This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/e0973beb-66ba-48bc-9374-72d7fb89c5a3/0/5EA60C5C2A877ADE8B13E994EAC2ECE881C2F02E.mft
File:                     5EA60C5C2A877ADE8B13E994EAC2ECE881C2F02E.mft (raw, json)
Hash identifier:          Tk1JdnFBgyrwiEjth61zJaC5fCYA3BuW7k4/ihsAOs0=
Subject key identifier:   DE:E2:62:65:3F:AF:2B:36:F5:B3:32:D4:EC:61:5E:40:23:95:99:70
Authority key identifier: 5E:A6:0C:5C:2A:87:7A:DE:8B:13:E9:94:EA:C2:EC:E8:81:C2:F0:2E
Certificate issuer:       /CN=5EA60C5C2A877ADE8B13E994EAC2ECE881C2F02E
Certificate serial:       29E79A6A8750CB5CA7052EFB60BF8F028D3A8D73
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5EA60C5C2A877ADE8B13E994EAC2ECE881C2F02E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/e0973beb-66ba-48bc-9374-72d7fb89c5a3/0/5EA60C5C2A877ADE8B13E994EAC2ECE881C2F02E.mft
Manifest number:          0161
Signing time:             Sat 06 Dec 2025 22:41:46 +0000
Manifest this update:     Sat 06 Dec 2025 22:36:46 +0000
Manifest next update:     Wed 10 Dec 2025 08:41:46 +0000
Files and hashes:         1: 3130332e32302e3138342e302f32342d3234203d3e203538353533.roa (hash: i+BMvBMmVVTEpYNTmdoQENhpS5cxM86h+HpscKBpaXw=)
                          2: 3130332e32302e3138372e302f32342d3234203d3e203538353533.roa (hash: Xzix4WRmc+UFqL3SMZuu4BYMnJJ6GdtfZg7WTYeKfKA=)
                          3: 3130332e32302e3138352e302f32342d3234203d3e203538353533.roa (hash: 9C5Ex+7Y1aBAHl+9U/ASSlLW3EKgAd0vb9BPKVqnilg=)
                          4: 5EA60C5C2A877ADE8B13E994EAC2ECE881C2F02E.crl (hash: EhJFgliOPRMwaYMiwqTuqM4t752rkjTnO9HJwh1vQbU=)
                          5: 3130332e32302e3138362e302f32342d3234203d3e203538353533.roa (hash: QybRgJegIYGeRxA3jiD0BSJ2fZTSXZHC+zlS6Kajh80=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/e0973beb-66ba-48bc-9374-72d7fb89c5a3/0/5EA60C5C2A877ADE8B13E994EAC2ECE881C2F02E.crl
                          rsync://repo-rpki.idnic.net/repo/e0973beb-66ba-48bc-9374-72d7fb89c5a3/0/5EA60C5C2A877ADE8B13E994EAC2ECE881C2F02E.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5EA60C5C2A877ADE8B13E994EAC2ECE881C2F02E.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 09 Dec 2025 15:57:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:e7:9a:6a:87:50:cb:5c:a7:05:2e:fb:60:bf:8f:02:8d:3a:8d:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5EA60C5C2A877ADE8B13E994EAC2ECE881C2F02E
        Validity
            Not Before: Dec  6 22:36:46 2025 GMT
            Not After : Dec 10 08:41:46 2025 GMT
        Subject: CN=DEE262653FAF2B36F5B332D4EC615E4023959970
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:24:e5:47:9a:8c:a8:08:1e:32:68:66:4d:c9:
                    3c:88:e0:2f:33:6b:d8:e1:80:5a:75:88:4e:a6:a7:
                    08:f0:05:9f:21:46:26:53:61:ee:ca:7c:6a:e1:b6:
                    56:32:88:ff:07:66:77:7d:96:92:f8:3d:d5:f6:ae:
                    af:af:5d:b2:0b:a7:69:0d:cb:53:d0:f6:2f:52:53:
                    4c:22:04:15:f8:ba:c1:6a:48:4a:5f:88:2c:90:8e:
                    d0:52:0c:99:b9:e7:82:a3:a2:19:9c:e7:6f:7c:9d:
                    21:6d:ab:e2:a6:51:ee:d3:43:ae:01:ae:4b:51:d2:
                    72:e3:9b:9b:b3:52:4e:d6:b1:52:b1:c2:08:f9:7d:
                    84:de:58:4f:87:51:bb:40:22:0d:4f:a7:86:45:85:
                    ce:26:bb:cf:49:f5:76:10:4c:ba:e8:4d:d7:7b:f4:
                    85:4e:d7:2f:41:af:9a:27:7b:f6:44:48:ab:6d:58:
                    18:e1:5f:06:cd:b0:2a:a5:6a:8b:5e:11:29:60:36:
                    34:a5:dd:3c:78:d1:da:62:ed:cb:89:57:54:e2:c2:
                    44:92:04:e4:36:61:63:cd:3b:cf:af:0c:cf:d4:44:
                    79:45:67:74:62:dd:58:5c:66:c0:08:ac:29:d0:44:
                    17:76:d1:c1:1a:29:15:20:bf:dc:b7:23:25:ea:78:
                    36:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:E2:62:65:3F:AF:2B:36:F5:B3:32:D4:EC:61:5E:40:23:95:99:70
            X509v3 Authority Key Identifier:
                keyid:5E:A6:0C:5C:2A:87:7A:DE:8B:13:E9:94:EA:C2:EC:E8:81:C2:F0:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/e0973beb-66ba-48bc-9374-72d7fb89c5a3/0/5EA60C5C2A877ADE8B13E994EAC2ECE881C2F02E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5EA60C5C2A877ADE8B13E994EAC2ECE881C2F02E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e0973beb-66ba-48bc-9374-72d7fb89c5a3/0/5EA60C5C2A877ADE8B13E994EAC2ECE881C2F02E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:41:a6:4f:73:17:f6:5d:9e:ac:e5:94:49:d9:ac:22:52:57:
         69:d7:46:c3:c5:8d:f8:8c:c0:da:15:7c:0a:80:df:34:6c:73:
         9f:a4:03:13:30:d4:65:17:a0:be:e0:d2:42:fe:69:28:57:9c:
         7d:82:a8:62:58:aa:d7:66:a9:0c:34:ac:f6:8f:e5:2d:94:70:
         66:1c:fa:58:2a:34:3a:b0:91:01:8a:95:d3:1d:28:be:33:c7:
         2b:ce:0b:ce:d6:db:61:ca:94:c5:44:2c:71:93:ef:a1:be:3a:
         a3:ca:17:3c:8d:6e:10:e4:60:c0:ac:ce:f5:a6:cc:86:9e:89:
         ed:64:90:be:bd:5a:13:80:fe:4d:94:fc:de:c5:99:1e:47:5e:
         96:91:71:47:e6:a8:9b:52:e5:78:f9:cc:87:74:68:98:32:4b:
         d2:f3:6a:44:3b:c1:45:68:23:4b:ab:ef:d4:b1:b2:8b:0e:48:
         96:58:e5:47:d0:1b:60:fb:d7:f1:f2:80:42:33:06:1f:45:f6:
         8d:0c:c7:25:90:d8:7d:0e:ff:4e:02:df:cd:39:5a:69:5a:3f:
         e7:b5:bb:ea:66:2c:5f:7f:f4:a2:e7:3d:3b:f5:34:c3:e2:1b:
         95:19:9c:37:a0:a6:25:fb:3f:92:4b:20:a4:11:e4:24:6d:59:
         9d:42:d1:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 03:13:16 2025 by rpki-client