This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/032f98a0-0947-4f7a-bee7-ffc3d05b940e/0/F5BC050A20C516FEBC061A1B70E488BB426444BC.mft
File:                     F5BC050A20C516FEBC061A1B70E488BB426444BC.mft (raw, json)
Hash identifier:          7gG8/xnTKMiu3fxuQU9uMpY68ncp88FE/vMl8jpoMdI=
Subject key identifier:   0C:BA:9F:36:BB:FD:8E:B7:36:1E:D7:76:3C:C1:32:A2:18:EE:EB:A5
Authority key identifier: F5:BC:05:0A:20:C5:16:FE:BC:06:1A:1B:70:E4:88:BB:42:64:44:BC
Certificate issuer:       /CN=F5BC050A20C516FEBC061A1B70E488BB426444BC
Certificate serial:       608F178A3CA007C525CEE9E623AE8017F77E6654
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F5BC050A20C516FEBC061A1B70E488BB426444BC.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/032f98a0-0947-4f7a-bee7-ffc3d05b940e/0/F5BC050A20C516FEBC061A1B70E488BB426444BC.mft
Manifest number:          B3
Signing time:             Fri 19 Dec 2025 13:42:01 +0000
Manifest this update:     Fri 19 Dec 2025 13:37:01 +0000
Manifest next update:     Tue 23 Dec 2025 00:10:01 +0000
Files and hashes:         1: 3135372e36362e3137322e302f32332d3234203d3e20313533313339.roa (hash: IcWkQYDLFcPwwtzYdPcj5i2iEcvHXh39BUHPHZLmTXs=)
                          2: F5BC050A20C516FEBC061A1B70E488BB426444BC.crl (hash: 6Y8T9FkbW+YybBlwzYf/EFLmB6jIolo5vZWYmk8Y4XM=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/032f98a0-0947-4f7a-bee7-ffc3d05b940e/0/F5BC050A20C516FEBC061A1B70E488BB426444BC.crl
                          rsync://repo-rpki.idnic.net/repo/032f98a0-0947-4f7a-bee7-ffc3d05b940e/0/F5BC050A20C516FEBC061A1B70E488BB426444BC.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F5BC050A20C516FEBC061A1B70E488BB426444BC.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 23 Dec 2025 00:10:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:8f:17:8a:3c:a0:07:c5:25:ce:e9:e6:23:ae:80:17:f7:7e:66:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F5BC050A20C516FEBC061A1B70E488BB426444BC
        Validity
            Not Before: Dec 19 13:37:01 2025 GMT
            Not After : Dec 23 00:10:01 2025 GMT
        Subject: CN=0CBA9F36BBFD8EB7361ED7763CC132A218EEEBA5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:72:f4:8b:94:b8:e6:f8:84:87:3f:d1:92:40:
                    67:dc:f8:7b:8b:b4:db:37:82:9f:5a:60:1f:b8:b8:
                    c3:39:6c:27:1f:9b:e3:05:5d:30:5b:9b:03:f2:63:
                    72:88:d5:8a:04:8f:34:cf:2f:6e:38:ad:36:f6:7e:
                    38:3f:4a:29:95:b8:80:bc:70:8e:5a:bf:35:33:67:
                    23:0b:ab:4d:d4:dd:0b:f5:34:c3:b7:04:b7:bb:4c:
                    d0:d0:0b:bc:28:45:b0:c8:16:83:8e:bf:55:bc:5d:
                    9e:88:9e:46:e4:a9:1c:d5:7b:68:84:b9:38:11:c5:
                    ff:33:e1:1f:05:1f:ab:c2:bc:eb:2c:44:07:75:7b:
                    61:f8:45:19:2f:9a:53:c0:c1:e7:a3:5b:33:2b:54:
                    ff:e6:63:60:a7:8f:3a:4c:ad:8b:fb:33:c7:9f:9b:
                    e7:88:e0:72:7f:b5:38:25:06:84:b8:b9:2f:2b:80:
                    b3:8d:f6:6d:42:53:31:2b:0e:49:a3:f4:25:a2:97:
                    94:17:e6:98:eb:8d:3c:39:35:3a:5e:6f:8a:24:00:
                    58:39:99:0f:c9:85:03:f3:f7:bb:11:14:90:5d:75:
                    ff:4a:2d:70:10:bb:5a:cd:6c:73:17:00:fb:39:d5:
                    a0:7a:12:6b:25:6e:c1:83:27:8c:4c:54:64:82:6e:
