This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/c883fe75-91e4-4989-bc5e-6a26082dc334/0/F55642EAEBD83D2B9D92B6DB7987FBE6D36839C6.mft
File:                     F55642EAEBD83D2B9D92B6DB7987FBE6D36839C6.mft (raw, json)
Hash identifier:          lyfLvPPE2t6cH+1WmegcA5yKad6pFSp/jHHhP/s2d4I=
Subject key identifier:   5F:2F:07:64:E2:3D:50:2B:DB:D6:EE:C7:F0:31:B7:3E:CE:66:FC:C0
Authority key identifier: F5:56:42:EA:EB:D8:3D:2B:9D:92:B6:DB:79:87:FB:E6:D3:68:39:C6
Certificate issuer:       /CN=F55642EAEBD83D2B9D92B6DB7987FBE6D36839C6
Certificate serial:       2DB9687D41D9E8C8E03133AFE18F09BD9A9E8D2E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F55642EAEBD83D2B9D92B6DB7987FBE6D36839C6.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/c883fe75-91e4-4989-bc5e-6a26082dc334/0/F55642EAEBD83D2B9D92B6DB7987FBE6D36839C6.mft
Manifest number:          01A1
Signing time:             Sat 06 Dec 2025 00:02:23 +0000
Manifest this update:     Fri 05 Dec 2025 23:57:23 +0000
Manifest next update:     Tue 09 Dec 2025 11:55:23 +0000
Files and hashes:         1: 3130332e3139332e3134342e302f32332d3234203d3e203538383231.roa (hash: xqDmQkKvNjqDIhr5W6P74uer/xZQw7F/hF7jgT+PobU=)
                          2: F55642EAEBD83D2B9D92B6DB7987FBE6D36839C6.crl (hash: 0GRoIyIZBbWihvHodzv4U6cbGkaqwBgPow5KZs1ULeY=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/c883fe75-91e4-4989-bc5e-6a26082dc334/0/F55642EAEBD83D2B9D92B6DB7987FBE6D36839C6.crl
                          rsync://repo-rpki.idnic.net/repo/c883fe75-91e4-4989-bc5e-6a26082dc334/0/F55642EAEBD83D2B9D92B6DB7987FBE6D36839C6.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F55642EAEBD83D2B9D92B6DB7987FBE6D36839C6.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 09 Dec 2025 11:55:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:b9:68:7d:41:d9:e8:c8:e0:31:33:af:e1:8f:09:bd:9a:9e:8d:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F55642EAEBD83D2B9D92B6DB7987FBE6D36839C6
        Validity
            Not Before: Dec  5 23:57:23 2025 GMT
            Not After : Dec  9 11:55:23 2025 GMT
        Subject: CN=5F2F0764E23D502BDBD6EEC7F031B73ECE66FCC0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:49:9f:79:f0:e1:f4:73:7c:78:61:1c:e5:ab:
                    df:de:cd:94:cd:86:ee:e0:53:ef:05:08:68:13:df:
                    6d:7c:a8:5b:86:de:7c:08:de:54:e2:b5:e6:ad:3f:
                    be:65:9a:1f:b5:6a:6b:74:fa:16:bc:54:09:63:4a:
                    ca:f1:4c:f2:6f:6c:e4:ba:7b:1c:10:57:74:52:b6:
                    f4:b8:d7:b5:76:06:9e:09:89:52:39:e9:26:57:69:
                    f0:ba:8b:c5:50:27:b4:82:60:70:92:7a:44:60:a7:
                    7c:c1:17:ab:0d:bf:88:7e:d5:f8:25:4b:23:e0:3d:
                    52:87:09:ec:bb:8d:b5:5f:2b:65:59:24:70:07:a1:
                    a1:29:2b:0d:45:81:79:7a:71:15:69:91:85:1d:99:
                    1e:b8:7c:b8:a1:37:89:49:f9:e2:e5:4a:e1:1b:0f:
                    4f:3f:8e:1e:04:a0:d6:3b:6b:40:f5:fd:ac:3d:8f:
                    4a:a3:28:e0:db:00:82:60:04:5c:23:7c:84:fd:28:
                    b1:ac:9e:1b:2f:0a:29:73:3d:53:a3:aa:70:4b:7f:
                    82:9d:e9:52:cf:f8:a6:4c:06:42:e4:0a:cb:b4:9b:
                    7b:fe:5e:6f:0b:b7:ef:a5:65:0e:d9:78:8d:0c:e9:
                    dc:08:89:34:3f:b2:92:f4:39:14:35:22:c9:a4:5b:
