This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/6e2c9285-c09a-4506-a320-fda1a07fd9ec/0/9D25181C9096851A77EB95DA55649E08E3B7941B.mft
File:                     9D25181C9096851A77EB95DA55649E08E3B7941B.mft (raw, json)
Hash identifier:          sIZeqHdT6YdEawdmy1Zl2a3UxkQOghFFLmxsUd9IHmQ=
Subject key identifier:   B1:24:52:13:8C:DB:77:DA:6A:1C:45:68:A2:80:12:9C:37:E9:A4:B1
Authority key identifier: 9D:25:18:1C:90:96:85:1A:77:EB:95:DA:55:64:9E:08:E3:B7:94:1B
Certificate issuer:       /CN=9D25181C9096851A77EB95DA55649E08E3B7941B
Certificate serial:       757FF1050419A5B9D47289C2920A652824F89BED
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9D25181C9096851A77EB95DA55649E08E3B7941B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/6e2c9285-c09a-4506-a320-fda1a07fd9ec/0/9D25181C9096851A77EB95DA55649E08E3B7941B.mft
Manifest number:          0257
Signing time:             Sun 25 Jan 2026 06:00:02 +0000
Manifest this update:     Sun 25 Jan 2026 05:55:02 +0000
Manifest next update:     Wed 28 Jan 2026 11:38:02 +0000
Files and hashes:         1: 3130332e3132342e3234372e302f32342d3234203d3e20313338303930.roa (hash: 2MI1BO2UxF3UElXDLPD2q10Wy6TxPuTbV7jsB0zYy48=)
                          2: 3130332e3132342e3234362e302f32342d3234203d3e20313338303930.roa (hash: AFR0edy2SHetpvZoQe2ubb0WOVaatbTPgTEPsgvzJTQ=)
                          3: 3130332e3132342e3234352e302f32342d3234203d3e20313338303930.roa (hash: 1HQfbWQz8TQ/U0ue8CqX8CipPvoj254cn3JMlqDQtws=)
                          4: 9D25181C9096851A77EB95DA55649E08E3B7941B.crl (hash: Qn33P5tFRTYz7riC8LtPJ1SZC3EPAGw7fiSIb2XtoTo=)
                          5: 323430333a653863303a3a2f33322d3332203d3e20313338303930.roa (hash: lF0dOyIyZG9RuRsQ/tt5Ru3/SkbdBI8dlNM+ehbBJXc=)
                          6: 3130332e3132342e3234342e302f32342d3234203d3e20313338303930.roa (hash: BuwBDfXMOpFxOjhB/2A0CNUSVbMyArJwojKIcFdRjmQ=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/6e2c9285-c09a-4506-a320-fda1a07fd9ec/0/9D25181C9096851A77EB95DA55649E08E3B7941B.crl
                          rsync://repo-rpki.idnic.net/repo/6e2c9285-c09a-4506-a320-fda1a07fd9ec/0/9D25181C9096851A77EB95DA55649E08E3B7941B.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9D25181C9096851A77EB95DA55649E08E3B7941B.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 28 Jan 2026 11:38:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:7f:f1:05:04:19:a5:b9:d4:72:89:c2:92:0a:65:28:24:f8:9b:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9D25181C9096851A77EB95DA55649E08E3B7941B
        Validity
            Not Before: Jan 25 05:55:02 2026 GMT
            Not After : Jan 28 11:38:02 2026 GMT
        Subject: CN=B12452138CDB77DA6A1C4568A280129C37E9A4B1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:5f:69:97:5d:87:af:9a:c8:71:79:13:55:57:
                    aa:f6:25:77:2e:11:77:51:cf:2d:14:81:44:72:4f:
                    3f:53:12:1e:b6:9b:3d:3e:82:c8:c8:d6:87:9a:39:
                    c9:f7:20:5a:1d:49:eb:29:52:f0:05:6a:07:37:b2:
                    5b:4e:10:f2:13:83:7d:9d:e4:5e:7c:dd:ba:5f:93:
                    cc:8d:df:a9:6c:2e:a1:05:5b:45:3a:4a:e6:69:2b:
                    84:bc:cf:20:ba:51:a2:83:0b:6b:e3:a7:51:db:db:
                    c8:1e:15:34:6a:95:9a:80:ff:4a:4e:0f:9c:2e:05:
                    b1:bc:12:dc:3c:a5:4b:5e:3e:b6:66:4e:98:80:7f:
                    e4:37:88:cb:b4:c6:58:65:de:cb:69:9e:50:ee:20:
                    b6:cf:a0:f5:06:90:96:31:87:3c:e1:f3:31:87:91:
                    b4:9b:00:55:5b:44:97:d2:f0:5b:62:b0:58:e0:d1:
                    d8:9e:0d:20:79:c7:b4:b0:6a:dd:9d:ac:c5:fc:ac:
                    45:07:d6:e6:b9:11:b6:03:cd:5a:d7:06:d9:a7:71:
                    e6:5f:6a:d0:bf:fc:5f:36:fb:7e:89:45:85:70:ec:
                    48:6a:b2:a6:97:97:54:9e:06:90:23:64:81:33:ec:
                    1f:5a:08:eb:76:24:d2:9f:71:31:83:3a:d6:75:4c:
                    40:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:24:52:13:8C:DB:77:DA:6A:1C:45:68:A2:80:12:9C:37:E9:A4:B1
            X509v3 Authority Key Identifier:
                keyid:9D:25:18:1C:90:96:85:1A:77:EB:95:DA:55:64:9E:08:E3:B7:94:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/6e2c9285-c09a-4506-a320-fda1a07fd9ec/0/9D25181C9096851A77EB95DA55649E08E3B7941B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9D25181C9096851A77EB95DA55649E08E3B7941B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6e2c9285-c09a-4506-a320-fda1a07fd9ec/0/9D25181C9096851A77EB95DA55649E08E3B7941B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:d2:45:99:89:a4:08:00:99:cb:a8:31:b6:3b:3f:4d:77:3a:
         49:e0:0d:1d:4a:b7:18:6f:69:ea:69:8a:8f:21:25:ac:0e:20:
         60:fa:d6:12:6b:22:e6:8c:10:73:0d:1a:aa:9f:76:cf:95:12:
         4c:c1:4c:99:e8:bb:c3:9c:b3:44:a2:f2:b5:05:f9:39:32:81:
         9b:6e:c8:31:84:bf:74:50:26:81:bb:20:cb:da:8a:07:2a:34:
         0e:42:c2:83:bf:b9:6f:d9:0a:e5:6f:d5:b8:19:c6:6a:59:91:
         05:a5:0e:76:13:2a:88:51:8f:be:ef:ce:55:0f:6a:01:1b:45:
         a2:c3:5a:ea:53:d1:d9:c0:95:84:a2:72:38:12:8d:cb:96:81:
         a7:b4:58:da:3f:0d:93:92:8a:74:e9:31:24:da:06:8f:5a:06:
         1a:07:f4:b8:c9:93:cc:eb:e6:12:34:9b:e5:66:1d:eb:3a:ee:
         9c:af:08:9c:d5:c0:87:00:7f:bc:b0:e2:1a:97:59:88:93:54:
         1c:16:7c:7c:8d:40:89:6f:1c:a9:4b:a2:bd:81:99:b6:22:1f:
         68:98:1b:8b:e2:ab:ef:d0:66:c0:bd:10:13:7f:1e:aa:a1:ac:
         9c:22:37:f7:fb:8d:7c:8c:f2:40:eb:33:e0:fb:9e:55:3b:34:
         52:9a:83:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----