This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/e5682bf2-0634-4782-a5af-eeb919f19143/0/B5766EF969F5BB0A7C76FAA9E53BDE8274E5643E.mft
File:                     B5766EF969F5BB0A7C76FAA9E53BDE8274E5643E.mft (raw, json)
Hash identifier:          BaB1f3q0TZRBjVIOrLcC6uIQnA1kahd0NoxyQx5bCrA=
Subject key identifier:   80:9C:FF:49:12:AF:CC:97:9C:1C:3D:A8:B8:0A:89:9C:29:2E:4F:62
Authority key identifier: B5:76:6E:F9:69:F5:BB:0A:7C:76:FA:A9:E5:3B:DE:82:74:E5:64:3E
Certificate issuer:       /CN=B5766EF969F5BB0A7C76FAA9E53BDE8274E5643E
Certificate serial:       5BC24348D0F8D35920F9B5706C5926A508C4F6BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B5766EF969F5BB0A7C76FAA9E53BDE8274E5643E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/e5682bf2-0634-4782-a5af-eeb919f19143/0/B5766EF969F5BB0A7C76FAA9E53BDE8274E5643E.mft
Manifest number:          EF
Signing time:             Mon 29 Dec 2025 21:31:41 +0000
Manifest this update:     Mon 29 Dec 2025 21:26:41 +0000
Manifest next update:     Fri 02 Jan 2026 07:27:41 +0000
Files and hashes:         1: B5766EF969F5BB0A7C76FAA9E53BDE8274E5643E.crl (hash: X27BBHcBolNCJ06v3CNtBJKY8urm25lrlQ/8b/OGgEY=)
                          2: 3136302e32352e34392e302f32342d3234203d3e20313533303634.roa (hash: +r21VHJKiSG4g/R/zHmUKuYDBebHXXDRqabchwnAdGk=)
                          3: 3136302e32352e34382e302f32332d3233203d3e20313533303634.roa (hash: yPb8vzqBZ4SuTebiaZ2t1hQWOQT5EPzxImNlHmSkYG0=)
                          4: 3136302e32352e34382e302f32342d3234203d3e20313533303634.roa (hash: 5vrTiCPVa+g9uUAZqY7yIFrCeD1zTR9VGB0NveariYc=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/e5682bf2-0634-4782-a5af-eeb919f19143/0/B5766EF969F5BB0A7C76FAA9E53BDE8274E5643E.crl
                          rsync://repo-rpki.idnic.net/repo/e5682bf2-0634-4782-a5af-eeb919f19143/0/B5766EF969F5BB0A7C76FAA9E53BDE8274E5643E.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B5766EF969F5BB0A7C76FAA9E53BDE8274E5643E.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 Jan 2026 03:20:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:c2:43:48:d0:f8:d3:59:20:f9:b5:70:6c:59:26:a5:08:c4:f6:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B5766EF969F5BB0A7C76FAA9E53BDE8274E5643E
        Validity
            Not Before: Dec 29 21:26:41 2025 GMT
            Not After : Jan  2 07:27:41 2026 GMT
        Subject: CN=809CFF4912AFCC979C1C3DA8B80A899C292E4F62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:f1:cb:80:8d:3b:85:0d:71:9e:17:03:e2:3a:
                    ef:49:63:01:87:12:b7:c9:d4:3c:26:af:e2:19:d9:
                    25:6a:da:41:29:ae:b0:0d:76:21:2f:0b:f2:84:03:
                    1c:fe:aa:c8:7e:3a:db:66:6c:e7:3e:97:9a:b9:35:
                    65:d1:2b:dd:c9:d9:86:1b:4d:85:a0:7d:65:17:f7:
                    b3:fd:b0:9f:ac:0e:09:65:2f:eb:fd:fa:93:95:49:
                    07:e5:33:1c:5c:90:20:0b:0b:cb:20:6f:98:d4:2c:
                    76:23:1f:4e:77:62:6f:02:eb:86:76:15:33:4f:0a:
                    6a:4a:b6:05:85:0b:eb:6c:5e:d1:73:ec:1c:14:12:
                    79:99:7c:d5:31:3e:de:64:c3:92:8f:4a:70:d4:7e:
                    bd:07:32:c5:1c:ea:60:c0:36:55:81:7f:a1:de:d1:
                    88:4c:e5:89:27:37:9c:ef:b6:a2:b7:11:77:5a:48:
                    b5:5e:21:f1:4d:72:39:da:96:81:0d:42:58:45:68:
                    5f:12:71:0f:55:a1:19:19:01:02:a4:bd:57:63:af:
                    1b:88:34:eb:3f:ea:dd:a9:27:a5:95:93:04:5f:a9:
                    7d:d1:9f:59:1c:54:ab:5b:e8:11:ae:b0:b0:06:8b:
                    2e:9f:09:fb:cf:9e:70:da:b3:ae:76:38:6d:bb:5c:
                    23:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:9C:FF:49:12:AF:CC:97:9C:1C:3D:A8:B8:0A:89:9C:29:2E:4F:62
            X509v3 Authority Key Identifier:
                keyid:B5:76:6E:F9:69:F5:BB:0A:7C:76:FA:A9:E5:3B:DE:82:74:E5:64:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/e5682bf2-0634-4782-a5af-eeb919f19143/0/B5766EF969F5BB0A7C76FAA9E53BDE8274E5643E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B5766EF969F5BB0A7C76FAA9E53BDE8274E5643E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e5682bf2-0634-4782-a5af-eeb919f19143/0/B5766EF969F5BB0A7C76FAA9E53BDE8274E5643E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:31:9d:19:a9:2c:41:6c:3d:f2:0b:f1:f4:87:03:1e:07:60:
         16:17:52:e6:18:3b:bf:68:5b:31:23:aa:cb:39:ee:8b:10:5a:
         e8:8b:63:cd:c5:cc:a3:b4:44:35:13:0b:0a:97:f6:b9:a3:68:
         f6:74:3b:68:b8:e7:f1:a5:6e:e2:9c:8c:e2:f1:88:76:02:50:
         f2:f9:15:b7:45:a7:46:71:86:2f:bb:89:99:d5:ff:26:4a:14:
         a9:ab:6f:ca:0b:9e:46:95:f3:20:c2:28:b4:14:9d:bb:6a:1f:
         38:39:23:f4:70:03:1f:04:1c:a5:f7:e7:9e:0a:11:da:94:2b:
         b1:c8:c7:67:13:a1:11:4b:a3:c9:38:9f:80:8e:76:9b:6a:89:
         2c:c8:62:7f:d0:e8:f9:ae:3c:fb:35:bd:29:54:fb:43:12:ec:
         27:71:bb:c8:e6:38:a0:1b:14:2e:f3:dc:e6:15:81:f9:7a:57:
         98:c0:eb:7e:81:de:75:8d:8b:b1:dc:ec:45:da:1a:8b:6b:49:
         cf:a2:48:d6:4d:28:23:dd:a9:da:be:12:43:2e:22:76:df:6b:
         c3:ad:b0:aa:66:18:ec:18:fc:e8:fb:6f:88:8a:dd:b0:52:b7:
         a4:12:e0:7e:19:a5:4c:df:e9:3b:bb:7f:37:01:bc:8d:15:f1:
         0d:0f:f6:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 31 00:24:06 2025 by rpki-client