This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/cc976ec5-b05a-480f-86da-d557f84a2364/0/55FE929F3DF18E4B5BC4309769AA6C72AFF634CC.mft
File:                     55FE929F3DF18E4B5BC4309769AA6C72AFF634CC.mft (raw, json)
Hash identifier:          5gAZJG/ZD4u47RBhUKilKouQgphQrgAfU28Cz5vhPGg=
Subject key identifier:   E0:D7:6D:21:03:E2:BF:D1:42:BE:1A:EF:4D:EE:E8:2B:23:11:BF:C3
Authority key identifier: 55:FE:92:9F:3D:F1:8E:4B:5B:C4:30:97:69:AA:6C:72:AF:F6:34:CC
Certificate issuer:       /CN=55FE929F3DF18E4B5BC4309769AA6C72AFF634CC
Certificate serial:       71AC5298E3583D9BF9EA843E1B2AB420CB21B35D
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/55FE929F3DF18E4B5BC4309769AA6C72AFF634CC.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/cc976ec5-b05a-480f-86da-d557f84a2364/0/55FE929F3DF18E4B5BC4309769AA6C72AFF634CC.mft
Manifest number:          0531
Signing time:             Sat 06 Dec 2025 20:20:53 +0000
Manifest this update:     Sat 06 Dec 2025 20:15:53 +0000
Manifest next update:     Wed 10 Dec 2025 02:49:53 +0000
Files and hashes:         1: 3130332e3230362e3138362e302f32342d3234203d3e20313336313036.roa (hash: n+qiiPbTCALOXLor9QakhzTE2JIZ5+LsarWfK/x2L98=)
                          2: 3132332e3137362e3132312e302f32342d3234203d3e20313336313036.roa (hash: r8iJ58dsXOZfFn+sGNtTF7NeubUmolsQCEckXXcjUgw=)
                          3: 55FE929F3DF18E4B5BC4309769AA6C72AFF634CC.crl (hash: IyGULrS/OwfrNkB2EbHvzT9KdkWR6ahg4qlCbUD60BI=)
                          4: 3132332e3137362e3132342e302f32322d3234203d3e20313336313036.roa (hash: ZxGkvAEYM1RYxTiE3ehAdXEBI4fdfCMSXuZ6FAjl1Wc=)
                          5: 323430303a643734303a3a2f33322d3438203d3e20313336313036.roa (hash: KZfJixsHkSMjEdnxEqfciQELwK4VgwssWsbQl45Zf+U=)
                          6: 3132332e3137362e3132322e302f32332d3234203d3e20313336313036.roa (hash: Qqydprq+T6tGx6UbkdFBKhUoMWw1XVLFLpfXK4/VaNc=)
                          7: 3130332e38372e3138342e302f32322d3234203d3e20313336313036.roa (hash: DY2ElaPaAvVBCvAcSgpgWwZ5XSYWvKRquFsGUOeqsic=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/cc976ec5-b05a-480f-86da-d557f84a2364/0/55FE929F3DF18E4B5BC4309769AA6C72AFF634CC.crl
                          rsync://repo-rpki.idnic.net/repo/cc976ec5-b05a-480f-86da-d557f84a2364/0/55FE929F3DF18E4B5BC4309769AA6C72AFF634CC.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/55FE929F3DF18E4B5BC4309769AA6C72AFF634CC.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 09 Dec 2025 15:57:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:ac:52:98:e3:58:3d:9b:f9:ea:84:3e:1b:2a:b4:20:cb:21:b3:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55FE929F3DF18E4B5BC4309769AA6C72AFF634CC
        Validity
            Not Before: Dec  6 20:15:53 2025 GMT
            Not After : Dec 10 02:49:53 2025 GMT
