This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/52127feb-9615-4c58-a3bb-eef7b7a6547e/0/94F75B04CEBE0DF1D0B924ECF1AD9C9C13992383.mft
File:                     94F75B04CEBE0DF1D0B924ECF1AD9C9C13992383.mft (raw, json)
Hash identifier:          wAU5SRWIxiNWhGAXHLP0dxQ2D8GxZm/wbmRsMsUvlJU=
Subject key identifier:   71:7B:91:74:33:DC:4C:F3:73:4F:54:25:28:23:51:1D:2E:9A:84:E4
Authority key identifier: 94:F7:5B:04:CE:BE:0D:F1:D0:B9:24:EC:F1:AD:9C:9C:13:99:23:83
Certificate issuer:       /CN=94F75B04CEBE0DF1D0B924ECF1AD9C9C13992383
Certificate serial:       31758186D3E6864563264BEE4C59CB491CDFE694
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/94F75B04CEBE0DF1D0B924ECF1AD9C9C13992383.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/52127feb-9615-4c58-a3bb-eef7b7a6547e/0/94F75B04CEBE0DF1D0B924ECF1AD9C9C13992383.mft
Manifest number:          04A5
Signing time:             Sat 06 Dec 2025 01:40:50 +0000
Manifest this update:     Sat 06 Dec 2025 01:35:50 +0000
Manifest next update:     Tue 09 Dec 2025 06:53:50 +0000
Files and hashes:         1: 94F75B04CEBE0DF1D0B924ECF1AD9C9C13992383.crl (hash: dRPrKg9v4MmGKoGlHzVQ2GKf+U0KL1FzGpNM71I6LNs=)
                          2: 3130332e3135342e3233302e302f32332d3233203d3e20313336313231.roa (hash: JK9uWyUnlTBAvV8zViZB2Kcjau/dBn/KG0P7Jc9dFGg=)
                          3: 3130332e3135342e3233312e302f32342d3234203d3e20313336313231.roa (hash: 6h4OUe35cAilH9aTLCHLFwR0jWsvbybacQ9mi2j6ujA=)
                          4: 323430363a356463303a3a2f33322d3332203d3e20313336313231.roa (hash: +GDxvCg7W3rpGkqjXTdZOjObKRgXnf9yC9gObIaf91w=)
                          5: 3130332e3135342e3233302e302f32342d3234203d3e20313336313231.roa (hash: R7KLsJOo3soCPav40P+K3pNlUVu9SA4Q96TRuJpOj+E=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/52127feb-9615-4c58-a3bb-eef7b7a6547e/0/94F75B04CEBE0DF1D0B924ECF1AD9C9C13992383.crl
                          rsync://repo-rpki.idnic.net/repo/52127feb-9615-4c58-a3bb-eef7b7a6547e/0/94F75B04CEBE0DF1D0B924ECF1AD9C9C13992383.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/94F75B04CEBE0DF1D0B924ECF1AD9C9C13992383.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 09 Dec 2025 06:53:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:75:81:86:d3:e6:86:45:63:26:4b:ee:4c:59:cb:49:1c:df:e6:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=94F75B04CEBE0DF1D0B924ECF1AD9C9C13992383
        Validity
            Not Before: Dec  6 01:35:50 2025 GMT
            Not After : Dec  9 06:53:50 2025 GMT
        Subject: CN=717B917433DC4CF3734F54252823511D2E9A84E4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:c9:30:df:97:d2:73:fb:87:2c:14:c0:7e:64:
                    bb:9b:87:53:58:a4:a7:d6:12:3a:fc:cb:83:10:e4:
                    46:95:12:4f:7d:dc:a2:f7:c6:e6:3c:06:a5:bb:e5:
                    5e:5e:cb:19:35:62:c5:f5:a2:67:e0:76:01:8c:58:
                    e6:36:1f:1b:d6:91:80:38:d2:1a:0f:73:5d:e7:e7:
                    77:58:8c:b8:d4:c4:74:37:b5:fd:55:a1:3a:3a:cf:
                    fb:5e:75:30:33:78:66:dc:3a:c2:0d:8b:3a:b2:38:
                    e3:0b:05:a7:30:97:32:1c:34:53:a6:c8:95:6c:09:
                    d0:73:cd:58:62:e8:61:4f:86:43:37:29:4b:60:b3:
                    21:4c:8f:ba:a7:ed:f7:be:4b:41:a6:0f:cb:23:06:
                    d7:b7:e7:00:45:b8:ab:c2:fa:45:eb:15:ca:b2:a9:
                    80:bf:11:c9:1c:c4:cf:8e:0f:42:d4:3b:9d:0f:37:
                    37:03:ba:6d:1d:51:ea:08:6c:e7:fb:4c:3c:52:17:
                    d5:05:be:5b:a4:88:8d:18:7a:e6:9d:22:51:a4:51:
