This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/cdb59a10-58d0-462e-b09b-1919b1c35d72/0/B5F8E7712A83BE2BD78CFC40658C8032F03B6682.mft
File:                     B5F8E7712A83BE2BD78CFC40658C8032F03B6682.mft (raw, json)
Hash identifier:          V759EPHTQTIumwSAEgcRVHBKYU6+oLCR9eqPDiVmlNo=
Subject key identifier:   44:50:7B:00:84:0D:E3:D4:55:DD:EB:8E:62:08:59:4B:04:D0:2B:93
Authority key identifier: B5:F8:E7:71:2A:83:BE:2B:D7:8C:FC:40:65:8C:80:32:F0:3B:66:82
Certificate issuer:       /CN=B5F8E7712A83BE2BD78CFC40658C8032F03B6682
Certificate serial:       281154EB1664099411EF1754865D22BC6F6FDC49
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B5F8E7712A83BE2BD78CFC40658C8032F03B6682.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/cdb59a10-58d0-462e-b09b-1919b1c35d72/0/B5F8E7712A83BE2BD78CFC40658C8032F03B6682.mft
Manifest number:          015A
Signing time:             Thu 04 Dec 2025 22:11:59 +0000
Manifest this update:     Thu 04 Dec 2025 22:06:59 +0000
Manifest next update:     Mon 08 Dec 2025 02:47:59 +0000
Files and hashes:         1: B5F8E7712A83BE2BD78CFC40658C8032F03B6682.crl (hash: UWbT5Uy1KGNix2TcIQlEZuwqBbJ9I65EH+eD84JYTC4=)
                          2: 3130332e33382e3130382e302f32332d3234203d3e20313531353539.roa (hash: FEHaz0M5qWTtLzVTFwwxjOLyrh7B+FWo8+ydx+5qUx0=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/cdb59a10-58d0-462e-b09b-1919b1c35d72/0/B5F8E7712A83BE2BD78CFC40658C8032F03B6682.crl
                          rsync://repo-rpki.idnic.net/repo/cdb59a10-58d0-462e-b09b-1919b1c35d72/0/B5F8E7712A83BE2BD78CFC40658C8032F03B6682.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B5F8E7712A83BE2BD78CFC40658C8032F03B6682.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 08 Dec 2025 02:47:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:11:54:eb:16:64:09:94:11:ef:17:54:86:5d:22:bc:6f:6f:dc:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B5F8E7712A83BE2BD78CFC40658C8032F03B6682
        Validity
            Not Before: Dec  4 22:06:59 2025 GMT
            Not After : Dec  8 02:47:59 2025 GMT
        Subject: CN=44507B00840DE3D455DDEB8E6208594B04D02B93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:ca:ed:f6:50:60:14:3c:05:3c:c2:53:a7:8e:
                    ad:40:d3:1d:2a:cd:d7:93:4e:3e:50:ec:7a:4f:ea:
                    c0:c9:16:ee:ba:b0:ba:86:62:4f:07:3a:05:cd:39:
                    f4:64:70:35:96:e8:b5:ec:80:6a:eb:65:9d:9c:1a:
                    f3:95:27:4b:c8:fc:2a:95:14:54:21:26:78:fb:05:
                    8e:13:b5:f8:7e:27:39:a2:57:ad:24:95:a4:93:97:
                    72:26:51:69:82:40:be:b0:e1:69:b3:65:35:df:ee:
                    dc:ff:d3:30:9e:a8:34:cd:ef:5b:19:d0:ce:27:8c:
                    a9:8c:ca:88:9c:b0:e8:9c:1a:93:f8:0c:72:f7:c1:
                    33:5e:ae:35:07:e4:75:56:5a:56:4b:d0:bf:19:71:
                    ec:44:b7:ef:5f:51:07:87:56:e1:4f:62:d1:68:b4:
                    96:2c:25:31:e0:90:74:7f:54:0f:c9:b3:a1:5a:c5:
                    c6:56:d7:89:2a:45:80:01:b3:92:ad:d5:3a:71:0b:
                    1d:23:32:3a:19:f8:6e:0f:8e:0f:9e:38:82:5e:c5:
                    aa:12:30:92:fc:e0:c5:d2:03:23:47:b3:2d:62:f2:
                    db:ea:38:70:13:5a:dd:60:07:f7:a6:29:0b:cb:ff:
                    25:47:25:7f:88:e2:55:69:f0:ac:c6:83:0e:3e:15:
                    2d:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:50:7B:00:84:0D:E3:D4:55:DD:EB:8E:62:08:59:4B:04:D0:2B:93
            X509v3 Authority Key Identifier:
                keyid:B5:F8:E7:71:2A:83:BE:2B:D7:8C:FC:40:65:8C:80:32:F0:3B:66:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/cdb59a10-58d0-462e-b09b-1919b1c35d72/0/B5F8E7712A83BE2BD78CFC40658C8032F03B6682.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B5F8E7712A83BE2BD78CFC40658C8032F03B6682.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cdb59a10-58d0-462e-b09b-1919b1c35d72/0/B5F8E7712A83BE2BD78CFC40658C8032F03B6682.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:5d:fc:d9:59:70:9c:a0:e5:c8:80:03:42:ea:d4:db:b1:2d:
         f7:21:42:18:f3:8b:80:28:43:9a:0e:25:ce:2c:80:93:db:d4:
         59:3b:3d:d9:8d:af:96:e2:58:ab:92:13:9e:c1:42:dd:dc:46:
         7b:dd:50:cc:3a:61:66:36:f4:f6:70:d2:ef:b5:bc:c1:d0:14:
         a4:79:c7:9f:5c:23:67:15:01:a8:92:96:14:d3:0e:e0:0c:36:
         31:e4:be:25:d9:ce:6c:8b:13:f2:5b:08:8a:ff:40:60:19:19:
         a0:2d:35:01:3d:77:dd:92:19:3a:7f:bb:df:7b:bd:76:7b:9d:
         1f:85:d3:14:4d:52:7f:fc:c4:ce:03:9a:8c:9d:31:d9:ba:63:
         ec:70:9f:85:39:90:ae:03:dd:a1:86:19:97:8d:a4:83:f1:8d:
         36:32:7d:f3:b5:f5:24:c4:7b:0f:eb:43:07:45:bf:4b:2c:c8:
         36:52:1b:1e:5d:34:27:d0:0a:bf:5d:57:f9:55:65:13:d1:35:
         58:97:fc:37:6a:c4:b8:32:83:54:6a:7f:7a:e0:82:fd:04:8a:
         2b:65:3b:a4:13:3a:d3:5d:c8:bb:c3:6e:6d:3f:a8:37:b8:75:
         5c:f1:62:80:b9:b9:1f:c0:80:cb:72:ce:88:58:c7:84:3a:34:
         c1:86:da:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 02:07:45 2025 by rpki-client