This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/f3a62c9a-d4f0-454b-807f-84f9b3c202b3/0/4551A032C44485FF6593E043527E3E1CE35B4C46.mft
File:                     4551A032C44485FF6593E043527E3E1CE35B4C46.mft (raw, json)
Hash identifier:          enIpzEMhRl6J8fXVokWfDtg2QXdWNtT6cHovZ/B15ls=
Subject key identifier:   3F:75:10:5C:E8:02:92:24:98:56:5C:E9:73:92:CF:6C:90:BF:F8:B2
Authority key identifier: 45:51:A0:32:C4:44:85:FF:65:93:E0:43:52:7E:3E:1C:E3:5B:4C:46
Certificate issuer:       /CN=4551A032C44485FF6593E043527E3E1CE35B4C46
Certificate serial:       53A759F70D3B9CBFCCBFF91A5161749D9EDE1243
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4551A032C44485FF6593E043527E3E1CE35B4C46.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/f3a62c9a-d4f0-454b-807f-84f9b3c202b3/0/4551A032C44485FF6593E043527E3E1CE35B4C46.mft
Manifest number:          0534
Signing time:             Fri 19 Dec 2025 02:51:51 +0000
Manifest this update:     Fri 19 Dec 2025 02:46:51 +0000
Manifest next update:     Mon 22 Dec 2025 11:42:51 +0000
Files and hashes:         1: 3130332e3231392e37322e302f32322d3234203d3e20313335343635.roa (hash: cwL/Wm98vbTxoyJQfTlH4ycMGF6EbITvKpTsxzWifEM=)
                          2: 323430353a346338303a3a2f33322d3438203d3e20313335343635.roa (hash: MKGEqu2Psk6FQlMCBwUj3C02UOwY+xcEBLE/JQF9Mu0=)
                          3: 4551A032C44485FF6593E043527E3E1CE35B4C46.crl (hash: LH2Igce5sEr8mgojxb10ngwsfwUmSsoe4FQzt76z0Sg=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/f3a62c9a-d4f0-454b-807f-84f9b3c202b3/0/4551A032C44485FF6593E043527E3E1CE35B4C46.crl
                          rsync://repo-rpki.idnic.net/repo/f3a62c9a-d4f0-454b-807f-84f9b3c202b3/0/4551A032C44485FF6593E043527E3E1CE35B4C46.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4551A032C44485FF6593E043527E3E1CE35B4C46.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 22 Dec 2025 11:42:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:a7:59:f7:0d:3b:9c:bf:cc:bf:f9:1a:51:61:74:9d:9e:de:12:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4551A032C44485FF6593E043527E3E1CE35B4C46
        Validity
            Not Before: Dec 19 02:46:51 2025 GMT
            Not After : Dec 22 11:42:51 2025 GMT
        Subject: CN=3F75105CE802922498565CE97392CF6C90BFF8B2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:4c:71:44:a1:62:ed:29:f9:70:a0:dc:4e:32:
                    34:a3:93:5c:a0:0f:6d:ee:09:ca:1d:65:68:a2:fa:
                    e9:b4:27:e7:02:55:43:9e:e1:8b:a3:64:d7:64:02:
                    0f:07:b7:7d:3d:5a:d9:96:b0:9f:e0:6c:bd:b7:93:
                    16:e2:52:b1:c6:5c:c2:de:e8:a5:6f:24:eb:83:53:
                    9a:93:e6:79:42:a5:27:89:07:b1:ef:dc:84:0d:8e:
                    be:a7:85:ae:96:24:28:62:7d:1e:8d:16:1f:fa:90:
                    8e:d8:ef:1d:d6:23:9d:10:c7:6a:1c:7d:45:68:45:
                    39:1f:57:e6:8a:d9:ab:58:f4:5f:be:7e:10:39:29:
                    2f:4b:b5:0a:85:68:8f:98:a3:6e:78:51:36:86:56:
                    8e:9a:00:45:b2:a9:55:66:4c:85:7f:f7:17:a7:fa:
                    d1:20:82:00:27:b4:5c:0f:27:bf:e8:6d:c1:7f:b2:
                    d3:6e:72:67:84:05:e2:d2:7f:80:07:a8:37:97:ef:
                    92:17:9d:26:d4:f3:61:60:54:31:20:f8:60:e0:f2:
                    ae:ac:5e:9b:c9:76:36:0d:e1:52:fd:df:85:3b:b6:
                    2c:aa:ce:4f:50:40:67:b5:38:9f:47:0f:df:e7:73:
                    3b:f5:b0:9c:a9:d8:7d:bb:64:3e:d6:64:89:70:15:
                    b0:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:75:10:5C:E8:02:92:24:98:56:5C:E9:73:92:CF:6C:90:BF:F8:B2
            X509v3 Authority Key Identifier:
                keyid:45:51:A0:32:C4:44:85:FF:65:93:E0:43:52:7E:3E:1C:E3:5B:4C:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/f3a62c9a-d4f0-454b-807f-84f9b3c202b3/0/4551A032C44485FF6593E043527E3E1CE35B4C46.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4551A032C44485FF6593E043527E3E1CE35B4C46.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f3a62c9a-d4f0-454b-807f-84f9b3c202b3/0/4551A032C44485FF6593E043527E3E1CE35B4C46.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:d7:94:f5:f3:b9:24:6b:9b:a2:60:87:6f:59:e3:4d:64:36:
         87:b7:31:ee:0c:95:21:0a:3f:60:e3:6d:cd:5f:49:96:c1:08:
         c7:15:03:7f:7c:ba:ac:86:b4:46:8d:0c:0a:bf:54:9a:24:2b:
         ea:2c:57:0e:89:b9:8e:ed:47:d4:62:1d:5b:cb:46:48:90:f3:
         af:32:ed:77:09:74:5b:a0:6d:9c:9a:f2:6a:2a:4c:6e:04:3d:
         d5:75:c7:2d:06:1e:cf:aa:89:80:6a:94:75:7e:63:80:ff:85:
         52:37:20:3e:fa:e2:b5:92:3e:4c:a0:a4:41:12:aa:7f:fd:db:
         80:df:ca:3c:b8:5f:bd:2c:9a:c9:e6:1e:a9:9a:ac:7d:c7:be:
         a4:d2:e9:e3:0c:c9:32:82:36:14:0b:c4:9c:66:2e:ef:ce:3c:
         41:aa:7e:9d:59:c8:13:5f:92:c5:40:7c:2f:7c:84:45:1b:be:
         f7:84:7e:12:af:af:d6:c3:ce:48:4e:e7:7e:72:00:93:dd:f5:
         94:79:bc:86:5e:a3:b2:79:22:5c:47:75:b7:3a:3e:40:fd:32:
         5e:d5:e5:88:ab:b0:60:b4:c4:3f:90:6f:28:67:7c:93:31:28:
         a2:14:37:8a:8b:9c:ac:7c:0b:27:98:a1:ad:d1:1d:21:25:5a:
         b7:f8:0d:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 04:05:54 2025 by rpki-client