This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/32a98c8b-cad9-49e1-b178-1daf3b62ef59/0/F520C5AEC051FBD03954D15F7A52EAB852DC4D63.mft
File:                     F520C5AEC051FBD03954D15F7A52EAB852DC4D63.mft (raw, json)
Hash identifier:          RBMiLTU245nBMu0OjJDI6GiujelHSV8HBpPjWwXKxRU=
Subject key identifier:   5B:83:FF:54:77:5E:63:54:2A:53:61:77:5D:BE:97:A8:95:E5:EC:34
Authority key identifier: F5:20:C5:AE:C0:51:FB:D0:39:54:D1:5F:7A:52:EA:B8:52:DC:4D:63
Certificate issuer:       /CN=F520C5AEC051FBD03954D15F7A52EAB852DC4D63
Certificate serial:       2526D791B819337225D9A32757D28ADDDBCE9DBD
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F520C5AEC051FBD03954D15F7A52EAB852DC4D63.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/32a98c8b-cad9-49e1-b178-1daf3b62ef59/0/F520C5AEC051FBD03954D15F7A52EAB852DC4D63.mft
Manifest number:          052B
Signing time:             Sat 06 Dec 2025 05:40:47 +0000
Manifest this update:     Sat 06 Dec 2025 05:35:47 +0000
Manifest next update:     Tue 09 Dec 2025 13:51:47 +0000
Files and hashes:         1: F520C5AEC051FBD03954D15F7A52EAB852DC4D63.crl (hash: gTcOKdC/WZEyQYcrkC6+Y2v79aMO9unWDAN7TWDy6WE=)
                          2: 3130332e3134322e3230302e302f32332d3234203d3e20313339333739.roa (hash: CW38hcQKuGx3OYMIBYq8S0wTy4MYcrKf3ZrGBJO/Jz8=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/32a98c8b-cad9-49e1-b178-1daf3b62ef59/0/F520C5AEC051FBD03954D15F7A52EAB852DC4D63.crl
                          rsync://repo-rpki.idnic.net/repo/32a98c8b-cad9-49e1-b178-1daf3b62ef59/0/F520C5AEC051FBD03954D15F7A52EAB852DC4D63.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F520C5AEC051FBD03954D15F7A52EAB852DC4D63.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 09 Dec 2025 13:51:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:26:d7:91:b8:19:33:72:25:d9:a3:27:57:d2:8a:dd:db:ce:9d:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F520C5AEC051FBD03954D15F7A52EAB852DC4D63
        Validity
            Not Before: Dec  6 05:35:47 2025 GMT
            Not After : Dec  9 13:51:47 2025 GMT
        Subject: CN=5B83FF54775E63542A5361775DBE97A895E5EC34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:93:b1:54:6b:99:f7:5a:74:0d:6c:00:8a:41:
                    f2:18:22:0d:74:e6:3d:f1:4a:77:16:00:c3:50:17:
                    9b:97:1c:ab:41:53:5e:b3:de:41:df:ad:e3:04:f2:
                    5e:d5:a4:76:f8:4e:c7:84:91:9f:8b:c7:2f:68:0c:
                    8e:d2:e6:be:36:0d:0a:58:b4:da:a6:25:06:9f:86:
                    3f:ca:6a:83:3d:06:14:ba:fe:75:d7:88:72:bd:b3:
                    27:f1:cf:a4:f3:de:4a:e4:d0:18:0a:76:a2:db:6c:
                    be:60:ce:21:b7:c5:a2:a5:c6:45:a5:0e:5b:4d:3d:
                    4d:6f:a8:27:12:5a:aa:b1:44:48:e0:38:b4:0f:a8:
                    2c:5f:9b:83:b2:7f:85:45:07:93:65:86:ab:3d:f4:
                    2e:80:c4:04:d3:58:91:48:e9:5e:67:ce:49:f0:d1:
                    a2:c9:64:73:f5:f5:f7:1d:a1:2b:e9:99:9a:88:94:
                    d9:64:9a:fb:e2:94:cd:e4:4e:6d:d0:88:d1:c1:43:
                    3d:54:54:42:01:8f:cc:27:0f:6c:4b:a0:68:e0:07:
                    f9:ee:a0:78:d9:b6:b6:e5:75:3d:fb:e6:68:98:02:
                    e2:e3:81:ef:14:ef:65:fe:09:b9:5f:c8:7e:ba:87:
                    77:0d:07:ec:18:43:d4:ce:ae:4b:e3:37:9a:4d:5d:
                    8a:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:83:FF:54:77:5E:63:54:2A:53:61:77:5D:BE:97:A8:95:E5:EC:34
            X509v3 Authority Key Identifier:
                keyid:F5:20:C5:AE:C0:51:FB:D0:39:54:D1:5F:7A:52:EA:B8:52:DC:4D:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/32a98c8b-cad9-49e1-b178-1daf3b62ef59/0/F520C5AEC051FBD03954D15F7A52EAB852DC4D63.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F520C5AEC051FBD03954D15F7A52EAB852DC4D63.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/32a98c8b-cad9-49e1-b178-1daf3b62ef59/0/F520C5AEC051FBD03954D15F7A52EAB852DC4D63.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:f9:7b:0b:b5:bf:07:78:87:6d:de:57:fe:5b:3f:6e:b3:a7:
         d3:d5:af:c7:63:8e:d1:28:e6:4f:84:00:02:6e:22:6e:fb:4b:
         4f:a0:57:ca:96:b5:79:ac:d7:ac:38:f5:9d:39:e9:c4:0f:36:
         5d:58:df:0f:d1:54:3b:82:22:99:d5:f7:82:56:c0:6d:16:cf:
         ad:74:c6:b1:f8:95:ce:3d:65:b7:2b:8b:fa:98:e4:7e:42:4d:
         94:7d:71:38:0c:07:2b:6f:ba:98:66:be:65:7e:14:c1:2f:75:
         97:2e:17:6e:bb:dc:1c:6c:af:99:ce:52:69:d9:60:4c:ac:b8:
         24:cf:c9:f8:46:14:82:b2:45:99:30:20:f9:be:04:e7:d1:b7:
         24:87:f3:97:f2:aa:c1:da:53:23:3a:53:0b:43:17:3a:c9:16:
         e8:d9:43:db:ba:df:50:b2:04:e5:42:ef:5b:37:f3:1d:30:78:
         b8:8d:3f:7a:d4:d9:db:6f:bf:46:1c:f0:a4:95:b3:81:3a:55:
         e5:0b:dd:e4:d4:99:23:37:d3:46:42:53:52:0d:f2:e6:a9:e8:
         7a:50:89:d7:c8:f8:34:39:b0:8a:09:54:87:4d:ea:87:0b:b3:
         31:50:e3:0b:34:08:c5:ec:d5:6f:92:45:99:3d:3b:91:ad:06:
         fc:bf:9a:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 03:36:11 2025 by rpki-client