This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/54f1372c-43a6-4fda-b50e-d01eb42c689f/0/4515472806DD01B59715410103D51C05E4F28B96.mft
File:                     4515472806DD01B59715410103D51C05E4F28B96.mft (raw, json)
Hash identifier:          248o+L7gZ7MCJedW13BAFh/JhyJrm3VHXppncxCmzjI=
Subject key identifier:   B0:41:E1:9D:09:4D:77:F3:CE:B4:6E:E6:9A:DE:16:0C:A6:CA:DC:F1
Authority key identifier: 45:15:47:28:06:DD:01:B5:97:15:41:01:03:D5:1C:05:E4:F2:8B:96
Certificate issuer:       /CN=4515472806DD01B59715410103D51C05E4F28B96
Certificate serial:       0CEC4AB6280FD037FB4C62F8162490F7B4BF550A
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4515472806DD01B59715410103D51C05E4F28B96.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/54f1372c-43a6-4fda-b50e-d01eb42c689f/0/4515472806DD01B59715410103D51C05E4F28B96.mft
Manifest number:          0260
Signing time:             Wed 24 Dec 2025 02:53:08 +0000
Manifest this update:     Wed 24 Dec 2025 02:48:08 +0000
Manifest next update:     Sat 27 Dec 2025 08:55:08 +0000
Files and hashes:         1: 3130332e3137332e3134322e302f32332d3233203d3e20313437303930.roa (hash: Tu/lmXG1SR10FA6Mlg+q8BJ0wAM8BZdiNc8TMtD2S9s=)
                          2: 3130332e3137332e3134332e302f32342d3234203d3e20313437303930.roa (hash: vRlgOXUVxZU3L35iv5K0e1tNJbS3jxz2tstDvvGIpOA=)
                          3: 4515472806DD01B59715410103D51C05E4F28B96.crl (hash: gsiwQG3buDV1SPGkVaUIKm/M4Xr5yrg1M+SUEJj/nlM=)
                          4: 3130332e3137332e3134322e302f32342d3234203d3e20313437303930.roa (hash: HBcmtBf124LaJLrEpyA0+OcG5c4rLC3yDarVnj9n8nQ=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/54f1372c-43a6-4fda-b50e-d01eb42c689f/0/4515472806DD01B59715410103D51C05E4F28B96.crl
                          rsync://repo-rpki.idnic.net/repo/54f1372c-43a6-4fda-b50e-d01eb42c689f/0/4515472806DD01B59715410103D51C05E4F28B96.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4515472806DD01B59715410103D51C05E4F28B96.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 27 Dec 2025 08:55:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:ec:4a:b6:28:0f:d0:37:fb:4c:62:f8:16:24:90:f7:b4:bf:55:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4515472806DD01B59715410103D51C05E4F28B96
        Validity
            Not Before: Dec 24 02:48:08 2025 GMT
            Not After : Dec 27 08:55:08 2025 GMT
        Subject: CN=B041E19D094D77F3CEB46EE69ADE160CA6CADCF1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:85:ec:39:a6:32:a8:12:c5:52:e3:79:da:fa:
                    81:09:da:ea:92:3e:7c:29:e3:47:0f:a5:ec:20:20:
                    79:29:04:29:5e:0a:a0:9a:d8:04:4c:75:36:60:17:
                    c8:a0:d9:b8:9a:e0:bd:a3:62:74:f1:97:7e:40:17:
                    b7:21:70:18:9c:e1:6c:39:03:37:da:15:ef:39:66:
                    9a:ca:22:43:f0:b3:c7:1b:b9:fe:07:90:52:57:d7:
                    bc:34:0d:8a:13:0c:02:99:b4:3e:d6:86:ba:0f:48:
                    17:0e:22:8c:ce:7c:f2:45:15:bb:81:fb:36:ee:10:
                    65:2b:6c:e1:66:63:c3:34:82:50:24:ab:0f:b3:1b:
                    bc:00:c3:3a:55:fa:1b:19:6a:56:b9:ce:a4:88:8f:
                    0a:2d:9d:cb:8b:c6:3b:ca:ae:fc:50:d4:a6:c0:e1:
                    c2:15:02:08:fd:0d:42:cc:96:85:c2:2e:50:cb:ba:
                    6e:95:7e:f0:24:b7:c6:5b:f8:88:fa:62:56:95:c1:
                    04:dd:c3:2a:3d:98:7a:af:38:a0:e0:d6:29:bb:eb:
                    c7:c2:39:f9:b2:52:c6:6d:29:5b:44:55:f5:53:8f:
                    6a:a6:e7:8c:f1:b1:fb:2a:06:8b:37:6e:23:ae:56:
                    52:5e:34:c2:29:c5:63:70:08:91:c2:37:83:04:61:
                    44:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:41:E1:9D:09:4D:77:F3:CE:B4:6E:E6:9A:DE:16:0C:A6:CA:DC:F1
            X509v3 Authority Key Identifier:
                keyid:45:15:47:28:06:DD:01:B5:97:15:41:01:03:D5:1C:05:E4:F2:8B:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/54f1372c-43a6-4fda-b50e-d01eb42c689f/0/4515472806DD01B59715410103D51C05E4F28B96.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4515472806DD01B59715410103D51C05E4F28B96.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/54f1372c-43a6-4fda-b50e-d01eb42c689f/0/4515472806DD01B59715410103D51C05E4F28B96.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:47:4c:59:81:b2:84:11:57:4a:06:62:cf:66:69:c7:6e:e7:
         40:2e:f6:b4:a0:04:42:66:79:36:e2:ed:40:55:9b:10:6a:8c:
         e4:3e:e6:45:03:30:ae:b6:30:a6:8a:86:33:e0:77:2d:d7:a2:
         28:6d:98:10:cb:c2:97:7f:2d:c5:47:27:fb:c6:ad:ba:26:21:
         7b:56:aa:9f:68:df:92:93:a4:34:c3:a6:76:29:4a:31:ec:94:
         d0:78:cd:90:69:20:74:9e:f3:19:49:69:84:2b:e1:c8:42:ff:
         de:e2:63:52:60:b7:20:c0:98:01:1c:5e:60:b9:e7:2d:64:f2:
         36:c2:8f:78:83:e9:f0:0e:32:bc:80:15:6f:9c:2c:1d:91:8f:
         39:8d:df:96:1b:7c:eb:a2:d5:8a:73:cf:8b:75:de:db:f1:91:
         2b:21:4b:c6:58:47:b9:a6:5c:36:a8:10:9f:ed:da:68:9f:b6:
         24:06:a8:e6:ba:1a:c7:6b:7c:a6:d7:ce:5d:fc:eb:a6:33:4f:
         21:66:21:95:8a:04:03:f2:13:07:4c:7b:a1:fb:95:c2:c0:c6:
         2f:d5:16:ee:a0:9d:38:9e:6c:73:2a:c6:ba:04:c7:b0:2a:62:
         57:7a:58:24:15:37:8a:5b:bb:bd:8e:37:35:64:38:04:d5:fe:
         49:a1:6f:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 20:23:38 2025 by rpki-client