This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/2bf71c91-1624-4fc0-8c63-2efafd46fbc1/0/9F56EC50DA14D13D149F5145D62AFC5A3F0B70B5.mft
File:                     9F56EC50DA14D13D149F5145D62AFC5A3F0B70B5.mft (raw, json)
Hash identifier:          FjpKf/9h6qvEwCBWnpD/u8WOAE8Q/eDkmlDpzEJIgUs=
Subject key identifier:   F7:BF:5E:CA:27:D3:34:31:61:8A:C1:43:ED:56:96:6F:09:98:36:03
Authority key identifier: 9F:56:EC:50:DA:14:D1:3D:14:9F:51:45:D6:2A:FC:5A:3F:0B:70:B5
Certificate issuer:       /CN=9F56EC50DA14D13D149F5145D62AFC5A3F0B70B5
Certificate serial:       38013351B50ACD48B54DA57AE76F950C1A5CF08E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F56EC50DA14D13D149F5145D62AFC5A3F0B70B5.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/2bf71c91-1624-4fc0-8c63-2efafd46fbc1/0/9F56EC50DA14D13D149F5145D62AFC5A3F0B70B5.mft
Manifest number:          052D
Signing time:             Fri 05 Dec 2025 15:11:54 +0000
Manifest this update:     Fri 05 Dec 2025 15:06:54 +0000
Manifest next update:     Mon 08 Dec 2025 22:26:54 +0000
Files and hashes:         1: 3137352e34352e3139312e302f32342d3234203d3e203436303139.roa (hash: JEDVGjWCNlyZky1kCfxZHNHeqn82swpdHlq9u9cjPE8=)
                          2: 3137352e34352e3139302e302f32342d3234203d3e203436303139.roa (hash: ZIgEMhAvryXvDTGrETcZ8TflN3USBddmvWjLfCuExYA=)
                          3: 3137352e34352e3138382e302f32342d3234203d3e203436303139.roa (hash: EK9rY9vWtmYUd01V3dBua2aCRXikcRS54y0+DlHE8Ko=)
                          4: 3137352e34352e3138392e302f32342d3234203d3e203436303139.roa (hash: aVpC1UpUq5xM3EjtXbH8DkIG+zAdeuUyTigDv05h9yc=)
                          5: 3137352e34352e3138342e302f32312d3231203d3e203436303139.roa (hash: 0v8AgN7r/4c1TsSHnJh2jh4MvGOfXWjrDArdHCr4Jyk=)
                          6: 3137352e34352e3138362e302f32342d3234203d3e203436303139.roa (hash: 8NWlJt4CJ8mG05Kksh2s5LLd0tjsRxbEV7dAV2EGZp0=)
                          7: 323430353a383734303a3a2f33322d3438203d3e203436303139.roa (hash: tWUdaCi6USMMsgIMwxNhIvyYJg4UE5mGg0yF8mZruBw=)
                          8: 3137352e34352e3138372e302f32342d3234203d3e203436303139.roa (hash: t7w75yjsYibdXaLt3vYd+nK8iJahfzez7vWvTqDQHwA=)
                          9: 9F56EC50DA14D13D149F5145D62AFC5A3F0B70B5.crl (hash: s2BUBku5FaRZw5axW7GJR/9nvuxMwRKfh4lcScYflME=)
                          10: 3137352e34352e3138352e302f32342d3234203d3e203436303139.roa (hash: puA8mGw1TnOQCrFl0iIg04HJ41wfz+xZ95LuowhMI30=)
                          11: 3137352e34352e3138342e302f32342d3234203d3e203436303139.roa (hash: G3k2TGIZtD0G6kIsLYuxmLupEQGsTsKhUmFGnPgDNkk=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/2bf71c91-1624-4fc0-8c63-2efafd46fbc1/0/9F56EC50DA14D13D149F5145D62AFC5A3F0B70B5.crl
                          rsync://repo-rpki.idnic.net/repo/2bf71c91-1624-4fc0-8c63-2efafd46fbc1/0/9F56EC50DA14D13D149F5145D62AFC5A3F0B70B5.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F56EC50DA14D13D149F5145D62AFC5A3F0B70B5.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 08 Dec 2025 22:26:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:01:33:51:b5:0a:cd:48:b5:4d:a5:7a:e7:6f:95:0c:1a:5c:f0:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9F56EC50DA14D13D149F5145D62AFC5A3F0B70B5
