This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/e13eed2b-955e-4093-88a4-f4de3cc9b9cd/0/5ACB0F96C2B1255EABAAEBC1426ECD9E6DF6C4AD.mft
File:                     5ACB0F96C2B1255EABAAEBC1426ECD9E6DF6C4AD.mft (raw, json)
Hash identifier:          yRdD19zP35srXujSvcH5AoXVNzNL3e+7/5B+ZPVUKpQ=
Subject key identifier:   86:79:BD:DB:74:AD:22:1C:48:80:E3:3A:88:BA:29:E5:ED:AD:D5:82
Authority key identifier: 5A:CB:0F:96:C2:B1:25:5E:AB:AA:EB:C1:42:6E:CD:9E:6D:F6:C4:AD
Certificate issuer:       /CN=5ACB0F96C2B1255EABAAEBC1426ECD9E6DF6C4AD
Certificate serial:       4F5940F081CCF26FF254A66F777B722F0DA4048A
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5ACB0F96C2B1255EABAAEBC1426ECD9E6DF6C4AD.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/e13eed2b-955e-4093-88a4-f4de3cc9b9cd/0/5ACB0F96C2B1255EABAAEBC1426ECD9E6DF6C4AD.mft
Manifest number:          01A4
Signing time:             Tue 16 Dec 2025 21:01:16 +0000
Manifest this update:     Tue 16 Dec 2025 20:56:16 +0000
Manifest next update:     Sat 20 Dec 2025 04:01:16 +0000
Files and hashes:         1: 5ACB0F96C2B1255EABAAEBC1426ECD9E6DF6C4AD.crl (hash: AXWH3x4RL1b4GhcEiA45xUTbVcfkTulWGELlErQTfCU=)
                          2: 3130332e3235322e34382e302f32342d3234203d3e20313530393931.roa (hash: 3eXzK+GorV6w9BT+6P2VQObNrkmn7G3kB6eMdcv66zE=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/e13eed2b-955e-4093-88a4-f4de3cc9b9cd/0/5ACB0F96C2B1255EABAAEBC1426ECD9E6DF6C4AD.crl
                          rsync://repo-rpki.idnic.net/repo/e13eed2b-955e-4093-88a4-f4de3cc9b9cd/0/5ACB0F96C2B1255EABAAEBC1426ECD9E6DF6C4AD.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5ACB0F96C2B1255EABAAEBC1426ECD9E6DF6C4AD.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Dec 2025 04:01:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:59:40:f0:81:cc:f2:6f:f2:54:a6:6f:77:7b:72:2f:0d:a4:04:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ACB0F96C2B1255EABAAEBC1426ECD9E6DF6C4AD
        Validity
            Not Before: Dec 16 20:56:16 2025 GMT
            Not After : Dec 20 04:01:16 2025 GMT
        Subject: CN=8679BDDB74AD221C4880E33A88BA29E5EDADD582
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:75:b7:d0:02:2b:d3:56:c4:9c:29:9b:38:56:
                    39:82:34:0c:31:d4:2b:09:7f:10:fe:65:bb:b6:95:
                    7c:02:f5:6d:c4:76:60:a3:70:66:56:35:8f:16:30:
                    7e:0b:7c:ee:91:41:27:29:79:82:47:8d:41:b3:a1:
                    c0:d8:c5:2d:2d:f2:b1:3a:0a:18:16:7c:e9:ad:62:
                    40:80:c7:90:4a:20:a3:a1:11:30:ee:d1:fe:fc:b7:
                    a4:3f:f3:1c:9a:36:43:bf:28:3d:df:55:1a:20:85:
                    64:03:1a:38:b2:7a:03:3f:a7:ee:0f:c7:35:8e:72:
                    e7:e6:5e:79:15:4f:2e:60:58:64:8e:a3:7b:06:91:
                    4f:b6:9b:d6:3f:e6:a9:b7:22:be:bf:24:b7:73:64:
                    13:95:99:c4:e9:4a:24:6a:9d:aa:87:00:61:0b:22:
                    2f:0c:e1:87:5f:a0:36:30:d5:d6:53:b1:3d:31:22:
                    53:b5:c9:bc:b1:a1:19:66:f1:9a:90:d0:d2:7d:21:
                    d5:e1:c4:f1:c6:41:9b:9b:1d:a7:f8:a5:b4:2a:bf:
                    7e:c5:1d:65:c3:94:ae:ee:2a:26:93:c9:97:57:a4:
                    f7:eb:27:b1:26:83:af:73:37:84:64:0d:11:3c:00:
                    ff:eb:52:cf:44:1f:bd:28:4e:e6:45:a1:4a:56:53:
                    bf:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:79:BD:DB:74:AD:22:1C:48:80:E3:3A:88:BA:29:E5:ED:AD:D5:82
            X509v3 Authority Key Identifier:
                keyid:5A:CB:0F:96:C2:B1:25:5E:AB:AA:EB:C1:42:6E:CD:9E:6D:F6:C4:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/e13eed2b-955e-4093-88a4-f4de3cc9b9cd/0/5ACB0F96C2B1255EABAAEBC1426ECD9E6DF6C4AD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5ACB0F96C2B1255EABAAEBC1426ECD9E6DF6C4AD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e13eed2b-955e-4093-88a4-f4de3cc9b9cd/0/5ACB0F96C2B1255EABAAEBC1426ECD9E6DF6C4AD.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:c0:f5:3b:35:4a:a8:59:59:29:83:8e:d0:b6:66:da:fb:0d:
         93:e2:42:2e:3e:02:d7:3b:1b:ce:f2:c8:a5:b3:93:94:d4:a7:
         9b:e7:99:d0:19:49:5a:ab:c4:0d:0c:95:de:36:bc:99:aa:cc:
         e5:c5:bb:95:7b:9f:31:13:59:8c:22:af:af:57:e5:29:c7:09:
         f0:c9:11:b6:ee:e6:00:49:23:05:73:cd:2c:f1:f7:60:be:68:
         90:7d:cd:d1:8c:c7:4c:2d:c3:80:3d:d7:5c:1b:19:89:a0:69:
         ad:39:3c:8b:1c:85:62:b9:d3:40:c6:6a:2d:ef:a6:8d:3f:2d:
         5b:a5:24:52:07:11:b8:80:2d:3e:a5:d7:53:f3:6a:a6:f7:2b:
         83:db:1f:de:38:d6:d5:1c:a4:b1:c2:56:90:76:3e:e2:69:0b:
         19:a5:c5:a9:54:21:21:b7:40:66:2d:bb:e3:fd:b5:97:89:d4:
         22:42:8b:d3:aa:f6:b5:84:ee:46:6f:73:18:66:20:fc:7a:15:
         f8:61:b7:0d:1f:fe:5a:5e:78:d6:0c:98:45:3e:a3:d6:97:88:
         29:24:84:36:dd:21:ed:68:5d:d3:d9:ba:f4:2f:bf:5c:8f:30:
         2e:1c:b0:e2:14:a0:36:c6:67:2a:1e:62:c4:41:d5:bb:64:f4:
         d4:0c:1b:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 03:05:40 2025 by rpki-client