This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/73af271f-c83d-441e-bea9-18a244d0e00e/0/54FF141BE96013FE6BC0816D991BCFB4F6618CBE.mft
File:                     54FF141BE96013FE6BC0816D991BCFB4F6618CBE.mft (raw, json)
Hash identifier:          ym93AAXlHIVCm28eOaTY8RBqByMvAMA/iObOHcdsK40=
Subject key identifier:   FC:F9:AC:54:CB:F8:54:FC:9E:32:D7:24:0F:39:6A:11:2D:0C:89:D7
Authority key identifier: 54:FF:14:1B:E9:60:13:FE:6B:C0:81:6D:99:1B:CF:B4:F6:61:8C:BE
Certificate issuer:       /CN=54FF141BE96013FE6BC0816D991BCFB4F6618CBE
Certificate serial:       2E589009BF3E56CEABEB59F5ECDA1DABB8F32696
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/54FF141BE96013FE6BC0816D991BCFB4F6618CBE.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/73af271f-c83d-441e-bea9-18a244d0e00e/0/54FF141BE96013FE6BC0816D991BCFB4F6618CBE.mft
Manifest number:          0535
Signing time:             Tue 23 Dec 2025 06:22:10 +0000
Manifest this update:     Tue 23 Dec 2025 06:17:10 +0000
Manifest next update:     Fri 26 Dec 2025 11:47:10 +0000
Files and hashes:         1: 3130332e3132332e3135382e302f32342d3234203d3e20313332363433.roa (hash: 4Y2+me1T7YOW0mP4kEwSrY0/8rA8cOe6GeK5fECPb4g=)
                          2: 3130332e32312e3232382e302f32342d3234203d3e20313332363433.roa (hash: HoilO9KAsNDvqhA1QW+xRWbMVFCIXL/5ZP3Wb1KxcsY=)
                          3: 54FF141BE96013FE6BC0816D991BCFB4F6618CBE.crl (hash: 1cKfOBo4YelyZ0LovQOwmJvz2kR+xBNsC6yzQrWzlFM=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/73af271f-c83d-441e-bea9-18a244d0e00e/0/54FF141BE96013FE6BC0816D991BCFB4F6618CBE.crl
                          rsync://repo-rpki.idnic.net/repo/73af271f-c83d-441e-bea9-18a244d0e00e/0/54FF141BE96013FE6BC0816D991BCFB4F6618CBE.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/54FF141BE96013FE6BC0816D991BCFB4F6618CBE.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 26 Dec 2025 11:47:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:58:90:09:bf:3e:56:ce:ab:eb:59:f5:ec:da:1d:ab:b8:f3:26:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54FF141BE96013FE6BC0816D991BCFB4F6618CBE
        Validity
            Not Before: Dec 23 06:17:10 2025 GMT
            Not After : Dec 26 11:47:10 2025 GMT
        Subject: CN=FCF9AC54CBF854FC9E32D7240F396A112D0C89D7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:1c:d0:da:18:3d:c2:c3:b4:a0:be:3b:43:3e:
                    ec:3f:49:47:6d:69:d2:f1:96:95:5d:50:b9:48:92:
                    e7:83:69:8e:36:51:dc:d1:53:bf:99:54:dd:3e:d1:
                    23:1e:5b:8c:97:1b:10:63:0f:26:b4:d1:6a:76:31:
                    86:4f:7b:30:72:28:40:1b:e1:a9:08:91:6a:b3:1f:
                    c5:d8:e6:42:16:ff:69:1c:9e:4f:0d:f0:98:c9:f1:
                    65:27:fd:b0:a2:a4:d4:6b:c8:d2:30:f9:07:06:10:
                    5c:a6:43:fa:19:7f:31:a3:35:d8:a7:61:61:db:c0:
                    92:e7:93:77:ca:53:39:85:ec:4d:f6:da:45:e4:e5:
                    7e:36:6b:70:70:51:0c:10:f1:8a:d5:74:a4:f7:e6:
                    8f:72:73:21:8a:a7:3f:29:05:ba:59:b1:50:43:ef:
                    bb:99:5b:f1:ec:e6:bc:0d:13:51:05:20:b3:23:d2:
                    10:87:51:eb:bf:fc:a4:a4:d0:22:91:e0:d7:9b:e4:
                    49:54:b4:6f:68:ff:62:a9:68:3e:fd:2d:80:33:c1:
                    ed:8e:94:e4:44:5e:e1:93:c0:f0:cb:5f:5e:2e:82:
                    d2:e0:e7:7c:af:fd:24:02:22:ef:8a:1f:c5:09:ed:
                    7c:e7:d0:33:c0:39:d7:9c:3a:34:d8:f4:92:b2:8b:
                    84:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:F9:AC:54:CB:F8:54:FC:9E:32:D7:24:0F:39:6A:11:2D:0C:89:D7
            X509v3 Authority Key Identifier:
                keyid:54:FF:14:1B:E9:60:13:FE:6B:C0:81:6D:99:1B:CF:B4:F6:61:8C:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/73af271f-c83d-441e-bea9-18a244d0e00e/0/54FF141BE96013FE6BC0816D991BCFB4F6618CBE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/54FF141BE96013FE6BC0816D991BCFB4F6618CBE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/73af271f-c83d-441e-bea9-18a244d0e00e/0/54FF141BE96013FE6BC0816D991BCFB4F6618CBE.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:01:95:20:a9:cd:b8:bf:fd:87:1e:52:7c:5f:99:db:36:80:
         51:00:01:e0:9a:38:3c:e5:f5:76:9e:22:2d:15:7e:c2:5a:f9:
         90:39:1f:e6:6b:2f:10:89:f6:c4:aa:f4:11:00:2a:32:89:89:
         83:e2:ec:57:3b:65:b1:04:87:61:dc:ed:59:20:cb:10:f1:d7:
         88:63:e7:ad:f8:90:f8:c4:bf:dc:e4:58:23:cd:d2:2b:f0:07:
         83:18:e6:99:50:47:ff:e7:5e:d0:3c:b1:9d:b7:f8:1c:90:6a:
         37:ea:ea:65:ca:b0:91:bc:56:02:d1:22:16:84:c4:60:81:f5:
         1d:32:ce:c7:13:6f:0f:fc:01:5b:ea:9e:e1:ea:71:5a:2f:57:
         06:f6:cf:77:c3:70:9c:69:a3:62:3d:f3:e3:9c:e9:f4:5b:bd:
         33:4d:fa:a5:f2:7b:78:e3:1e:41:9b:c1:24:a9:f5:d4:c1:ee:
         75:63:86:6d:45:e5:e6:50:c3:50:65:5a:74:29:88:f8:33:18:
         26:5f:19:2b:66:bb:63:a4:fb:04:08:a0:63:16:38:f2:00:f4:
         f5:35:7d:1a:44:f8:da:77:97:2b:ef:55:58:b2:49:8d:98:7d:
         42:de:1c:60:19:10:86:bc:dd:0a:7c:b1:cc:98:15:11:7f:c6:
         ea:d7:97:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 25 00:39:19 2025 by rpki-client