This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/d93674a6-114f-4bb5-85bb-cbb67db2a955/0/251859FA726E84EB8EF1585C6B1F3D925581A938.mft
File:                     251859FA726E84EB8EF1585C6B1F3D925581A938.mft (raw, json)
Hash identifier:          Rk6Deyt7bu/xIYho2As7SayEHa8+VNGJOaJ5K2l7ZgQ=
Subject key identifier:   34:B3:2A:E5:E3:33:0B:46:9E:A6:FD:EB:80:F1:F5:80:7B:8A:BB:86
Authority key identifier: 25:18:59:FA:72:6E:84:EB:8E:F1:58:5C:6B:1F:3D:92:55:81:A9:38
Certificate issuer:       /CN=251859FA726E84EB8EF1585C6B1F3D925581A938
Certificate serial:       4C01DCBCBC8624B3A5C4B7DCDDEC7F70866F5B37
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/251859FA726E84EB8EF1585C6B1F3D925581A938.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/d93674a6-114f-4bb5-85bb-cbb67db2a955/0/251859FA726E84EB8EF1585C6B1F3D925581A938.mft
Manifest number:          04C5
Signing time:             Thu 04 Dec 2025 15:41:14 +0000
Manifest this update:     Thu 04 Dec 2025 15:36:14 +0000
Manifest next update:     Sun 07 Dec 2025 23:11:14 +0000
Files and hashes:         1: 323430343a636463303a3a2f33322d3332203d3e20313338383432.roa (hash: LMyurDa6RK+ceb5dAm5LdlT8EFTkNVmlTBXqLEHBy+Y=)
                          2: 251859FA726E84EB8EF1585C6B1F3D925581A938.crl (hash: oe+QydrTv3EgWayfCPHM21RM0YsbaVSFHczi4ls+7xE=)
                          3: 3130332e3133382e36382e302f32332d3234203d3e20313338383432.roa (hash: pCMyJ/CDctVRd1Fs9qRQyHuJ7biOZTx5YqB4FZP9gKI=)
                          4: 3130332e3133382e36392e302f32342d3234203d3e20313338383432.roa (hash: 6pDvqDjIlcQkZPcI9oy/Uawt6R25Hk17d81YNhRXRmY=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/d93674a6-114f-4bb5-85bb-cbb67db2a955/0/251859FA726E84EB8EF1585C6B1F3D925581A938.crl
                          rsync://repo-rpki.idnic.net/repo/d93674a6-114f-4bb5-85bb-cbb67db2a955/0/251859FA726E84EB8EF1585C6B1F3D925581A938.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/251859FA726E84EB8EF1585C6B1F3D925581A938.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 07 Dec 2025 23:11:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:01:dc:bc:bc:86:24:b3:a5:c4:b7:dc:dd:ec:7f:70:86:6f:5b:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=251859FA726E84EB8EF1585C6B1F3D925581A938
        Validity
            Not Before: Dec  4 15:36:14 2025 GMT
            Not After : Dec  7 23:11:14 2025 GMT
        Subject: CN=34B32AE5E3330B469EA6FDEB80F1F5807B8ABB86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:e8:d5:81:08:6b:07:dc:6f:13:2e:91:ed:09:
                    1f:cb:f8:1f:33:c2:73:f6:5a:d0:73:45:89:52:8a:
                    10:4a:90:eb:2f:aa:4a:54:98:25:8e:63:56:a8:ba:
                    cb:ff:10:72:4e:bb:65:8f:9e:f1:1b:fd:e5:ba:01:
                    5a:60:03:51:6d:08:3e:4f:7f:00:36:6d:7c:91:c4:
                    bb:6a:2e:69:97:4d:b8:17:36:57:cf:fa:6e:94:39:
                    ef:db:3a:75:0b:c1:f6:4f:79:a0:06:7b:ed:49:fe:
                    b5:7a:54:61:1c:a3:e5:20:54:af:59:ad:ca:4e:82:
                    b2:cb:28:f4:a8:02:54:57:12:ed:86:23:a3:e7:45:
                    19:1c:ee:8f:00:7c:e3:4f:1e:e1:41:ac:c8:b2:33:
                    7e:3e:09:9b:ee:fb:88:c1:da:18:cf:3b:78:7f:63:
                    75:f6:bf:4a:f3:8c:42:35:b6:4d:f6:f2:c1:94:68:
                    a0:15:29:b6:4c:9d:df:23:e1:e0:2d:af:f5:1a:07:
                    fa:d3:d0:8b:c1:6b:a5:e5:2d:20:ee:eb:74:8a:78:
                    a3:ef:60:0d:7d:2a:c2:82:c9:c9:7b:d6:fb:00:2d:
                    7b:0f:96:a7:3b:06:21:5b:99:bc:a8:63:18:51:0e:
                    5f:23:ca:cd:e0:6e:6b:2c:4e:f1:2e:36:20:f8:f5:
                    43:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:B3:2A:E5:E3:33:0B:46:9E:A6:FD:EB:80:F1:F5:80:7B:8A:BB:86
            X509v3 Authority Key Identifier:
                keyid:25:18:59:FA:72:6E:84:EB:8E:F1:58:5C:6B:1F:3D:92:55:81:A9:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/d93674a6-114f-4bb5-85bb-cbb67db2a955/0/251859FA726E84EB8EF1585C6B1F3D925581A938.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/251859FA726E84EB8EF1585C6B1F3D925581A938.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d93674a6-114f-4bb5-85bb-cbb67db2a955/0/251859FA726E84EB8EF1585C6B1F3D925581A938.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cd:39:df:c2:9f:53:dd:bc:74:70:e9:5e:df:67:db:dc:7c:3a:
         23:74:fe:22:a2:4b:90:fd:95:6e:ee:40:06:85:60:57:14:3c:
         12:92:2d:ff:df:a6:eb:b8:92:c0:0f:48:a5:65:c3:89:2a:69:
         91:a3:4f:65:42:24:ad:05:24:95:b9:a8:48:54:64:a2:7a:af:
         6e:85:b5:eb:f2:35:95:04:19:41:37:e0:51:81:3d:59:6a:bb:
         7f:b3:1e:88:cb:f4:c4:ec:0e:bb:d6:7f:29:76:d3:34:83:f1:
         5a:95:9e:f8:87:3f:1a:db:dd:f4:58:2e:76:f0:bf:be:aa:81:
         64:b0:37:0e:09:0e:90:64:1c:88:d1:a5:2e:37:8d:88:f1:ca:
         ed:59:9a:9c:bb:14:45:d7:a1:37:e6:0a:cc:46:d9:8e:dc:1d:
         4e:37:38:77:b8:ce:02:a4:f2:c3:b7:7c:fd:4b:f3:4f:ce:a1:
         f1:60:ea:ce:22:f1:de:9f:68:7b:44:b3:ce:09:9d:26:53:80:
         a8:61:d4:f9:67:5c:10:af:dc:c5:3d:79:a6:19:d2:23:0a:6b:
         73:ec:d1:22:fd:02:9b:59:ee:86:a8:99:93:e9:f2:11:89:8c:
         53:35:06:7e:9b:04:22:76:e6:19:9d:15:31:8c:5b:a6:21:1f:
         a5:cd:5e:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 22:23:52 2025 by rpki-client