This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/50d00718-5210-4438-b64d-62ec1f3ebcd0/0/94F6C26027B9F72AA8701D1296627FA57809A6F3.mft
File:                     94F6C26027B9F72AA8701D1296627FA57809A6F3.mft (raw, json)
Hash identifier:          jHFZFXOOF0hajHzeBGQ1ynpniHJfDBRrEPZZZXYXjHw=
Subject key identifier:   E0:AF:89:53:EC:1E:B1:51:78:57:57:53:37:C4:5D:3D:E4:44:83:B1
Authority key identifier: 94:F6:C2:60:27:B9:F7:2A:A8:70:1D:12:96:62:7F:A5:78:09:A6:F3
Certificate issuer:       /CN=94F6C26027B9F72AA8701D1296627FA57809A6F3
Certificate serial:       65866DF875B68EFE8A6AE790FCA50A5575C64C44
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/94F6C26027B9F72AA8701D1296627FA57809A6F3.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/50d00718-5210-4438-b64d-62ec1f3ebcd0/0/94F6C26027B9F72AA8701D1296627FA57809A6F3.mft
Manifest number:          0129
Signing time:             Sat 06 Dec 2025 22:12:32 +0000
Manifest this update:     Sat 06 Dec 2025 22:07:32 +0000
Manifest next update:     Wed 10 Dec 2025 03:51:32 +0000
Files and hashes:         1: 3130332e3131332e3132342e302f32322d3234203d3e20313337333433.roa (hash: VlfA2F9WRPy+vssWvwHG73lbx3hyMs2V96FvcvqUxfA=)
                          2: 3130332e3131332e3132342e302f32342d3234203d3e20313337333433.roa (hash: o89Hh5vp0Qt2o58GB1JQke74RyM5ltdrLMS25ekXGFY=)
                          3: 3130332e3131332e3132342e302f32322d3232203d3e20313337333433.roa (hash: PA93RwBGZzvBREAFM1iYNGPBBAoGkHxnKXuygsv1ptE=)
                          4: 94F6C26027B9F72AA8701D1296627FA57809A6F3.crl (hash: fndBKHIlo1lAKqp+8OX/KIuMOqbJk7b2g+OYJhGp+5A=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/50d00718-5210-4438-b64d-62ec1f3ebcd0/0/94F6C26027B9F72AA8701D1296627FA57809A6F3.crl
                          rsync://repo-rpki.idnic.net/repo/50d00718-5210-4438-b64d-62ec1f3ebcd0/0/94F6C26027B9F72AA8701D1296627FA57809A6F3.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/94F6C26027B9F72AA8701D1296627FA57809A6F3.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 09 Dec 2025 15:57:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:86:6d:f8:75:b6:8e:fe:8a:6a:e7:90:fc:a5:0a:55:75:c6:4c:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=94F6C26027B9F72AA8701D1296627FA57809A6F3
        Validity
            Not Before: Dec  6 22:07:32 2025 GMT
            Not After : Dec 10 03:51:32 2025 GMT
        Subject: CN=E0AF8953EC1EB1517857575337C45D3DE44483B1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:a2:e8:e0:0b:bd:be:34:dc:ad:43:84:80:10:
                    97:75:9b:fb:ce:ea:c9:48:2a:1e:f4:d6:d1:f2:68:
                    2b:25:07:6b:30:6a:4a:e4:c0:99:06:2b:31:da:55:
                    59:b7:96:56:58:d8:30:a6:13:41:14:53:b2:da:ae:
                    40:a1:2f:64:34:94:88:a9:1c:ea:6e:2f:7a:a3:43:
                    bb:46:35:b3:71:68:14:a1:60:3d:34:a8:ec:b0:5a:
                    1f:4a:70:e9:f7:16:3d:b9:0f:66:58:89:59:2a:dd:
                    ea:e1:59:6f:f4:50:e6:cb:e4:44:b3:fd:08:4c:a5:
                    fe:a8:60:98:e3:69:92:75:83:6b:86:19:3d:ee:f3:
                    46:af:86:bd:01:76:93:15:84:8a:83:54:bf:07:95:
                    f8:7f:38:69:80:10:7c:01:4d:74:45:6a:d8:18:06:
                    5e:65:80:70:ca:85:e6:a0:02:38:4a:5e:5f:00:55:
                    a4:e1:94:4f:dc:cd:ef:84:00:66:15:db:ce:65:73:
                    ed:b6:0d:12:bb:43:05:18:df:58:13:73:e3:31:3a:
                    a9:45:3c:74:c1:6d:d9:53:31:24:30:ec:ef:45:ae:
                    97:fa:7a:1d:97:01:f5:14:46:b7:4e:be:5a:ef:5a:
                    f2:9b:ac:7b:ad:59:64:bc:03:b2:89:60:34:64:ca:
                    26:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:AF:89:53:EC:1E:B1:51:78:57:57:53:37:C4:5D:3D:E4:44:83:B1
            X509v3 Authority Key Identifier:
                keyid:94:F6:C2:60:27:B9:F7:2A:A8:70:1D:12:96:62:7F:A5:78:09:A6:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/50d00718-5210-4438-b64d-62ec1f3ebcd0/0/94F6C26027B9F72AA8701D1296627FA57809A6F3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/94F6C26027B9F72AA8701D1296627FA57809A6F3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/50d00718-5210-4438-b64d-62ec1f3ebcd0/0/94F6C26027B9F72AA8701D1296627FA57809A6F3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:77:9a:6f:ec:d5:fa:10:78:9d:87:dd:6d:8e:9e:d2:05:a8:
         5e:f3:32:1a:56:87:a9:d8:f2:bd:a1:06:50:e7:16:43:3b:cc:
         fc:51:51:05:05:a8:f4:21:0a:72:93:eb:12:22:e1:f4:84:0b:
         07:84:0a:46:c2:78:b0:82:e9:77:4d:c3:89:7b:c2:02:90:90:
         dc:8a:20:72:3f:de:96:be:95:23:b7:73:17:84:ce:24:80:b3:
         2f:75:86:d6:5e:83:dd:2e:10:57:3c:80:2b:f9:67:c8:4d:e1:
         33:8d:74:03:9c:11:68:36:9e:c8:51:77:bd:01:e7:ac:b2:6b:
         03:e6:e3:53:a1:3c:14:3c:da:65:5e:41:70:65:7b:39:27:e3:
         68:bb:84:6b:bc:fe:3d:d8:3b:57:19:ec:b6:38:13:0c:06:f3:
         30:bc:24:90:4e:56:d7:13:83:b9:3c:9f:99:49:d9:82:1c:db:
         bf:d5:b8:68:1a:a7:b2:9b:8e:7b:98:d8:32:cd:95:b2:e5:5e:
         cd:74:a4:9f:cc:38:5f:16:dd:68:84:bf:60:84:0a:40:e3:90:
         f0:76:40:3d:43:04:80:91:03:0f:78:8d:2f:e3:25:67:a8:60:
         0e:da:6d:03:0c:42:4e:37:2f:95:69:36:99:50:83:9b:3a:39:
         98:12:31:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 04:57:44 2025 by rpki-client