This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/42c7dfd4-e510-4707-9818-a2b1e2c6b216/0/A9D46A066DBAE3776A15E9AB09A6CD3C8216615B.mft
File:                     A9D46A066DBAE3776A15E9AB09A6CD3C8216615B.mft (raw, json)
Hash identifier:          sJwCnVGasyKbA984L7afnrnChRR5bsG1EKUiqleGA4c=
Subject key identifier:   D8:DF:7E:99:D9:D1:89:51:C6:28:CF:DC:F3:51:B5:89:AF:75:96:E1
Authority key identifier: A9:D4:6A:06:6D:BA:E3:77:6A:15:E9:AB:09:A6:CD:3C:82:16:61:5B
Certificate issuer:       /CN=A9D46A066DBAE3776A15E9AB09A6CD3C8216615B
Certificate serial:       0AB30A767865256E18F07897D685FFA245B4C158
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9D46A066DBAE3776A15E9AB09A6CD3C8216615B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/42c7dfd4-e510-4707-9818-a2b1e2c6b216/0/A9D46A066DBAE3776A15E9AB09A6CD3C8216615B.mft
Manifest number:          0151
Signing time:             Mon 15 Dec 2025 19:40:45 +0000
Manifest this update:     Mon 15 Dec 2025 19:35:45 +0000
Manifest next update:     Thu 18 Dec 2025 23:05:45 +0000
Files and hashes:         1: 3131372e3130332e37312e302f32342d3234203d3e203536323334.roa (hash: 1kyzi1r50RrQw1lh7O746Ykgi+j0sINCWFqBw58oQ98=)
                          2: 3130332e3234332e31302e302f32342d3234203d3e20313532303331.roa (hash: NnrAQKq/S9bS3O9ZlatHMfb5HFDnemqWID50FjT9Aug=)
                          3: A9D46A066DBAE3776A15E9AB09A6CD3C8216615B.crl (hash: qlA7jW/CjNQM6O5y2eavdWC8IP9ojnaDPtkTPk91eMg=)
                          4: 3131372e3130332e37302e302f32342d3234203d3e203536323334.roa (hash: FMlAAb4oa/1SAW0ki6G5gnzHtyuWiQvqxUUC0qgRwT4=)
                          5: 3131372e3130332e36392e302f32342d3234203d3e203536323334.roa (hash: udxfPqIRp1VlzrX5n0/fiRSZ+nKJ2BZfVc8P92kVhEw=)
                          6: 3131372e3130332e36382e302f32342d3234203d3e203536323334.roa (hash: mKN81nr9n+EB+Ar0JuYmAgcYDj9oQSxKmUu5BZ5rbmU=)
                          7: 3130332e3234332e31312e302f32342d3234203d3e20313532303331.roa (hash: qqWSkoteDsFPSy94pyeYjAzSUP9Ynr2j2aE8DeLFfsU=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/42c7dfd4-e510-4707-9818-a2b1e2c6b216/0/A9D46A066DBAE3776A15E9AB09A6CD3C8216615B.crl
                          rsync://repo-rpki.idnic.net/repo/42c7dfd4-e510-4707-9818-a2b1e2c6b216/0/A9D46A066DBAE3776A15E9AB09A6CD3C8216615B.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9D46A066DBAE3776A15E9AB09A6CD3C8216615B.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 18 Dec 2025 23:05:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:b3:0a:76:78:65:25:6e:18:f0:78:97:d6:85:ff:a2:45:b4:c1:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9D46A066DBAE3776A15E9AB09A6CD3C8216615B
        Validity
            Not Before: Dec 15 19:35:45 2025 GMT
            Not After : Dec 18 23:05:45 2025 GMT
