This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/b199c1af-d9c7-4ffd-ba03-a3e1cdd8aee0/0/5E8D1116F8C66182B65521C899B56E89DDB84C57.mft
File:                     5E8D1116F8C66182B65521C899B56E89DDB84C57.mft (raw, json)
Hash identifier:          shLpMwIuyJ1Y960kL4L0W2SJZ6AG11GBdD27ANUwsM8=
Subject key identifier:   09:5F:F1:98:B0:D1:2E:D3:83:FE:30:6B:C6:ED:D5:81:1C:23:58:94
Authority key identifier: 5E:8D:11:16:F8:C6:61:82:B6:55:21:C8:99:B5:6E:89:DD:B8:4C:57
Certificate issuer:       /CN=5E8D1116F8C66182B65521C899B56E89DDB84C57
Certificate serial:       12A4EEDC0D0FD034F02C43E3188F19650AFD1D4A
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5E8D1116F8C66182B65521C899B56E89DDB84C57.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/b199c1af-d9c7-4ffd-ba03-a3e1cdd8aee0/0/5E8D1116F8C66182B65521C899B56E89DDB84C57.mft
Manifest number:          04F1
Signing time:             Tue 23 Dec 2025 23:50:51 +0000
Manifest this update:     Tue 23 Dec 2025 23:45:51 +0000
Manifest next update:     Sat 27 Dec 2025 07:23:51 +0000
Files and hashes:         1: 3130332e32332e3234302e302f32322d3234203d3e203138313033.roa (hash: p8gVCnY66Os0DqkzQCJfTN/fhC+u5g4F7liSBfJAUxg=)
                          2: 34332e3234382e32342e302f32322d3234203d3e203138313033.roa (hash: RgeUIHscM2Mr9tXUcr4QUTfcftnTlsp6MIokq2QekbI=)
                          3: 323430313a316230303a3a2f33322d3438203d3e203138313033.roa (hash: w+rn3hr3SMqGHiqqz9FiRvR/Sg9nolhzcrhUpRbqWiI=)
                          4: 5E8D1116F8C66182B65521C899B56E89DDB84C57.crl (hash: D/yBkb/B5C0x2kl7xZr3C8meS892vmQFndSBuTsyS9s=)
                          5: 3130332e31302e39362e302f32322d3234203d3e203138313033.roa (hash: Nh5W/QyNw1TBkrXlduer6Su77QtA37Kqc35mOSl9RrM=)
                          6: 3230332e3230312e35302e302f32332d3234203d3e203138313033.roa (hash: 0P4/KgKZcqup91feF2ZQ2rwCC9K7mFefhTwIQ1GZnuc=)
                          7: 3230332e3132382e36342e302f31392d3234203d3e203138313033.roa (hash: s7VSPqD5oiLwDB/oYr/1xD8uJ4/fL3Fk5/v33teavRk=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/b199c1af-d9c7-4ffd-ba03-a3e1cdd8aee0/0/5E8D1116F8C66182B65521C899B56E89DDB84C57.crl
                          rsync://repo-rpki.idnic.net/repo/b199c1af-d9c7-4ffd-ba03-a3e1cdd8aee0/0/5E8D1116F8C66182B65521C899B56E89DDB84C57.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5E8D1116F8C66182B65521C899B56E89DDB84C57.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 27 Dec 2025 07:23:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:a4:ee:dc:0d:0f:d0:34:f0:2c:43:e3:18:8f:19:65:0a:fd:1d:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5E8D1116F8C66182B65521C899B56E89DDB84C57
        Validity
            Not Before: Dec 23 23:45:51 2025 GMT
            Not After : Dec 27 07:23:51 2025 GMT
        Subject: CN=095FF198B0D12ED383FE306BC6EDD5811C235894
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:e1:5b:ca:b5:76:b6:af:2a:c4:fd:18:46:9a:
                    5c:81:17:ac:eb:a0:d7:56:f1:71:82:25:13:3c:d2:
                    2f:ea:00:dc:73:58:eb:51:e6:9a:73:fd:4c:57:8c:
                    74:59:89:75:5f:1d:7f:9c:5c:2e:c9:57:af:e6:e5:
                    aa:03:53:46:bb:a4:3d:3d:e7:8d:11:95:48:40:2a:
                    d2:a5:e9:24:84:4c:f1:af:74:1b:62:47:68:81:48:
                    97:06:c5:ad:9a:ca:81:8c:39:aa:91:64:f6:1b:d9:
                    f0:af:4c:6a:bc:1b:c2:9f:6e:a2:b7:b0:4c:4f:ac:
                    7c:fc:c5:d8:12:8a:27:dd:20:e8:cb:a1:a9:1e:20:
                    0e:a6:03:2f:10:56:25:8e:63:0e:b1:66:5a:05:e7:
                    04:35:a7:4b:f0:d1:ea:fe:fb:df:34:20:60:10:73:
                    df:db:7e:5e:3b:f8:b6:28:86:fd:a0:d7:c7:bb:97:
