This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/fe7cc976-69f6-4db8-a7ab-856a2bb8eafe/0/54A1848904113F647F5C294B41B7D143112C7137.mft
File:                     54A1848904113F647F5C294B41B7D143112C7137.mft (raw, json)
Hash identifier:          0l15XAcGps8W+6prVeRc23YfPGS3e1aX0C6lygBknSU=
Subject key identifier:   3B:7A:AB:89:74:5A:42:19:DE:6B:71:98:BF:CF:8D:28:6A:74:A0:F8
Authority key identifier: 54:A1:84:89:04:11:3F:64:7F:5C:29:4B:41:B7:D1:43:11:2C:71:37
Certificate issuer:       /CN=54A1848904113F647F5C294B41B7D143112C7137
Certificate serial:       75397C0556D6FCABDC8CC2124B1C97BCF1B1B0D3
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/54A1848904113F647F5C294B41B7D143112C7137.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/fe7cc976-69f6-4db8-a7ab-856a2bb8eafe/0/54A1848904113F647F5C294B41B7D143112C7137.mft
Manifest number:          027E
Signing time:             Wed 10 Dec 2025 18:41:10 +0000
Manifest this update:     Wed 10 Dec 2025 18:36:10 +0000
Manifest next update:     Sun 14 Dec 2025 01:47:10 +0000
Files and hashes:         1: 3130332e3132372e3136382e302f32332d3234203d3e203435323837.roa (hash: 0nIrLmzw2yFdEt0E0nHpohk06VMGMx5xfHHQtXENJ0s=)
                          2: 54A1848904113F647F5C294B41B7D143112C7137.crl (hash: niJLKZJdsSDT9Kk6ToY3HRVSTSaJYahU3Yg9pYqCKrE=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/fe7cc976-69f6-4db8-a7ab-856a2bb8eafe/0/54A1848904113F647F5C294B41B7D143112C7137.crl
                          rsync://repo-rpki.idnic.net/repo/fe7cc976-69f6-4db8-a7ab-856a2bb8eafe/0/54A1848904113F647F5C294B41B7D143112C7137.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/54A1848904113F647F5C294B41B7D143112C7137.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Dec 2025 01:47:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:39:7c:05:56:d6:fc:ab:dc:8c:c2:12:4b:1c:97:bc:f1:b1:b0:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54A1848904113F647F5C294B41B7D143112C7137
        Validity
            Not Before: Dec 10 18:36:10 2025 GMT
            Not After : Dec 14 01:47:10 2025 GMT
        Subject: CN=3B7AAB89745A4219DE6B7198BFCF8D286A74A0F8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:19:ff:55:5d:4a:13:bd:4a:20:14:19:76:c0:
                    08:cf:e3:9e:40:0d:91:31:a1:31:66:d8:1c:a0:87:
                    33:6f:3f:31:4c:97:6a:72:04:dc:65:a1:ca:e1:73:
                    7c:2a:05:ca:54:6d:5a:fe:81:0a:6f:5b:b5:e8:60:
                    eb:87:c3:6c:9f:e2:cc:fe:42:45:d5:13:62:19:68:
                    d2:1c:2c:bf:0b:da:b6:f0:9e:3a:76:c2:b7:74:2a:
                    d8:d2:21:45:31:01:e5:c8:a9:f8:f4:f9:24:54:53:
                    36:dd:dc:3b:8f:1f:03:56:ab:58:90:25:57:6a:b5:
                    04:62:72:76:95:44:48:cb:c1:0e:32:68:2d:ae:4f:
                    b1:0a:1a:0d:e9:a2:43:e5:24:36:10:58:e0:f0:4b:
                    b2:79:a5:ed:dd:0e:ff:bd:4e:64:ef:b9:af:b7:84:
                    98:aa:2e:80:23:14:06:97:33:b4:77:5b:c9:8b:0e:
                    55:3c:5c:a7:d6:e3:6d:36:85:68:92:6e:bf:d8:32:
                    fe:7b:b4:ca:7f:4c:1d:c8:e1:66:23:b5:d7:8a:e9:
                    42:94:ee:d5:cc:e5:b5:2d:7f:ce:1f:97:66:77:41:
                    fd:63:ad:c3:12:7b:3b:47:de:2b:97:52:d7:7f:45:
                    28:49:54:23:46:47:1a:cb:a8:1f:2f:74:76:fd:fe:
                    9a:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:7A:AB:89:74:5A:42:19:DE:6B:71:98:BF:CF:8D:28:6A:74:A0:F8
            X509v3 Authority Key Identifier:
                keyid:54:A1:84:89:04:11:3F:64:7F:5C:29:4B:41:B7:D1:43:11:2C:71:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/fe7cc976-69f6-4db8-a7ab-856a2bb8eafe/0/54A1848904113F647F5C294B41B7D143112C7137.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/54A1848904113F647F5C294B41B7D143112C7137.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fe7cc976-69f6-4db8-a7ab-856a2bb8eafe/0/54A1848904113F647F5C294B41B7D143112C7137.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:8f:e3:d1:71:88:83:09:c9:fe:0d:53:08:76:af:c1:72:b8:
         e1:79:15:39:d9:9d:97:87:05:15:c3:71:59:d3:bf:53:1b:76:
         30:dc:91:39:9f:4a:35:3c:5d:58:79:c2:7c:86:66:0a:7d:99:
         18:6c:af:a1:c5:57:a3:e0:dd:ac:d3:4f:71:4d:a5:31:ae:7f:
         3a:6c:ce:83:73:17:da:ac:c7:58:b7:05:d2:20:64:28:6a:65:
         cd:30:cc:24:83:e2:51:53:dd:f0:0f:11:f8:f8:33:b5:94:70:
         8d:97:2d:34:1a:94:69:6e:25:61:07:76:76:7f:ac:39:74:b8:
         ac:4b:5c:5c:e7:c6:4b:2b:23:bd:4b:1e:f8:0e:2a:ae:b8:5d:
         8f:a8:cf:52:b5:0f:2e:b1:1f:1f:4e:49:80:d6:49:63:c2:8c:
         d4:c1:13:a6:15:ac:df:e2:83:00:f0:b6:0a:01:b7:a9:4d:27:
         fa:41:4f:45:e9:e0:d4:38:f9:fe:a4:f4:9d:80:74:5f:e8:af:
         e0:b1:37:03:c5:be:57:9a:f2:00:9b:09:c1:fd:de:db:d2:7a:
         92:41:2f:0a:4e:0a:01:61:5f:c9:88:c0:3c:7e:d0:93:5d:93:
         37:39:11:aa:92:64:87:40:76:61:72:a7:31:96:ae:7c:85:ee:
         4a:b3:95:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 12 08:04:04 2025 by rpki-client