This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/657e89e8-53aa-44f6-b6d8-5879078bf664/0/52145183B5BE1A663FBC5C228102541AC61F9F86.mft
File:                     52145183B5BE1A663FBC5C228102541AC61F9F86.mft (raw, json)
Hash identifier:          /0TkvvgxaVkZTIUhjjUBTuhfSYe1WlSjIXoKjpkPA+k=
Subject key identifier:   15:99:BE:1A:59:D9:79:EC:94:99:AE:E3:FB:39:9B:83:CC:4C:61:D2
Authority key identifier: 52:14:51:83:B5:BE:1A:66:3F:BC:5C:22:81:02:54:1A:C6:1F:9F:86
Certificate issuer:       /CN=52145183B5BE1A663FBC5C228102541AC61F9F86
Certificate serial:       5F6AF2E1A3F3CD44B70167ED673031668BC15C57
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/52145183B5BE1A663FBC5C228102541AC61F9F86.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/657e89e8-53aa-44f6-b6d8-5879078bf664/0/52145183B5BE1A663FBC5C228102541AC61F9F86.mft
Manifest number:          04EE
Signing time:             Wed 17 Dec 2025 18:31:48 +0000
Manifest this update:     Wed 17 Dec 2025 18:26:48 +0000
Manifest next update:     Sun 21 Dec 2025 03:11:48 +0000
Files and hashes:         1: 323430363a396163303a3a2f33322d3438203d3e20313431313134.roa (hash: I8J+VKjZlzAYUjuoXbFTNBgkY4GMxQkjdom4zb/4W0c=)
                          2: 52145183B5BE1A663FBC5C228102541AC61F9F86.crl (hash: mau8NfjgHfx78jyxRre8sRtDp0tJiw9r4VfLwxyuGws=)
                          3: 3130332e3135372e37382e302f32332d3234203d3e20313431313134.roa (hash: ejH4Jptb2+nXxwdyhxr2eLVcxmTdzu5eDGJeQynArtM=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/657e89e8-53aa-44f6-b6d8-5879078bf664/0/52145183B5BE1A663FBC5C228102541AC61F9F86.crl
                          rsync://repo-rpki.idnic.net/repo/657e89e8-53aa-44f6-b6d8-5879078bf664/0/52145183B5BE1A663FBC5C228102541AC61F9F86.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/52145183B5BE1A663FBC5C228102541AC61F9F86.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 21 Dec 2025 03:11:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:6a:f2:e1:a3:f3:cd:44:b7:01:67:ed:67:30:31:66:8b:c1:5c:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52145183B5BE1A663FBC5C228102541AC61F9F86
        Validity
            Not Before: Dec 17 18:26:48 2025 GMT
            Not After : Dec 21 03:11:48 2025 GMT
        Subject: CN=1599BE1A59D979EC9499AEE3FB399B83CC4C61D2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:8a:89:23:92:e7:b3:8c:57:41:fe:c4:00:dc:
                    84:c7:9d:d3:3d:eb:f6:7c:b6:3c:62:c7:e8:d3:66:
                    88:7e:45:b1:7e:84:9a:cf:c2:55:01:52:95:a3:0b:
                    0c:c0:61:b4:32:a5:c5:b2:fa:27:a8:03:26:48:ff:
                    9b:d4:a7:ba:6d:56:20:43:42:7c:29:d4:1e:10:09:
                    f8:d2:1d:e7:c8:5c:c7:45:f2:56:11:dd:3c:d4:6b:
                    ea:8d:18:7d:3b:37:aa:11:a1:98:93:b8:57:12:42:
                    d5:a6:e9:81:40:23:e2:3a:83:c1:da:b7:21:c6:78:
                    64:72:1c:79:9b:40:27:07:3e:51:00:42:29:04:1d:
                    aa:d5:9c:a0:4c:b6:68:2c:20:6d:94:5f:ce:05:c8:
                    e3:96:c3:4a:35:0e:79:f8:fc:23:ce:25:72:7f:f6:
                    db:c9:ad:cb:9b:bb:05:69:56:29:92:99:10:d2:a0:
                    f3:34:85:41:ae:c2:91:7a:8a:d2:fe:71:46:c9:8b:
                    d5:43:06:a4:c9:5e:87:c3:89:74:03:34:a0:01:e8:
                    ed:a3:b4:53:ea:06:06:aa:a6:71:ba:c7:f2:22:47:
                    9d:68:05:66:3b:29:2e:14:cd:60:40:5b:10:ca:06:
