This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/cb43f786-8235-4a90-8a07-5df9c6d64440/0/C5A6302D828AECE1F14A35BA8FACFEEB268E0E4F.mft
File:                     C5A6302D828AECE1F14A35BA8FACFEEB268E0E4F.mft (raw, json)
Hash identifier:          QfCG0Qr6S2eX/CEBYJIdj3N+5X31GUSBPmS9w26jwCk=
Subject key identifier:   ED:05:4E:5F:A1:8F:0D:7D:F3:0B:ED:A6:BB:8B:62:70:40:03:1B:B5
Authority key identifier: C5:A6:30:2D:82:8A:EC:E1:F1:4A:35:BA:8F:AC:FE:EB:26:8E:0E:4F
Certificate issuer:       /CN=C5A6302D828AECE1F14A35BA8FACFEEB268E0E4F
Certificate serial:       7FC2289B1AEFA23DD511B7CC7C05E8F620825C58
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C5A6302D828AECE1F14A35BA8FACFEEB268E0E4F.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/cb43f786-8235-4a90-8a07-5df9c6d64440/0/C5A6302D828AECE1F14A35BA8FACFEEB268E0E4F.mft
Manifest number:          01B1
Signing time:             Tue 23 Dec 2025 05:02:33 +0000
Manifest this update:     Tue 23 Dec 2025 04:57:33 +0000
Manifest next update:     Fri 26 Dec 2025 09:42:33 +0000
Files and hashes:         1: C5A6302D828AECE1F14A35BA8FACFEEB268E0E4F.crl (hash: VB9QdTlv+fVyatk4WCBTTIKoGEwOJiDrDKYbI3nt3gU=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/cb43f786-8235-4a90-8a07-5df9c6d64440/0/C5A6302D828AECE1F14A35BA8FACFEEB268E0E4F.crl
                          rsync://repo-rpki.idnic.net/repo/cb43f786-8235-4a90-8a07-5df9c6d64440/0/C5A6302D828AECE1F14A35BA8FACFEEB268E0E4F.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C5A6302D828AECE1F14A35BA8FACFEEB268E0E4F.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 26 Dec 2025 09:42:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:c2:28:9b:1a:ef:a2:3d:d5:11:b7:cc:7c:05:e8:f6:20:82:5c:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C5A6302D828AECE1F14A35BA8FACFEEB268E0E4F
        Validity
            Not Before: Dec 23 04:57:33 2025 GMT
            Not After : Dec 26 09:42:33 2025 GMT
        Subject: CN=ED054E5FA18F0D7DF30BEDA6BB8B627040031BB5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:98:f4:24:4e:5a:31:c4:6d:e9:bd:a8:af:49:
                    ea:27:4d:d0:3c:e2:8d:32:ce:8e:a8:80:bd:5d:6c:
                    89:13:9e:94:07:7e:2d:03:e7:f9:1b:da:b5:15:b9:
                    d2:0a:53:4e:09:50:07:ea:9e:05:2e:2f:c6:12:31:
                    8b:87:a1:d0:1a:a2:7e:ef:e8:e6:be:14:ae:a6:31:
                    9b:4e:06:b7:f7:4b:5e:3c:0f:c8:46:7a:34:df:4d:
                    0a:4a:0a:23:61:30:46:fa:ef:78:d1:91:13:9d:9d:
                    77:b2:ab:ed:e9:1f:33:a5:c4:ef:b2:99:29:64:f5:
                    5a:90:6b:38:2e:ad:58:03:e1:75:ba:6d:18:4f:72:
                    f3:f8:eb:5a:d6:b5:45:b8:1b:f8:2a:e4:4d:c1:50:
                    62:37:ed:5f:86:05:98:0f:ca:b9:0e:82:ba:a2:5c:
                    30:93:cb:fb:34:b0:ab:00:3e:34:25:8a:e1:50:91:
                    3e:3d:5e:98:42:da:d2:a6:bf:57:55:1f:19:1e:a0:
                    22:f2:79:2f:0d:e0:cb:c9:8e:a7:cf:2a:55:ce:9c:
                    ca:63:9d:2f:0b:7c:2b:ab:48:11:e2:73:77:58:90:
                    2f:77:0b:03:53:c2:36:24:7e:4e:45:02:aa:85:5c:
                    36:47:7e:3c:30:64:35:9b:06:fa:07:0a:bc:c0:67:
                    d5:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:05:4E:5F:A1:8F:0D:7D:F3:0B:ED:A6:BB:8B:62:70:40:03:1B:B5
