This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/a1486ccd-0c95-491a-b9e6-667cee44594f/0/5546E9F1CF2CF58278C5BDB530E91EFD1BECEF04.mft
File:                     5546E9F1CF2CF58278C5BDB530E91EFD1BECEF04.mft (raw, json)
Hash identifier:          R5N4n7J7CaVfFS9lUGHZorieoKzIvHn+8uHPsb6jheE=
Subject key identifier:   80:9E:36:08:0C:6D:57:B2:C4:DC:A6:D6:0A:E3:27:E0:BF:E8:14:36
Authority key identifier: 55:46:E9:F1:CF:2C:F5:82:78:C5:BD:B5:30:E9:1E:FD:1B:EC:EF:04
Certificate issuer:       /CN=5546E9F1CF2CF58278C5BDB530E91EFD1BECEF04
Certificate serial:       033B5F30D9A9295ED76192581C8FA3AA4D5915CB
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5546E9F1CF2CF58278C5BDB530E91EFD1BECEF04.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/a1486ccd-0c95-491a-b9e6-667cee44594f/0/5546E9F1CF2CF58278C5BDB530E91EFD1BECEF04.mft
Manifest number:          0233
Signing time:             Thu 18 Dec 2025 12:31:49 +0000
Manifest this update:     Thu 18 Dec 2025 12:26:49 +0000
Manifest next update:     Sun 21 Dec 2025 21:09:49 +0000
Files and hashes:         1: 5546E9F1CF2CF58278C5BDB530E91EFD1BECEF04.crl (hash: DNxs3DqJAUL8VbtiUcgwhJiVr1TiI/ofOmAWJKsA/A0=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/a1486ccd-0c95-491a-b9e6-667cee44594f/0/5546E9F1CF2CF58278C5BDB530E91EFD1BECEF04.crl
                          rsync://repo-rpki.idnic.net/repo/a1486ccd-0c95-491a-b9e6-667cee44594f/0/5546E9F1CF2CF58278C5BDB530E91EFD1BECEF04.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5546E9F1CF2CF58278C5BDB530E91EFD1BECEF04.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 21 Dec 2025 21:09:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:3b:5f:30:d9:a9:29:5e:d7:61:92:58:1c:8f:a3:aa:4d:59:15:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5546E9F1CF2CF58278C5BDB530E91EFD1BECEF04
        Validity
            Not Before: Dec 18 12:26:49 2025 GMT
            Not After : Dec 21 21:09:49 2025 GMT
        Subject: CN=809E36080C6D57B2C4DCA6D60AE327E0BFE81436
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:78:1c:f2:bf:f9:67:b7:9d:cc:8f:61:03:9c:
                    b9:5a:0a:64:dc:79:65:ee:7e:57:c2:2a:ac:b8:e9:
                    7f:73:9e:0a:2e:98:3e:f4:e1:9c:92:c5:fe:6e:ca:
                    18:60:51:23:c4:dd:ef:1c:d6:3a:6d:64:95:55:bf:
                    b0:9e:99:d9:35:a5:d2:46:e0:9c:6b:ab:ae:36:75:
                    ba:e2:d1:39:6f:b2:53:ca:82:4c:f4:af:7d:58:6d:
                    5f:d3:f9:91:a3:19:b3:df:24:2b:8c:af:18:db:b0:
                    5e:89:99:b4:d7:0d:6f:2c:f6:0d:7e:3a:26:62:64:
                    d5:52:1e:2e:f1:26:af:91:f6:15:81:b2:27:80:af:
                    a6:7b:48:a9:08:e3:1b:76:1f:51:b2:30:02:09:bb:
                    d5:7b:03:6f:ef:8d:32:b9:87:dc:56:88:ff:b8:f9:
                    33:fe:24:a7:fd:b9:e3:82:5b:97:3a:f6:61:f9:6e:
                    c2:15:cf:74:1b:ab:f8:f5:fb:d4:5c:45:22:de:de:
                    1b:a7:3a:e6:62:11:36:eb:82:51:e2:71:f5:08:fc:
                    ea:c6:6c:1f:96:7e:e4:80:ce:d2:81:c1:69:db:98:
                    af:77:99:7c:f4:12:a8:f7:0b:23:e6:a9:ed:9d:70:
                    57:d1:fa:b1:60:1c:11:13:3c:be:14:5e:aa:f7:e8:
                    c4:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:9E:36:08:0C:6D:57:B2:C4:DC:A6:D6:0A:E3:27:E0:BF:E8:14:36
            X509v3 Authority Key Identifier:
                keyid:55:46:E9:F1:CF:2C:F5:82:78:C5:BD:B5:30:E9:1E:FD:1B:EC:EF:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/a1486ccd-0c95-491a-b9e6-667cee44594f/0/5546E9F1CF2CF58278C5BDB530E91EFD1BECEF04.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5546E9F1CF2CF58278C5BDB530E91EFD1BECEF04.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a1486ccd-0c95-491a-b9e6-667cee44594f/0/5546E9F1CF2CF58278C5BDB530E91EFD1BECEF04.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:a8:79:5c:1f:e7:73:1f:a8:e0:1c:b4:e5:3a:ca:35:0c:44:
         64:be:79:17:9e:3a:5b:0e:21:34:03:3d:26:d8:0c:18:c5:5c:
         5c:3b:ae:2d:0c:96:36:d3:c4:01:b4:f3:86:51:25:42:1c:fd:
         b9:71:5c:70:db:d9:ca:dc:20:b2:44:37:9e:cc:f6:f9:99:a2:
         81:69:83:34:11:e7:cb:be:bd:09:21:40:c7:91:d4:7f:07:4e:
         7f:3d:f8:e0:3e:30:0b:e6:d9:e7:11:3c:18:b7:74:19:53:58:
         9e:13:b0:04:43:71:9b:fc:cf:87:f7:25:32:a2:80:1a:30:3f:
         37:42:64:b3:a3:c0:88:13:35:c7:45:bc:00:5c:68:cd:33:10:
         25:87:8c:2d:6d:45:78:e7:13:6c:e4:93:14:e3:b4:21:be:26:
         31:19:de:49:ac:fd:f7:71:be:fe:08:49:94:21:16:98:fe:b0:
         58:13:05:10:39:b7:05:86:a9:71:45:47:b8:89:76:84:af:72:
         00:ec:ae:7e:b4:43:0e:2e:da:99:9b:c9:fe:2a:29:c3:45:65:
         ad:4f:b2:ce:6c:81:2c:01:ab:d2:18:fa:d3:76:8b:13:36:86:
         34:a1:3e:be:f7:b0:21:fd:02:c3:47:e3:09:6d:d1:5c:da:25:
         e4:b4:91:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 22:07:50 2025 by rpki-client