        Validity
            Not Before: Dec  5 15:06:54 2025 GMT
            Not After : Dec  8 22:26:54 2025 GMT
        Subject: CN=F7BF5ECA27D33431618AC143ED56966F09983603
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:0b:4d:07:cf:7b:08:55:45:97:bd:cd:4b:61:
                    2f:2b:09:81:09:88:0c:40:15:4e:1f:62:20:06:24:
                    81:47:b5:87:df:57:c7:d6:21:99:1c:b4:cc:2a:d5:
                    5c:34:c5:80:c4:fe:bf:fe:98:22:7f:fd:39:20:ef:
                    da:a1:07:e6:c1:20:71:4b:e7:1c:f3:4c:38:5f:bb:
                    39:46:6b:1a:6b:93:c0:f8:0b:be:35:8e:b0:99:9a:
                    f1:79:43:38:07:d8:ff:a6:75:e3:6d:92:b9:bb:bc:
                    ae:4d:33:a8:27:a8:b6:ba:87:2a:b3:01:2b:d9:a6:
                    1c:28:36:78:3e:b1:cf:c0:e9:1c:ec:06:14:3d:d5:
                    12:ce:10:70:1e:b6:40:cb:59:f8:16:a1:70:7a:2f:
                    17:89:0f:ca:2d:c5:78:09:b3:4a:42:57:83:32:4d:
                    79:8b:2f:1e:5a:86:f9:b4:d0:e2:47:31:04:7c:d1:
                    29:ce:87:e8:e4:b9:ef:14:29:55:b2:0b:e1:d5:b7:
                    5c:d7:0e:13:8b:45:2c:3c:a1:69:d8:b1:6b:39:98:
                    57:f8:55:b4:5d:e6:df:74:08:9a:be:f6:67:7c:fd:
                    27:6a:6e:da:8e:4a:dc:63:c6:c0:09:6a:01:a2:8e:
                    2c:63:4a:19:a5:16:51:67:09:c7:b8:a5:e1:ee:d2:
                    6f:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:BF:5E:CA:27:D3:34:31:61:8A:C1:43:ED:56:96:6F:09:98:36:03
            X509v3 Authority Key Identifier:
                keyid:9F:56:EC:50:DA:14:D1:3D:14:9F:51:45:D6:2A:FC:5A:3F:0B:70:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/2bf71c91-1624-4fc0-8c63-2efafd46fbc1/0/9F56EC50DA14D13D149F5145D62AFC5A3F0B70B5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F56EC50DA14D13D149F5145D62AFC5A3F0B70B5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2bf71c91-1624-4fc0-8c63-2efafd46fbc1/0/9F56EC50DA14D13D149F5145D62AFC5A3F0B70B5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:72:aa:19:35:aa:84:6a:93:6e:71:1f:f1:ef:1f:c6:00:ed:
         dc:89:95:39:3d:d3:82:5f:95:a4:a5:49:65:6a:68:29:6c:15:
         4d:35:51:a0:90:13:a4:4a:b7:0d:e9:2a:42:24:3a:22:1a:8c:
         95:4c:4f:b3:65:bb:04:16:3b:68:8d:61:f4:ac:44:8a:b6:5c:
         e6:00:36:49:f3:5c:dd:32:f9:64:80:cd:55:e7:83:42:06:78:
         f4:58:0d:c5:36:e7:fe:b4:4e:ff:e7:17:38:7c:b8:ff:b8:13:
         c4:14:68:e4:c6:85:37:f9:0a:f9:e2:33:87:8d:8d:fd:90:3c:
         4e:b9:89:2b:93:b2:88:f0:74:a9:d1:d5:25:ae:73:1c:65:08:
         c4:f4:bb:bb:22:eb:6f:ce:44:94:f2:82:3c:a0:59:bf:71:fd:
         78:02:66:59:41:08:1f:62:bc:03:6d:0b:f0:14:9b:c2:29:af:
         a5:a4:c0:16:b2:fd:a0:a7:c8:37:66:11:2b:41:97:7b:b6:97:
         25:05:30:8b:6d:90:2c:c5:50:8c:0b:d6:f9:3a:ab:ba:9f:28:
         de:98:50:76:5f:21:7a:31:02:50:b7:4e:ce:ef:5b:3f:74:98:
         7c:96:6c:22:80:7f:81:87:69:05:94:4f:68:06:07:d5:ca:3d:
         89:ce:6b:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 01:02:46 2025 by rpki-client