            X509v3 Authority Key Identifier:
                keyid:C5:A6:30:2D:82:8A:EC:E1:F1:4A:35:BA:8F:AC:FE:EB:26:8E:0E:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/cb43f786-8235-4a90-8a07-5df9c6d64440/0/C5A6302D828AECE1F14A35BA8FACFEEB268E0E4F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C5A6302D828AECE1F14A35BA8FACFEEB268E0E4F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cb43f786-8235-4a90-8a07-5df9c6d64440/0/C5A6302D828AECE1F14A35BA8FACFEEB268E0E4F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:be:87:db:e8:4f:24:3b:bc:2c:e9:ee:81:70:19:10:cf:35:
         bc:7f:67:5c:0c:89:e0:69:38:f0:97:fb:e3:ba:95:a9:5c:7a:
         1d:a3:6f:56:04:5f:f1:36:eb:ee:99:72:27:2c:96:4d:19:a8:
         9a:4c:a0:59:02:55:3c:72:fd:72:fc:29:a9:f1:c2:e0:3f:dc:
         75:8a:01:6b:bd:fd:e0:14:db:6d:71:34:e6:1a:c9:f4:ad:d9:
         d2:15:68:ce:95:4f:34:ba:03:e7:cb:2a:a9:73:9a:eb:82:59:
         9b:05:9f:c2:bf:66:f0:ab:c4:83:63:84:59:4e:33:03:7c:2e:
         1d:05:72:28:a7:46:1a:f9:2f:0c:d7:5d:3b:3a:db:a3:de:1f:
         f9:ad:6a:46:d4:2d:c3:41:9a:15:f0:8c:95:c2:01:b3:fb:4b:
         80:ca:35:70:2c:9c:45:53:a4:81:2f:51:58:86:c0:45:cb:a0:
         7a:e2:2a:20:c2:52:21:23:59:33:23:47:1c:ee:f8:1a:ca:7b:
         7d:36:9d:9c:b7:f7:59:a3:7d:66:15:4e:8d:a1:f0:8c:86:f2:
         5a:15:62:c6:ad:92:c2:1d:d6:01:60:56:5a:ea:6a:bc:9a:dd:
         03:ef:04:f1:fc:1a:29:14:28:6a:04:2a:b4:57:2e:98:bd:7a:
         68:cb:ff:f9
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUf8Iomxrvoj3VEbfMfAXo9iCCXFgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzVBNjMwMkQ4MjhBRUNFMUYxNEEzNUJBOEZBQ0ZFRUIy
NjhFMEU0RjAeFw0yNTEyMjMwNDU3MzNaFw0yNTEyMjYwOTQyMzNaMDMxMTAvBgNV
BAMTKEVEMDU0RTVGQTE4RjBEN0RGMzBCRURBNkJCOEI2MjcwNDAwMzFCQjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVmPQkTloxxG3pvaivSeonTdA8
4o0yzo6ogL1dbIkTnpQHfi0D5/kb2rUVudIKU04JUAfqngUuL8YSMYuHodAaon7v
6Oa+FK6mMZtOBrf3S148D8hGejTfTQpKCiNhMEb673jRkROdnXeyq+3pHzOlxO+y
mSlk9VqQazgurVgD4XW6bRhPcvP461rWtUW4G/gq5E3BUGI37V+GBZgPyrkOgrqi
XDCTy/s0sKsAPjQliuFQkT49XphC2tKmv1dVHxkeoCLyeS8N4MvJjqfPKlXOnMpj
nS8LfCurSBHic3dYkC93CwNTwjYkfk5FAqqFXDZHfjwwZDWbBvoHCrzAZ9UnAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQU7QVOX6GPDX3zC+2mu4ticEADG7UwHwYDVR0j
BBgwFoAUxaYwLYKK7OHxSjW6j6z+6yaODk8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j
YjQzZjc4Ni04MjM1LTRhOTAtOGEwNy01ZGY5YzZkNjQ0NDAvMC9DNUE2MzAyRDgy
OEFFQ0UxRjE0QTM1QkE4RkFDRkVFQjI2OEUwRTRGLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQzVBNjMwMkQ4MjhBRUNFMUYxNEEzNUJBOEZBQ0ZFRUIyNjhF
MEU0Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2I0M2Y3ODYtODIzNS00YTkwLThh
MDctNWRmOWM2ZDY0NDQwLzAvQzVBNjMwMkQ4MjhBRUNFMUYxNEEzNUJBOEZBQ0ZF
RUIyNjhFMEU0Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAEy+h9voTyQ7vCzp7oFwGRDPNbx/Z1wMieBp
OPCX++O6lalceh2jb1YEX/E26+6Zcicslk0ZqJpMoFkCVTxy/XL8KanxwuA/3HWK
AWu9/eAU221xNOYayfSt2dIVaM6VTzS6A+fLKqlzmuuCWZsFn8K/ZvCrxINjhFlO
MwN8Lh0FciinRhr5LwzXXTs626PeH/mtakbULcNBmhXwjJXCAbP7S4DKNXAsnEVT
pIEvUViGwEXLoHriKiDCUiEjWTMjRxzu+BrKe302nZy391mjfWYVTo2h8IyG8loV
YsatksId1gFgVlrqarya3QPvBPH8GikUKGoEKrRXLpi9emjL//k=
-----END CERTIFICATE-----
Generated at Wed Dec 24 20:23:53 2025 by rpki-client