This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/ac0b39e2-687b-4614-809f-73672ea212cf/0/F54362AD2B6B191CB7D37B54DCD2468426E8BA98.mft
File:                     F54362AD2B6B191CB7D37B54DCD2468426E8BA98.mft (raw, json)
Hash identifier:          1YbtWxIU9y4MmdazXdi1tbaLci98MuC0Bv7lmOtUKKk=
Subject key identifier:   EB:61:EF:0F:7F:DB:50:5B:54:2F:30:42:7A:73:F6:98:CC:C3:A0:1F
Authority key identifier: F5:43:62:AD:2B:6B:19:1C:B7:D3:7B:54:DC:D2:46:84:26:E8:BA:98
Certificate issuer:       /CN=F54362AD2B6B191CB7D37B54DCD2468426E8BA98
Certificate serial:       484D600C51BB31A3961C3766F9431AD2AA1684D5
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F54362AD2B6B191CB7D37B54DCD2468426E8BA98.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/ac0b39e2-687b-4614-809f-73672ea212cf/0/F54362AD2B6B191CB7D37B54DCD2468426E8BA98.mft
Manifest number:          0537
Signing time:             Fri 05 Dec 2025 13:50:00 +0000
Manifest this update:     Fri 05 Dec 2025 13:45:00 +0000
Manifest next update:     Mon 08 Dec 2025 23:02:00 +0000
Files and hashes:         1: 3130332e3134332e3137302e302f32332d3233203d3e20313339343030.roa (hash: s3woNilAqQ5e2dgXjfA4LkNTSDClHTfmkA54qmgHa2s=)
                          2: F54362AD2B6B191CB7D37B54DCD2468426E8BA98.crl (hash: +GIseuK4vDOZsJTV6ks0i4Kp0VGSWxpUR/z9/N37e24=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/ac0b39e2-687b-4614-809f-73672ea212cf/0/F54362AD2B6B191CB7D37B54DCD2468426E8BA98.crl
                          rsync://repo-rpki.idnic.net/repo/ac0b39e2-687b-4614-809f-73672ea212cf/0/F54362AD2B6B191CB7D37B54DCD2468426E8BA98.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F54362AD2B6B191CB7D37B54DCD2468426E8BA98.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 08 Dec 2025 23:02:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:4d:60:0c:51:bb:31:a3:96:1c:37:66:f9:43:1a:d2:aa:16:84:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F54362AD2B6B191CB7D37B54DCD2468426E8BA98
        Validity
            Not Before: Dec  5 13:45:00 2025 GMT
            Not After : Dec  8 23:02:00 2025 GMT
        Subject: CN=EB61EF0F7FDB505B542F30427A73F698CCC3A01F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:cc:71:a9:25:c5:c0:00:41:ed:5d:75:3e:85:
                    fe:af:e5:77:c5:b1:87:04:08:42:1b:58:ff:10:d6:
                    cc:be:ce:9e:1d:93:3a:8e:fd:dd:f5:59:dc:de:59:
                    e3:5e:ef:b9:d6:0b:9f:03:dc:19:84:2c:9e:ab:cf:
                    d9:94:d0:7d:7d:58:4a:c7:47:bc:ce:94:2f:7b:c2:
                    15:ae:3f:10:cb:41:42:67:7c:fe:02:8a:4a:19:11:
                    db:08:5c:22:11:02:91:ac:c1:11:83:98:46:9b:25:
                    48:9d:00:dd:86:09:56:9c:57:e5:cb:27:a7:22:a7:
                    13:49:21:cf:da:43:3b:5f:0c:fe:22:b7:ec:01:a1:
                    c7:f6:7f:9e:28:6c:64:0c:fd:35:4a:39:2f:a7:e3:
                    fb:61:9d:6f:1e:a7:78:2d:2e:72:c2:af:df:86:62:
                    78:d0:a4:ba:ff:d4:c4:a1:d0:bb:c4:c5:c1:61:d5:
                    73:e2:ba:7f:1a:ec:22:2a:21:45:8e:99:cc:d0:81:
                    58:eb:43:d7:c9:b4:bc:91:73:6f:3e:40:95:a2:00:
                    0b:88:6c:c3:52:96:30:37:fb:66:6d:3b:53:f6:c2:
                    d4:2c:dd:26:3f:1f:a1:73:1e:21:64:2c:b8:43:d6:
                    7f:96:5e:6c:21:30:47:59:58:e7:8c:bc:72:30:61:
                    ed:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:61:EF:0F:7F:DB:50:5B:54:2F:30:42:7A:73:F6:98:CC:C3:A0:1F
            X509v3 Authority Key Identifier:
                keyid:F5:43:62:AD:2B:6B:19:1C:B7:D3:7B:54:DC:D2:46:84:26:E8:BA:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/ac0b39e2-687b-4614-809f-73672ea212cf/0/F54362AD2B6B191CB7D37B54DCD2468426E8BA98.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F54362AD2B6B191CB7D37B54DCD2468426E8BA98.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ac0b39e2-687b-4614-809f-73672ea212cf/0/F54362AD2B6B191CB7D37B54DCD2468426E8BA98.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:92:67:f1:aa:12:e9:b7:42:ba:99:8e:6f:54:03:27:60:2c:
         7e:0e:13:5b:69:3a:11:a3:84:45:55:1c:68:69:95:0a:d3:22:
         38:39:b7:ef:6c:0d:d9:2b:ec:2d:fb:22:1d:55:b7:5f:a2:68:
         29:c2:22:92:b9:e1:84:6a:43:d4:e6:63:b8:2d:9e:2b:ce:6f:
         9c:8c:37:6c:bf:a3:db:de:a5:b1:8c:63:36:67:49:b1:6c:3d:
         c4:7e:c3:ad:39:a4:50:18:69:02:18:f6:d7:b5:71:da:ae:c4:
         cf:b1:e8:1c:03:39:57:db:bb:f8:1b:62:e3:d2:10:1f:4a:88:
         11:5a:25:74:fb:ce:bd:92:42:b4:29:ea:e4:cf:e2:54:69:80:
         3c:d5:0c:4d:29:7a:58:72:73:5d:49:11:ac:47:7c:2b:03:5b:
         87:7a:42:c1:61:5a:a6:4d:c2:7d:d7:c6:15:f7:a4:b3:23:13:
         4f:33:02:3e:7e:f5:05:d8:1c:23:0f:f2:be:af:b2:f8:f3:ba:
         d9:26:72:d5:4f:51:4b:b2:f8:22:dc:8d:70:be:09:41:b1:cc:
         9e:fa:7b:5d:00:ca:cb:e5:2f:a1:a8:6c:71:04:9e:ac:c6:27:
         44:24:eb:73:10:c8:62:8d:b9:4d:61:27:c5:e6:33:d7:55:8f:
         d8:5b:fd:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 05:58:57 2025 by rpki-client