This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/26d7ede1-3fd0-4624-bef8-0e73e84994bc/0/5AB2F048BCF9D60D6323A72EF7255F38A81A93BE.mft
File:                     5AB2F048BCF9D60D6323A72EF7255F38A81A93BE.mft (raw, json)
Hash identifier:          hVWARHGbF/Pq0TyBKA38TP0cII6b1el7dvYevckf7yU=
Subject key identifier:   03:A6:A5:9D:5B:C2:A1:8C:0E:3F:ED:A1:03:F4:9D:59:32:B0:A6:B0
Authority key identifier: 5A:B2:F0:48:BC:F9:D6:0D:63:23:A7:2E:F7:25:5F:38:A8:1A:93:BE
Certificate issuer:       /CN=5AB2F048BCF9D60D6323A72EF7255F38A81A93BE
Certificate serial:       21BC09A3C315512F2DFDE48282DC41373AC5EF3F
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5AB2F048BCF9D60D6323A72EF7255F38A81A93BE.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/26d7ede1-3fd0-4624-bef8-0e73e84994bc/0/5AB2F048BCF9D60D6323A72EF7255F38A81A93BE.mft
Manifest number:          04B6
Signing time:             Sat 06 Dec 2025 13:01:24 +0000
Manifest this update:     Sat 06 Dec 2025 12:56:24 +0000
Manifest next update:     Tue 09 Dec 2025 19:53:24 +0000
Files and hashes:         1: 3130332e3135312e33342e302f32342d3234203d3e20313430343133.roa (hash: bZM4rUbr/5eo/XLmWgfcXg1DbTPNYjhGuHArrlKmdos=)
                          2: 323430363a313363303a653a3a2f34382d3438203d3e20313430343133.roa (hash: f4HuOcLxZFUEjT9VvTe4bqIT2DldLAxhqn5BGEuGaVY=)
                          3: 323430363a313363303a663a3a2f34382d3438203d3e20313430343133.roa (hash: 1JMzXaJrugo1xCZjzMePjdBBw5qjt3/pxwhlGnC/exU=)
                          4: 323430363a313363303a3a2f34382d3438203d3e20313430343133.roa (hash: Gz+C+7FnVXoz+0qojAP+rNq+YbCJXPtNpRa9xBnME7I=)
                          5: 323430363a313363303a623a3a2f34382d3438203d3e20313430343133.roa (hash: osu6cgVTsajhQgGRr72GUTVIcDtvbcTR6pfscBo/Vjg=)
                          6: 323430363a313363303a333a3a2f34382d3438203d3e20313430343133.roa (hash: IFLXJKN/cIbd/Oh+HOkULz+7XgZ+889cBvLbuXP+Xf8=)
                          7: 323430363a313363303a373a3a2f34382d3438203d3e20313430343133.roa (hash: k6Z1cqOikqx8t9RPh+24QqZnUDFGexk4c6jfFeIucPQ=)
                          8: 3130332e3135312e33342e302f32332d3233203d3e20313430343133.roa (hash: pWG6S1U7mazV8YnSvTsXbW1HfQiM8AMh4bxaqVSo3rk=)
                          9: 323430363a313363303a613a3a2f34382d3438203d3e20313430343133.roa (hash: E2mbQLtIdlxnYM18Po7s4O6v53R2Qoc6GrMKhL2r4OI=)
                          10: 5AB2F048BCF9D60D6323A72EF7255F38A81A93BE.crl (hash: vyC6XVoMHfg23NI2RWEZFWSYDZcU3kNLZV1iNZrrOnc=)
                          11: 323430363a313363303a363a3a2f34382d3438203d3e20313430343133.roa (hash: tSvzNHHOTLE+PeD8SAArmYqhO7Ztwcuk/62pX8Gu/y0=)
                          12: 323430363a313363303a643a3a2f34382d3438203d3e20313430343133.roa (hash: AHvcTCMLEy/XIp7laYrrKnghYH6iwtgODIRCAU7uthM=)
                          13: 323430363a313363303a343a3a2f34382d3438203d3e20313430343133.roa (hash: hUSefMFAZSv+SA3wPW8iCnypYrFgNGsQ492Jx7YTC9s=)
                          14: 323430363a313363303a383a3a2f34382d3438203d3e20313430343133.roa (hash: f6hlVhcf22KoU870LdZr8ofD9JQqnnfyvKLr6j1Qgic=)
                          15: 323430363a313363303a353a3a2f34382d3438203d3e20313430343133.roa (hash: ONf62+DvPOIB+a7e+YLFywaVigksQeK89X9Q/CSQVX4=)
                          16: 323430363a313363303a633a3a2f34382d3438203d3e20313430343133.roa (hash: SDN3qm6IB8N9HF40taceNvsGv3NpAGXMiVjPo6QgiNc=)
                          17: 323430363a313363303a323a3a2f34382d3438203d3e20313430343133.roa (hash: CHuhT91L4Bx2gvkmrXL92lkeo0HaZ7kmUtg30YZ0MWM=)
                          18: 323430363a313363303a3a2f33322d3332203d3e20313430343133.roa (hash: htuRYgwO+/oesGX5fEx8u0E0zBo0A2TVpj6idfUe6I4=)
                          19: 3130332e3135312e33352e302f32342d3234203d3e20313430343133.roa (hash: EILyPmlWJ7Ald971q91eFzzx7IL4/UbfGOvQ+dEFrSA=)
