This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/defe8f9b-8c34-4342-a0fe-ca1075fba5ff/0/B605E2C01C5BDC6CEE49545C80501360234DC910.mft
File:                     B605E2C01C5BDC6CEE49545C80501360234DC910.mft (raw, json)
Hash identifier:          l250IF9gJDiqvRvQ6OTFbajk74HrtL79TdQU1z8zGVM=
Subject key identifier:   96:37:E1:1E:20:4A:B4:17:21:91:5E:F7:6F:8D:8B:71:7A:19:2A:9D
Authority key identifier: B6:05:E2:C0:1C:5B:DC:6C:EE:49:54:5C:80:50:13:60:23:4D:C9:10
Certificate issuer:       /CN=B605E2C01C5BDC6CEE49545C80501360234DC910
Certificate serial:       25DE70A8494F5029EA288E80A2DE83EE6C220E51
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B605E2C01C5BDC6CEE49545C80501360234DC910.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/defe8f9b-8c34-4342-a0fe-ca1075fba5ff/0/B605E2C01C5BDC6CEE49545C80501360234DC910.mft
Manifest number:          053C
Signing time:             Fri 19 Dec 2025 12:40:05 +0000
Manifest this update:     Fri 19 Dec 2025 12:35:05 +0000
Manifest next update:     Mon 22 Dec 2025 22:30:05 +0000
Files and hashes:         1: B605E2C01C5BDC6CEE49545C80501360234DC910.crl (hash: ljI6QUh5MJ1b2Z1io4FhLRbBvnYhp61ZpGgtg+QgWWU=)
                          2: 3131352e3137382e35342e302f32342d3234203d3e20313331373137.roa (hash: 4R3cIWzWFlBnUOjDtKgjITkNYaOCw4Tx4+7Vb5ietQo=)
                          3: 3131352e3137382e35322e302f32342d3234203d3e20313331373137.roa (hash: NtqkwrlUwIEQ1zhmOPelG6/o7YZq6aMqPrp+f2CJ/tw=)
                          4: 3131352e3137382e35352e302f32342d3234203d3e203338373833.roa (hash: L3ZzIiAydRdMLY3ej77+q1So7IkWU5tA3zvtMa14wvQ=)
                          5: 3131352e3137382e35332e302f32342d3234203d3e20313331373137.roa (hash: 5Br8jzUfiBL0O6Kopm71gWMUaniCVXm/uXqyIID9rs0=)
                          6: 3131352e3137382e34392e302f32342d3234203d3e203338373833.roa (hash: isINXQLKIC1dEiiAoWDEseWdjl997XY6+RtHzF8UKMk=)
                          7: 3131352e3137382e35312e302f32342d3234203d3e20313331373137.roa (hash: tZJdaYJ4K7yW2v2tBg39Lb9tz4r7Kf6sn+VE2gvdsHw=)
                          8: 3131352e3137382e35302e302f32342d3234203d3e203338373833.roa (hash: AVHUuCu/pWOfGEGbs7pgdGUZzNAVfi/HDMj4JakhRSI=)
                          9: 3131352e3137382e34382e302f32342d3234203d3e203338373833.roa (hash: /bgLX80Id13xkunC59CvIZtu8KOfj3mxVa1lG5ZXF/0=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/defe8f9b-8c34-4342-a0fe-ca1075fba5ff/0/B605E2C01C5BDC6CEE49545C80501360234DC910.crl
                          rsync://repo-rpki.idnic.net/repo/defe8f9b-8c34-4342-a0fe-ca1075fba5ff/0/B605E2C01C5BDC6CEE49545C80501360234DC910.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B605E2C01C5BDC6CEE49545C80501360234DC910.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 22 Dec 2025 22:30:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:de:70:a8:49:4f:50:29:ea:28:8e:80:a2:de:83:ee:6c:22:0e:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B605E2C01C5BDC6CEE49545C80501360234DC910
        Validity
