This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/0221ad67-d35c-4559-9a73-7c74f50dcffa/0/56369FDBBCDE685B4440429A22B7967BBC3C5E36.mft
File:                     56369FDBBCDE685B4440429A22B7967BBC3C5E36.mft (raw, json)
Hash identifier:          wkchOz87BY02/wxR3rEfvyYDD3M5yoxzUJvPcS7HSdI=
Subject key identifier:   C1:2A:B5:F1:B0:D2:D7:29:E0:BE:5B:A5:FE:78:16:24:1A:E4:BE:31
Authority key identifier: 56:36:9F:DB:BC:DE:68:5B:44:40:42:9A:22:B7:96:7B:BC:3C:5E:36
Certificate issuer:       /CN=56369FDBBCDE685B4440429A22B7967BBC3C5E36
Certificate serial:       35EE3B55B57E74FC266F41AC2E2636855628A0DB
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/56369FDBBCDE685B4440429A22B7967BBC3C5E36.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/0221ad67-d35c-4559-9a73-7c74f50dcffa/0/56369FDBBCDE685B4440429A22B7967BBC3C5E36.mft
Manifest number:          03A5
Signing time:             Wed 24 Dec 2025 02:02:49 +0000
Manifest this update:     Wed 24 Dec 2025 01:57:49 +0000
Manifest next update:     Sat 27 Dec 2025 12:49:49 +0000
Files and hashes:         1: 323030313a6466313a653430303a3a2f34382d3438203d3e20313333383034.roa (hash: bKELrvkygew/puVSCxFVERwd18KUv2pchNnSXhErods=)
                          2: 56369FDBBCDE685B4440429A22B7967BBC3C5E36.crl (hash: Sl/FsNEyvC4iJPhFzvql9SpTsmIP1ZeHcSQ8H4fEsLA=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/0221ad67-d35c-4559-9a73-7c74f50dcffa/0/56369FDBBCDE685B4440429A22B7967BBC3C5E36.crl
                          rsync://repo-rpki.idnic.net/repo/0221ad67-d35c-4559-9a73-7c74f50dcffa/0/56369FDBBCDE685B4440429A22B7967BBC3C5E36.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/56369FDBBCDE685B4440429A22B7967BBC3C5E36.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 27 Dec 2025 12:49:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:ee:3b:55:b5:7e:74:fc:26:6f:41:ac:2e:26:36:85:56:28:a0:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56369FDBBCDE685B4440429A22B7967BBC3C5E36
        Validity
            Not Before: Dec 24 01:57:49 2025 GMT
            Not After : Dec 27 12:49:49 2025 GMT
        Subject: CN=C12AB5F1B0D2D729E0BE5BA5FE7816241AE4BE31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:c5:e3:08:1f:72:dc:73:67:a4:a7:6c:85:51:
                    5b:50:dd:21:de:6b:51:bc:a4:90:ff:d8:a7:c5:f2:
                    b3:e1:64:12:08:35:cf:63:cd:d1:a1:f6:6f:75:6f:
                    ee:a2:fe:27:49:b8:18:f8:eb:ca:75:d7:ca:48:a6:
                    fd:a0:7f:3e:4e:c6:8e:95:7b:02:4e:d9:c6:b6:9d:
                    dc:67:09:72:b3:95:8e:9b:bc:ef:79:70:4e:d0:d6:
                    58:79:08:2c:45:3e:9d:f7:24:d9:d2:44:e2:d8:0e:
                    8f:59:46:b6:4e:b6:9b:10:36:f0:a8:4b:10:27:67:
                    ce:34:62:ec:54:63:41:24:f5:e7:69:a6:1d:37:c5:
                    c6:05:a4:d7:05:57:04:bd:c3:47:55:6b:21:52:ac:
                    12:5b:a8:f2:44:5c:66:c6:b5:e0:6c:fd:2a:5e:36:
                    c0:4e:d0:6d:e1:11:64:41:22:b9:9b:f3:88:0d:62:
                    93:5f:0c:32:de:dd:19:7e:7b:88:67:dc:69:9c:57:
                    9f:1c:06:9f:aa:4b:a5:d2:73:f2:1d:ac:a8:40:04:
                    7b:5a:cc:f5:ef:6d:25:7a:74:25:f0:1c:f4:63:ce:
                    d7:6d:e0:55:48:8c:e7:ff:70:20:f0:28:03:d5:6e:
                    e1:6a:c0:82:4a:0b:b8:4c:3c:27:99:c0:b6:52:4a:
                    1a:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:2A:B5:F1:B0:D2:D7:29:E0:BE:5B:A5:FE:78:16:24:1A:E4:BE:31
            X509v3 Authority Key Identifier:
                keyid:56:36:9F:DB:BC:DE:68:5B:44:40:42:9A:22:B7:96:7B:BC:3C:5E:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/0221ad67-d35c-4559-9a73-7c74f50dcffa/0/56369FDBBCDE685B4440429A22B7967BBC3C5E36.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/56369FDBBCDE685B4440429A22B7967BBC3C5E36.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0221ad67-d35c-4559-9a73-7c74f50dcffa/0/56369FDBBCDE685B4440429A22B7967BBC3C5E36.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:9a:8e:df:64:17:ae:6c:df:70:01:83:d9:a3:0d:31:98:63:
         f2:ba:0c:bd:b8:af:84:da:e0:4a:07:90:03:d0:89:f8:5d:ed:
         96:0b:0d:54:2d:ce:74:7e:4d:20:79:90:2b:36:b6:a9:54:87:
         13:73:4d:55:44:cb:d9:58:87:0d:a9:40:94:4b:a2:25:48:9e:
         8a:7b:a2:09:52:68:94:ef:98:7e:b7:e7:6d:f1:81:16:0c:64:
         13:40:92:a8:3a:b9:1f:ef:39:c4:f1:59:e9:3c:77:9e:f7:20:
         42:0a:52:ba:41:9f:6d:a0:c2:86:ce:23:2a:d9:32:06:f2:94:
         f1:41:29:a5:05:7e:63:78:5f:25:60:33:eb:48:0b:f3:95:a3:
         2b:79:a1:d0:7c:ed:4c:ba:01:3d:4d:0b:6d:13:4b:5d:fe:ec:
         82:26:8f:81:81:77:be:46:40:6e:2a:61:b5:e1:d5:14:4a:ad:
         24:f0:83:1b:94:ac:3a:41:e4:62:9d:4e:cc:e3:43:38:da:e0:
         b9:b4:11:af:13:0a:1f:0f:3f:41:3d:81:d0:14:95:56:a3:fd:
         62:16:db:75:41:9e:ed:65:7a:a8:fb:7c:f7:a2:94:e5:0b:8f:
         de:7d:a5:64:e9:7c:0f:df:58:81:cd:4c:f3:8b:1c:ed:14:0a:
         5a:40:f5:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 25 17:10:39 2025 by rpki-client