This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/1b4e195e-12de-4c3c-93e5-522ee54018d6/0/9FEB25155CF1AFF90AE11DA0298F164D554986F4.mft
File:                     9FEB25155CF1AFF90AE11DA0298F164D554986F4.mft (raw, json)
Hash identifier:          gQEl9RVMsuSEPF/VuhUtE0l2tQ3liTjXeaF939r2hg4=
Subject key identifier:   45:AF:89:FA:65:40:77:BF:64:43:FF:7A:65:92:3B:84:49:77:66:15
Authority key identifier: 9F:EB:25:15:5C:F1:AF:F9:0A:E1:1D:A0:29:8F:16:4D:55:49:86:F4
Certificate issuer:       /CN=9FEB25155CF1AFF90AE11DA0298F164D554986F4
Certificate serial:       55A93C57A764F0B4CA6BF60F608F6652FA9A3C98
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9FEB25155CF1AFF90AE11DA0298F164D554986F4.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/1b4e195e-12de-4c3c-93e5-522ee54018d6/0/9FEB25155CF1AFF90AE11DA0298F164D554986F4.mft
Manifest number:          052B
Signing time:             Fri 05 Dec 2025 03:01:49 +0000
Manifest this update:     Fri 05 Dec 2025 02:56:49 +0000
Manifest next update:     Mon 08 Dec 2025 05:41:49 +0000
Files and hashes:         1: 3132322e3130322e34302e302f32312d3234203d3e203338373538.roa (hash: oTh96cvu9N7dUKNXeMRvCfiS16/pskUDIN5zzPcyPFs=)
                          2: 3132302e32392e3135322e302f32312d3234203d3e203338373538.roa (hash: RS9Byz+j3EdqEQMObrbAR7PmpA8rmEiuqCAVbbyaqzQ=)
                          3: 3138302e3137382e39362e302f32302d3234203d3e203338373538.roa (hash: kpFmjz57IgAP8PtBxnCHq8wcPp57kSPI2nlME92Fnyg=)
                          4: 3130332e31302e36312e302f32342d3234203d3e203338373538.roa (hash: fpx270ixaq11nCmgYzT3PO4j149L6mmMafh/Cax7edM=)
                          5: 3230322e39332e3232342e302f32312d3234203d3e203338373538.roa (hash: pHeh4WZc6QAiJI01oIhwHizGh3B/+0TL7uxRsM4Hqog=)
                          6: 34332e3235322e37322e302f32322d3234203d3e203338373538.roa (hash: CXQZIZNdSuRyo3numXoAqSwoFv1BpTDqqmtfJIixEeM=)
                          7: 3130332e31302e36302e302f32342d3234203d3e203338373538.roa (hash: vr66fn8B7rAPP+TZSIsfhj0n+lp991jln8PENhk4tOQ=)
                          8: 3131342e3132392e31362e302f32312d3234203d3e203338373538.roa (hash: EdvOiYuEQSs6Tte4v6yMNFw5asiVZESXMxoQoYWb3vI=)
                          9: 9FEB25155CF1AFF90AE11DA0298F164D554986F4.crl (hash: KzNi+gcwA/SwSjSFqesQ6VAhLCihCBSbjveixYYdKOY=)
                          10: 3130332e31302e36322e302f32342d3234203d3e203338373538.roa (hash: WjmWZuOqqVrHpn2Iht/6D/CnYopSoMqLYwKVON2A9VQ=)
                          11: 323430343a336530303a3a2f33322d3438203d3e203338373538.roa (hash: AMgNEXA3HgeJ9JW4vEN8yPqkkgaxJIY9BD1424Sv1Zo=)
                          12: 3130332e31302e36332e302f32342d3234203d3e203338373538.roa (hash: lTXl5JSGNXk2H6QC/ExXfaBTFR2N2ANdTqoiPB9R7qw=)
                          13: 3230332e3137362e3137362e302f32322d3234203d3e203338373538.roa (hash: fs11mYHw0N1XTmtPs5VLrZKEd/NebYnoDSeOf+OjB1M=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/1b4e195e-12de-4c3c-93e5-522ee54018d6/0/9FEB25155CF1AFF90AE11DA0298F164D554986F4.crl