                    f8:b9:ce:e7:54:71:7b:c2:65:77:62:9d:ad:de:e0:
                    42:09:70:3b:a4:75:a5:37:80:48:37:0c:f3:5e:ae:
                    87:80:95:11:e7:b8:28:06:de:4a:7a:b4:76:e8:ef:
                    02:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:7B:91:74:33:DC:4C:F3:73:4F:54:25:28:23:51:1D:2E:9A:84:E4
            X509v3 Authority Key Identifier:
                keyid:94:F7:5B:04:CE:BE:0D:F1:D0:B9:24:EC:F1:AD:9C:9C:13:99:23:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/52127feb-9615-4c58-a3bb-eef7b7a6547e/0/94F75B04CEBE0DF1D0B924ECF1AD9C9C13992383.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/94F75B04CEBE0DF1D0B924ECF1AD9C9C13992383.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/52127feb-9615-4c58-a3bb-eef7b7a6547e/0/94F75B04CEBE0DF1D0B924ECF1AD9C9C13992383.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:4a:ca:b3:bd:e0:23:76:c5:ac:bf:fd:b8:06:7a:41:d3:7b:
         48:e5:9e:40:fc:9e:4c:b5:d2:be:a6:67:77:80:cb:5c:d7:3a:
         10:fd:0a:8b:bb:16:64:69:24:47:e6:fe:11:88:99:27:ba:f9:
         ef:95:6c:9e:33:97:ba:4d:23:66:f5:ab:98:e0:13:ef:61:0d:
         fc:45:9f:ce:f0:1a:fe:17:b6:ec:d0:7b:3f:f8:6b:c9:f0:23:
         c6:a6:3c:15:4b:38:ce:e3:51:29:02:d0:d3:b0:15:72:28:ed:
         c8:a3:0d:76:89:34:62:4f:57:63:53:a9:47:74:da:1f:e8:b3:
         77:45:f8:c7:bb:fb:cf:e5:46:80:c0:b3:7b:b8:03:60:00:cb:
         00:06:8c:e2:71:33:a2:c6:21:f2:3f:66:a2:41:63:69:f9:cf:
         2d:62:71:95:b4:5f:4c:ab:fc:35:85:ed:83:67:e4:4e:c7:5a:
         98:4f:1e:2b:a9:6b:1b:77:54:e4:e4:6f:e2:2e:66:01:7e:a1:
         f6:af:11:f5:76:25:82:22:2a:5b:2e:b8:64:9e:bc:8a:75:ac:
         6f:76:e9:63:e0:59:71:3c:a1:76:88:d7:89:2b:12:ec:56:b7:
         66:2e:8e:67:5a:27:5b:91:9c:e3:82:7e:80:e9:ff:10:14:4b:
         1e:05:79:ac
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUMXWBhtPmhkVjJkvuTFnLSRzf5pQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTRGNzVCMDRDRUJFMERGMUQwQjkyNEVDRjFBRDlDOUMx
Mzk5MjM4MzAeFw0yNTEyMDYwMTM1NTBaFw0yNTEyMDkwNjUzNTBaMDMxMTAvBgNV
BAMTKDcxN0I5MTc0MzNEQzRDRjM3MzRGNTQyNTI4MjM1MTFEMkU5QTg0RTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNyTDfl9Jz+4csFMB+ZLubh1NY
pKfWEjr8y4MQ5EaVEk993KL3xuY8BqW75V5eyxk1YsX1omfgdgGMWOY2HxvWkYA4
0hoPc13n53dYjLjUxHQ3tf1VoTo6z/tedTAzeGbcOsINizqyOOMLBacwlzIcNFOm
yJVsCdBzzVhi6GFPhkM3KUtgsyFMj7qn7fe+S0GmD8sjBte35wBFuKvC+kXrFcqy
qYC/EckcxM+OD0LUO50PNzcDum0dUeoIbOf7TDxSF9UFvlukiI0YeuadIlGkUfi5
zudUcXvCZXdina3e4EIJcDukdaU3gEg3DPNeroeAlRHnuCgG3kp6tHbo7wIpAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUcXuRdDPcTPNzT1QlKCNRHS6ahOQwHwYDVR0j
BBgwFoAUlPdbBM6+DfHQuSTs8a2cnBOZI4MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81
MjEyN2ZlYi05NjE1LTRjNTgtYTNiYi1lZWY3YjdhNjU0N2UvMC85NEY3NUIwNENF
QkUwREYxRDBCOTI0RUNGMUFEOUM5QzEzOTkyMzgzLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvOTRGNzVCMDRDRUJFMERGMUQwQjkyNEVDRjFBRDlDOUMxMzk5
MjM4My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTIxMjdmZWItOTYxNS00YzU4LWEz
YmItZWVmN2I3YTY1NDdlLzAvOTRGNzVCMDRDRUJFMERGMUQwQjkyNEVDRjFBRDlD
OUMxMzk5MjM4My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAA9KyrO94CN2xay//bgGekHTe0jlnkD8nky1
0r6mZ3eAy1zXOhD9Cou7FmRpJEfm/hGImSe6+e+VbJ4zl7pNI2b1q5jgE+9hDfxF
n87wGv4XtuzQez/4a8nwI8amPBVLOM7jUSkC0NOwFXIo7cijDXaJNGJPV2NTqUd0
2h/os3dF+Me7+8/lRoDAs3u4A2AAywAGjOJxM6LGIfI/ZqJBY2n5zy1icZW0X0yr
/DWF7YNn5E7HWphPHiupaxt3VOTkb+IuZgF+ofavEfV2JYIiKlsuuGSevIp1rG92
6WPgWXE8oXaI14krEuxWt2YujmdaJ1uRnOOCfoDp/xAUSx4Feaw=
-----END CERTIFICATE-----
Generated at Sun Dec 7 04:57:33 2025 by rpki-client