02:14:D3:75:4D:26:7C:8A:35:D8:C9:83:CB:78:B4:1D:C0:DE:2E
            X509v3 Authority Key Identifier:
                keyid:5A:CB:0F:96:C2:B1:25:5E:AB:AA:EB:C1:42:6E:CD:9E:6D:F6:C4:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/e13eed2b-955e-4093-88a4-f4de3cc9b9cd/0/5ACB0F96C2B1255EABAAEBC1426ECD9E6DF6C4AD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5ACB0F96C2B1255EABAAEBC1426ECD9E6DF6C4AD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e13eed2b-955e-4093-88a4-f4de3cc9b9cd/0/5ACB0F96C2B1255EABAAEBC1426ECD9E6DF6C4AD.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:fc:5c:c9:4a:b0:6c:fb:e6:69:94:3b:d4:98:10:aa:d9:36:
         e9:4e:a0:28:0f:b8:44:4f:0c:3a:64:90:fa:4d:6f:7b:37:2a:
         8d:5b:af:a7:20:65:70:25:47:4e:0b:0d:ed:3c:8d:67:be:5f:
         29:0b:85:ba:29:78:f3:20:b7:4e:e1:6c:1d:66:a3:26:dc:e7:
         a7:8d:0d:e4:99:82:fd:ab:59:95:bf:d8:e7:58:be:e5:dc:23:
         c6:87:4d:5a:61:cc:b1:2c:44:c6:22:69:99:19:e5:df:a7:05:
         e1:83:bb:45:a8:25:04:ed:45:49:e7:dd:f9:74:ed:d9:1b:85:
         4d:17:e7:dd:24:81:28:2d:77:f8:1a:6b:2a:ee:61:56:d2:1b:
         04:01:39:79:fc:70:12:25:88:79:91:d5:c4:d7:cf:c9:42:89:
         96:b7:59:1d:93:94:02:3a:24:58:f9:b2:92:f5:dd:d8:0b:1e:
         af:3a:ce:43:d3:91:24:1a:46:78:5b:c9:3a:7b:bb:1f:7a:f3:
         1b:ea:75:98:4c:93:15:20:a5:2a:87:ed:22:0c:04:9c:77:a1:
         f6:23:00:d2:2a:52:f3:bc:26:94:47:5f:89:94:65:b1:6f:c1:
         2a:a9:4b:ec:7a:3c:d4:80:d9:b9:73:18:b3:d8:14:08:9c:7d:
         a4:63:66:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 16:39:42 2025 by rpki-client