This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/cd7c7ac2-5a9b-492a-a4c5-1f13590dae06/0/C554E891C583CE2ABF2DB5DEE821F6B630BFF5DF.mft
File:                     C554E891C583CE2ABF2DB5DEE821F6B630BFF5DF.mft (raw, json)
Hash identifier:          8r3eOJeYVShskrP5JFugi8X6nrowDZWb35IxglqKClQ=
Subject key identifier:   CD:E6:CC:81:CF:4A:2D:F9:01:ED:36:C7:D3:BA:E4:A1:07:B2:14:5D
Authority key identifier: C5:54:E8:91:C5:83:CE:2A:BF:2D:B5:DE:E8:21:F6:B6:30:BF:F5:DF
Certificate issuer:       /CN=C554E891C583CE2ABF2DB5DEE821F6B630BFF5DF
Certificate serial:       7B3DAD30ED7596BED691255A542C43E6A58B97DF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C554E891C583CE2ABF2DB5DEE821F6B630BFF5DF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/cd7c7ac2-5a9b-492a-a4c5-1f13590dae06/0/C554E891C583CE2ABF2DB5DEE821F6B630BFF5DF.mft
Manifest number:          0412
Signing time:             Sat 06 Dec 2025 20:12:10 +0000
Manifest this update:     Sat 06 Dec 2025 20:07:10 +0000
Manifest next update:     Wed 10 Dec 2025 04:29:10 +0000
Files and hashes:         1: C554E891C583CE2ABF2DB5DEE821F6B630BFF5DF.crl (hash: vmoPtA8Sk+6jDeNaXNzjoD+xGL8a4eTKaOFolnIIIr4=)
                          2: 3130332e3135382e3235302e302f32332d3234203d3e20313431313334.roa (hash: M93Ni1T1Tbr7xBYmfCDNgdw5xr36AB/YVcpH7A2lVoA=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/cd7c7ac2-5a9b-492a-a4c5-1f13590dae06/0/C554E891C583CE2ABF2DB5DEE821F6B630BFF5DF.crl
                          rsync://repo-rpki.idnic.net/repo/cd7c7ac2-5a9b-492a-a4c5-1f13590dae06/0/C554E891C583CE2ABF2DB5DEE821F6B630BFF5DF.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C554E891C583CE2ABF2DB5DEE821F6B630BFF5DF.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 09 Dec 2025 15:57:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:3d:ad:30:ed:75:96:be:d6:91:25:5a:54:2c:43:e6:a5:8b:97:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C554E891C583CE2ABF2DB5DEE821F6B630BFF5DF
        Validity
            Not Before: Dec  6 20:07:10 2025 GMT
            Not After : Dec 10 04:29:10 2025 GMT
        Subject: CN=CDE6CC81CF4A2DF901ED36C7D3BAE4A107B2145D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:41:7b:1d:97:c7:02:8a:06:fe:71:15:60:a8:
                    45:94:ef:9f:d2:bb:96:64:2e:f5:13:8f:ec:dd:fb:
                    4b:ca:63:cb:d3:16:7a:7e:89:9b:96:67:da:06:ba:
                    92:d9:07:01:48:dc:5d:86:be:67:92:44:f8:b0:35:
                    3c:2d:e1:93:c9:52:51:8d:2e:d5:f6:ba:77:c0:15:
                    77:04:ed:75:eb:f2:41:b5:83:f5:02:fb:78:7d:a3:
                    1e:da:21:09:58:6d:2c:7f:f7:79:81:78:7b:61:d3:
                    1b:00:fc:74:65:4c:10:97:0a:03:aa:71:a5:eb:08:
                    33:f6:3b:12:44:3b:9f:40:45:7c:b1:3b:22:9e:1b:
                    7c:ce:3d:00:5c:eb:4e:63:0f:5a:2f:6b:22:8b:c9:
                    dc:32:84:48:f6:8b:41:d2:2a:96:b1:fa:32:38:16:
                    4a:10:d2:74:a8:61:60:c2:72:8c:57:71:db:9b:cb:
                    8f:b4:6b:04:68:41:6e:58:73:21:bf:f9:54:93:25:
                    5b:d8:a2:57:59:bc:f2:85:81:d6:2e:62:db:a2:c9:
                    e3:c9:cd:e4:89:44:a7:ab:14:57:90:1e:10:22:55:
                    49:e8:52:82:0a:34:9e:27:a5:37:1e:06:88:54:ff:
                    78:e5:d9:f3:f8:37:3a:72:14:71:21:7a:b4:a1:28:
