This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/e5682bf2-0634-4782-a5af-eeb919f19143/0/B5766EF969F5BB0A7C76FAA9E53BDE8274E5643E.mft
File:                     B5766EF969F5BB0A7C76FAA9E53BDE8274E5643E.mft (raw, json)
Hash identifier:          62nxMYYIPENbTb9jSP03upCn4DY4R00ZTHFp6wn7HpM=
Subject key identifier:   05:9E:AD:68:3C:12:C1:2E:DF:B3:ED:C4:E3:B2:1F:1F:CA:E5:33:49
Authority key identifier: B5:76:6E:F9:69:F5:BB:0A:7C:76:FA:A9:E5:3B:DE:82:74:E5:64:3E
Certificate issuer:       /CN=B5766EF969F5BB0A7C76FAA9E53BDE8274E5643E
Certificate serial:       530AD712147AE92A8056A3DC7868A42486BA5F8A
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B5766EF969F5BB0A7C76FAA9E53BDE8274E5643E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/e5682bf2-0634-4782-a5af-eeb919f19143/0/B5766EF969F5BB0A7C76FAA9E53BDE8274E5643E.mft
Manifest number:          EB
Signing time:             Sat 20 Dec 2025 17:12:16 +0000
Manifest this update:     Sat 20 Dec 2025 17:07:16 +0000
Manifest next update:     Tue 23 Dec 2025 20:14:16 +0000
Files and hashes:         1: B5766EF969F5BB0A7C76FAA9E53BDE8274E5643E.crl (hash: EEybMJUo9V3VC1IUonIPMHfwBix9yyEzhPKImulY+6E=)
                          2: 3136302e32352e34392e302f32342d3234203d3e20313533303634.roa (hash: +r21VHJKiSG4g/R/zHmUKuYDBebHXXDRqabchwnAdGk=)
                          3: 3136302e32352e34382e302f32332d3233203d3e20313533303634.roa (hash: yPb8vzqBZ4SuTebiaZ2t1hQWOQT5EPzxImNlHmSkYG0=)
                          4: 3136302e32352e34382e302f32342d3234203d3e20313533303634.roa (hash: 5vrTiCPVa+g9uUAZqY7yIFrCeD1zTR9VGB0NveariYc=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/e5682bf2-0634-4782-a5af-eeb919f19143/0/B5766EF969F5BB0A7C76FAA9E53BDE8274E5643E.crl
                          rsync://repo-rpki.idnic.net/repo/e5682bf2-0634-4782-a5af-eeb919f19143/0/B5766EF969F5BB0A7C76FAA9E53BDE8274E5643E.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B5766EF969F5BB0A7C76FAA9E53BDE8274E5643E.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 23 Dec 2025 15:37:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:0a:d7:12:14:7a:e9:2a:80:56:a3:dc:78:68:a4:24:86:ba:5f:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B5766EF969F5BB0A7C76FAA9E53BDE8274E5643E
        Validity
            Not Before: Dec 20 17:07:16 2025 GMT
            Not After : Dec 23 20:14:16 2025 GMT
        Subject: CN=059EAD683C12C12EDFB3EDC4E3B21F1FCAE53349
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:00:0f:74:e2:81:2b:20:d0:e1:bd:21:35:31:
                    6d:33:69:5b:e1:68:61:a1:9f:d8:38:44:39:84:2e:
                    5f:08:38:a5:d6:95:c5:2f:10:e8:0b:fa:11:51:e4:
                    7c:0a:18:e3:cc:38:25:57:58:fa:6b:9e:3d:3d:89:
                    43:5b:f1:7a:ef:17:09:d5:ce:7b:d5:7c:13:65:d8:
                    bd:31:52:76:35:94:08:61:25:e0:34:ce:7c:50:3d:
                    81:04:85:ad:ef:3c:d4:ca:aa:30:ca:b4:43:e5:88:
                    92:1b:ea:1d:9c:72:f9:62:3d:ea:03:21:c6:78:ad:
                    5c:b3:aa:88:ca:c4:12:7b:39:60:00:92:7a:93:ce:
                    90:af:35:84:99:1f:c4:23:ce:25:e5:c8:15:98:12:
                    75:1b:83:d6:9c:93:02:47:2f:64:8d:82:08:e8:79:
                    29:e6:58:71:f4:f0:88:16:40:86:c4:53:c4:d5:55:
                    22:1e:68:c0:82:4d:fb:d5:2d:a6:1e:e2:73:c1:69:
                    9e:96:6b:cf:5c:e9:4f:bc:c2:a5:08:42:98:55:91:
                    bf:e1:d9:be:4c:c0:db:64:46:1c:df:45:2a:74:07:
                    51:19:54:da:69:bf:d4:f8:3d:8c:32:af:7d:b1:ed:
                    b0:df:a0:e6:ff:ad:8e:8d:ff:07:d8:1f:e7:ee:14:
                    85:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:9E:AD:68:3C:12:C1:2E:DF:B3:ED:C4:E3:B2:1F:1F:CA:E5:33:49
            X509v3 Authority Key Identifier:
                keyid:B5:76:6E:F9:69:F5:BB:0A:7C:76:FA:A9:E5:3B:DE:82:74:E5:64:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/e5682bf2-0634-4782-a5af-eeb919f19143/0/B5766EF969F5BB0A7C76FAA9E53BDE8274E5643E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B5766EF969F5BB0A7C76FAA9E53BDE8274E5643E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e5682bf2-0634-4782-a5af-eeb919f19143/0/B5766EF969F5BB0A7C76FAA9E53BDE8274E5643E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:42:0a:8b:9b:d3:10:ec:f7:a8:fc:0b:61:87:8d:9c:92:4a:
         8d:80:47:4e:ef:a8:63:3b:a0:ad:16:6b:f8:1e:4f:20:60:62:
         db:f3:1e:8a:a9:f0:52:9b:76:6b:87:ac:ce:d2:d4:24:f3:58:
         c3:d3:3e:e3:c9:6d:fd:91:a8:d9:6b:43:77:f6:ed:19:a4:37:
         3e:42:ea:de:f9:46:c2:89:ff:da:4a:02:63:2e:e1:9e:d3:83:
         b8:24:09:d8:52:a3:b1:a4:37:60:36:07:30:1b:13:1d:04:58:
         cb:c5:23:1c:64:55:02:2d:87:b4:a4:53:e6:81:a6:20:38:8a:
         90:06:98:ea:31:3a:b6:fd:5b:ad:99:15:62:6b:1a:1d:81:9c:
         58:02:ad:9f:6f:05:e7:41:74:8b:67:9f:87:ac:7c:49:0e:37:
         07:a5:3b:11:0b:90:7c:66:28:b8:58:5c:d0:b2:f5:94:7c:f7:
         73:f7:b6:7e:6f:3e:69:89:b2:de:7a:b4:91:3c:df:ec:f1:63:
         d5:01:7d:8d:0f:92:76:78:b8:42:e4:7a:46:62:25:a4:94:38:
         b9:1f:32:28:5f:69:15:2e:93:77:52:27:ad:34:87:ab:de:7b:
         59:25:65:bb:a4:d8:34:84:69:66:c1:5c:7b:4b:fc:3f:f4:fd:
         66:89:21:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 04:23:40 2025 by rpki-client