This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/f735e15f-d449-46d8-be0e-85e389bedc5e/0/542851974B72056B3D43792A5ED83E94DA8583CF.mft
File:                     542851974B72056B3D43792A5ED83E94DA8583CF.mft (raw, json)
Hash identifier:          nCbtNhXwHtLX9F2W5huohCGuRd1PDTkway1mbj/Pvkc=
Subject key identifier:   16:04:60:0B:6E:AD:95:EC:35:C0:47:70:75:56:B3:EE:67:83:90:38
Authority key identifier: 54:28:51:97:4B:72:05:6B:3D:43:79:2A:5E:D8:3E:94:DA:85:83:CF
Certificate issuer:       /CN=542851974B72056B3D43792A5ED83E94DA8583CF
Certificate serial:       74697512849AD6B327D60D53B3D2386BC3F19135
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/542851974B72056B3D43792A5ED83E94DA8583CF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/f735e15f-d449-46d8-be0e-85e389bedc5e/0/542851974B72056B3D43792A5ED83E94DA8583CF.mft
Manifest number:          015F
Signing time:             Fri 05 Dec 2025 11:20:49 +0000
Manifest this update:     Fri 05 Dec 2025 11:15:49 +0000
Manifest next update:     Mon 08 Dec 2025 19:47:49 +0000
Files and hashes:         1: 542851974B72056B3D43792A5ED83E94DA8583CF.crl (hash: EAVwwdY1YPb4FdFFoGvA8sTP8EJx91f4hfLWYjs1iYI=)
                          2: 3130332e3137372e36302e302f32342d3234203d3e20313437313432.roa (hash: 698jR3jKZ8pHoaDchjQqCam2SnsQK52skK3UhMYukls=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/f735e15f-d449-46d8-be0e-85e389bedc5e/0/542851974B72056B3D43792A5ED83E94DA8583CF.crl
                          rsync://repo-rpki.idnic.net/repo/f735e15f-d449-46d8-be0e-85e389bedc5e/0/542851974B72056B3D43792A5ED83E94DA8583CF.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/542851974B72056B3D43792A5ED83E94DA8583CF.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 08 Dec 2025 19:47:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:69:75:12:84:9a:d6:b3:27:d6:0d:53:b3:d2:38:6b:c3:f1:91:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=542851974B72056B3D43792A5ED83E94DA8583CF
        Validity
            Not Before: Dec  5 11:15:49 2025 GMT
            Not After : Dec  8 19:47:49 2025 GMT
        Subject: CN=1604600B6EAD95EC35C047707556B3EE67839038
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:ea:c1:f8:02:c1:45:1c:37:14:ca:65:46:e5:
                    0d:fa:cb:cc:12:f7:ed:ef:36:91:b8:e3:f6:eb:78:
                    ab:72:6d:24:a2:9e:d6:87:20:03:47:4b:34:2b:5c:
                    c3:b0:5d:92:26:21:7e:85:17:3f:13:4e:e1:de:e3:
                    a8:8a:e4:01:d2:01:54:ea:ec:9d:41:8f:68:6e:25:
                    b6:b8:5c:92:fc:c8:18:e4:0d:ff:68:b5:e1:56:ac:
                    fe:c4:02:a8:3e:6b:11:c5:77:3e:d2:59:44:9e:dd:
                    95:58:5d:3f:7a:79:47:72:ce:5e:26:f9:dd:0d:ed:
                    cc:f0:f7:d4:31:b8:71:80:df:d3:0d:02:a4:cd:71:
                    6f:02:d7:e3:c0:4e:1e:1e:af:ed:64:93:6e:a1:0b:
                    1c:49:b0:cb:dd:38:98:10:e5:08:38:eb:4e:4c:60:
                    fc:c9:c8:b8:57:5a:65:b2:33:8b:55:4d:ff:0c:64:
                    c6:3b:0e:97:5e:af:e5:7c:23:a2:d7:3d:da:89:df:
                    47:4d:bd:10:6f:e3:f5:9a:61:52:fb:9b:4b:6f:aa:
                    e1:fa:9f:3e:2e:e5:e9:2a:52:8d:98:2d:ef:00:92:
                    75:e4:c3:e7:75:55:6f:7e:a4:db:44:6f:29:7f:60:
                    66:ee:4e:5b:e0:af:8d:23:53:16:48:53:c8:f2:c1:
                    46:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:04:60:0B:6E:AD:95:EC:35:C0:47:70:75:56:B3:EE:67:83:90:38
            X509v3 Authority Key Identifier:
                keyid:54:28:51:97:4B:72:05:6B:3D:43:79:2A:5E:D8:3E:94:DA:85:83:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/f735e15f-d449-46d8-be0e-85e389bedc5e/0/542851974B72056B3D43792A5ED83E94DA8583CF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/542851974B72056B3D43792A5ED83E94DA8583CF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f735e15f-d449-46d8-be0e-85e389bedc5e/0/542851974B72056B3D43792A5ED83E94DA8583CF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:ea:8e:85:e9:8c:f9:84:1e:f1:53:ed:44:46:95:7c:0f:22:
         d2:49:8c:61:32:e0:a5:d6:5b:b8:0f:2c:47:ca:e6:7e:68:8d:
         ca:a8:31:f2:28:a2:4f:31:42:db:7c:b7:1f:66:11:2b:62:86:
         cb:70:43:c2:2e:64:ff:53:79:c4:c8:92:11:24:0b:fd:9d:d3:
         79:d2:22:77:39:58:67:12:93:7d:ea:ce:39:26:49:bb:e5:5e:
         37:a2:c8:eb:d3:57:e0:83:70:0c:5e:7f:f0:52:15:ac:08:22:
         f8:1c:c5:ac:f6:b4:f4:8b:81:52:0a:3c:10:1b:0a:77:54:60:
         81:9c:1e:9e:5c:fc:1c:47:4e:06:2b:d7:b3:2d:bf:9c:48:6e:
         92:88:6e:da:44:36:e2:fd:71:2a:73:46:94:98:9c:24:0d:63:
         1f:27:54:49:1b:b4:df:53:15:22:3d:95:40:2e:ea:8b:82:f4:
         44:b8:fd:3e:a5:e3:09:8e:9b:5e:87:c9:f2:94:1f:78:16:fe:
         2b:21:44:dd:93:a0:ee:50:2d:69:77:a2:42:35:c3:93:2e:cf:
         19:4a:67:4f:5a:a5:62:22:6a:03:28:29:b3:37:f4:7e:b3:2a:
         53:a5:35:65:57:f7:0d:12:41:01:fc:5b:fb:d8:0e:ec:ef:48:
         91:ef:4b:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 04:35:38 2025 by rpki-client