This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/c64b20d8-591b-4152-9768-9c42b06c2fe2/0/556756B0E211DD262F0D5DC9EC5931EFA74CAC3C.mft
File:                     556756B0E211DD262F0D5DC9EC5931EFA74CAC3C.mft (raw, json)
Hash identifier:          614+pSLNI1Ui4bu6JYipLWEdNjH7lWGtSB6sX68MFbU=
Subject key identifier:   DE:9D:1C:C1:1D:78:28:50:26:65:8C:E7:9D:27:12:4F:EC:15:94:45
Authority key identifier: 55:67:56:B0:E2:11:DD:26:2F:0D:5D:C9:EC:59:31:EF:A7:4C:AC:3C
Certificate issuer:       /CN=556756B0E211DD262F0D5DC9EC5931EFA74CAC3C
Certificate serial:       644EEB5BE0C5AC43D75B445B65E5066BF7CA9429
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/556756B0E211DD262F0D5DC9EC5931EFA74CAC3C.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/c64b20d8-591b-4152-9768-9c42b06c2fe2/0/556756B0E211DD262F0D5DC9EC5931EFA74CAC3C.mft
Manifest number:          01D0
Signing time:             Sat 06 Dec 2025 08:31:25 +0000
Manifest this update:     Sat 06 Dec 2025 08:26:25 +0000
Manifest next update:     Tue 09 Dec 2025 19:44:25 +0000
Files and hashes:         1: 3130332e3132392e342e302f32332d3234203d3e20313335343738.roa (hash: dhNCCntTXF8fPVmBhyc2TID6diy3HmHPisy8tFKfm4Y=)
                          2: 556756B0E211DD262F0D5DC9EC5931EFA74CAC3C.crl (hash: dBiWXpwmvi3Az2vOaCba/jPCKrGmwiOkTWvbTBaNLVA=)
                          3: 3130332e3132392e362e302f32332d3234203d3e20313335343738.roa (hash: 6QeO2YACwb/BDxjV2SdJIfE+RbGnx2SRrYdFwDXs0Lw=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/c64b20d8-591b-4152-9768-9c42b06c2fe2/0/556756B0E211DD262F0D5DC9EC5931EFA74CAC3C.crl
                          rsync://repo-rpki.idnic.net/repo/c64b20d8-591b-4152-9768-9c42b06c2fe2/0/556756B0E211DD262F0D5DC9EC5931EFA74CAC3C.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/556756B0E211DD262F0D5DC9EC5931EFA74CAC3C.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 09 Dec 2025 15:57:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:4e:eb:5b:e0:c5:ac:43:d7:5b:44:5b:65:e5:06:6b:f7:ca:94:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=556756B0E211DD262F0D5DC9EC5931EFA74CAC3C
        Validity
            Not Before: Dec  6 08:26:25 2025 GMT
            Not After : Dec  9 19:44:25 2025 GMT
        Subject: CN=DE9D1CC11D78285026658CE79D27124FEC159445
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:02:ba:cc:53:9d:aa:1a:f9:fc:0f:c9:d0:43:
                    10:d9:d4:e1:b0:d3:2d:55:99:22:0f:86:54:34:1f:
                    15:50:39:e5:7d:f6:cd:f1:1c:b2:4b:c8:62:60:83:
                    cd:bc:ca:51:57:f8:14:b0:22:bb:d8:80:97:b7:c8:
                    9c:12:41:47:70:09:0e:6a:83:32:7c:0d:97:42:fa:
                    fc:2b:8e:07:10:de:7a:c8:bd:40:1a:76:3a:8a:b7:
                    38:d2:2c:23:4b:8e:5a:2d:c4:b4:d7:5f:c7:02:1e:
                    be:cc:0b:6a:71:f2:37:91:55:ac:dd:41:80:c8:34:
                    2f:6e:ad:33:ac:fe:ba:a7:a8:f2:ac:88:eb:7e:4c:
                    51:3a:48:ab:4b:f0:92:f9:2b:6c:10:da:d1:33:64:
                    f4:5c:2a:b9:15:90:bd:a7:e7:1e:80:85:20:de:70:
                    87:c3:0f:71:68:d5:01:e4:c3:b1:0a:9b:88:87:10:
                    46:4d:d6:c1:ff:3e:72:70:27:fe:73:7c:1a:ba:77:
                    f2:f0:11:96:41:e7:6b:f0:6d:f5:a6:51:8a:77:2a:
                    36:1e:1a:e2:c7:fe:31:fb:db:36:13:76:7f:e7:65:
                    a8:d8:07:0b:c3:2d:5f:6f:cd:08:c9:ca:e4:d6:38:
