This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/35a20077-fc53-43a3-bda7-f39956d9926d/0/5BB7E8A3ABF6DF6D46C3D5F91EC3B77870CE6C61.mft
File:                     5BB7E8A3ABF6DF6D46C3D5F91EC3B77870CE6C61.mft (raw, json)
Hash identifier:          lp7wRAd5v1MpozogtkTcttB9HpzJ75Eo9FAgMA4lQKE=
Subject key identifier:   81:18:4E:12:4B:9B:B0:04:C5:E1:3C:40:0E:82:50:B5:33:5D:A5:5C
Authority key identifier: 5B:B7:E8:A3:AB:F6:DF:6D:46:C3:D5:F9:1E:C3:B7:78:70:CE:6C:61
Certificate issuer:       /CN=5BB7E8A3ABF6DF6D46C3D5F91EC3B77870CE6C61
Certificate serial:       042DD5579D6CF37D43C80734569E0E89796CCFD9
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5BB7E8A3ABF6DF6D46C3D5F91EC3B77870CE6C61.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/35a20077-fc53-43a3-bda7-f39956d9926d/0/5BB7E8A3ABF6DF6D46C3D5F91EC3B77870CE6C61.mft
Manifest number:          F9
Signing time:             Sat 27 Dec 2025 20:00:43 +0000
Manifest this update:     Sat 27 Dec 2025 19:55:43 +0000
Manifest next update:     Wed 31 Dec 2025 06:36:43 +0000
Files and hashes:         1: 5BB7E8A3ABF6DF6D46C3D5F91EC3B77870CE6C61.crl (hash: i+2IB912/+5l39klzdmGjPubgjsAEGMbBRM7JX/hYHs=)
                          2: 3136302e32322e37302e302f32332d3234203d3e203538333831.roa (hash: FO3pGbtDCey282ifjhO/l/kBiiy065aX3qH0ZWB4XyM=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/35a20077-fc53-43a3-bda7-f39956d9926d/0/5BB7E8A3ABF6DF6D46C3D5F91EC3B77870CE6C61.crl
                          rsync://repo-rpki.idnic.net/repo/35a20077-fc53-43a3-bda7-f39956d9926d/0/5BB7E8A3ABF6DF6D46C3D5F91EC3B77870CE6C61.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5BB7E8A3ABF6DF6D46C3D5F91EC3B77870CE6C61.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 30 Dec 2025 04:54:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:2d:d5:57:9d:6c:f3:7d:43:c8:07:34:56:9e:0e:89:79:6c:cf:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5BB7E8A3ABF6DF6D46C3D5F91EC3B77870CE6C61
        Validity
            Not Before: Dec 27 19:55:43 2025 GMT
            Not After : Dec 31 06:36:43 2025 GMT
        Subject: CN=81184E124B9BB004C5E13C400E8250B5335DA55C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:d7:b8:de:5b:7e:0c:4c:4d:1a:1e:c0:04:c9:
                    90:49:06:52:7e:65:14:fe:18:b9:f8:33:8d:53:70:
                    5c:d1:6d:7d:86:7c:bd:86:fa:d6:0f:97:07:cb:42:
                    c6:2e:b2:d6:d3:fa:29:0a:76:0c:94:b0:26:8a:73:
                    f5:60:75:2f:2d:cd:0c:98:20:57:b5:c6:30:e6:9a:
                    6e:ff:37:67:8e:20:c3:2b:3d:de:91:e6:e5:b9:ef:
                    78:ae:04:f6:6e:37:e4:10:99:83:42:21:37:67:9f:
                    ac:f7:04:f7:50:d9:34:15:2a:af:40:f8:ce:5f:34:
                    5b:5b:bf:d2:9f:35:34:4b:f4:3d:29:d4:bf:58:e4:
                    1e:e7:80:b4:df:7f:76:91:de:60:10:33:0b:8b:03:
                    5f:94:db:c9:48:31:54:7f:22:82:23:f5:f7:c5:76:
                    ee:cf:d8:34:96:69:8e:f6:f9:bb:bc:ab:30:70:25:
                    e5:93:e6:97:fd:54:eb:0a:c7:0b:ff:7d:6a:87:b7:
                    45:6c:53:b9:77:d8:2e:b8:a8:69:6e:a7:7c:5e:64:
                    b2:94:c7:b0:05:71:09:98:95:52:f1:61:37:cf:1a:
                    7e:59:8e:fd:e6:6e:0d:34:bd:dc:18:ac:e4:07:f2:
                    01:b0:42:8c:1f:2f:86:54:a7:e8:d1:55:fd:5f:f4:
                    ec:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:18:4E:12:4B:9B:B0:04:C5:E1:3C:40:0E:82:50:B5:33:5D:A5:5C
            X509v3 Authority Key Identifier:
                keyid:5B:B7:E8:A3:AB:F6:DF:6D:46:C3:D5:F9:1E:C3:B7:78:70:CE:6C:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/35a20077-fc53-43a3-bda7-f39956d9926d/0/5BB7E8A3ABF6DF6D46C3D5F91EC3B77870CE6C61.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5BB7E8A3ABF6DF6D46C3D5F91EC3B77870CE6C61.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/35a20077-fc53-43a3-bda7-f39956d9926d/0/5BB7E8A3ABF6DF6D46C3D5F91EC3B77870CE6C61.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:99:46:48:9f:7e:1e:65:ec:4e:45:9f:14:8b:ae:8a:86:12:
         18:d8:15:74:20:07:18:15:02:64:d7:b5:bc:f8:6b:a4:99:fd:
         04:f7:f3:3b:35:25:14:10:15:8b:95:8f:93:51:48:c9:c6:ca:
         88:3e:83:42:15:a0:b5:83:33:c5:e6:38:f8:bb:11:36:c0:53:
         ec:9b:77:7c:be:8d:55:99:c8:60:d5:6c:f4:52:b4:c3:4a:3a:
         80:57:91:fb:0d:c7:11:1a:ce:0b:2c:c4:76:42:5b:d9:26:29:
         5a:6e:09:a1:f5:1a:9b:3c:dd:cf:3e:6b:05:31:5c:ea:a6:65:
         79:29:e2:57:a1:e3:49:34:fc:a0:cf:d3:f7:5d:31:58:bc:e1:
         68:29:3c:1d:0b:38:fe:f0:32:95:0f:f3:70:30:ac:76:9b:98:
         75:e0:a5:aa:48:47:dc:28:62:72:ae:14:6a:6a:b5:8b:4b:2c:
         ae:d5:d0:d0:83:37:1c:3f:5c:c4:44:28:dc:6f:8a:35:a1:93:
         22:10:b3:6a:59:cd:6a:df:5a:69:9f:5d:b4:7f:00:f2:f2:32:
         b5:d4:8a:5e:30:3b:10:45:a2:38:3a:a0:b4:be:31:b5:a1:18:
         2a:5f:41:a7:c8:23:50:6e:15:6c:f1:7e:aa:c6:b2:e0:ca:54:
         9e:f2:1a:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 29 01:10:38 2025 by rpki-client