This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/15bf718d-911e-43d6-8e3c-0d1b3646e276/0/94EDA4B2360B47DC65386E3E7EBAE35B997F2A42.mft
File:                     94EDA4B2360B47DC65386E3E7EBAE35B997F2A42.mft (raw, json)
Hash identifier:          PvQTeqrgNzvH5GTmd47l2IpQ6IgzGFVNwqCv0h0rNCU=
Subject key identifier:   46:FB:75:8F:1F:48:C7:05:1F:0E:DC:95:D6:2F:6D:80:08:E7:15:12
Authority key identifier: 94:ED:A4:B2:36:0B:47:DC:65:38:6E:3E:7E:BA:E3:5B:99:7F:2A:42
Certificate issuer:       /CN=94EDA4B2360B47DC65386E3E7EBAE35B997F2A42
Certificate serial:       6D8C0BC70DF5BA3496A627D86279AC38B4EAE85F
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/94EDA4B2360B47DC65386E3E7EBAE35B997F2A42.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/15bf718d-911e-43d6-8e3c-0d1b3646e276/0/94EDA4B2360B47DC65386E3E7EBAE35B997F2A42.mft
Manifest number:          0530
Signing time:             Wed 17 Dec 2025 15:00:54 +0000
Manifest this update:     Wed 17 Dec 2025 14:55:54 +0000
Manifest next update:     Sat 20 Dec 2025 16:50:54 +0000
Files and hashes:         1: 3130332e3134342e3235302e302f32332d3234203d3e20313339343335.roa (hash: JjtMSSCssV5HqQAouXYm4WHr16DMfc7UE3Z2A9weGck=)
                          2: 94EDA4B2360B47DC65386E3E7EBAE35B997F2A42.crl (hash: qOYAgiyeGGrRce5NWOokfHgc91qINI90Rws9kD7bcYM=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/15bf718d-911e-43d6-8e3c-0d1b3646e276/0/94EDA4B2360B47DC65386E3E7EBAE35B997F2A42.crl
                          rsync://repo-rpki.idnic.net/repo/15bf718d-911e-43d6-8e3c-0d1b3646e276/0/94EDA4B2360B47DC65386E3E7EBAE35B997F2A42.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/94EDA4B2360B47DC65386E3E7EBAE35B997F2A42.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Dec 2025 16:50:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:8c:0b:c7:0d:f5:ba:34:96:a6:27:d8:62:79:ac:38:b4:ea:e8:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=94EDA4B2360B47DC65386E3E7EBAE35B997F2A42
        Validity
            Not Before: Dec 17 14:55:54 2025 GMT
            Not After : Dec 20 16:50:54 2025 GMT
        Subject: CN=46FB758F1F48C7051F0EDC95D62F6D8008E71512
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:68:f3:27:69:a6:52:0b:6b:a5:7b:c8:fb:a1:
                    bd:a7:6b:88:34:f8:69:fe:43:2b:66:15:fc:9e:1e:
                    2f:a7:e0:c0:9a:4a:97:ae:36:43:35:18:9c:2e:5c:
                    2e:57:32:f8:43:c4:6b:ec:a5:e3:1c:9f:4e:72:43:
                    a7:fa:eb:0a:9f:43:10:39:c6:34:6f:8c:52:af:b2:
                    be:ef:07:8d:6a:4a:45:72:fb:25:5b:d7:42:57:34:
                    10:d6:38:79:6f:da:f2:7d:5f:3f:74:ec:87:48:c1:
                    4d:5b:ec:d5:16:9e:76:46:c4:86:98:bc:84:76:36:
                    60:6f:e2:1c:ba:c1:e4:f0:88:c8:59:5e:5c:5e:bb:
                    9c:9c:69:3f:3c:00:ee:51:58:d9:34:95:81:0c:95:
                    b6:91:90:04:e2:2c:65:13:0c:40:61:b0:6e:f0:20:
                    3c:ef:64:3e:89:15:ba:af:14:21:fb:0b:ea:c6:9c:
                    b4:db:1a:94:fa:0c:a5:d2:c7:e6:fb:76:d9:85:6a:
                    c1:14:5a:9c:5e:c6:87:58:f4:1c:4c:c4:9e:0e:b0:
                    f8:10:f8:5e:83:08:b2:33:f1:6c:c3:18:c3:59:a3:
                    0e:55:28:ed:60:1c:f1:89:f7:0b:eb:46:a5:2f:8f:
                    9b:b5:d8:b7:f2:7a:da:fc:2e:58:76:e9:6a:db:fa:
                    26:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:FB:75:8F:1F:48:C7:05:1F:0E:DC:95:D6:2F:6D:80:08:E7:15:12
            X509v3 Authority Key Identifier:
                keyid:94:ED:A4:B2:36:0B:47:DC:65:38:6E:3E:7E:BA:E3:5B:99:7F:2A:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/15bf718d-911e-43d6-8e3c-0d1b3646e276/0/94EDA4B2360B47DC65386E3E7EBAE35B997F2A42.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/94EDA4B2360B47DC65386E3E7EBAE35B997F2A42.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/15bf718d-911e-43d6-8e3c-0d1b3646e276/0/94EDA4B2360B47DC65386E3E7EBAE35B997F2A42.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:df:3b:af:5b:75:09:1c:db:e0:90:89:c1:71:ae:14:26:2c:
         38:10:cc:fa:2f:4a:8f:08:2d:4c:78:3f:23:24:24:e3:47:9c:
         dc:e4:a7:9a:6e:af:ba:7b:b4:29:48:9e:ab:e2:9e:80:f9:1a:
         89:ba:12:d2:4d:fb:fd:f6:64:40:21:30:dd:79:e2:4d:b7:54:
         97:bd:46:83:13:09:64:53:48:c2:88:0c:45:33:1b:34:1b:7b:
         d0:01:91:78:d2:26:19:c9:0d:cc:83:bb:2f:a3:49:ce:06:b0:
         1d:2b:01:d1:24:f8:41:60:72:36:b0:37:39:4c:29:4a:ca:a3:
         fd:87:16:ed:2e:02:f8:05:fe:20:96:51:03:d7:25:61:47:5b:
         6b:89:63:96:02:d5:be:76:dd:50:78:a1:32:4e:a1:2a:1a:81:
         df:9f:84:4b:8c:5c:82:db:04:d3:ea:d8:aa:aa:f8:47:26:fb:
         5d:7d:0a:0b:95:f6:09:a3:60:98:7d:35:ba:2a:17:70:72:2f:
         6f:65:8d:5d:79:f5:ac:55:1c:e2:0a:33:2b:2d:52:70:15:a1:
         18:ea:5d:00:85:ed:eb:bf:c3:29:9e:a4:c5:09:b0:41:ca:ff:
         55:58:d0:00:7a:f9:ec:ea:59:52:d6:82:34:50:56:fe:d8:75:
         3b:b9:ee:a9
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUbYwLxw31ujSWpifYYnmsOLTq6F8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTRFREE0QjIzNjBCNDdEQzY1Mzg2RTNFN0VCQUUzNUI5
OTdGMkE0MjAeFw0yNTEyMTcxNDU1NTRaFw0yNTEyMjAxNjUwNTRaMDMxMTAvBgNV
BAMTKDQ2RkI3NThGMUY0OEM3MDUxRjBFREM5NUQ2MkY2RDgwMDhFNzE1MTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1aPMnaaZSC2ule8j7ob2na4g0
+Gn+QytmFfyeHi+n4MCaSpeuNkM1GJwuXC5XMvhDxGvspeMcn05yQ6f66wqfQxA5
xjRvjFKvsr7vB41qSkVy+yVb10JXNBDWOHlv2vJ9Xz907IdIwU1b7NUWnnZGxIaY
vIR2NmBv4hy6weTwiMhZXlxeu5ycaT88AO5RWNk0lYEMlbaRkATiLGUTDEBhsG7w
IDzvZD6JFbqvFCH7C+rGnLTbGpT6DKXSx+b7dtmFasEUWpxexodY9BxMxJ4OsPgQ
+F6DCLIz8WzDGMNZow5VKO1gHPGJ9wvrRqUvj5u12Lfyetr8Llh26Wrb+iahAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQURvt1jx9IxwUfDtyV1i9tgAjnFRIwHwYDVR0j
BBgwFoAUlO2ksjYLR9xlOG4+frrjW5l/KkIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x
NWJmNzE4ZC05MTFlLTQzZDYtOGUzYy0wZDFiMzY0NmUyNzYvMC85NEVEQTRCMjM2
MEI0N0RDNjUzODZFM0U3RUJBRTM1Qjk5N0YyQTQyLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvOTRFREE0QjIzNjBCNDdEQzY1Mzg2RTNFN0VCQUUzNUI5OTdG
MkE0Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTViZjcxOGQtOTExZS00M2Q2LThl
M2MtMGQxYjM2NDZlMjc2LzAvOTRFREE0QjIzNjBCNDdEQzY1Mzg2RTNFN0VCQUUz
NUI5OTdGMkE0Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBACjfO69bdQkc2+CQicFxrhQmLDgQzPovSo8I
LUx4PyMkJONHnNzkp5pur7p7tClInqvinoD5Gom6EtJN+/32ZEAhMN154k23VJe9
RoMTCWRTSMKIDEUzGzQbe9ABkXjSJhnJDcyDuy+jSc4GsB0rAdEk+EFgcjawNzlM
KUrKo/2HFu0uAvgF/iCWUQPXJWFHW2uJY5YC1b523VB4oTJOoSoagd+fhEuMXILb
BNPq2Kqq+Ecm+119CguV9gmjYJh9NboqF3ByL29ljV159axVHOIKMystUnAVoRjq
XQCF7eu/wymepMUJsEHK/1VY0AB6+ezqWVLWgjRQVv7YdTu57qk=
-----END CERTIFICATE-----
Generated at Thu Dec 18 14:08:12 2025 by rpki-client