This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/76599474-f6b6-4087-a97e-788b5949d57b/0/5EF007981390128F8F14B087123454D686E41CB8.mft
File:                     5EF007981390128F8F14B087123454D686E41CB8.mft (raw, json)
Hash identifier:          LchL7SfC+/kqPKLeYkXCE8wkwhVpR3CD7E7HyLWy194=
Subject key identifier:   93:CC:5F:84:98:58:51:FD:BD:07:4C:C6:09:CF:A8:C1:87:20:5B:DE
Authority key identifier: 5E:F0:07:98:13:90:12:8F:8F:14:B0:87:12:34:54:D6:86:E4:1C:B8
Certificate issuer:       /CN=5EF007981390128F8F14B087123454D686E41CB8
Certificate serial:       5CC1F17231928EDA9354C5E5886A21AED4B18BFE
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5EF007981390128F8F14B087123454D686E41CB8.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/76599474-f6b6-4087-a97e-788b5949d57b/0/5EF007981390128F8F14B087123454D686E41CB8.mft
Manifest number:          020D
Signing time:             Thu 18 Dec 2025 09:31:57 +0000
Manifest this update:     Thu 18 Dec 2025 09:26:57 +0000
Manifest next update:     Sun 21 Dec 2025 13:00:57 +0000
Files and hashes:         1: 5EF007981390128F8F14B087123454D686E41CB8.crl (hash: wy2x4bpBh/dSedGdNpMIkA/WCTlIcGRPwM5XfnscWtk=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/76599474-f6b6-4087-a97e-788b5949d57b/0/5EF007981390128F8F14B087123454D686E41CB8.crl
                          rsync://repo-rpki.idnic.net/repo/76599474-f6b6-4087-a97e-788b5949d57b/0/5EF007981390128F8F14B087123454D686E41CB8.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5EF007981390128F8F14B087123454D686E41CB8.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 21 Dec 2025 13:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:c1:f1:72:31:92:8e:da:93:54:c5:e5:88:6a:21:ae:d4:b1:8b:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5EF007981390128F8F14B087123454D686E41CB8
        Validity
            Not Before: Dec 18 09:26:57 2025 GMT
            Not After : Dec 21 13:00:57 2025 GMT
        Subject: CN=93CC5F84985851FDBD074CC609CFA8C187205BDE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:62:5b:09:34:7e:55:d4:21:be:9b:6e:52:5b:
                    5d:2f:2a:f1:39:3a:70:31:26:9d:ac:57:1f:dd:65:
                    41:6a:ca:1e:be:a4:f8:4d:3f:d4:c6:7e:ff:d4:be:
                    c3:2e:2e:45:3f:ce:40:7e:66:15:0a:50:5d:1f:21:
                    90:46:f8:c8:c0:74:18:46:cd:ec:a3:47:af:5c:ac:
                    1e:08:bc:6a:32:55:ca:6e:73:f6:bf:94:c8:4d:ef:
                    f8:22:6d:21:7c:49:3b:a1:87:6f:ad:61:99:7a:72:
                    5f:ea:e3:e8:bc:ce:15:c1:40:fa:60:26:68:17:74:
                    30:f3:44:97:a6:b9:d1:51:dd:fa:8a:b2:a5:77:ff:
                    7a:96:6b:ad:40:7e:95:4d:01:45:32:92:67:ee:f7:
                    d3:5b:86:b7:9a:71:3a:5a:3d:e9:61:5f:22:91:6c:
                    de:5a:3f:67:15:e8:2b:cd:ef:11:7f:12:c8:06:88:
                    41:58:55:a3:0e:7c:06:4b:c9:5a:0f:bd:a2:78:ab:
                    33:7b:11:fb:e5:99:3d:cc:ab:dd:ac:68:bc:a1:fd:
                    52:00:08:8a:b4:c9:c9:c2:13:49:ec:7f:b4:33:81:
                    85:89:f9:79:9e:29:54:7b:5d:87:7d:ec:a1:b2:94:
                    ef:f0:ea:8d:58:de:02:5c:7c:5c:5c:1d:53:90:c3:
                    33:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:CC:5F:84:98:58:51:FD:BD:07:4C:C6:09:CF:A8:C1:87:20:5B:DE
            X509v3 Authority Key Identifier:
                keyid:5E:F0:07:98:13:90:12:8F:8F:14:B0:87:12:34:54:D6:86:E4:1C:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/76599474-f6b6-4087-a97e-788b5949d57b/0/5EF007981390128F8F14B087123454D686E41CB8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5EF007981390128F8F14B087123454D686E41CB8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/76599474-f6b6-4087-a97e-788b5949d57b/0/5EF007981390128F8F14B087123454D686E41CB8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cb:fa:ec:5d:8f:92:db:4e:d9:6b:dd:8e:4a:e0:ee:e0:11:a0:
         41:c9:9d:58:87:77:0c:c7:53:83:4c:97:71:3e:81:90:62:b9:
         bb:b9:1c:0d:46:63:da:e5:ee:c7:26:de:ed:11:75:07:8c:93:
         a5:ef:8b:77:38:8f:b2:27:51:89:27:f4:fd:3b:4d:12:38:09:
         45:56:16:24:a2:0a:4d:2e:35:b2:30:df:ab:55:a1:a9:7d:50:
         19:5c:76:77:79:e7:d4:19:24:b7:05:fd:ae:e3:fe:1f:30:dc:
         49:88:f5:93:ac:de:35:b6:9f:dd:5f:5b:6d:95:1e:36:88:40:
         63:54:c2:7c:94:a0:49:16:03:ad:10:10:22:2b:5b:73:8c:ec:
         db:7a:45:51:03:2b:02:a8:1f:c6:dc:52:58:ba:5d:8d:70:b2:
         9b:4c:b4:df:d7:6c:88:4e:15:44:35:0f:b7:2d:fc:6d:8c:ac:
         2b:9f:42:b5:4b:b7:de:ee:9b:f9:60:f5:d0:7f:66:7b:d2:7d:
         67:06:70:2d:54:10:d2:9f:4a:8d:bc:49:0b:ba:48:1c:9b:d8:
         f5:da:8e:7e:0e:7b:f6:27:8f:4e:b4:36:97:a2:a3:94:e9:43:
         de:6a:e6:be:84:5d:be:21:cb:1b:b6:5f:e2:78:4f:ee:21:ac:
         af:43:a4:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 18:20:05 2025 by rpki-client