This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/891d3c30-95dc-4b72-ae1b-ad1e98b0e179/1/55E79C1D60B12E58D121B265CA67C0BD60D4CF92.mft
File:                     55E79C1D60B12E58D121B265CA67C0BD60D4CF92.mft (raw, json)
Hash identifier:          wSSRmCzIhVLg9LmPMip6ZEsGyyNybHaFnlGzGESMla4=
Subject key identifier:   05:02:B1:E7:77:FE:80:D0:C1:00:34:10:CC:03:04:F8:F1:11:57:4A
Authority key identifier: 55:E7:9C:1D:60:B1:2E:58:D1:21:B2:65:CA:67:C0:BD:60:D4:CF:92
Certificate issuer:       /CN=55E79C1D60B12E58D121B265CA67C0BD60D4CF92
Certificate serial:       64160BB87A77886A162D9820AC75F89CDACFC904
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/0/55E79C1D60B12E58D121B265CA67C0BD60D4CF92.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/891d3c30-95dc-4b72-ae1b-ad1e98b0e179/1/55E79C1D60B12E58D121B265CA67C0BD60D4CF92.mft
Manifest number:          0529
Signing time:             Sat 06 Dec 2025 11:02:24 +0000
Manifest this update:     Sat 06 Dec 2025 10:57:24 +0000
Manifest next update:     Tue 09 Dec 2025 18:30:24 +0000
Files and hashes:         1: 55E79C1D60B12E58D121B265CA67C0BD60D4CF92.crl (hash: 5gz61NFNLKI4PFVm5va6NKp0zYIm98F5qXtCChihiM0=)
                          2: 3231322e3131372e34382e302f32302d3234203d3e203538333736.roa (hash: aezyzCcGyqe7zpkvtIU/eZ/H5lzYV15JrdWQKNqGiws=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/891d3c30-95dc-4b72-ae1b-ad1e98b0e179/1/55E79C1D60B12E58D121B265CA67C0BD60D4CF92.crl
                          rsync://repo-rpki.idnic.net/repo/891d3c30-95dc-4b72-ae1b-ad1e98b0e179/1/55E79C1D60B12E58D121B265CA67C0BD60D4CF92.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/0/55E79C1D60B12E58D121B265CA67C0BD60D4CF92.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/0/12345F115AC4B62A51F5274C54C81E86463BD0BA.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/0/12345F115AC4B62A51F5274C54C81E86463BD0BA.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/EjRfEVrEtipR9SdMVMgehkY70Lo.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 08 Dec 2025 19:40:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:16:0b:b8:7a:77:88:6a:16:2d:98:20:ac:75:f8:9c:da:cf:c9:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55E79C1D60B12E58D121B265CA67C0BD60D4CF92
        Validity
            Not Before: Dec  6 10:57:24 2025 GMT
            Not After : Dec  9 18:30:24 2025 GMT
        Subject: CN=0502B1E777FE80D0C1003410CC0304F8F111574A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:8e:94:30:53:46:32:2e:6f:99:e2:ad:32:6a:
                    8d:eb:e7:f0:bc:51:52:8a:60:b8:b7:56:cb:62:45:
                    c6:0f:67:33:9d:2f:57:c7:7d:e4:7e:82:19:54:37:
                    35:d5:bd:ce:b6:f3:16:75:f3:e2:c2:3e:9c:ea:c4:
                    7a:1a:9c:07:68:d6:79:23:21:f1:da:1a:3a:eb:7f:
                    7a:05:24:88:83:ff:ef:41:45:df:5b:de:87:ce:1d:
                    1d:11:21:ae:ee:d5:2a:dd:14:b2:b9:34:92:8f:1c:
                    b9:22:73:1a:4e:16:4d:2e:27:35:be:a9:01:45:85:
                    45:b3:19:b7:43:30:89:4e:a2:95:8a:7b:e5:d7:df:
                    05:1c:f2:22:52:1e:fe:7c:04:43:3a:df:a7:68:9f:
                    bd:7d:f1:9d:f6:c6:cb:38:a5:a4:28:7d:e9:64:8b:
                    d4:77:92:a4:80:09:31:a2:9b:06:07:88:5d:a4:ff:
                    38:b6:8c:67:52:e2:2d:d7:ec:b2:63:d8:8e:96:84:
                    cd:ba:29:6a:da:1d:1a:f5:6b:51:55:50:24:e9:ec:
                    90:f6:c8:92:18:2d:5d:f7:60:2f:a4:7c:98:71:fa:
                    a1:da:9d:d6:9c:c7:14:94:d3:78:8b:de:ed:18:08:
                    28:7c:1c:f5:73:74:c3:b6:31:f2:e3:51:5f:63:9e:
                    75:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:02:B1:E7:77:FE:80:D0:C1:00:34:10:CC:03:04:F8:F1:11:57:4A
            X509v3 Authority Key Identifier:
                keyid:55:E7:9C:1D:60:B1:2E:58:D1:21:B2:65:CA:67:C0:BD:60:D4:CF:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/891d3c30-95dc-4b72-ae1b-ad1e98b0e179/1/55E79C1D60B12E58D121B265CA67C0BD60D4CF92.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/0/55E79C1D60B12E58D121B265CA67C0BD60D4CF92.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/891d3c30-95dc-4b72-ae1b-ad1e98b0e179/1/55E79C1D60B12E58D121B265CA67C0BD60D4CF92.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:cc:1c:ce:0f:ac:40:64:2d:f9:b0:0e:f1:bd:a2:f6:2a:93:
         2c:49:10:24:72:1e:7a:d4:44:49:52:4a:2e:79:55:e6:13:f2:
         e0:cf:90:48:38:dd:fb:52:3e:89:b4:a6:e0:76:4e:b4:36:5e:
         d0:6c:f9:11:db:0c:7d:2d:91:b6:bc:c6:8f:bf:37:0c:c6:61:
         fd:cf:e2:50:b4:cf:90:21:a0:29:17:94:05:71:b7:0a:cb:09:
         ca:ae:73:3d:1d:96:1b:ed:21:cc:d0:03:08:54:6d:3d:e3:53:
         92:10:94:29:e4:5b:90:fb:6f:57:ce:f7:0e:d0:35:5f:9d:60:
         c3:fa:a7:cd:3a:f1:09:53:73:81:b2:8f:5c:48:b9:03:54:a1:
         a5:82:9b:65:4a:7a:b9:ad:53:db:ce:1b:51:de:12:a0:e3:14:
         54:55:a5:cf:27:47:af:b8:6a:7e:ca:a8:3e:01:46:a3:a4:23:
         71:94:91:41:d1:53:98:52:a1:72:4c:54:58:6e:3c:43:63:df:
         92:32:22:8d:42:07:6f:3d:fa:5a:dc:49:ae:f2:64:5c:9f:15:
         fd:b0:a8:e5:de:ce:3b:c5:cd:c6:e0:49:7a:db:78:50:94:e3:
         cd:ce:82:72:3f:a0:cc:0b:3b:b9:e9:e3:92:33:62:09:22:1f:
         59:b9:34:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 07:48:18 2025 by rpki-client