                    c0:c3:f7:f1:31:2d:73:4f:ee:9a:37:1d:37:ef:ee:
                    cf:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:99:BE:1A:59:D9:79:EC:94:99:AE:E3:FB:39:9B:83:CC:4C:61:D2
            X509v3 Authority Key Identifier:
                keyid:52:14:51:83:B5:BE:1A:66:3F:BC:5C:22:81:02:54:1A:C6:1F:9F:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/657e89e8-53aa-44f6-b6d8-5879078bf664/0/52145183B5BE1A663FBC5C228102541AC61F9F86.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/52145183B5BE1A663FBC5C228102541AC61F9F86.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/657e89e8-53aa-44f6-b6d8-5879078bf664/0/52145183B5BE1A663FBC5C228102541AC61F9F86.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:89:1a:e5:20:4e:7f:a7:84:8c:b2:b9:36:66:27:5f:cc:bc:
         9e:04:a8:2c:79:07:c6:ce:5e:92:02:f0:cb:0e:40:af:87:4e:
         1a:c2:28:7a:72:04:47:46:52:90:ba:13:23:73:41:01:82:80:
         b6:1e:53:b3:42:02:ff:19:f6:25:a0:ca:06:ed:18:56:bb:b2:
         a0:d3:c5:40:73:ab:96:68:3b:39:06:02:a2:55:86:b8:8e:2e:
         6f:38:d1:52:47:66:94:c0:de:88:ba:f5:39:a4:cd:09:2a:98:
         90:01:88:0e:42:2a:49:30:31:11:08:1d:cc:f9:b4:b8:66:38:
         36:20:30:54:6f:80:af:39:e1:46:d1:88:ed:08:4f:80:6a:22:
         82:7c:da:5f:04:ca:cd:ba:89:48:72:d8:a2:1e:65:ea:df:08:
         5f:c9:7c:5f:6c:3b:c8:9c:71:9a:71:d3:93:77:c7:00:1e:1e:
         28:0c:36:97:58:12:57:d2:fe:cd:d3:11:08:c2:40:b7:99:ed:
         6a:54:b1:f8:78:2d:aa:ef:ad:82:1a:3a:b7:17:81:d8:2d:60:
         47:08:ab:2d:96:09:64:83:63:0d:15:6c:bb:bb:59:06:d4:ae:
         24:b1:fa:21:85:52:fc:2d:0b:41:2c:ed:31:43:fd:3c:f2:a0:
         85:ba:b6:91
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUX2ry4aPzzUS3AWftZzAxZovBXFcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTIxNDUxODNCNUJFMUE2NjNGQkM1QzIyODEwMjU0MUFD
NjFGOUY4NjAeFw0yNTEyMTcxODI2NDhaFw0yNTEyMjEwMzExNDhaMDMxMTAvBgNV
BAMTKDE1OTlCRTFBNTlEOTc5RUM5NDk5QUVFM0ZCMzk5QjgzQ0M0QzYxRDIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOiokjkuezjFdB/sQA3ITHndM9
6/Z8tjxix+jTZoh+RbF+hJrPwlUBUpWjCwzAYbQypcWy+ieoAyZI/5vUp7ptViBD
Qnwp1B4QCfjSHefIXMdF8lYR3TzUa+qNGH07N6oRoZiTuFcSQtWm6YFAI+I6g8Ha
tyHGeGRyHHmbQCcHPlEAQikEHarVnKBMtmgsIG2UX84FyOOWw0o1Dnn4/CPOJXJ/
9tvJrcubuwVpVimSmRDSoPM0hUGuwpF6itL+cUbJi9VDBqTJXofDiXQDNKAB6O2j
tFPqBgaqpnG6x/IiR51oBWY7KS4UzWBAWxDKBsDD9/ExLXNP7po3HTfv7s9rAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUFZm+GlnZeeyUma7j+zmbg8xMYdIwHwYDVR0j
BBgwFoAUUhRRg7W+GmY/vFwigQJUGsYfn4YwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82
NTdlODllOC01M2FhLTQ0ZjYtYjZkOC01ODc5MDc4YmY2NjQvMC81MjE0NTE4M0I1
QkUxQTY2M0ZCQzVDMjI4MTAyNTQxQUM2MUY5Rjg2LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNTIxNDUxODNCNUJFMUE2NjNGQkM1QzIyODEwMjU0MUFDNjFG
OUY4Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjU3ZTg5ZTgtNTNhYS00NGY2LWI2
ZDgtNTg3OTA3OGJmNjY0LzAvNTIxNDUxODNCNUJFMUE2NjNGQkM1QzIyODEwMjU0
MUFDNjFGOUY4Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAJKJGuUgTn+nhIyyuTZmJ1/MvJ4EqCx5B8bO
XpIC8MsOQK+HThrCKHpyBEdGUpC6EyNzQQGCgLYeU7NCAv8Z9iWgygbtGFa7sqDT
xUBzq5ZoOzkGAqJVhriOLm840VJHZpTA3oi69TmkzQkqmJABiA5CKkkwMREIHcz5
tLhmODYgMFRvgK854UbRiO0IT4BqIoJ82l8Eys26iUhy2KIeZerfCF/JfF9sO8ic
cZpx05N3xwAeHigMNpdYElfS/s3TEQjCQLeZ7WpUsfh4LarvrYIaOrcXgdgtYEcI
qy2WCWSDYw0VbLu7WQbUriSx+iGFUvwtC0Es7TFD/TzyoIW6tpE=
-----END CERTIFICATE-----
Generated at Fri Dec 19 10:53:30 2025 by rpki-client