This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/c883fe75-91e4-4989-bc5e-6a26082dc334/0/F55642EAEBD83D2B9D92B6DB7987FBE6D36839C6.mft
File:                     F55642EAEBD83D2B9D92B6DB7987FBE6D36839C6.mft (raw, json)
Hash identifier:          PiTkOcb9aCRGuny4ajhFaxz7o4PEgPVXoVLhkwT/hX8=
Subject key identifier:   4C:45:91:9A:9E:E9:4A:76:F5:0B:56:55:C8:0C:17:6F:A6:68:E3:4C
Authority key identifier: F5:56:42:EA:EB:D8:3D:2B:9D:92:B6:DB:79:87:FB:E6:D3:68:39:C6
Certificate issuer:       /CN=F55642EAEBD83D2B9D92B6DB7987FBE6D36839C6
Certificate serial:       43B692AD1E1109512265E8C4267D04B6FA8575E5
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F55642EAEBD83D2B9D92B6DB7987FBE6D36839C6.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/c883fe75-91e4-4989-bc5e-6a26082dc334/0/F55642EAEBD83D2B9D92B6DB7987FBE6D36839C6.mft
Manifest number:          01A9
Signing time:             Wed 24 Dec 2025 05:34:32 +0000
Manifest this update:     Wed 24 Dec 2025 05:29:32 +0000
Manifest next update:     Sat 27 Dec 2025 07:17:32 +0000
Files and hashes:         1: 3130332e3139332e3134342e302f32332d3234203d3e203538383231.roa (hash: xqDmQkKvNjqDIhr5W6P74uer/xZQw7F/hF7jgT+PobU=)
                          2: F55642EAEBD83D2B9D92B6DB7987FBE6D36839C6.crl (hash: dJxZvE2dcj/400hWrS+AWVtDcDTlI9du+4F7u22G03Q=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/c883fe75-91e4-4989-bc5e-6a26082dc334/0/F55642EAEBD83D2B9D92B6DB7987FBE6D36839C6.crl
                          rsync://repo-rpki.idnic.net/repo/c883fe75-91e4-4989-bc5e-6a26082dc334/0/F55642EAEBD83D2B9D92B6DB7987FBE6D36839C6.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F55642EAEBD83D2B9D92B6DB7987FBE6D36839C6.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 27 Dec 2025 07:17:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:b6:92:ad:1e:11:09:51:22:65:e8:c4:26:7d:04:b6:fa:85:75:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F55642EAEBD83D2B9D92B6DB7987FBE6D36839C6
        Validity
            Not Before: Dec 24 05:29:32 2025 GMT
            Not After : Dec 27 07:17:32 2025 GMT
        Subject: CN=4C45919A9EE94A76F50B5655C80C176FA668E34C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:22:a0:60:c9:27:08:77:b7:3d:b8:13:c3:8e:
                    b4:84:e3:49:8a:a6:4c:5c:47:78:06:ae:28:5f:e1:
                    c0:64:80:17:2e:92:2a:61:b7:29:9c:4c:9d:e2:7e:
                    35:67:65:c1:75:9c:5d:5a:35:de:a3:3a:87:e1:a3:
                    96:f0:29:76:e1:87:40:89:3f:f5:a6:bc:46:81:38:
                    67:45:64:c4:1c:d7:d5:a3:eb:15:12:06:c2:0e:ee:
                    d3:cc:1a:68:c5:9d:81:c6:44:7f:da:87:1b:55:f8:
                    b2:f9:46:1b:7b:85:5b:1f:e6:e5:07:9e:ae:d3:33:
                    2c:2a:d7:a9:68:e7:c2:15:bb:ba:a7:9f:2e:b8:6f:
                    8a:08:62:36:1a:f9:f6:cc:e9:d2:12:22:e4:a9:d3:
                    7f:59:af:c1:06:b9:cf:4e:71:11:ed:68:2a:a3:c4:
                    4b:90:1b:de:46:02:26:f7:0a:85:78:11:51:77:9f:
                    2e:ae:5f:cb:0b:0b:91:7f:ce:58:5e:f6:5d:6e:1a:
                    cb:33:23:07:d8:0c:55:af:68:06:9d:d0:b5:8f:55:
                    10:9d:fd:2f:4b:53:64:44:69:45:87:6a:a4:bb:1c:
                    d6:77:0c:ee:81:4f:04:95:f0:07:9f:19:9d:4c:61:
                    85:fe:16:4b:00:b1:b4:f8:98:54:21:45:4a:8d:08:
                    3a:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:45:91:9A:9E:E9:4A:76:F5:0B:56:55:C8:0C:17:6F:A6:68:E3:4C
            X509v3 Authority Key Identifier:
                keyid:F5:56:42:EA:EB:D8:3D:2B:9D:92:B6:DB:79:87:FB:E6:D3:68:39:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/c883fe75-91e4-4989-bc5e-6a26082dc334/0/F55642EAEBD83D2B9D92B6DB7987FBE6D36839C6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F55642EAEBD83D2B9D92B6DB7987FBE6D36839C6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c883fe75-91e4-4989-bc5e-6a26082dc334/0/F55642EAEBD83D2B9D92B6DB7987FBE6D36839C6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ba:1c:a3:aa:24:6d:e2:4a:ba:33:9e:f8:a1:e6:d5:76:f4:48:
         e8:80:fd:04:57:92:12:8d:3a:b9:0d:b2:97:97:cf:06:f4:16:
         b1:29:1f:35:c6:1a:d6:d0:7c:37:30:8f:91:c0:83:05:fd:f3:
         5a:d2:5d:f6:d1:fd:9d:0e:e7:70:6f:70:9e:81:51:ad:d9:28:
         7a:41:47:3d:2d:fd:3d:94:93:d9:fa:17:cf:e9:ba:75:c8:d0:
         61:ec:31:9f:fd:7a:8a:a8:98:02:a1:89:86:04:20:d2:98:ba:
         f6:4c:e8:a4:7a:b4:0c:23:56:d4:e6:a3:91:bc:78:91:cb:5d:
         08:b4:70:26:9f:7a:3b:bc:26:51:d9:e5:94:2a:4e:35:25:9b:
         95:29:da:1c:d8:98:3c:cb:67:0b:50:07:ed:d9:c6:b8:7b:f2:
         0d:da:4e:ec:11:87:39:77:1b:6d:95:41:e3:2b:39:d1:77:8f:
         8e:da:9b:e1:ae:c9:c7:a5:81:4e:d1:1f:66:ba:e1:ba:c9:31:
         fd:70:75:bb:a4:2b:73:ac:b0:77:3b:57:ff:51:8c:1e:c5:cc:
         5c:48:40:bb:88:aa:0d:d8:3a:71:e9:25:31:1d:b1:07:20:b4:
         e4:4e:6f:b2:81:d3:ad:0f:77:f3:02:93:2d:94:8c:aa:01:b0:
         1f:95:36:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 25 00:58:11 2025 by rpki-client