This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/f735e15f-d449-46d8-be0e-85e389bedc5e/0/542851974B72056B3D43792A5ED83E94DA8583CF.mft
File:                     542851974B72056B3D43792A5ED83E94DA8583CF.mft (raw, json)
Hash identifier:          D/XG70K4NAf3SrFXqrMgKJBWwve8VnuFtHTOkZJ2E+U=
Subject key identifier:   EB:A7:A6:63:01:F8:BB:86:8D:4E:E9:78:E6:3E:7D:1A:2E:75:F5:A2
Authority key identifier: 54:28:51:97:4B:72:05:6B:3D:43:79:2A:5E:D8:3E:94:DA:85:83:CF
Certificate issuer:       /CN=542851974B72056B3D43792A5ED83E94DA8583CF
Certificate serial:       66523EA41F67AF3B9C4698B85591715C0984A946
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/542851974B72056B3D43792A5ED83E94DA8583CF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/f735e15f-d449-46d8-be0e-85e389bedc5e/0/542851974B72056B3D43792A5ED83E94DA8583CF.mft
Manifest number:          0164
Signing time:             Wed 17 Dec 2025 00:20:49 +0000
Manifest this update:     Wed 17 Dec 2025 00:15:49 +0000
Manifest next update:     Sat 20 Dec 2025 07:48:49 +0000
Files and hashes:         1: 542851974B72056B3D43792A5ED83E94DA8583CF.crl (hash: zQpQESJ4UwCbXF6iHbkB/NFwr6VgU0OpNIdJ+1SkCJc=)
                          2: 3130332e3137372e36302e302f32342d3234203d3e20313437313432.roa (hash: 698jR3jKZ8pHoaDchjQqCam2SnsQK52skK3UhMYukls=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/f735e15f-d449-46d8-be0e-85e389bedc5e/0/542851974B72056B3D43792A5ED83E94DA8583CF.crl
                          rsync://repo-rpki.idnic.net/repo/f735e15f-d449-46d8-be0e-85e389bedc5e/0/542851974B72056B3D43792A5ED83E94DA8583CF.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/542851974B72056B3D43792A5ED83E94DA8583CF.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Dec 2025 07:48:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:52:3e:a4:1f:67:af:3b:9c:46:98:b8:55:91:71:5c:09:84:a9:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=542851974B72056B3D43792A5ED83E94DA8583CF
        Validity
            Not Before: Dec 17 00:15:49 2025 GMT
            Not After : Dec 20 07:48:49 2025 GMT
        Subject: CN=EBA7A66301F8BB868D4EE978E63E7D1A2E75F5A2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:c2:b3:5e:7f:d3:aa:be:90:13:84:f7:2d:59:
                    ff:7f:a0:11:df:1f:4f:89:8d:5f:49:af:c2:53:cf:
                    42:8f:8b:2b:cf:22:9f:b0:5f:23:70:60:6b:80:86:
                    f3:56:c9:9e:3e:3e:24:2d:99:01:5c:46:70:e7:e0:
                    b8:cf:0f:d7:be:6f:0c:e6:b5:f1:90:81:73:00:58:
                    26:6c:cb:53:0b:f0:d0:fc:66:9b:bb:f6:26:dc:28:
                    73:db:61:ca:44:c6:57:dc:9b:d7:b6:b5:6e:e5:53:
                    cc:5c:3b:98:5e:31:33:42:85:3c:dc:f1:a7:e0:36:
                    2e:e6:3a:99:c7:15:87:09:99:46:28:19:a7:59:46:
                    1e:71:75:a6:b5:06:ef:d9:b2:9a:7b:f8:8c:0b:bf:
                    ea:93:55:90:89:b6:fd:41:60:ce:d4:03:b2:ee:e2:
                    26:d0:c7:88:c0:a4:c7:30:4a:8f:05:2c:14:54:d9:
                    9d:cb:5e:57:0e:d4:59:2e:d6:37:57:d4:bf:a3:cc:
                    57:90:a7:b9:06:7a:30:c4:67:f8:a5:d6:e4:21:64:
                    18:e3:14:f7:36:bd:99:87:bd:ab:73:9b:55:8e:1f:
                    a5:01:c6:5c:b0:87:aa:09:b0:e5:a7:53:95:76:e4:
                    d2:50:c4:49:fd:5c:e5:e8:a7:52:c4:c1:28:55:76:
