This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/e607d929-4ca8-4f53-a298-5e33be1f8604/0/5110A717EFE96B12E5D3A475E9B2179E5DE0EA0C.mft
File:                     5110A717EFE96B12E5D3A475E9B2179E5DE0EA0C.mft (raw, json)
Hash identifier:          ZmzCY5g07lRQ2l8ITJXwu56GY3HRxIEeoEsV7aDtwug=
Subject key identifier:   F6:45:90:A4:ED:15:F6:D5:58:6A:AD:7C:9A:89:68:C2:D0:AD:8A:CF
Authority key identifier: 51:10:A7:17:EF:E9:6B:12:E5:D3:A4:75:E9:B2:17:9E:5D:E0:EA:0C
Certificate issuer:       /CN=5110A717EFE96B12E5D3A475E9B2179E5DE0EA0C
Certificate serial:       20E75A28FB5F624F99D544EE2A40AF274C2B0092
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5110A717EFE96B12E5D3A475E9B2179E5DE0EA0C.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/e607d929-4ca8-4f53-a298-5e33be1f8604/0/5110A717EFE96B12E5D3A475E9B2179E5DE0EA0C.mft
Manifest number:          052B
Signing time:             Fri 05 Dec 2025 16:30:01 +0000
Manifest this update:     Fri 05 Dec 2025 16:25:01 +0000
Manifest next update:     Tue 09 Dec 2025 00:33:01 +0000
Files and hashes:         1: 3130332e39342e392e302f32342d3234203d3e203435373232.roa (hash: orPkEwdvzbgAdBqwJx5fyoqFz6nU1AjYY7pCrQmrMAU=)
                          2: 3130332e39342e31302e302f32342d3234203d3e203435373232.roa (hash: oriUzK7mgQPCjaTV1H4IccgCRtyIm4Y5jf+70OM+bhw=)
                          3: 323430313a333334303a3a2f33322d3438203d3e203435373232.roa (hash: tUFNikuzZ5Dxu83zUyF9psB1ZAXrbnO+JVBeZVWaO4g=)
                          4: 3138302e3137382e39322e302f32342d3234203d3e203435373232.roa (hash: ghDv+E88LbsHp+yiOmZsjAqDuH4NzWOqybkoMe5BmV8=)
                          5: 3138302e3137382e39342e302f32342d3234203d3e203435373232.roa (hash: r/svlrZcSr5sJUDVP99x6FJY548aywPcFlNv37DJt2Y=)
                          6: 3138302e3137382e39332e302f32342d3234203d3e203435373232.roa (hash: mp213bICEXwH+LqnHma8nvPV6BFgfv4aiHAHQpn9yQs=)
                          7: 3130332e39342e382e302f32342d3234203d3e203435373232.roa (hash: dTEDIPJlLGDlRHB30/PzLB90DYFKiiQue74QgGKHEVI=)
                          8: 3130332e39342e31312e302f32342d3234203d3e203435373232.roa (hash: qGI/gZ+/LHiM5HYO/jSSY227nu7Rlo4VufnCOUnRtK4=)
                          9: 5110A717EFE96B12E5D3A475E9B2179E5DE0EA0C.crl (hash: KbEs4e4gXC0vOKU40pN0kO3uy9flOb+DsJDe1TRFPEc=)
                          10: 3138302e3137382e39352e302f32342d3234203d3e203435373232.roa (hash: 9KZ9F45elzM13kws/U0IoAzbbI/YdymyAIpoe5+fMUI=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/e607d929-4ca8-4f53-a298-5e33be1f8604/0/5110A717EFE96B12E5D3A475E9B2179E5DE0EA0C.crl
                          rsync://repo-rpki.idnic.net/repo/e607d929-4ca8-4f53-a298-5e33be1f8604/0/5110A717EFE96B12E5D3A475E9B2179E5DE0EA0C.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5110A717EFE96B12E5D3A475E9B2179E5DE0EA0C.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 09 Dec 2025 00:33:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:e7:5a:28:fb:5f:62:4f:99:d5:44:ee:2a:40:af:27:4c:2b:00:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5110A717EFE96B12E5D3A475E9B2179E5DE0EA0C
