This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/76542839-2858-49f0-acdf-fa7d3ab9c558/0/5197E2A78BBA1E8C9EB808E45A99DD2BE7B41297.mft
File:                     5197E2A78BBA1E8C9EB808E45A99DD2BE7B41297.mft (raw, json)
Hash identifier:          UiyVWSoQLbOuPLjpidtTNFWzUmEGqLbDFv9ISwwIu6M=
Subject key identifier:   B4:3F:0E:FD:BF:CE:32:2D:7C:8B:67:4B:D2:03:72:DA:25:E0:BA:33
Authority key identifier: 51:97:E2:A7:8B:BA:1E:8C:9E:B8:08:E4:5A:99:DD:2B:E7:B4:12:97
Certificate issuer:       /CN=5197E2A78BBA1E8C9EB808E45A99DD2BE7B41297
Certificate serial:       64E95653FCE05B249FA7DAD2528A0B264D7C4932
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5197E2A78BBA1E8C9EB808E45A99DD2BE7B41297.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/76542839-2858-49f0-acdf-fa7d3ab9c558/0/5197E2A78BBA1E8C9EB808E45A99DD2BE7B41297.mft
Manifest number:          01DA
Signing time:             Sun 21 Dec 2025 02:42:03 +0000
Manifest this update:     Sun 21 Dec 2025 02:37:03 +0000
Manifest next update:     Wed 24 Dec 2025 04:09:03 +0000
Files and hashes:         1: 5197E2A78BBA1E8C9EB808E45A99DD2BE7B41297.crl (hash: qBlbc13mewJsUbsAg6bGL10VNpzyTJ5wNJ7ROM1UVYo=)
                          2: 3130332e3132392e32302e302f32332d3234203d3e20313335343738.roa (hash: ezzFeBhaAvNsKhxbFuThV49gvTqwygGDYXBHtWaw660=)
                          3: 3130332e3132392e32322e302f32332d3234203d3e20313335343738.roa (hash: NI+iV212mIRfD7qYmt5q7rBxlWutxZm2u6jypzvhX2A=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:e9:56:53:fc:e0:5b:24:9f:a7:da:d2:52:8a:0b:26:4d:7c:49:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5197E2A78BBA1E8C9EB808E45A99DD2BE7B41297
        Validity
            Not Before: Dec 21 02:37:03 2025 GMT
            Not After : Dec 24 04:09:03 2025 GMT
        Subject: CN=B43F0EFDBFCE322D7C8B674BD20372DA25E0BA33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:e2:e0:6c:7c:d0:d8:b7:c2:b0:05:d1:a5:02:
                    3d:10:e5:4d:3c:42:1b:fc:3a:f6:0f:38:46:20:9d:
                    5f:f6:b9:8d:2e:ba:e7:66:37:0d:84:bb:ea:96:27:
                    5c:88:e7:1c:96:6f:04:8b:a7:ca:d3:2d:19:ef:22:
                    7a:2e:4b:2a:bd:dd:4e:30:1a:ee:d2:d6:85:f5:b4:
                    b8:ff:e8:4c:ef:8e:88:08:54:cd:a2:2e:54:5b:c5:
                    e9:a2:38:2c:06:ee:84:bc:a3:cb:0f:b1:61:4d:4a:
                    69:4f:4a:1a:ea:f2:8e:ed:f5:c4:b5:85:c6:16:39:
                    7e:67:70:55:f5:ac:f9:b9:8f:2e:d2:74:75:d7:8d:
                    b9:24:e3:31:e5:40:de:7c:25:06:c0:bc:0e:5d:17:
                    f1:26:fc:08:7d:ab:ff:9a:00:05:fb:c7:24:62:4b:
                    87:19:7f:63:1d:f5:af:ef:6f:20:6e:7d:01:b2:43:
                    46:03:ba:cd:77:75:d7:5f:92:5b:4f:ba:63:92:e5:
                    17:70:c5:3f:ba:35:d0:cc:ee:b2:ca:0c:b2:49:59:
                    ca:03:57:29:f3:9c:a3:3d:93:5e:f7:4c:8d:46:43:
                    42:49:17:59:ce:7b:1e:8d:b3:e1:63:03:84:77:7c:
                    49:a5:f5:28:8e:f2:71:1b:fe:8e:c7:53:75:6b:00:
                    9b:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:3F:0E:FD:BF:CE:32:2D:7C:8B:67:4B:D2:03:72:DA:25:E0:BA:33