                    e9:31:06:da:90:ea:b3:db:c8:2f:a6:7e:88:be:c4:
                    3c:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:9D:1C:C1:1D:78:28:50:26:65:8C:E7:9D:27:12:4F:EC:15:94:45
            X509v3 Authority Key Identifier:
                keyid:55:67:56:B0:E2:11:DD:26:2F:0D:5D:C9:EC:59:31:EF:A7:4C:AC:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/c64b20d8-591b-4152-9768-9c42b06c2fe2/0/556756B0E211DD262F0D5DC9EC5931EFA74CAC3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/556756B0E211DD262F0D5DC9EC5931EFA74CAC3C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c64b20d8-591b-4152-9768-9c42b06c2fe2/0/556756B0E211DD262F0D5DC9EC5931EFA74CAC3C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c7:a3:15:38:77:7c:24:57:b4:ac:bc:2d:50:56:1f:71:ec:39:
         4f:b2:bb:d3:8b:67:71:3f:b1:c6:74:9e:cf:87:bf:85:a2:d8:
         86:56:32:f3:74:a8:cf:ae:31:32:61:8a:f3:8a:02:e7:b2:01:
         83:8c:be:29:43:67:e2:08:a4:e0:86:14:20:73:ed:d2:a5:d7:
         65:61:ec:f2:bf:63:a9:02:cc:67:aa:ef:2b:94:ec:7e:ac:e4:
         85:39:45:d1:cf:da:51:94:93:11:b5:62:20:ef:b1:b6:dd:ee:
         fb:d1:3f:b6:3c:49:e7:47:8f:b4:1e:c9:44:02:e7:45:aa:e1:
         d5:7a:e1:72:49:78:77:85:43:57:2b:72:b1:d5:6f:0f:92:4c:
         4c:b0:b8:20:b9:6f:d6:a1:aa:18:7b:04:ee:fa:37:b5:68:1b:
         6c:51:19:6f:9b:b6:59:c7:65:5e:41:d0:05:11:76:d7:09:91:
         f0:4d:e0:68:70:44:aa:9c:bf:ff:82:d9:2a:96:e8:12:fa:a3:
         7b:34:24:a3:b2:ac:fd:8f:39:9b:a9:0e:4c:31:99:e8:54:ee:
         0a:6d:fb:7e:68:50:6d:69:79:79:90:82:48:4d:f6:68:56:6f:
         16:a1:1d:2f:ea:e3:74:ba:b5:5a:a8:44:45:37:62:3b:4a:2a:
         1f:85:8c:83
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUZE7rW+DFrEPXW0RbZeUGa/fKlCkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTU2NzU2QjBFMjExREQyNjJGMEQ1REM5RUM1OTMxRUZB
NzRDQUMzQzAeFw0yNTEyMDYwODI2MjVaFw0yNTEyMDkxOTQ0MjVaMDMxMTAvBgNV
BAMTKERFOUQxQ0MxMUQ3ODI4NTAyNjY1OENFNzlEMjcxMjRGRUMxNTk0NDUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3ArrMU52qGvn8D8nQQxDZ1OGw
0y1VmSIPhlQ0HxVQOeV99s3xHLJLyGJgg828ylFX+BSwIrvYgJe3yJwSQUdwCQ5q
gzJ8DZdC+vwrjgcQ3nrIvUAadjqKtzjSLCNLjlotxLTXX8cCHr7MC2px8jeRVazd
QYDINC9urTOs/rqnqPKsiOt+TFE6SKtL8JL5K2wQ2tEzZPRcKrkVkL2n5x6AhSDe
cIfDD3Fo1QHkw7EKm4iHEEZN1sH/PnJwJ/5zfBq6d/LwEZZB52vwbfWmUYp3KjYe
GuLH/jH72zYTdn/nZajYBwvDLV9vzQjJyuTWOOkxBtqQ6rPbyC+mfoi+xDwRAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQU3p0cwR14KFAmZYznnScST+wVlEUwHwYDVR0j
BBgwFoAUVWdWsOIR3SYvDV3J7Fkx76dMrDwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j
NjRiMjBkOC01OTFiLTQxNTItOTc2OC05YzQyYjA2YzJmZTIvMC81NTY3NTZCMEUy
MTFERDI2MkYwRDVEQzlFQzU5MzFFRkE3NENBQzNDLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNTU2NzU2QjBFMjExREQyNjJGMEQ1REM5RUM1OTMxRUZBNzRD
QUMzQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzY0YjIwZDgtNTkxYi00MTUyLTk3
NjgtOWM0MmIwNmMyZmUyLzAvNTU2NzU2QjBFMjExREQyNjJGMEQ1REM5RUM1OTMx
RUZBNzRDQUMzQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAMejFTh3fCRXtKy8LVBWH3HsOU+yu9OLZ3E/
scZ0ns+Hv4Wi2IZWMvN0qM+uMTJhivOKAueyAYOMvilDZ+IIpOCGFCBz7dKl12Vh
7PK/Y6kCzGeq7yuU7H6s5IU5RdHP2lGUkxG1YiDvsbbd7vvRP7Y8SedHj7QeyUQC
50Wq4dV64XJJeHeFQ1crcrHVbw+STEywuCC5b9ahqhh7BO76N7VoG2xRGW+btlnH
ZV5B0AURdtcJkfBN4GhwRKqcv/+C2SqW6BL6o3s0JKOyrP2POZupDkwxmehU7gpt
+35oUG1peXmQgkhN9mhWbxahHS/q43S6tVqoREU3YjtKKh+FjIM=
-----END CERTIFICATE-----
Generated at Sun Dec 7 05:59:23 2025 by rpki-client