        Validity
            Not Before: Dec  5 16:25:01 2025 GMT
            Not After : Dec  9 00:33:01 2025 GMT
        Subject: CN=F64590A4ED15F6D5586AAD7C9A8968C2D0AD8ACF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:8f:a2:f8:db:43:5c:88:c7:cd:e7:01:06:b9:
                    88:3f:6c:28:44:1c:3d:ef:8c:bf:1a:ce:7d:9e:ef:
                    59:3d:77:d1:9c:06:65:29:f6:bd:55:b7:b5:a3:3a:
                    42:1e:84:ae:83:61:86:a8:cf:8a:dd:81:57:f7:f7:
                    31:37:7b:ad:73:22:ce:7c:b3:0b:89:4c:55:ac:81:
                    41:44:7e:42:9f:49:6a:87:d3:f9:89:16:b5:84:61:
                    c3:12:f2:55:37:2c:a4:83:f2:0c:06:c1:15:50:13:
                    32:eb:a5:4d:38:60:4a:25:d5:9f:a5:33:8c:e2:09:
                    48:62:9d:ba:2b:e9:4d:ed:7b:9f:1a:0f:8e:1e:e9:
                    4b:cc:a6:29:4d:4f:9b:55:ee:aa:04:9d:f4:f4:a1:
                    6c:de:52:d6:44:82:e5:2f:1f:47:11:d1:c7:7d:50:
                    f5:7d:96:7f:11:28:9a:49:d2:7d:62:07:23:12:39:
                    44:b5:af:93:59:b1:77:94:1f:d2:cc:6d:12:58:dd:
                    1b:ce:c0:d3:e6:08:2c:d2:bf:6b:a7:a9:e3:a1:8b:
                    89:b7:8c:05:9f:f1:47:7f:dd:5e:72:96:cf:d4:f8:
                    56:90:ec:67:9f:d5:23:36:dd:a6:4d:6b:80:c7:f0:
                    26:cf:30:f6:99:df:e7:5e:a1:e6:b6:8c:bf:eb:2b:
                    c3:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:45:90:A4:ED:15:F6:D5:58:6A:AD:7C:9A:89:68:C2:D0:AD:8A:CF
            X509v3 Authority Key Identifier:
                keyid:51:10:A7:17:EF:E9:6B:12:E5:D3:A4:75:E9:B2:17:9E:5D:E0:EA:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/e607d929-4ca8-4f53-a298-5e33be1f8604/0/5110A717EFE96B12E5D3A475E9B2179E5DE0EA0C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5110A717EFE96B12E5D3A475E9B2179E5DE0EA0C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e607d929-4ca8-4f53-a298-5e33be1f8604/0/5110A717EFE96B12E5D3A475E9B2179E5DE0EA0C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:92:b4:e9:78:33:b3:22:4e:b3:11:bd:b9:e0:2f:94:64:7c:
         fa:3d:44:5b:04:ee:f7:7b:de:39:21:77:ac:a9:c5:6f:63:3b:
         cb:95:ff:66:73:1c:c1:a2:97:f6:5b:5f:fc:05:94:83:59:88:
         ba:67:1b:71:eb:40:aa:ac:75:cb:4e:e8:37:c3:0c:2e:63:64:
         a3:d7:65:3c:0d:77:e7:49:4b:84:7a:8e:b5:6e:7a:d5:ef:e5:
         ec:86:f5:d6:77:89:2f:0c:cb:5c:a7:06:65:00:9a:62:78:d8:
         dd:4a:f5:74:7c:d8:1f:8c:b4:31:8e:35:5e:9f:c5:9a:4e:96:
         27:59:97:bb:aa:4a:97:4a:9b:c5:db:7a:ae:9a:3f:d1:5e:07:
         85:91:95:02:c4:bd:5a:65:3e:51:f7:4d:9b:e3:3d:49:18:26:
         75:9f:bb:45:53:fc:df:89:35:da:ec:49:1d:7c:4c:db:4c:76:
         76:e4:95:10:f8:ab:3d:3d:a8:5f:8c:d1:7e:7f:b2:45:c6:7c:
         dc:82:a2:ba:ca:ba:fd:90:54:c6:fd:c7:7d:d7:97:8f:21:92:
         ce:e2:35:ef:b8:e4:3d:0a:62:98:1d:a8:31:a1:2b:9f:36:98:
         e1:19:57:81:6f:6a:04:f5:f3:34:90:78:98:a1:e3:13:da:8d:
         8f:93:b8:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 02:12:57 2025 by rpki-client