        Subject: CN=E0D76D2103E2BFD142BE1AEF4DEEE82B2311BFC3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:8e:38:22:d3:45:ca:ec:80:bb:be:77:96:f2:
                    a0:98:4d:01:9b:fa:00:35:a4:74:f5:76:04:21:62:
                    ea:d5:70:c5:92:d8:53:9d:aa:0a:99:1b:ac:a8:b1:
                    5d:65:11:fb:21:73:8c:cb:29:1c:46:f2:6a:0e:ca:
                    7f:2f:f3:7c:30:7c:82:7b:6e:42:3b:88:e1:cc:4f:
                    b5:7e:d3:fb:15:ad:8f:a3:94:ac:c1:54:9d:4f:1e:
                    a9:89:7d:fb:e6:e7:4c:b4:c9:3a:5f:e8:0a:0d:dd:
                    d2:11:0b:f6:ea:5c:23:25:7a:02:ee:3b:52:12:e8:
                    9d:ee:a9:6c:e1:db:ea:d1:7c:b8:0f:45:24:6d:7a:
                    3a:70:ff:db:12:1f:1f:e5:73:73:07:2c:a9:91:1f:
                    37:97:4c:93:a8:02:6b:42:0b:58:14:40:8c:46:55:
                    79:30:fd:b7:b3:1e:9f:bc:e6:73:f1:cd:31:d5:5b:
                    d6:07:9e:5d:58:4f:eb:33:ad:e2:89:88:ae:b0:39:
                    0a:39:7a:d2:05:5f:65:4c:84:db:00:75:f8:86:c3:
                    69:df:3d:97:7d:f2:a3:f1:af:20:a6:87:63:76:47:
                    0f:0e:ef:2b:b5:0a:58:4d:9c:38:a9:32:a4:38:e5:
                    1a:e7:a8:85:82:fd:c1:c7:a4:8c:4b:93:ae:f9:05:
                    27:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:D7:6D:21:03:E2:BF:D1:42:BE:1A:EF:4D:EE:E8:2B:23:11:BF:C3
            X509v3 Authority Key Identifier:
                keyid:55:FE:92:9F:3D:F1:8E:4B:5B:C4:30:97:69:AA:6C:72:AF:F6:34:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/cc976ec5-b05a-480f-86da-d557f84a2364/0/55FE929F3DF18E4B5BC4309769AA6C72AFF634CC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/55FE929F3DF18E4B5BC4309769AA6C72AFF634CC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cc976ec5-b05a-480f-86da-d557f84a2364/0/55FE929F3DF18E4B5BC4309769AA6C72AFF634CC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:8a:ea:5a:96:b0:82:b8:51:ed:38:a2:9c:d0:42:d8:a5:07:
         ab:af:00:70:61:ae:e2:8f:31:66:47:6a:59:97:ea:d4:4f:a1:
         00:ce:62:49:b2:75:f3:34:49:45:50:92:1a:8a:70:16:ff:07:
         1b:c3:a1:eb:c9:8b:1e:f8:80:c0:19:b1:13:a3:06:90:28:e0:
         a1:e7:47:38:65:a6:3e:bc:9c:8c:9a:79:a3:74:58:a4:64:45:
         52:14:39:6f:4e:84:c4:23:ff:8f:80:f5:00:1c:fe:e1:25:ee:
         ab:bc:7a:2d:46:53:16:9a:12:2d:ed:ff:6b:b8:de:88:ea:9f:
         cd:df:9a:36:cb:20:49:fc:43:05:97:f4:46:b3:43:7a:67:91:
         49:50:14:29:0e:b6:96:ed:d2:0e:b4:c1:bd:40:84:b4:b8:e5:
         be:c5:b5:27:04:00:12:8e:7f:04:21:c0:4d:97:be:05:fd:1b:
         ca:1b:fb:d8:d3:0c:c0:da:b0:f5:8b:58:b9:bd:2e:41:fa:31:
         5b:65:94:d0:41:91:ae:6d:6f:19:87:e8:a5:72:e1:33:7b:ac:
         4d:7a:61:64:be:a8:ec:3f:e6:ed:29:a1:da:01:35:11:7f:36:
         66:b4:56:16:5c:ab:78:84:a4:8a:e4:f8:5e:7e:7f:3b:94:63:
         ab:ee:c6:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 23:51:07 2025 by rpki-client