            X509v3 Authority Key Identifier:
                keyid:51:97:E2:A7:8B:BA:1E:8C:9E:B8:08:E4:5A:99:DD:2B:E7:B4:12:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/76542839-2858-49f0-acdf-fa7d3ab9c558/0/5197E2A78BBA1E8C9EB808E45A99DD2BE7B41297.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5197E2A78BBA1E8C9EB808E45A99DD2BE7B41297.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/76542839-2858-49f0-acdf-fa7d3ab9c558/0/5197E2A78BBA1E8C9EB808E45A99DD2BE7B41297.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:5f:f4:2c:e9:99:f9:81:d1:ff:28:92:5a:2b:30:93:e3:40:
         b8:53:2d:e0:bd:8d:96:70:96:eb:e3:e1:53:e8:ee:19:07:bf:
         ec:c9:37:2a:45:70:38:b9:27:fd:c2:da:31:d8:72:5d:b1:f3:
         b1:b2:a1:bd:fe:47:44:e9:44:79:c8:0d:6c:6f:01:16:fb:4b:
         88:c1:9b:10:b2:b5:7b:e5:96:fe:16:ee:85:6c:30:56:a5:86:
         78:ed:32:21:4e:c6:8f:e8:73:c9:3a:03:5b:30:e6:02:3f:de:
         2d:fa:ee:1a:14:38:af:89:e9:3c:1f:ab:5e:66:f5:06:ef:6e:
         76:c0:04:49:a0:c9:01:1c:ae:98:e6:3a:7b:f7:4d:ac:a7:16:
         ee:bc:f8:6b:01:1c:3d:2b:7e:13:df:a2:1d:d2:56:84:21:33:
         f7:ec:fd:6e:16:8d:04:d3:98:7d:b9:6a:7e:26:e1:55:e8:f6:
         d6:1c:ec:39:e2:e3:6c:8d:f7:58:01:e6:a7:e7:af:6e:4e:da:
         43:52:8f:56:58:51:26:b3:a1:0d:91:49:67:fe:f1:18:46:55:
         cd:28:91:bc:71:97:ad:d1:ce:27:00:73:6b:f3:39:a9:4d:2b:
         91:42:16:f6:0a:ed:98:b1:24:ae:9c:47:27:6f:67:1e:23:3e:
         c5:c1:d7:22
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUZOlWU/zgWySfp9rSUooLJk18STIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTE5N0UyQTc4QkJBMUU4QzlFQjgwOEU0NUE5OUREMkJF
N0I0MTI5NzAeFw0yNTEyMjEwMjM3MDNaFw0yNTEyMjQwNDA5MDNaMDMxMTAvBgNV
BAMTKEI0M0YwRUZEQkZDRTMyMkQ3QzhCNjc0QkQyMDM3MkRBMjVFMEJBMzMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDh4uBsfNDYt8KwBdGlAj0Q5U08
Qhv8OvYPOEYgnV/2uY0uuudmNw2Eu+qWJ1yI5xyWbwSLp8rTLRnvInouSyq93U4w
Gu7S1oX1tLj/6EzvjogIVM2iLlRbxemiOCwG7oS8o8sPsWFNSmlPShrq8o7t9cS1
hcYWOX5ncFX1rPm5jy7SdHXXjbkk4zHlQN58JQbAvA5dF/Em/Ah9q/+aAAX7xyRi
S4cZf2Md9a/vbyBufQGyQ0YDus13dddfkltPumOS5RdwxT+6NdDM7rLKDLJJWcoD
VynznKM9k173TI1GQ0JJF1nOex6Ns+FjA4R3fEml9SiO8nEb/o7HU3VrAJvBAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUtD8O/b/OMi18i2dL0gNy2iXgujMwHwYDVR0j
BBgwFoAUUZfip4u6HoyeuAjkWpndK+e0EpcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83
NjU0MjgzOS0yODU4LTQ5ZjAtYWNkZi1mYTdkM2FiOWM1NTgvMC81MTk3RTJBNzhC
QkExRThDOUVCODA4RTQ1QTk5REQyQkU3QjQxMjk3LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNTE5N0UyQTc4QkJBMUU4QzlFQjgwOEU0NUE5OUREMkJFN0I0
MTI5Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzY1NDI4MzktMjg1OC00OWYwLWFj
ZGYtZmE3ZDNhYjljNTU4LzAvNTE5N0UyQTc4QkJBMUU4QzlFQjgwOEU0NUE5OURE
MkJFN0I0MTI5Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAHJf9CzpmfmB0f8oklorMJPjQLhTLeC9jZZw
luvj4VPo7hkHv+zJNypFcDi5J/3C2jHYcl2x87Gyob3+R0TpRHnIDWxvARb7S4jB
mxCytXvllv4W7oVsMFalhnjtMiFOxo/oc8k6A1sw5gI/3i367hoUOK+J6Twfq15m
9QbvbnbABEmgyQEcrpjmOnv3TaynFu68+GsBHD0rfhPfoh3SVoQhM/fs/W4WjQTT
mH25an4m4VXo9tYc7Dni42yN91gB5qfnr25O2kNSj1ZYUSazoQ2RSWf+8RhGVc0o
kbxxl63RzicAc2vzOalNK5FCFvYK7ZixJK6cRydvZx4jPsXB1yI=
-----END CERTIFICATE-----