This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/5ac6155e-2d2f-4f9e-b218-eb525b3a1119/0/405E466852C38FD4CD20BA6115840947D5D24F5D.mft
File:                     405E466852C38FD4CD20BA6115840947D5D24F5D.mft (raw, json)
Hash identifier:          rjWI0zRTevAui2a7o/OP82yhhtoscNF05fyq/iMNA8M=
Subject key identifier:   CB:AA:F0:BB:89:35:3D:22:36:3A:20:0D:3C:3D:A8:9C:C1:03:46:C8
Authority key identifier: 40:5E:46:68:52:C3:8F:D4:CD:20:BA:61:15:84:09:47:D5:D2:4F:5D
Certificate issuer:       /CN=405E466852C38FD4CD20BA6115840947D5D24F5D
Certificate serial:       4BA6600E043D90D130F94E0D784124E75137AF88
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/405E466852C38FD4CD20BA6115840947D5D24F5D.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/5ac6155e-2d2f-4f9e-b218-eb525b3a1119/0/405E466852C38FD4CD20BA6115840947D5D24F5D.mft
Manifest number:          DD
Signing time:             Fri 19 Dec 2025 13:41:15 +0000
Manifest this update:     Fri 19 Dec 2025 13:36:15 +0000
Manifest next update:     Tue 23 Dec 2025 00:48:15 +0000
Files and hashes:         1: 3136302e32352e3230332e302f32342d3234203d3e20313533313038.roa (hash: jF9/a6Jp1M+je5Rsp2up/n4DNy0dv/N5PQgKJQwfemc=)
                          2: 405E466852C38FD4CD20BA6115840947D5D24F5D.crl (hash: kOv4Z3nuJAKtqDsZP9NIrpn53rHwxrTc8JHBwo5v8e8=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/5ac6155e-2d2f-4f9e-b218-eb525b3a1119/0/405E466852C38FD4CD20BA6115840947D5D24F5D.crl
                          rsync://repo-rpki.idnic.net/repo/5ac6155e-2d2f-4f9e-b218-eb525b3a1119/0/405E466852C38FD4CD20BA6115840947D5D24F5D.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/405E466852C38FD4CD20BA6115840947D5D24F5D.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 23 Dec 2025 00:48:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:a6:60:0e:04:3d:90:d1:30:f9:4e:0d:78:41:24:e7:51:37:af:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=405E466852C38FD4CD20BA6115840947D5D24F5D
        Validity
            Not Before: Dec 19 13:36:15 2025 GMT
            Not After : Dec 23 00:48:15 2025 GMT
        Subject: CN=CBAAF0BB89353D22363A200D3C3DA89CC10346C8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:7b:c8:47:29:e1:43:84:52:e4:6f:96:06:5d:
                    8e:0e:e4:76:84:7d:9c:46:17:c0:64:53:1a:a6:72:
                    86:10:aa:10:f6:7f:4e:f8:f5:69:62:41:02:a3:02:
                    2d:6d:72:4d:6c:4e:ee:8c:b6:32:2a:d9:f3:16:9e:
                    92:2b:f8:0a:ab:e1:2d:d7:48:d2:fd:8e:30:61:76:
                    e2:8c:b6:e8:87:5d:a9:a4:c6:e5:cf:c0:f3:9e:b6:
                    37:7f:b5:51:3a:bf:0d:3b:c8:a0:00:c2:be:d0:e9:
                    ff:a2:ad:26:2b:5a:32:a4:e0:95:f8:de:10:c0:48:
                    05:f6:e9:6e:b2:e6:7d:94:56:a2:60:80:bb:5e:72:
                    ff:85:a0:27:78:42:25:25:73:9a:0e:c7:6d:c4:1d:
                    9f:c0:d9:a3:37:53:b0:cf:14:4c:bc:57:bc:51:a2:
                    b6:9a:d9:f6:a5:27:c9:3c:87:92:49:33:f5:07:03:
                    2a:4c:4b:ab:0f:d9:57:62:4a:3e:6b:26:d1:f9:ea:
                    0a:1b:1a:23:41:f5:45:cd:59:45:a9:aa:3f:9e:f2:
                    03:98:1e:98:43:35:83:31:90:6b:5e:2f:98:e5:21:
                    a6:03:63:38:1c:a8:b6:1d:cf:6a:ee:17:da:10:47:
                    f1:8b:3c:60:0e:2a:64:77:10:20:24:ce:31:d5:e6:
                    17:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:AA:F0:BB:89:35:3D:22:36:3A:20:0D:3C:3D:A8:9C:C1:03:46:C8
            X509v3 Authority Key Identifier:
                keyid:40:5E:46:68:52:C3:8F:D4:CD:20:BA:61:15:84:09:47:D5:D2:4F:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/5ac6155e-2d2f-4f9e-b218-eb525b3a1119/0/405E466852C38FD4CD20BA6115840947D5D24F5D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/405E466852C38FD4CD20BA6115840947D5D24F5D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5ac6155e-2d2f-4f9e-b218-eb525b3a1119/0/405E466852C38FD4CD20BA6115840947D5D24F5D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:97:b3:3f:90:11:e0:17:70:7d:89:18:2d:de:b5:cd:c5:6a:
         7c:73:ae:70:b5:05:e8:60:2e:f7:19:b7:db:65:ab:08:13:d5:
         e3:83:dc:e2:d9:c4:0c:9e:d8:45:26:90:e7:9f:e5:4a:7a:7e:
         63:9f:f9:89:b2:1f:75:ff:33:d8:c3:4f:4b:77:34:fe:25:07:
         e6:2d:8b:8f:0e:ce:1e:42:ac:30:a4:0b:1b:25:eb:68:63:a7:
         42:64:ba:8a:74:92:5e:7a:34:b0:82:1a:7f:30:3d:d9:84:4a:
         c2:e0:4d:fe:80:b2:f8:fb:5a:2d:82:7f:21:0d:24:9b:62:22:
         f3:0e:60:bd:04:45:c9:e7:28:be:94:03:42:fb:4c:22:67:1d:
         3a:92:e4:e1:0c:72:c0:25:6d:69:b6:30:fc:0d:79:e7:b9:89:
         f6:d6:60:74:04:60:58:93:8a:d2:33:ab:c4:6f:a2:48:0f:b5:
         ed:30:c5:02:c6:5d:23:b4:38:57:5c:26:2c:45:b4:bd:eb:b1:
         ee:42:36:92:e8:9f:06:7c:9e:c8:70:75:55:92:8c:ff:7c:70:
         5a:2c:a9:26:45:90:82:2d:0e:d1:90:d5:30:82:13:97:60:0e:
         4c:df:62:be:4f:d7:bb:ac:52:15:04:5a:e7:2b:8a:c7:b5:11:
         f9:25:d1:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 09:48:08 2025 by rpki-client