                    9f:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:2F:07:64:E2:3D:50:2B:DB:D6:EE:C7:F0:31:B7:3E:CE:66:FC:C0
            X509v3 Authority Key Identifier:
                keyid:F5:56:42:EA:EB:D8:3D:2B:9D:92:B6:DB:79:87:FB:E6:D3:68:39:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/c883fe75-91e4-4989-bc5e-6a26082dc334/0/F55642EAEBD83D2B9D92B6DB7987FBE6D36839C6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F55642EAEBD83D2B9D92B6DB7987FBE6D36839C6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c883fe75-91e4-4989-bc5e-6a26082dc334/0/F55642EAEBD83D2B9D92B6DB7987FBE6D36839C6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:d4:e7:54:c1:56:4e:d1:fd:4b:e1:09:4b:d0:79:58:c2:e8:
         3e:50:02:14:70:84:f2:00:25:bf:58:a0:a5:68:c6:81:48:89:
         02:2e:bf:74:8e:d3:e9:c6:d3:3c:8b:14:5a:6f:27:bc:c7:8e:
         29:09:9d:76:ee:8e:a4:9e:56:d3:80:aa:fa:b6:60:43:9b:d8:
         9e:c1:e3:de:d3:51:6e:84:53:04:a4:6a:b7:68:84:2a:67:99:
         fe:27:4b:5b:7f:f5:4b:f7:4f:ee:70:dc:56:36:76:d4:be:d4:
         5e:2a:0f:56:12:f1:7e:f4:b3:93:0d:bb:b3:0b:c3:cc:88:74:
         0d:c1:79:ec:fa:82:6f:eb:a6:e7:41:2b:3f:ec:1d:3b:21:73:
         96:55:a3:5e:00:a9:51:96:57:2a:06:43:9f:7f:83:9a:a5:05:
         81:73:bd:e7:3a:d8:df:bc:7c:28:51:e0:a7:80:15:e1:72:a2:
         7d:36:fe:97:06:76:e7:e5:65:67:4a:ce:4e:86:c5:78:20:c5:
         ca:fc:7f:f0:fe:6d:06:16:72:ee:a5:fc:73:13:98:70:d6:f8:
         42:3e:5e:e7:1b:14:32:0c:2c:76:34:5e:44:54:b4:e3:7c:81:
         a5:c2:65:25:f3:f6:d1:ae:80:0d:c8:87:e4:ab:55:10:00:5b:
         fe:d1:07:01
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIULblofUHZ6MjgMTOv4Y8JvZqejS4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjU1NjQyRUFFQkQ4M0QyQjlEOTJCNkRCNzk4N0ZCRTZE
MzY4MzlDNjAeFw0yNTEyMDUyMzU3MjNaFw0yNTEyMDkxMTU1MjNaMDMxMTAvBgNV
BAMTKDVGMkYwNzY0RTIzRDUwMkJEQkQ2RUVDN0YwMzFCNzNFQ0U2NkZDQzAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDISZ958OH0c3x4YRzlq9/ezZTN
hu7gU+8FCGgT3218qFuG3nwI3lTiteatP75lmh+1amt0+ha8VAljSsrxTPJvbOS6
exwQV3RStvS417V2Bp4JiVI56SZXafC6i8VQJ7SCYHCSekRgp3zBF6sNv4h+1fgl
SyPgPVKHCey7jbVfK2VZJHAHoaEpKw1FgXl6cRVpkYUdmR64fLihN4lJ+eLlSuEb
D08/jh4EoNY7a0D1/aw9j0qjKODbAIJgBFwjfIT9KLGsnhsvCilzPVOjqnBLf4Kd
6VLP+KZMBkLkCsu0m3v+Xm8Lt++lZQ7ZeI0M6dwIiTQ/spL0ORQ1IsmkW58zAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUXy8HZOI9UCvb1u7H8DG3Ps5m/MAwHwYDVR0j
BBgwFoAU9VZC6uvYPSudkrbbeYf75tNoOcYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j
ODgzZmU3NS05MWU0LTQ5ODktYmM1ZS02YTI2MDgyZGMzMzQvMC9GNTU2NDJFQUVC
RDgzRDJCOUQ5MkI2REI3OTg3RkJFNkQzNjgzOUM2LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvRjU1NjQyRUFFQkQ4M0QyQjlEOTJCNkRCNzk4N0ZCRTZEMzY4
MzlDNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzg4M2ZlNzUtOTFlNC00OTg5LWJj
NWUtNmEyNjA4MmRjMzM0LzAvRjU1NjQyRUFFQkQ4M0QyQjlEOTJCNkRCNzk4N0ZC
RTZEMzY4MzlDNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBALHU51TBVk7R/UvhCUvQeVjC6D5QAhRwhPIA
Jb9YoKVoxoFIiQIuv3SO0+nG0zyLFFpvJ7zHjikJnXbujqSeVtOAqvq2YEOb2J7B
497TUW6EUwSkardohCpnmf4nS1t/9Uv3T+5w3FY2dtS+1F4qD1YS8X70s5MNu7ML
w8yIdA3Beez6gm/rpudBKz/sHTshc5ZVo14AqVGWVyoGQ59/g5qlBYFzvec62N+8
fChR4KeAFeFyon02/pcGduflZWdKzk6GxXggxcr8f/D+bQYWcu6l/HMTmHDW+EI+
XucbFDIMLHY0XkRUtON8gaXCZSXz9tGugA3Ih+SrVRAAW/7RBwE=
-----END CERTIFICATE-----
Generated at Sun Dec 7 01:41:32 2025 by rpki-client