        Subject: CN=D8DF7E99D9D18951C628CFDCF351B589AF7596E1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:ce:f5:91:2c:32:2b:03:7b:e0:a7:99:45:36:
                    fa:52:9a:9c:42:15:99:de:bf:d6:ec:95:52:dd:e0:
                    64:67:2a:76:83:02:a3:88:f1:2e:e1:39:ce:18:81:
                    c6:18:30:2c:ff:fb:b9:c5:c3:6e:58:eb:fa:cc:79:
                    d6:33:79:6e:02:08:20:d5:4b:32:f0:99:92:71:1d:
                    d1:ea:79:78:99:9b:16:6d:3b:cf:88:21:23:35:44:
                    f5:4d:70:ad:70:b2:22:50:36:6d:e7:cf:db:74:2a:
                    d9:69:aa:55:49:9c:7d:e9:77:b2:a8:0d:61:66:9a:
                    98:b6:58:d4:12:03:c7:d2:c2:4b:a4:ab:9e:2e:3d:
                    22:73:72:55:b6:db:f3:90:69:22:d3:7e:15:d0:f8:
                    89:a7:51:d6:cf:cd:47:57:10:05:52:50:7b:1f:f0:
                    99:21:4f:97:e6:61:98:6e:cb:ad:04:a9:71:3d:29:
                    04:7e:92:84:26:96:78:b4:d7:a1:e1:ee:8f:34:3a:
                    57:92:aa:62:4d:68:4c:8e:80:4f:fc:2b:7e:26:51:
                    7c:db:c7:1e:11:b2:5f:32:a2:52:16:b4:29:86:01:
                    ba:52:36:89:a7:d0:0b:73:1d:f2:4e:99:8f:3c:92:
                    7c:7a:01:36:ab:ae:a0:0e:c6:f0:92:b4:01:94:69:
                    91:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:DF:7E:99:D9:D1:89:51:C6:28:CF:DC:F3:51:B5:89:AF:75:96:E1
            X509v3 Authority Key Identifier:
                keyid:A9:D4:6A:06:6D:BA:E3:77:6A:15:E9:AB:09:A6:CD:3C:82:16:61:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/42c7dfd4-e510-4707-9818-a2b1e2c6b216/0/A9D46A066DBAE3776A15E9AB09A6CD3C8216615B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9D46A066DBAE3776A15E9AB09A6CD3C8216615B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/42c7dfd4-e510-4707-9818-a2b1e2c6b216/0/A9D46A066DBAE3776A15E9AB09A6CD3C8216615B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:83:6c:6f:17:5e:3f:96:9b:7a:95:27:f0:f2:85:e3:95:15:
         0b:94:71:24:75:89:0a:20:94:e9:60:94:84:07:63:32:2c:da:
         5f:18:2e:c5:e8:59:0e:7f:ec:a6:0b:83:e0:d1:ef:41:4e:aa:
         34:cb:fa:4f:c3:80:96:5b:7c:50:5a:62:23:35:db:8d:c1:54:
         4c:ef:10:b6:ef:ee:c3:c8:af:6f:ab:82:60:d8:c2:47:db:17:
         1e:fc:10:32:48:4a:80:53:6d:36:51:73:00:61:b7:ad:c9:f5:
         24:97:6f:f2:44:8f:ea:68:b9:90:0a:e0:4a:e8:d2:ba:bf:19:
         fd:7f:b8:84:0a:ae:51:a3:f8:a8:f2:28:1b:f0:7e:1c:6d:dc:
         0a:0a:dd:7e:46:68:45:25:43:80:1d:05:b3:38:03:4b:26:e9:
         8c:de:51:e6:7b:6c:fe:7d:d4:0b:61:4e:8c:75:bb:af:04:f7:
         e6:4b:59:4f:bc:1e:43:63:67:b7:24:43:d8:c1:d1:2e:8b:4c:
         b2:24:0b:57:24:0e:61:cb:4b:b1:c4:17:e3:fb:dd:21:fa:4b:
         ba:df:1b:0f:b2:60:1d:d3:28:47:94:82:c8:56:f1:55:26:78:
         35:6b:4e:12:09:6d:14:1f:86:f8:71:28:0a:85:de:13:05:f5:
         41:59:58:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 17 18:29:47 2025 by rpki-client