                          20: 323430363a313363303a313a3a2f34382d3438203d3e20313430343133.roa (hash: tDG6Iti0PLnRCu0mbkQzT0b2dqDqUbKctSFPSn5Mn7g=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/26d7ede1-3fd0-4624-bef8-0e73e84994bc/0/5AB2F048BCF9D60D6323A72EF7255F38A81A93BE.crl
                          rsync://repo-rpki.idnic.net/repo/26d7ede1-3fd0-4624-bef8-0e73e84994bc/0/5AB2F048BCF9D60D6323A72EF7255F38A81A93BE.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5AB2F048BCF9D60D6323A72EF7255F38A81A93BE.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 09 Dec 2025 15:57:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:bc:09:a3:c3:15:51:2f:2d:fd:e4:82:82:dc:41:37:3a:c5:ef:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5AB2F048BCF9D60D6323A72EF7255F38A81A93BE
        Validity
            Not Before: Dec  6 12:56:24 2025 GMT
            Not After : Dec  9 19:53:24 2025 GMT
        Subject: CN=03A6A59D5BC2A18C0E3FEDA103F49D5932B0A6B0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:83:55:06:b9:ea:5f:93:50:79:cc:44:67:dc:
                    06:2d:1c:cd:31:4d:0a:37:41:71:78:5d:5a:6c:78:
                    3d:49:84:1a:9a:d3:4e:86:2c:f5:ff:88:23:17:1a:
                    eb:d6:7e:df:45:9c:de:73:db:4f:93:8a:df:b2:af:
                    45:21:e5:48:45:e0:7d:bb:42:75:b9:19:5e:32:a6:
                    b9:f7:0e:e8:6e:72:ed:ae:b9:25:cf:cb:9f:9a:02:
                    02:97:c9:01:a9:f3:09:1d:76:f3:75:ca:0d:84:27:
                    3a:11:80:23:58:56:22:25:b6:de:4c:81:45:27:18:
                    b6:2b:21:63:84:6a:3b:48:c3:5e:46:dd:d7:9b:a6:
                    8b:71:05:53:23:78:4e:a1:7d:5a:fc:22:f6:9a:f5:
                    17:e1:d1:09:28:4b:aa:fd:c5:47:3e:ba:48:14:f4:
                    2a:f3:1d:3b:37:63:f8:17:8e:ed:cc:9e:dc:60:d8:
                    b1:b6:5b:b3:b1:e9:ec:18:65:72:1c:6e:09:6b:35:
                    21:3a:09:cf:4d:ee:8e:29:1b:22:25:1d:94:a7:07:
                    8c:13:c3:a5:76:79:77:18:7b:64:9f:33:b7:25:b0:
                    de:27:b7:bd:15:ad:18:39:28:1f:c5:c8:99:18:97:
                    11:49:15:23:e7:6d:b2:f3:c6:82:46:e0:0b:67:9a:
                    9d:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:A6:A5:9D:5B:C2:A1:8C:0E:3F:ED:A1:03:F4:9D:59:32:B0:A6:B0
            X509v3 Authority Key Identifier:
                keyid:5A:B2:F0:48:BC:F9:D6:0D:63:23:A7:2E:F7:25:5F:38:A8:1A:93:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/26d7ede1-3fd0-4624-bef8-0e73e84994bc/0/5AB2F048BCF9D60D6323A72EF7255F38A81A93BE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5AB2F048BCF9D60D6323A72EF7255F38A81A93BE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/26d7ede1-3fd0-4624-bef8-0e73e84994bc/0/5AB2F048BCF9D60D6323A72EF7255F38A81A93BE.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:ab:c9:0c:42:8e:da:8d:33:95:87:91:71:1c:25:4d:4c:d6:
         0e:70:85:5f:f7:d3:fb:64:3d:d8:47:a4:92:ec:0e:2f:da:1d:
         4f:29:60:b7:6b:59:7a:78:83:6c:37:e5:58:db:9a:59:88:7a:
         f5:f3:b0:0b:7f:88:67:be:c6:d1:e5:30:16:8d:74:32:7e:5b:
         12:c5:90:7b:be:39:21:57:a4:c3:1f:8e:7f:22:11:83:fb:d4:
         f8:7e:ea:88:d9:20:5b:46:a9:d6:74:3e:96:97:35:f7:69:0e:
         74:cf:7a:77:7d:85:92:5c:e7:fd:98:cf:5c:45:0a:4e:9b:e6:
         a8:57:d9:8d:11:a2:cb:8b:4d:88:4f:9f:2a:0f:20:f9:cd:05:
         28:de:85:15:aa:dd:49:a9:d0:df:1c:5b:75:a0:2b:5c:d5:a8:
         85:d4:2e:3a:06:8b:e7:44:37:2c:f1:f5:76:cb:f9:d5:d6:99:
         7c:bd:71:f0:48:4a:3a:cb:7c:99:e7:de:1c:32:8f:cd:62:02:
         f4:05:21:32:58:ec:52:40:96:b5:ee:44:2f:cb:e1:0e:45:80:
         4f:09:5c:b7:77:cc:f6:36:8c:65:91:bd:1e:09:2b:40:62:e0:
         6b:9d:7a:74:e6:65:5d:a3:a9:62:5e:6b:28:53:2f:f9:15:8a:
         45:9d:e4:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 01:44:40 2025 by rpki-client