This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/ad918b15-e63e-4b38-a05c-650fb49f0594/0/455696A81F434F9A36D66F455F4B3C43855A18E1.mft
File:                     455696A81F434F9A36D66F455F4B3C43855A18E1.mft (raw, json)
Hash identifier:          ZuGuG2v9ScKPNGh9CgS208yx7Y8lEXgBd06RBiJjwUU=
Subject key identifier:   86:DD:36:98:CC:C6:76:C0:37:36:CF:83:0B:F8:8F:6A:EF:A1:C3:C5
Authority key identifier: 45:56:96:A8:1F:43:4F:9A:36:D6:6F:45:5F:4B:3C:43:85:5A:18:E1
Certificate issuer:       /CN=455696A81F434F9A36D66F455F4B3C43855A18E1
Certificate serial:       1E4C3ACF1AD3F881C530B2A2B6191E86E3F1E8E7
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/455696A81F434F9A36D66F455F4B3C43855A18E1.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/ad918b15-e63e-4b38-a05c-650fb49f0594/0/455696A81F434F9A36D66F455F4B3C43855A18E1.mft
Manifest number:          054C
Signing time:             Wed 17 Dec 2025 00:31:48 +0000
Manifest this update:     Wed 17 Dec 2025 00:26:48 +0000
Manifest next update:     Sat 20 Dec 2025 07:50:48 +0000
Files and hashes:         1: 3130332e33392e34382e302f32322d3232203d3e203633353031.roa (hash: fZDt9a5Bml3i+qD7LkBtRpcDmAleju+dsbR1q4FSMw4=)
                          2: 455696A81F434F9A36D66F455F4B3C43855A18E1.crl (hash: AIdBu2zr/4K+PODyngV3WepDVXw71PjpHDL+/ShHn8k=)
                          3: 36312e31342e3234382e302f32322d3232203d3e203633353031.roa (hash: 9yUhWJBW17q/QdaTY2fU9nmONEYGToC2s7IX5p+5PO4=)
                          4: 3130332e33392e34382e302f32332d3233203d3e203633353031.roa (hash: SsF/O1gUXDHLKElJcUYri3Mx6ijVNGZFpDm1VnJPenk=)
                          5: 323430333a666338303a633030303a3a2f33342d3334203d3e203633353031.roa (hash: NXaEo37N/6r6HnF6VCxvms5WsOrIaz0jS79Aj/Fy1Oc=)
                          6: 3130332e33392e35312e302f32342d3234203d3e203633353031.roa (hash: JH5C1ysIyofYJFDdAetBTcCh1nnZyIwvE4THQXZ6l3g=)
                          7: 3130332e33392e34392e302f32342d3234203d3e203633353031.roa (hash: OEBLHuyL5IROg19Rd6fTCNXQysEWyH6x7ERzb5RgAZU=)
                          8: 36312e31342e3234382e302f32332d3233203d3e203633353031.roa (hash: 8Ic/4fgaL4he+8YIPf+e8lFQ10UurrN6RokKwkpyH5g=)
                          9: 36312e31342e3235302e302f32342d3234203d3e203633353031.roa (hash: wmPtOQD249Jd3Z4yi+/hp7o7IOmozWKplwjuGfgW4+I=)
                          10: 3130332e33392e35302e302f32342d3234203d3e203633353031.roa (hash: ydTlUGVcKS4lgES6wItbPdSPQhqyiKodHd5qrBXnRwU=)
                          11: 323430333a666338303a3a2f33322d3332203d3e203633353031.roa (hash: Q/RsRX8i7WhRynidtM9vkDe+JbBl3vcKmm5GmcuQCUQ=)
                          12: 3130332e33392e35302e302f32332d3233203d3e203633353031.roa (hash: KZop+FhSj6+a2cj+ncq6IceeMQZFfFRMm8A5B880EEg=)
                          13: 36312e31342e3235302e302f32332d3233203d3e203633353031.roa (hash: b0iukqTRuvRU1a7eSUs5b+FIBP1+cvhMRAWkNJWN/O8=)
                          14: 3130332e33392e34382e302f32342d3234203d3e203633353031.roa (hash: YLwR3x+9Ktbemo/unDpiFl0Wr9oNKDN+CzK0/aYC+Pw=)
                          15: 323430333a666338303a383030303a3a2f33332d3333203d3e203633353031.roa (hash: fju+gxaFPeIwaOTSNCqBv+8eqOAX1OUY7wjCt+CkzuA=)
                          16: 323430333a666338303a343030303a3a2f33342d3334203d3e203633353031.roa (hash: zHHMz32Wh+n+2u4MNkl1iW+HvK1Rdbgl3v4kn6ORq9U=)
                          17: 36312e31342e3234382e302f32342d3234203d3e203633353031.roa (hash: rrz9EzLPKdw7dWAvcArV0pHG2vCL4Ps14xnhn3PEhOc=)
                          18: 323430333a666338303a3a2f33342d3334203d3e203633353031.roa (hash: gioPA1tL1I5R2uSvArjjITDaHxq2LcT9RBmDMoaTZfs=)
                          19: 36312e31342e3234392e302f32342d3234203d3e203633353031.roa (hash: yPzSsHv3SwGQ3fEhiVRqIyqk9kZjo9mnqe2iTT83X9g=)
                          20: 36312e31342e3235312e302f32342d3234203d3e203633353031.roa (hash: 9HA8+f1KuEY73x5eI3NyGPnk+prH+pYPMOMdeQF4VZc=)