                    57:38:bf:9d:92:ec:11:e5:ea:ba:fa:34:56:58:ed:
                    60:55:47:f3:f4:ba:0e:d8:4d:26:ff:21:84:80:b0:
                    1e:90:a5:30:11:33:8b:16:4e:c0:2a:1e:9c:26:93:
                    e1:3c:5a:0b:ed:7c:f3:8a:77:16:b3:37:fc:8b:e8:
                    e6:ed:67:54:00:04:34:2b:37:09:76:3f:21:03:92:
                    9a:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:5F:F1:98:B0:D1:2E:D3:83:FE:30:6B:C6:ED:D5:81:1C:23:58:94
            X509v3 Authority Key Identifier:
                keyid:5E:8D:11:16:F8:C6:61:82:B6:55:21:C8:99:B5:6E:89:DD:B8:4C:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/b199c1af-d9c7-4ffd-ba03-a3e1cdd8aee0/0/5E8D1116F8C66182B65521C899B56E89DDB84C57.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5E8D1116F8C66182B65521C899B56E89DDB84C57.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b199c1af-d9c7-4ffd-ba03-a3e1cdd8aee0/0/5E8D1116F8C66182B65521C899B56E89DDB84C57.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:9a:b7:00:83:a2:7c:4c:fc:39:d8:c2:36:b6:b7:b1:2b:d1:
         fc:a7:40:45:28:ad:1b:07:f4:88:86:b7:0d:41:09:86:09:a1:
         42:59:af:55:b5:1d:ac:a4:48:e0:76:6f:c9:e4:b3:9d:e1:3a:
         d4:52:80:b3:3c:59:87:66:24:be:69:66:b9:c4:d8:d7:ca:a1:
         b5:7b:df:b7:fd:f4:63:81:63:9a:45:e0:b9:1a:ce:cf:1d:1d:
         a2:d9:f7:af:2b:cf:8b:7e:f4:6a:13:a3:a5:e3:d5:7a:53:f4:
         f0:d1:55:f0:49:1d:7f:0d:08:31:a0:21:d5:6a:66:e3:d3:3b:
         11:ed:46:93:2d:b2:35:e9:09:95:9f:78:7a:44:9f:22:6e:68:
         8a:7f:34:c7:3c:43:9a:7a:40:06:d8:4e:35:bc:93:25:20:f6:
         41:e8:9e:24:de:7a:4f:17:c2:cf:3b:41:b6:e4:de:4f:c2:f0:
         19:e5:2e:05:2c:bb:fa:52:a5:b3:0b:ae:bd:df:05:9f:95:65:
         f2:42:c9:21:f2:2e:44:58:42:bb:b5:6c:f5:d7:da:9b:99:24:
         b4:f2:6b:06:f1:6c:8d:59:1a:ce:f8:dd:cf:83:53:b2:c7:4a:
         27:3e:1c:83:3f:a7:92:ac:a9:b8:11:36:94:32:4c:de:c5:e0:
         2a:8a:1d:3b
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUEqTu3A0P0DTwLEPjGI8ZZQr9HUowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUU4RDExMTZGOEM2NjE4MkI2NTUyMUM4OTlCNTZFODlE
REI4NEM1NzAeFw0yNTEyMjMyMzQ1NTFaFw0yNTEyMjcwNzIzNTFaMDMxMTAvBgNV
BAMTKDA5NUZGMTk4QjBEMTJFRDM4M0ZFMzA2QkM2RURENTgxMUMyMzU4OTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDw4VvKtXa2ryrE/RhGmlyBF6zr
oNdW8XGCJRM80i/qANxzWOtR5ppz/UxXjHRZiXVfHX+cXC7JV6/m5aoDU0a7pD09
540RlUhAKtKl6SSETPGvdBtiR2iBSJcGxa2ayoGMOaqRZPYb2fCvTGq8G8KfbqK3
sExPrHz8xdgSiifdIOjLoakeIA6mAy8QViWOYw6xZloF5wQ1p0vw0er++980IGAQ
c9/bfl47+LYohv2g18e7l1c4v52S7BHl6rr6NFZY7WBVR/P0ug7YTSb/IYSAsB6Q
pTARM4sWTsAqHpwmk+E8WgvtfPOKdxazN/yL6ObtZ1QABDQrNwl2PyEDkpoFAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUCV/xmLDRLtOD/jBrxu3VgRwjWJQwHwYDVR0j
BBgwFoAUXo0RFvjGYYK2VSHImbVuid24TFcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i
MTk5YzFhZi1kOWM3LTRmZmQtYmEwMy1hM2UxY2RkOGFlZTAvMC81RThEMTExNkY4
QzY2MTgyQjY1NTIxQzg5OUI1NkU4OUREQjg0QzU3LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNUU4RDExMTZGOEM2NjE4MkI2NTUyMUM4OTlCNTZFODlEREI4
NEM1Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjE5OWMxYWYtZDljNy00ZmZkLWJh
MDMtYTNlMWNkZDhhZWUwLzAvNUU4RDExMTZGOEM2NjE4MkI2NTUyMUM4OTlCNTZF
ODlEREI4NEM1Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAGuatwCDonxM/DnYwja2t7Er0fynQEUorRsH
9IiGtw1BCYYJoUJZr1W1HaykSOB2b8nks53hOtRSgLM8WYdmJL5pZrnE2NfKobV7
37f99GOBY5pF4Lkazs8dHaLZ968rz4t+9GoTo6Xj1XpT9PDRVfBJHX8NCDGgIdVq
ZuPTOxHtRpMtsjXpCZWfeHpEnyJuaIp/NMc8Q5p6QAbYTjW8kyUg9kHoniTeek8X
ws87Qbbk3k/C8BnlLgUsu/pSpbMLrr3fBZ+VZfJCySHyLkRYQru1bPXX2puZJLTy
awbxbI1ZGs743c+DU7LHSic+HIM/p5KsqbgRNpQyTN7F4CqKHTs=
-----END CERTIFICATE-----
Generated at Wed Dec 24 22:05:10 2025 by rpki-client