This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/26d7ede1-3fd0-4624-bef8-0e73e84994bc/0/5AB2F048BCF9D60D6323A72EF7255F38A81A93BE.mft
File:                     5AB2F048BCF9D60D6323A72EF7255F38A81A93BE.mft (raw, json)
Hash identifier:          48Mpt39m5IqDFsORV/kj+/NGa3NzU6LtBGCdijTXmu8=
Subject key identifier:   BC:A4:0C:98:AC:62:C7:D7:B7:68:8B:A2:55:EA:8F:35:B5:E5:5F:A6
Authority key identifier: 5A:B2:F0:48:BC:F9:D6:0D:63:23:A7:2E:F7:25:5F:38:A8:1A:93:BE
Certificate issuer:       /CN=5AB2F048BCF9D60D6323A72EF7255F38A81A93BE
Certificate serial:       3221A486740BF76AAF3D8620C89568C196F548E2
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5AB2F048BCF9D60D6323A72EF7255F38A81A93BE.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/26d7ede1-3fd0-4624-bef8-0e73e84994bc/0/5AB2F048BCF9D60D6323A72EF7255F38A81A93BE.mft
Manifest number:          04BB
Signing time:             Wed 17 Dec 2025 06:51:23 +0000
Manifest this update:     Wed 17 Dec 2025 06:46:23 +0000
Manifest next update:     Sat 20 Dec 2025 15:06:23 +0000
Files and hashes:         1: 323430363a313363303a663a3a2f34382d3438203d3e20313430343133.roa (hash: 1JMzXaJrugo1xCZjzMePjdBBw5qjt3/pxwhlGnC/exU=)
                          2: 323430363a313363303a333a3a2f34382d3438203d3e20313430343133.roa (hash: IFLXJKN/cIbd/Oh+HOkULz+7XgZ+889cBvLbuXP+Xf8=)
                          3: 323430363a313363303a313a3a2f34382d3438203d3e20313430343133.roa (hash: tDG6Iti0PLnRCu0mbkQzT0b2dqDqUbKctSFPSn5Mn7g=)
                          4: 323430363a313363303a3a2f34382d3438203d3e20313430343133.roa (hash: Gz+C+7FnVXoz+0qojAP+rNq+YbCJXPtNpRa9xBnME7I=)
                          5: 323430363a313363303a383a3a2f34382d3438203d3e20313430343133.roa (hash: f6hlVhcf22KoU870LdZr8ofD9JQqnnfyvKLr6j1Qgic=)
                          6: 323430363a313363303a3a2f33322d3332203d3e20313430343133.roa (hash: htuRYgwO+/oesGX5fEx8u0E0zBo0A2TVpj6idfUe6I4=)
                          7: 323430363a313363303a613a3a2f34382d3438203d3e20313430343133.roa (hash: E2mbQLtIdlxnYM18Po7s4O6v53R2Qoc6GrMKhL2r4OI=)
                          8: 5AB2F048BCF9D60D6323A72EF7255F38A81A93BE.crl (hash: RMt9WwJQ1FSf811LignkknBD/lJhM+ybwMAo9//R33o=)
                          9: 323430363a313363303a353a3a2f34382d3438203d3e20313430343133.roa (hash: ONf62+DvPOIB+a7e+YLFywaVigksQeK89X9Q/CSQVX4=)
                          10: 323430363a313363303a653a3a2f34382d3438203d3e20313430343133.roa (hash: f4HuOcLxZFUEjT9VvTe4bqIT2DldLAxhqn5BGEuGaVY=)
                          11: 323430363a313363303a623a3a2f34382d3438203d3e20313430343133.roa (hash: osu6cgVTsajhQgGRr72GUTVIcDtvbcTR6pfscBo/Vjg=)
                          12: 323430363a313363303a643a3a2f34382d3438203d3e20313430343133.roa (hash: AHvcTCMLEy/XIp7laYrrKnghYH6iwtgODIRCAU7uthM=)
                          13: 323430363a313363303a363a3a2f34382d3438203d3e20313430343133.roa (hash: tSvzNHHOTLE+PeD8SAArmYqhO7Ztwcuk/62pX8Gu/y0=)
                          14: 323430363a313363303a633a3a2f34382d3438203d3e20313430343133.roa (hash: SDN3qm6IB8N9HF40taceNvsGv3NpAGXMiVjPo6QgiNc=)
                          15: 323430363a313363303a373a3a2f34382d3438203d3e20313430343133.roa (hash: k6Z1cqOikqx8t9RPh+24QqZnUDFGexk4c6jfFeIucPQ=)
                          16: 323430363a313363303a323a3a2f34382d3438203d3e20313430343133.roa (hash: CHuhT91L4Bx2gvkmrXL92lkeo0HaZ7kmUtg30YZ0MWM=)
                          17: 3130332e3135312e33342e302f32342d3234203d3e20313430343133.roa (hash: bZM4rUbr/5eo/XLmWgfcXg1DbTPNYjhGuHArrlKmdos=)
                          18: 3130332e3135312e33352e302f32342d3234203d3e20313430343133.roa (hash: EILyPmlWJ7Ald971q91eFzzx7IL4/UbfGOvQ+dEFrSA=)
                          19: 3130332e3135312e33342e302f32332d3233203d3e20313430343133.roa (hash: pWG6S1U7mazV8YnSvTsXbW1HfQiM8AMh4bxaqVSo3rk=)