                          21: 323430333a666338303a3a2f33332d3333203d3e203633353031.roa (hash: 1tl51btakO1tmF3fruOX88w5ei0Cmv3tz+8xpKBuz2U=)
                          22: 323430333a666338303a383030303a3a2f33342d3334203d3e203633353031.roa (hash: Hd3gLKDXIGhO0eZdSkUfCdbmWITohfzJx+eKqy99LCw=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/ad918b15-e63e-4b38-a05c-650fb49f0594/0/455696A81F434F9A36D66F455F4B3C43855A18E1.crl
                          rsync://repo-rpki.idnic.net/repo/ad918b15-e63e-4b38-a05c-650fb49f0594/0/455696A81F434F9A36D66F455F4B3C43855A18E1.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/455696A81F434F9A36D66F455F4B3C43855A18E1.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Dec 2025 07:50:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:4c:3a:cf:1a:d3:f8:81:c5:30:b2:a2:b6:19:1e:86:e3:f1:e8:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=455696A81F434F9A36D66F455F4B3C43855A18E1
        Validity
            Not Before: Dec 17 00:26:48 2025 GMT
            Not After : Dec 20 07:50:48 2025 GMT
        Subject: CN=86DD3698CCC676C03736CF830BF88F6AEFA1C3C5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:dc:fb:eb:22:2c:d8:21:51:2d:29:71:73:76:
                    49:82:0b:a7:0c:38:6c:90:5d:44:03:63:50:55:bc:
                    ad:a1:e5:95:ce:d1:3d:ff:e3:3f:c6:da:c3:65:6a:
                    76:1a:7f:3f:08:bb:a8:ca:a5:2f:a3:fd:96:01:e1:
                    32:ff:5f:35:47:38:46:a8:c0:59:b6:6a:df:00:f6:
                    31:46:16:b5:35:12:6f:89:10:6f:2a:47:6b:0f:db:
                    ed:c3:6e:d9:61:0f:46:e0:69:cd:4e:4e:96:f2:de:
                    c2:dc:89:77:6e:5e:3b:3d:5b:d4:f7:9e:72:d7:9f:
                    f4:77:47:e4:09:45:66:92:20:17:67:bc:0b:ec:cb:
                    9d:12:7a:b0:d1:91:aa:6c:06:a8:7e:ba:d7:db:5e:
                    a3:99:7a:87:65:a0:86:46:c8:92:86:2c:ff:85:8f:
                    0a:3e:5c:f3:9f:a5:a7:1d:b2:97:5d:f4:bc:37:c7:
                    d2:cc:dc:18:5d:25:f4:1a:cf:71:88:4d:47:3d:a1:
                    69:4b:dd:22:1d:ef:83:ef:02:59:ff:3c:2a:43:43:
                    32:c9:b3:5f:e4:26:3e:20:f2:d5:58:4c:77:7f:aa:
                    58:1b:1f:cd:1b:94:03:d9:81:bf:1d:20:b3:6b:ed:
                    ba:95:8b:e1:25:40:04:f8:32:6a:18:2d:b9:ec:27:
                    f3:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:DD:36:98:CC:C6:76:C0:37:36:CF:83:0B:F8:8F:6A:EF:A1:C3:C5
            X509v3 Authority Key Identifier:
                keyid:45:56:96:A8:1F:43:4F:9A:36:D6:6F:45:5F:4B:3C:43:85:5A:18:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/ad918b15-e63e-4b38-a05c-650fb49f0594/0/455696A81F434F9A36D66F455F4B3C43855A18E1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/455696A81F434F9A36D66F455F4B3C43855A18E1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ad918b15-e63e-4b38-a05c-650fb49f0594/0/455696A81F434F9A36D66F455F4B3C43855A18E1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:f4:ea:52:73:49:52:dd:99:53:2e:22:36:3c:0a:00:a2:ca:
         db:b3:c5:75:d0:ab:f9:50:6d:81:62:e8:aa:13:e5:77:8d:5c:
         b4:15:c3:16:e5:b2:2b:04:d2:4d:09:50:22:f8:9e:e1:dc:c7:
         30:ee:cd:f1:a8:f9:a5:91:d8:97:bb:72:11:c5:98:7f:94:80:
         c0:5a:90:90:e8:72:1e:4d:f0:7f:5a:31:cc:a7:f5:4b:db:6d:
         1a:ce:4f:11:a5:56:b9:a0:56:a0:2e:f3:95:d9:87:51:91:d9:
         39:ca:1d:e9:b5:21:b9:80:24:ea:5d:20:2e:bd:f1:b0:9c:6b:
         39:2b:c1:09:1f:86:41:d9:79:d4:74:06:bf:70:f7:4c:0d:41:
         5e:ee:72:68:e8:75:fa:ba:5b:19:32:5c:4e:55:f2:d8:e8:e6:
         37:f6:fd:f7:46:91:33:51:a0:6b:7e:9e:6b:82:de:45:04:16:
         6a:14:f4:df:c4:d4:bd:95:ab:d4:ad:ef:a1:79:2b:be:27:60:
         1c:f3:ae:16:6f:a8:c8:3b:26:04:ee:d4:e6:7a:be:df:64:13:
         86:58:33:9b:bb:64:9c:db:4e:5a:c3:ca:8b:e1:62:07:a4:8d:
         a7:71:32:3f:2a:69:4a:6f:ab:6c:7f:01:93:8d:a0:3a:a6:fd:
         00:82:f1:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 17 19:54:52 2025 by rpki-client