This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/e5682bf2-0634-4782-a5af-eeb919f19143/0/B5766EF969F5BB0A7C76FAA9E53BDE8274E5643E.mft
File:                     B5766EF969F5BB0A7C76FAA9E53BDE8274E5643E.mft (raw, json)
Hash identifier:          Mhsn7Vyxow0JcV3T+59xG0cbAGrUIN1Zeu5IDXz/lbU=
Subject key identifier:   F1:0F:AE:45:8B:50:F7:C8:4F:76:D7:06:82:FE:75:0B:7F:E9:03:E0
Authority key identifier: B5:76:6E:F9:69:F5:BB:0A:7C:76:FA:A9:E5:3B:DE:82:74:E5:64:3E
Certificate issuer:       /CN=B5766EF969F5BB0A7C76FAA9E53BDE8274E5643E
Certificate serial:       7FBDE078E9A5E05F9C6BF381B17EB514CC33D321
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B5766EF969F5BB0A7C76FAA9E53BDE8274E5643E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/e5682bf2-0634-4782-a5af-eeb919f19143/0/B5766EF969F5BB0A7C76FAA9E53BDE8274E5643E.mft
Manifest number:          E4
Signing time:             Fri 05 Dec 2025 06:51:40 +0000
Manifest this update:     Fri 05 Dec 2025 06:46:40 +0000
Manifest next update:     Mon 08 Dec 2025 11:01:40 +0000
Files and hashes:         1: 3136302e32352e34382e302f32332d3233203d3e20313533303634.roa (hash: yPb8vzqBZ4SuTebiaZ2t1hQWOQT5EPzxImNlHmSkYG0=)
                          2: 3136302e32352e34392e302f32342d3234203d3e20313533303634.roa (hash: +r21VHJKiSG4g/R/zHmUKuYDBebHXXDRqabchwnAdGk=)
                          3: 3136302e32352e34382e302f32342d3234203d3e20313533303634.roa (hash: 5vrTiCPVa+g9uUAZqY7yIFrCeD1zTR9VGB0NveariYc=)
                          4: B5766EF969F5BB0A7C76FAA9E53BDE8274E5643E.crl (hash: 588yJafnCLOlkXH9jG8b7x0BTwn9JWn7n/a/oAH8aC4=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/e5682bf2-0634-4782-a5af-eeb919f19143/0/B5766EF969F5BB0A7C76FAA9E53BDE8274E5643E.crl
                          rsync://repo-rpki.idnic.net/repo/e5682bf2-0634-4782-a5af-eeb919f19143/0/B5766EF969F5BB0A7C76FAA9E53BDE8274E5643E.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B5766EF969F5BB0A7C76FAA9E53BDE8274E5643E.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 08 Dec 2025 11:01:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:bd:e0:78:e9:a5:e0:5f:9c:6b:f3:81:b1:7e:b5:14:cc:33:d3:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B5766EF969F5BB0A7C76FAA9E53BDE8274E5643E
        Validity
            Not Before: Dec  5 06:46:40 2025 GMT
            Not After : Dec  8 11:01:40 2025 GMT
        Subject: CN=F10FAE458B50F7C84F76D70682FE750B7FE903E0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:18:e2:26:a7:79:41:b5:e7:c8:76:0c:04:aa:
                    2e:79:79:d3:d7:f0:17:b8:b5:c4:91:c6:f7:79:89:
                    c1:d5:87:f7:6a:f3:68:6d:eb:57:cd:8f:a6:8e:52:
                    80:de:cb:a6:94:d8:e4:20:a9:cf:e6:b9:d0:77:91:
                    62:3b:28:d1:db:e3:71:5e:0a:71:1b:51:b1:31:16:
                    58:18:95:7e:8f:0e:5d:c4:53:dc:00:46:37:43:10:
                    5c:2f:e0:31:ae:92:90:5d:ff:16:5f:84:72:7c:9b:
                    1e:8c:ce:7f:dd:31:b5:f4:f5:13:48:2c:34:49:66:
                    24:ef:9e:a9:73:2d:88:88:b8:8c:da:a0:4f:a3:6b:
                    2a:62:95:0e:ed:3f:af:07:4a:fc:8f:20:b6:71:ec:
                    41:1c:0a:0e:dc:57:f3:9f:42:c0:3d:15:0f:48:b8:
                    31:79:b2:16:26:95:05:c9:94:1e:bc:2a:a2:7a:5c:
                    dc:ff:bd:bd:3a:a7:f1:f8:d1:e6:84:08:4e:3d:32:
                    df:6b:38:e9:f7:ba:ba:25:b2:23:aa:f1:60:a2:68:
                    8c:ef:7f:ec:03:f9:bd:bd:f0:92:66:75:fa:b5:9b:
                    93:5f:e5:a3:8d:f2:f3:e5:28:bb:79:9a:92:d5:16:
                    36:bb:6a:ef:96:c3:b1:4e:95:74:33:1f:7d:3b:74:
                    bd:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:0F:AE:45:8B:50:F7:C8:4F:76:D7:06:82:FE:75:0B:7F:E9:03:E0
            X509v3 Authority Key Identifier:
                keyid:B5:76:6E:F9:69:F5:BB:0A:7C:76:FA:A9:E5:3B:DE:82:74:E5:64:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/e5682bf2-0634-4782-a5af-eeb919f19143/0/B5766EF969F5BB0A7C76FAA9E53BDE8274E5643E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B5766EF969F5BB0A7C76FAA9E53BDE8274E5643E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e5682bf2-0634-4782-a5af-eeb919f19143/0/B5766EF969F5BB0A7C76FAA9E53BDE8274E5643E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:bc:f1:28:66:1a:c9:67:54:68:84:96:bc:02:2d:c4:68:e1:
         b4:ba:c7:74:36:4e:f3:c1:14:ff:07:7b:72:f7:e8:27:b6:a6:
         16:8f:5b:cd:f7:45:7a:08:1f:74:10:09:cb:a2:8d:9e:c0:97:
         6b:30:d2:85:b5:5b:ee:d6:a7:95:49:ad:3f:7d:ea:22:cf:18:
         c4:bc:35:1a:b2:e7:cf:3f:6a:6e:af:f1:4e:b2:5c:c3:ab:62:
         21:66:98:3e:4f:77:93:e1:aa:5f:1b:c4:62:94:87:4e:3a:14:
         2a:82:c4:52:0c:bf:d6:72:fb:b1:3f:a4:bd:5a:41:a5:b8:9e:
         06:1a:eb:3f:6f:33:95:3f:eb:6d:41:67:97:5b:d5:32:04:38:
         ad:04:ed:c1:32:4f:3c:7a:e9:da:6f:7a:ff:fd:de:66:d9:0d:
         aa:d4:cb:37:76:bc:84:71:41:6b:cd:b8:be:8b:1b:e6:72:77:
         7a:a9:5f:a7:d2:05:b0:c3:05:0b:73:78:60:50:d0:15:fc:4d:
         be:ab:8f:25:f1:a4:68:69:16:a3:7c:ed:9a:4b:1a:e7:75:47:
         73:ae:aa:81:45:25:67:06:40:37:3c:78:82:f0:1c:65:a8:1f:
         4a:f1:32:a7:6b:47:c1:b8:01:a4:aa:ac:6c:cb:27:07:b3:a1:
         ce:f4:09:d2
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUf73geOml4F+ca/OBsX61FMwz0yEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjU3NjZFRjk2OUY1QkIwQTdDNzZGQUE5RTUzQkRFODI3
NEU1NjQzRTAeFw0yNTEyMDUwNjQ2NDBaFw0yNTEyMDgxMTAxNDBaMDMxMTAvBgNV
BAMTKEYxMEZBRTQ1OEI1MEY3Qzg0Rjc2RDcwNjgyRkU3NTBCN0ZFOTAzRTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+GOImp3lBtefIdgwEqi55edPX
8Be4tcSRxvd5icHVh/dq82ht61fNj6aOUoDey6aU2OQgqc/mudB3kWI7KNHb43Fe
CnEbUbExFlgYlX6PDl3EU9wARjdDEFwv4DGukpBd/xZfhHJ8mx6Mzn/dMbX09RNI
LDRJZiTvnqlzLYiIuIzaoE+jaypilQ7tP68HSvyPILZx7EEcCg7cV/OfQsA9FQ9I
uDF5shYmlQXJlB68KqJ6XNz/vb06p/H40eaECE49Mt9rOOn3urolsiOq8WCiaIzv
f+wD+b298JJmdfq1m5Nf5aON8vPlKLt5mpLVFja7au+Ww7FOlXQzH307dL0bAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQU8Q+uRYtQ98hPdtcGgv51C3/pA+AwHwYDVR0j
BBgwFoAUtXZu+Wn1uwp8dvqp5TvegnTlZD4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l
NTY4MmJmMi0wNjM0LTQ3ODItYTVhZi1lZWI5MTlmMTkxNDMvMC9CNTc2NkVGOTY5
RjVCQjBBN0M3NkZBQTlFNTNCREU4Mjc0RTU2NDNFLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzEvQjU3NjZFRjk2OUY1QkIwQTdDNzZGQUE5RTUzQkRFODI3NEU1
NjQzRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTU2ODJiZjItMDYzNC00NzgyLWE1
YWYtZWViOTE5ZjE5MTQzLzAvQjU3NjZFRjk2OUY1QkIwQTdDNzZGQUE5RTUzQkRF
ODI3NEU1NjQzRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBACG88ShmGslnVGiElrwCLcRo4bS6x3Q2TvPB
FP8He3L36Ce2phaPW833RXoIH3QQCcuijZ7Al2sw0oW1W+7Wp5VJrT996iLPGMS8
NRqy588/am6v8U6yXMOrYiFmmD5Pd5Phql8bxGKUh046FCqCxFIMv9Zy+7E/pL1a
QaW4ngYa6z9vM5U/621BZ5db1TIEOK0E7cEyTzx66dpvev/93mbZDarUyzd2vIRx
QWvNuL6LG+Zyd3qpX6fSBbDDBQtzeGBQ0BX8Tb6rjyXxpGhpFqN87ZpLGud1R3Ou
qoFFJWcGQDc8eILwHGWoH0rxMqdrR8G4AaSqrGzLJwezoc70CdI=
-----END CERTIFICATE-----
Generated at Sat Dec 6 22:07:08 2025 by rpki-client