This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/35a20077-fc53-43a3-bda7-f39956d9926d/0/5BB7E8A3ABF6DF6D46C3D5F91EC3B77870CE6C61.mft
File:                     5BB7E8A3ABF6DF6D46C3D5F91EC3B77870CE6C61.mft (raw, json)
Hash identifier:          /SUWkr+zgKivCJAnCoV3XH+44aMoG7Y0yiJDKSYZ9xU=
Subject key identifier:   79:95:75:6D:E4:AF:04:C3:50:C5:6C:3E:31:92:74:39:E1:DB:67:9B
Authority key identifier: 5B:B7:E8:A3:AB:F6:DF:6D:46:C3:D5:F9:1E:C3:B7:78:70:CE:6C:61
Certificate issuer:       /CN=5BB7E8A3ABF6DF6D46C3D5F91EC3B77870CE6C61
Certificate serial:       2B1A8676626CAD72C7BA14539AFDB83A06F59431
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5BB7E8A3ABF6DF6D46C3D5F91EC3B77870CE6C61.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/35a20077-fc53-43a3-bda7-f39956d9926d/0/5BB7E8A3ABF6DF6D46C3D5F91EC3B77870CE6C61.mft
Manifest number:          EF
Signing time:             Fri 05 Dec 2025 14:20:42 +0000
Manifest this update:     Fri 05 Dec 2025 14:15:42 +0000
Manifest next update:     Mon 08 Dec 2025 22:39:42 +0000
Files and hashes:         1: 5BB7E8A3ABF6DF6D46C3D5F91EC3B77870CE6C61.crl (hash: zE3+ghqQzH/AjD93rTirSRhdN5KO7BzbQzKnyjgz58w=)
                          2: 3136302e32322e37302e302f32332d3234203d3e203538333831.roa (hash: FO3pGbtDCey282ifjhO/l/kBiiy065aX3qH0ZWB4XyM=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/35a20077-fc53-43a3-bda7-f39956d9926d/0/5BB7E8A3ABF6DF6D46C3D5F91EC3B77870CE6C61.crl
                          rsync://repo-rpki.idnic.net/repo/35a20077-fc53-43a3-bda7-f39956d9926d/0/5BB7E8A3ABF6DF6D46C3D5F91EC3B77870CE6C61.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5BB7E8A3ABF6DF6D46C3D5F91EC3B77870CE6C61.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 08 Dec 2025 22:39:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:1a:86:76:62:6c:ad:72:c7:ba:14:53:9a:fd:b8:3a:06:f5:94:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5BB7E8A3ABF6DF6D46C3D5F91EC3B77870CE6C61
        Validity
            Not Before: Dec  5 14:15:42 2025 GMT
            Not After : Dec  8 22:39:42 2025 GMT
        Subject: CN=7995756DE4AF04C350C56C3E31927439E1DB679B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:f4:08:86:04:9a:92:37:9c:d4:46:ea:a3:50:
                    75:00:f7:2f:9b:a8:c8:4b:f2:94:db:ed:6a:ba:9f:
                    f5:c0:a9:a1:00:f2:b3:f4:1e:91:76:ea:7c:2c:5c:
                    31:93:3d:9a:50:72:b7:03:b3:fd:00:37:3d:4b:8d:
                    87:50:d7:39:f9:e4:5f:88:81:b8:de:91:90:80:16:
                    00:05:03:c6:82:7d:3d:5d:e4:57:ef:01:74:9d:fd:
                    49:a9:c4:07:5a:c1:ba:ce:f3:f7:7d:32:c1:c7:91:
                    01:c9:2f:86:e1:91:66:0d:63:0e:90:0f:95:d0:bd:
                    a1:8b:f7:66:88:dd:27:c0:2a:8d:59:4a:fe:b5:56:
                    97:71:91:83:16:2e:06:94:76:a7:33:92:c1:7e:00:
                    d7:67:70:a5:40:39:8b:ba:b7:e3:13:d0:9e:17:35:
                    b9:41:48:dc:3f:91:80:14:7b:d0:af:f0:c1:cb:f6:
                    93:f3:ea:a6:9f:f2:01:88:3a:c3:d2:fa:b2:4a:e0:
                    1e:03:4e:1f:6e:85:63:53:73:cd:20:46:bf:ee:26:
                    95:24:20:5f:db:74:0e:09:2f:e8:d4:0e:23:41:2d:
                    13:10:0b:a6:47:74:58:a4:e4:3c:45:6f:f4:24:06:
                    f7:5e:8a:3c:ac:d0:b3:21:2a:3a:cf:a5:db:bf:cb:
                    57:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:95:75:6D:E4:AF:04:C3:50:C5:6C:3E:31:92:74:39:E1:DB:67:9B
            X509v3 Authority Key Identifier:
                keyid:5B:B7:E8:A3:AB:F6:DF:6D:46:C3:D5:F9:1E:C3:B7:78:70:CE:6C:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/35a20077-fc53-43a3-bda7-f39956d9926d/0/5BB7E8A3ABF6DF6D46C3D5F91EC3B77870CE6C61.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5BB7E8A3ABF6DF6D46C3D5F91EC3B77870CE6C61.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/35a20077-fc53-43a3-bda7-f39956d9926d/0/5BB7E8A3ABF6DF6D46C3D5F91EC3B77870CE6C61.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:38:c5:6c:59:e5:65:72:63:21:bb:92:a1:d7:5a:eb:a3:10:
         04:a0:c6:73:00:a0:67:34:ce:c4:6f:8d:b7:3c:5b:7a:9a:cd:
         01:ad:50:40:b8:02:88:4d:1d:e0:23:96:a9:92:4b:1e:27:cf:
         a7:59:f6:18:de:a2:19:e7:0f:95:13:09:2c:54:9e:15:93:2b:
         67:8c:24:f6:80:6c:8b:ed:a3:33:d3:37:bf:8f:da:cf:b2:74:
         8f:84:f5:57:7e:c8:76:2c:24:8c:b7:1d:85:64:7b:e0:70:df:
         d9:ee:f6:bf:06:4b:98:df:18:e6:d4:56:af:ea:34:8b:38:29:
         0d:93:db:40:29:99:0d:fd:e7:55:0a:3c:29:1c:f9:17:4e:54:
         d7:a2:54:df:db:94:e6:08:72:94:9a:fb:98:ff:42:40:70:af:
         22:e9:5b:c5:d4:92:65:74:19:ff:5e:ab:a4:6a:7d:3d:1d:37:
         8e:f2:76:ae:a7:a9:77:16:14:d4:c2:c4:09:37:3e:43:8e:a3:
         84:de:4e:67:cf:28:09:d1:ba:7d:be:25:bc:15:b8:1c:25:3b:
         ea:61:53:b5:db:d0:e2:c6:3c:f4:5a:28:7d:60:2e:ef:09:0f:
         ea:45:08:74:18:63:a6:ac:fa:25:3c:ea:8b:8c:1e:e7:98:67:
         2d:f1:e5:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 07:10:53 2025 by rpki-client