                    21:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:A7:A6:63:01:F8:BB:86:8D:4E:E9:78:E6:3E:7D:1A:2E:75:F5:A2
            X509v3 Authority Key Identifier:
                keyid:54:28:51:97:4B:72:05:6B:3D:43:79:2A:5E:D8:3E:94:DA:85:83:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/f735e15f-d449-46d8-be0e-85e389bedc5e/0/542851974B72056B3D43792A5ED83E94DA8583CF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/542851974B72056B3D43792A5ED83E94DA8583CF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f735e15f-d449-46d8-be0e-85e389bedc5e/0/542851974B72056B3D43792A5ED83E94DA8583CF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:cc:01:af:3a:61:dd:68:9e:87:0c:ea:6b:12:7f:5c:8c:2c:
         e7:33:b3:ef:3e:3e:79:22:e2:fd:df:24:8b:33:2f:a6:81:cc:
         2d:e7:6f:c4:12:7e:ca:c6:b0:c9:b6:2a:c9:7c:26:b5:70:a6:
         44:a6:68:bb:4d:75:25:d1:86:81:fd:47:2a:9b:7a:6b:01:39:
         97:82:62:aa:37:da:d6:86:65:da:b8:b2:34:b6:ee:95:d2:83:
         ce:39:e7:c5:6e:b1:aa:c8:41:23:9b:b0:a0:39:53:eb:cc:29:
         94:73:de:06:c8:cb:62:e6:12:25:18:5f:a7:36:54:ac:78:e2:
         5c:3b:28:0f:eb:3a:1d:2d:ef:85:44:c6:14:e1:47:23:9f:a6:
         fd:35:93:17:bb:58:69:a2:23:fc:3e:e4:1e:0e:c4:a9:39:a8:
         1a:39:cd:5f:78:b8:c7:51:ad:1a:62:93:ae:1a:59:bf:09:85:
         25:2a:e7:db:00:68:eb:d8:38:2d:a5:43:19:4c:fd:08:ae:b2:
         78:87:13:c6:36:9b:6f:95:ab:76:bf:b9:4a:e3:04:25:ac:f9:
         1e:77:99:40:ba:b2:4c:a2:4f:0b:23:ff:1b:89:e5:89:5e:a6:
         31:8d:07:aa:2a:55:f8:22:74:6c:4c:54:f1:a1:18:99:a7:cd:
         ec:36:82:13
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUZlI+pB9nrzucRpi4VZFxXAmEqUYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTQyODUxOTc0QjcyMDU2QjNENDM3OTJBNUVEODNFOTRE
QTg1ODNDRjAeFw0yNTEyMTcwMDE1NDlaFw0yNTEyMjAwNzQ4NDlaMDMxMTAvBgNV
BAMTKEVCQTdBNjYzMDFGOEJCODY4RDRFRTk3OEU2M0U3RDFBMkU3NUY1QTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDwrNef9OqvpAThPctWf9/oBHf
H0+JjV9Jr8JTz0KPiyvPIp+wXyNwYGuAhvNWyZ4+PiQtmQFcRnDn4LjPD9e+bwzm
tfGQgXMAWCZsy1ML8ND8Zpu79ibcKHPbYcpExlfcm9e2tW7lU8xcO5heMTNChTzc
8afgNi7mOpnHFYcJmUYoGadZRh5xdaa1Bu/Zspp7+IwLv+qTVZCJtv1BYM7UA7Lu
4ibQx4jApMcwSo8FLBRU2Z3LXlcO1Fku1jdX1L+jzFeQp7kGejDEZ/il1uQhZBjj
FPc2vZmHvatzm1WOH6UBxlywh6oJsOWnU5V25NJQxEn9XOXop1LEwShVdiFRAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQU66emYwH4u4aNTul45j59Gi519aIwHwYDVR0j
BBgwFoAUVChRl0tyBWs9Q3kqXtg+lNqFg88wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m
NzM1ZTE1Zi1kNDQ5LTQ2ZDgtYmUwZS04NWUzODliZWRjNWUvMC81NDI4NTE5NzRC
NzIwNTZCM0Q0Mzc5MkE1RUQ4M0U5NERBODU4M0NGLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNTQyODUxOTc0QjcyMDU2QjNENDM3OTJBNUVEODNFOTREQTg1
ODNDRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjczNWUxNWYtZDQ0OS00NmQ4LWJl
MGUtODVlMzg5YmVkYzVlLzAvNTQyODUxOTc0QjcyMDU2QjNENDM3OTJBNUVEODNF
OTREQTg1ODNDRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAK3MAa86Yd1onocM6msSf1yMLOczs+8+Pnki
4v3fJIszL6aBzC3nb8QSfsrGsMm2Ksl8JrVwpkSmaLtNdSXRhoH9RyqbemsBOZeC
Yqo32taGZdq4sjS27pXSg84558VusarIQSObsKA5U+vMKZRz3gbIy2LmEiUYX6c2
VKx44lw7KA/rOh0t74VExhThRyOfpv01kxe7WGmiI/w+5B4OxKk5qBo5zV94uMdR
rRpik64aWb8JhSUq59sAaOvYOC2lQxlM/QiusniHE8Y2m2+Vq3a/uUrjBCWs+R53
mUC6skyiTwsj/xuJ5YlepjGNB6oqVfgidGxMVPGhGJmnzew2ghM=
-----END CERTIFICATE-----
Generated at Fri Dec 19 09:46:30 2025 by rpki-client