                    27:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:BA:9F:36:BB:FD:8E:B7:36:1E:D7:76:3C:C1:32:A2:18:EE:EB:A5
            X509v3 Authority Key Identifier:
                keyid:F5:BC:05:0A:20:C5:16:FE:BC:06:1A:1B:70:E4:88:BB:42:64:44:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/032f98a0-0947-4f7a-bee7-ffc3d05b940e/0/F5BC050A20C516FEBC061A1B70E488BB426444BC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F5BC050A20C516FEBC061A1B70E488BB426444BC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/032f98a0-0947-4f7a-bee7-ffc3d05b940e/0/F5BC050A20C516FEBC061A1B70E488BB426444BC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:10:dd:50:c1:ba:b1:6c:85:2f:f5:ef:13:9c:0a:b3:46:fa:
         8d:a2:19:36:44:70:0b:08:51:d5:6b:f8:d1:8e:df:f2:4a:3a:
         02:8a:b8:32:86:5c:5a:10:22:b3:81:a3:95:30:e2:4c:60:cb:
         55:b3:1a:12:c4:40:2d:12:29:c3:2f:fe:5d:42:cb:19:dc:f7:
         ce:d6:bf:9a:29:7c:72:c2:df:76:9a:60:a2:76:dc:b5:e5:db:
         70:47:f5:5c:4a:f9:2c:b6:83:60:e7:11:b7:fd:7e:15:09:0a:
         ab:63:20:a3:4c:ae:8d:c5:b8:02:f2:d1:59:d6:2c:3c:cf:c8:
         4d:a6:ed:4d:6a:db:55:e0:2c:38:c6:c4:6c:e5:1e:29:02:cc:
         10:cb:17:f3:47:41:d0:c0:98:9b:ec:db:7b:68:28:01:2d:43:
         27:7d:69:a8:26:50:c7:0d:0a:04:a7:b4:fb:b4:17:b4:84:44:
         38:87:ba:45:9b:55:30:39:c5:86:cf:76:07:bb:1e:ee:12:8f:
         1e:39:db:9a:8b:56:4c:6e:c2:7e:ed:88:b7:c1:56:79:f3:ff:
         0f:27:fe:f0:1f:b0:cd:f5:76:dc:6f:9f:e3:f7:e0:68:03:df:
         94:99:4a:8e:c8:e3:38:bc:cb:b7:56:6d:34:b3:28:84:d6:c8:
         5c:75:31:85
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUYI8XijygB8UlzunmI66AF/d+ZlQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjVCQzA1MEEyMEM1MTZGRUJDMDYxQTFCNzBFNDg4QkI0
MjY0NDRCQzAeFw0yNTEyMTkxMzM3MDFaFw0yNTEyMjMwMDEwMDFaMDMxMTAvBgNV
BAMTKDBDQkE5RjM2QkJGRDhFQjczNjFFRDc3NjNDQzEzMkEyMThFRUVCQTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOcvSLlLjm+ISHP9GSQGfc+HuL
tNs3gp9aYB+4uMM5bCcfm+MFXTBbmwPyY3KI1YoEjzTPL244rTb2fjg/SimVuIC8
cI5avzUzZyMLq03U3Qv1NMO3BLe7TNDQC7woRbDIFoOOv1W8XZ6InkbkqRzVe2iE
uTgRxf8z4R8FH6vCvOssRAd1e2H4RRkvmlPAweejWzMrVP/mY2CnjzpMrYv7M8ef
m+eI4HJ/tTglBoS4uS8rgLON9m1CUzErDkmj9CWil5QX5pjrjTw5NTpeb4okAFg5
mQ/JhQPz97sRFJBddf9KLXAQu1rNbHMXAPs51aB6EmslbsGDJ4xMVGSCbidBAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUDLqfNrv9jrc2Htd2PMEyohju66UwHwYDVR0j
BBgwFoAU9bwFCiDFFv68BhobcOSIu0JkRLwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w
MzJmOThhMC0wOTQ3LTRmN2EtYmVlNy1mZmMzZDA1Yjk0MGUvMC9GNUJDMDUwQTIw
QzUxNkZFQkMwNjFBMUI3MEU0ODhCQjQyNjQ0NEJDLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzEvRjVCQzA1MEEyMEM1MTZGRUJDMDYxQTFCNzBFNDg4QkI0MjY0
NDRCQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDMyZjk4YTAtMDk0Ny00ZjdhLWJl
ZTctZmZjM2QwNWI5NDBlLzAvRjVCQzA1MEEyMEM1MTZGRUJDMDYxQTFCNzBFNDg4
QkI0MjY0NDRCQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAFoQ3VDBurFshS/17xOcCrNG+o2iGTZEcAsI
UdVr+NGO3/JKOgKKuDKGXFoQIrOBo5Uw4kxgy1WzGhLEQC0SKcMv/l1Cyxnc987W
v5opfHLC33aaYKJ23LXl23BH9VxK+Sy2g2DnEbf9fhUJCqtjIKNMro3FuALy0VnW
LDzPyE2m7U1q21XgLDjGxGzlHikCzBDLF/NHQdDAmJvs23toKAEtQyd9aagmUMcN
CgSntPu0F7SERDiHukWbVTA5xYbPdge7Hu4Sjx4525qLVkxuwn7tiLfBVnnz/w8n
/vAfsM31dtxvn+P34GgD35SZSo7I4zi8y7dWbTSzKITWyFx1MYU=
-----END CERTIFICATE-----
Generated at Sun Dec 21 04:06:00 2025 by rpki-client