                    27:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:E6:CC:81:CF:4A:2D:F9:01:ED:36:C7:D3:BA:E4:A1:07:B2:14:5D
            X509v3 Authority Key Identifier:
                keyid:C5:54:E8:91:C5:83:CE:2A:BF:2D:B5:DE:E8:21:F6:B6:30:BF:F5:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/cd7c7ac2-5a9b-492a-a4c5-1f13590dae06/0/C554E891C583CE2ABF2DB5DEE821F6B630BFF5DF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C554E891C583CE2ABF2DB5DEE821F6B630BFF5DF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cd7c7ac2-5a9b-492a-a4c5-1f13590dae06/0/C554E891C583CE2ABF2DB5DEE821F6B630BFF5DF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:9b:48:9b:34:6e:df:c0:8f:6d:b2:1f:9c:f8:b2:fc:f9:99:
         5a:ac:1e:77:e9:e9:80:6a:f0:7c:f8:9c:b3:8a:af:2a:f9:af:
         10:80:b9:12:2a:86:b0:a4:79:c3:b6:87:e4:62:04:c2:02:2e:
         c0:8b:11:42:a5:ab:c2:aa:ca:d4:ab:b5:67:1a:80:7e:5d:73:
         19:a2:ce:07:bd:0a:8d:9d:90:e1:39:22:b9:7e:2a:1e:03:9c:
         eb:8c:7d:23:23:e5:49:76:36:43:92:68:c0:f8:5c:e5:b9:0b:
         a4:6a:c0:98:97:15:fb:31:45:12:76:0f:dd:b2:42:5f:d4:92:
         27:f9:a1:e1:15:2a:bb:bc:a1:67:06:8d:95:0d:f8:8d:db:3e:
         40:78:3d:83:13:81:37:90:e3:76:ea:09:6d:cf:5f:3a:5f:d9:
         d7:5f:69:a6:73:d5:b4:dd:88:e7:7b:7d:b4:77:89:e0:07:31:
         9c:66:23:36:07:44:c0:41:80:7f:ad:00:12:19:79:3e:b8:36:
         4d:9a:b9:9b:b6:7f:84:b4:da:c2:ec:f0:3c:ba:3c:5c:34:76:
         a1:35:81:95:07:3b:4b:84:94:63:33:92:1c:7c:b8:ae:a7:2a:
         2d:9b:ef:45:ee:14:d5:55:78:1f:c9:1c:e1:17:7b:98:c2:7f:
         f9:61:74:f4
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUez2tMO11lr7WkSVaVCxD5qWLl98wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzU1NEU4OTFDNTgzQ0UyQUJGMkRCNURFRTgyMUY2QjYz
MEJGRjVERjAeFw0yNTEyMDYyMDA3MTBaFw0yNTEyMTAwNDI5MTBaMDMxMTAvBgNV
BAMTKENERTZDQzgxQ0Y0QTJERjkwMUVEMzZDN0QzQkFFNEExMDdCMjE0NUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2QXsdl8cCigb+cRVgqEWU75/S
u5ZkLvUTj+zd+0vKY8vTFnp+iZuWZ9oGupLZBwFI3F2GvmeSRPiwNTwt4ZPJUlGN
LtX2unfAFXcE7XXr8kG1g/UC+3h9ox7aIQlYbSx/93mBeHth0xsA/HRlTBCXCgOq
caXrCDP2OxJEO59ARXyxOyKeG3zOPQBc605jD1ovayKLydwyhEj2i0HSKpax+jI4
FkoQ0nSoYWDCcoxXcduby4+0awRoQW5YcyG/+VSTJVvYoldZvPKFgdYuYtuiyePJ
zeSJRKerFFeQHhAiVUnoUoIKNJ4npTceBohU/3jl2fP4NzpyFHEherShKCf7AgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUzebMgc9KLfkB7TbH07rkoQeyFF0wHwYDVR0j
BBgwFoAUxVTokcWDziq/LbXe6CH2tjC/9d8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j
ZDdjN2FjMi01YTliLTQ5MmEtYTRjNS0xZjEzNTkwZGFlMDYvMC9DNTU0RTg5MUM1
ODNDRTJBQkYyREI1REVFODIxRjZCNjMwQkZGNURGLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQzU1NEU4OTFDNTgzQ0UyQUJGMkRCNURFRTgyMUY2QjYzMEJG
RjVERi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2Q3YzdhYzItNWE5Yi00OTJhLWE0
YzUtMWYxMzU5MGRhZTA2LzAvQzU1NEU4OTFDNTgzQ0UyQUJGMkRCNURFRTgyMUY2
QjYzMEJGRjVERi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBABSbSJs0bt/Aj22yH5z4svz5mVqsHnfp6YBq
8Hz4nLOKryr5rxCAuRIqhrCkecO2h+RiBMICLsCLEUKlq8KqytSrtWcagH5dcxmi
zge9Co2dkOE5Irl+Kh4DnOuMfSMj5Ul2NkOSaMD4XOW5C6RqwJiXFfsxRRJ2D92y
Ql/Ukif5oeEVKru8oWcGjZUN+I3bPkB4PYMTgTeQ43bqCW3PXzpf2ddfaaZz1bTd
iOd7fbR3ieAHMZxmIzYHRMBBgH+tABIZeT64Nk2auZu2f4S02sLs8Dy6PFw0dqE1
gZUHO0uElGMzkhx8uK6nKi2b70XuFNVVeB/JHOEXe5jCf/lhdPQ=
-----END CERTIFICATE-----
Generated at Sat Dec 6 22:52:07 2025 by rpki-client