            Not Before: Dec 19 12:35:05 2025 GMT
            Not After : Dec 22 22:30:05 2025 GMT
        Subject: CN=9637E11E204AB41721915EF76F8D8B717A192A9D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:f9:33:5d:8d:72:f5:51:08:05:3c:4e:52:ff:
                    b4:7e:43:6e:2f:3f:72:77:a4:6b:83:05:43:3b:93:
                    f1:c9:2b:6f:25:9d:57:48:76:41:1c:46:be:80:43:
                    73:18:ec:45:e3:c2:93:3a:82:1b:82:98:55:b6:8a:
                    81:c4:45:68:e4:4a:91:64:e6:b7:6d:c6:f0:66:f5:
                    9a:0a:b6:f5:5d:da:17:9c:52:d3:33:14:ab:06:05:
                    e1:b2:b2:a8:60:ec:72:79:4e:68:c1:ec:fb:58:d6:
                    df:21:6e:4d:bc:d1:4a:ec:35:c6:8d:99:bf:d0:ba:
                    4d:37:18:fa:ca:96:8f:13:53:c3:f6:74:e5:43:b2:
                    ad:68:59:ba:d2:5c:80:c5:da:0d:19:86:08:7c:81:
                    fd:3b:13:10:86:31:c5:56:73:00:01:7b:14:fb:4b:
                    66:d1:c1:2b:d2:ee:ac:66:35:ca:2a:aa:4a:82:c0:
                    98:d7:1a:f0:8f:c6:cb:00:a5:6e:79:2d:fd:28:ac:
                    42:c6:c7:d3:95:d6:de:cf:c8:fb:ee:c1:a1:ed:09:
                    1a:5d:ee:eb:d1:2e:c3:7d:3f:5b:77:7c:c4:20:94:
                    4f:8a:4b:f7:f4:45:65:58:b5:d6:86:c3:48:52:1c:
                    28:aa:c1:f4:d3:21:0b:08:b4:96:e1:9d:0a:83:19:
                    a6:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:37:E1:1E:20:4A:B4:17:21:91:5E:F7:6F:8D:8B:71:7A:19:2A:9D
            X509v3 Authority Key Identifier:
                keyid:B6:05:E2:C0:1C:5B:DC:6C:EE:49:54:5C:80:50:13:60:23:4D:C9:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/defe8f9b-8c34-4342-a0fe-ca1075fba5ff/0/B605E2C01C5BDC6CEE49545C80501360234DC910.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B605E2C01C5BDC6CEE49545C80501360234DC910.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/defe8f9b-8c34-4342-a0fe-ca1075fba5ff/0/B605E2C01C5BDC6CEE49545C80501360234DC910.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bb:d8:2b:1d:15:5b:b4:ba:3f:c4:24:9f:21:e4:7e:91:c9:1e:
         67:c2:18:fc:b9:78:76:bb:e5:e5:a2:be:ea:cc:1e:e6:d2:0e:
         1d:f7:75:ce:94:b5:30:6f:d8:aa:34:22:6e:d1:ac:b0:66:84:
         10:75:4d:00:ac:bf:c7:2e:1c:4a:c2:cb:13:7c:22:4a:b2:45:
         5e:c5:3d:c9:ab:87:7b:52:b0:b7:4a:74:5c:cb:d7:0a:84:a0:
         3a:97:a5:6d:b4:5b:0e:7c:c2:05:da:c2:17:70:b2:e2:33:60:
         ee:a2:78:8c:dc:b9:d4:38:6e:b9:b6:81:37:65:f2:6a:4d:09:
         e5:a3:af:6a:ed:7c:b8:91:ae:2a:91:4c:2a:c3:e6:4c:4d:ed:
         fa:37:21:3d:d2:bc:f6:14:a3:58:0e:6f:7c:07:6f:9a:30:e5:
         72:1e:c8:b4:a8:df:fa:2c:08:cd:1e:7d:5d:d6:33:e1:a9:04:
         c4:71:00:06:52:6d:7f:86:75:a9:8f:da:92:a3:ac:85:1e:cc:
         58:11:4e:1f:47:bc:59:b3:a2:04:a7:9d:91:8b:c0:8c:5c:fb:
         3e:56:e2:a0:e6:1b:4d:e1:63:8f:76:d4:d0:71:6c:9f:25:f8:
         e6:58:b6:de:e7:22:66:3f:1d:2c:d9:7d:66:84:8d:cc:8e:e2:
         18:63:10:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 23:13:30 2025 by rpki-client