                          rsync://repo-rpki.idnic.net/repo/1b4e195e-12de-4c3c-93e5-522ee54018d6/0/9FEB25155CF1AFF90AE11DA0298F164D554986F4.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9FEB25155CF1AFF90AE11DA0298F164D554986F4.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 08 Dec 2025 05:41:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:a9:3c:57:a7:64:f0:b4:ca:6b:f6:0f:60:8f:66:52:fa:9a:3c:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9FEB25155CF1AFF90AE11DA0298F164D554986F4
        Validity
            Not Before: Dec  5 02:56:49 2025 GMT
            Not After : Dec  8 05:41:49 2025 GMT
        Subject: CN=45AF89FA654077BF6443FF7A65923B8449776615
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:3c:6c:59:43:26:61:67:53:04:fd:59:43:11:
                    a1:26:a0:ac:88:0f:b5:cb:e8:b1:26:c2:2a:51:1a:
                    a6:64:50:a5:ac:12:82:51:31:2f:d9:0c:cc:a1:40:
                    fc:3e:cb:63:3b:b8:59:16:b2:43:91:97:13:9a:63:
                    9e:dc:5d:08:e8:c3:70:63:b4:e8:72:4d:18:fe:9b:
                    91:e6:d4:6d:8f:5d:33:50:e9:21:02:9e:9e:20:38:
                    b6:a4:38:57:3b:3d:56:9b:c9:de:3f:bc:70:70:e5:
                    f7:67:9c:97:0c:25:16:28:ab:40:a1:02:4f:50:c8:
                    b7:53:6e:1d:d9:71:46:1e:b1:85:9c:2c:79:51:d5:
                    dc:96:f3:9a:30:a7:dd:10:e1:5f:e1:97:d2:2b:60:
                    ff:b0:96:d5:45:6a:ca:f6:c2:cd:d0:71:da:70:7b:
                    cc:e6:1b:c5:1e:e6:06:91:48:6e:98:2f:22:8e:7f:
                    8d:a5:16:e0:ad:91:5e:89:5f:ae:ef:0c:cc:cf:da:
                    48:c4:ea:71:7e:68:7c:d1:57:ee:37:87:b1:a1:74:
                    88:93:11:cb:13:e8:8e:09:0b:3b:bf:fb:16:97:82:
                    5e:9d:6a:e3:8c:23:7a:52:3a:6f:94:e9:da:64:d5:
                    ba:f2:81:8f:41:38:0d:ae:26:8b:72:40:a0:66:2c:
                    68:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:AF:89:FA:65:40:77:BF:64:43:FF:7A:65:92:3B:84:49:77:66:15
            X509v3 Authority Key Identifier:
                keyid:9F:EB:25:15:5C:F1:AF:F9:0A:E1:1D:A0:29:8F:16:4D:55:49:86:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/1b4e195e-12de-4c3c-93e5-522ee54018d6/0/9FEB25155CF1AFF90AE11DA0298F164D554986F4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9FEB25155CF1AFF90AE11DA0298F164D554986F4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1b4e195e-12de-4c3c-93e5-522ee54018d6/0/9FEB25155CF1AFF90AE11DA0298F164D554986F4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:5a:ae:60:c4:5a:a2:e3:a2:70:79:77:e9:23:42:63:c4:24:
         4a:86:d0:97:f4:2a:8b:8a:19:ed:a1:6b:d4:a4:95:07:e6:07:
         b9:ac:cd:e4:06:ab:cb:e0:61:e6:78:cc:3d:8d:4e:3e:c0:7f:
         59:f5:dc:a1:10:0a:11:30:c2:c7:06:70:a9:82:b7:a4:54:42:
         ee:e8:90:93:0f:fd:89:41:e9:42:94:3c:1c:2e:24:46:89:78:
         47:bc:9e:68:05:09:48:d2:7c:17:c0:d4:7b:11:3b:bb:9d:fc:
         4c:f0:d1:82:46:d9:dc:48:65:bd:32:ff:56:97:b1:39:ea:3e:
         e5:f0:2a:11:a2:e6:16:81:d1:80:9c:2d:2c:cf:29:e4:53:c8:
         c4:3d:7f:0e:7d:f9:e5:d1:76:cf:97:ac:ba:11:f7:c4:b9:eb:
         72:2f:6a:9d:1b:fb:8d:63:0c:3f:7e:04:a7:8c:3c:7d:58:b5:
         d9:1e:8e:bd:af:ac:d2:cb:7c:7f:4f:c2:3b:a1:73:9a:2d:1f:
         16:f9:d4:8c:2a:62:0b:d3:3e:6e:10:87:57:94:58:e6:04:eb:
         b9:03:0e:f2:a0:87:1b:c0:e5:0e:b5:25:58:c6:68:91:bd:87:
         84:63:42:f9:03:07:ff:8e:da:0c:28:94:ca:5e:22:e0:e0:5e:
         1c:e4:49:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 05:17:17 2025 by rpki-client