                          20: 323430363a313363303a343a3a2f34382d3438203d3e20313430343133.roa (hash: hUSefMFAZSv+SA3wPW8iCnypYrFgNGsQ492Jx7YTC9s=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/26d7ede1-3fd0-4624-bef8-0e73e84994bc/0/5AB2F048BCF9D60D6323A72EF7255F38A81A93BE.crl
                          rsync://repo-rpki.idnic.net/repo/26d7ede1-3fd0-4624-bef8-0e73e84994bc/0/5AB2F048BCF9D60D6323A72EF7255F38A81A93BE.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5AB2F048BCF9D60D6323A72EF7255F38A81A93BE.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Dec 2025 15:06:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:21:a4:86:74:0b:f7:6a:af:3d:86:20:c8:95:68:c1:96:f5:48:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5AB2F048BCF9D60D6323A72EF7255F38A81A93BE
        Validity
            Not Before: Dec 17 06:46:23 2025 GMT
            Not After : Dec 20 15:06:23 2025 GMT
        Subject: CN=BCA40C98AC62C7D7B7688BA255EA8F35B5E55FA6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:01:95:35:94:54:9a:a3:f8:50:ad:83:0c:4a:
                    dd:0c:4b:77:98:a2:ca:73:d5:b5:ff:00:30:dc:08:
                    de:cd:d9:fc:0b:ba:8e:04:01:09:e2:e5:89:34:87:
                    6c:8f:30:5a:83:75:37:4a:b1:d1:61:df:ae:49:10:
                    0a:f7:e7:c8:1f:d8:fc:3a:5b:dd:ce:fc:28:2c:d8:
                    51:e2:fc:2a:29:c0:7a:58:84:b5:ed:f5:93:31:12:
                    23:67:48:b9:f4:5f:2f:0b:34:51:d0:86:46:fb:48:
                    fe:ed:e7:57:da:a1:d1:5c:79:25:82:33:9a:40:8b:
                    27:40:d2:9d:7b:6d:9b:82:16:37:a5:bb:41:16:b4:
                    73:76:8d:3d:f9:57:73:f4:fd:4f:64:d5:0c:4e:f0:
                    12:2a:6d:db:21:36:a6:03:18:fc:5e:ca:51:50:93:
                    77:2a:61:ad:05:58:68:c9:ac:93:a4:df:82:e7:2d:
                    4c:ed:c8:ff:eb:c8:19:18:49:39:ba:90:ce:11:92:
                    57:25:fe:98:3c:b5:4d:17:d4:8b:80:b7:66:cc:85:
                    0c:61:58:78:81:f6:7f:d3:ab:4d:a7:6e:66:a0:9a:
                    f6:6c:b9:c2:3e:bf:e1:a8:a4:7f:84:ec:7b:57:fc:
                    b3:e5:13:8c:a9:a0:c0:a6:df:8d:5b:47:e4:d6:5d:
                    72:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:A4:0C:98:AC:62:C7:D7:B7:68:8B:A2:55:EA:8F:35:B5:E5:5F:A6
            X509v3 Authority Key Identifier:
                keyid:5A:B2:F0:48:BC:F9:D6:0D:63:23:A7:2E:F7:25:5F:38:A8:1A:93:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/26d7ede1-3fd0-4624-bef8-0e73e84994bc/0/5AB2F048BCF9D60D6323A72EF7255F38A81A93BE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5AB2F048BCF9D60D6323A72EF7255F38A81A93BE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/26d7ede1-3fd0-4624-bef8-0e73e84994bc/0/5AB2F048BCF9D60D6323A72EF7255F38A81A93BE.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:77:28:34:84:95:09:23:1c:a9:7a:e8:b3:7c:84:e9:42:3c:
         b2:df:cc:1f:47:ff:0d:ab:81:0a:9e:ea:a1:29:57:74:5a:15:
         82:12:81:12:6b:8f:22:7e:12:b2:96:53:04:1f:0a:fc:53:98:
         8d:98:5e:4b:aa:e9:ca:11:c4:da:aa:a6:eb:b8:9c:21:1b:ba:
         f8:f8:20:6b:b4:ca:05:d3:3c:ca:cd:47:4c:2c:ac:dc:18:79:
         d6:8a:c4:7b:a8:d1:5a:13:b9:61:aa:25:f9:df:bc:05:3e:28:
         e8:9c:28:7b:e9:f7:83:40:27:d8:8b:93:ec:30:dd:b2:0b:6f:
         bd:35:64:32:09:29:de:23:40:66:ec:eb:3a:27:e2:cc:6f:4b:
         df:a3:6f:d0:2b:57:22:4d:aa:52:d4:c2:87:45:42:30:83:a6:
         5b:61:2d:b9:2f:95:2c:21:be:2d:b3:04:e7:28:29:2c:af:11:
         a4:2f:18:f1:40:ce:1d:ce:51:0b:e6:72:82:12:7e:bc:5a:7a:
         99:3c:65:2e:6c:cd:36:08:37:2e:e5:89:ee:30:1b:55:4a:e5:
         44:7d:75:27:fd:9a:37:1a:7c:6d:c6:c8:46:ed:48:e9:cd:71:
         76:64:03:f6:57:b1:cf:ab:1f:ba:86:12:63:bd:d8:29:27:ec:
         e2:43:18:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 11:34:49 2025 by rpki-client