This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/8088648f-5e0b-4338-911c-9d6467b00a3e/0/9564134EE3E4CE65FB9D077E90B1BEB525D699EB.mft
File:                     9564134EE3E4CE65FB9D077E90B1BEB525D699EB.mft (raw, json)
Hash identifier:          5uuxjWopFjQUl3FaBBJiD5oJQKD50A9N6iqtNfrDBQY=
Subject key identifier:   9A:5E:3F:B7:F3:8E:A9:42:74:CA:98:F4:C9:B2:3E:A4:F4:43:C0:4F
Authority key identifier: 95:64:13:4E:E3:E4:CE:65:FB:9D:07:7E:90:B1:BE:B5:25:D6:99:EB
Certificate issuer:       /CN=9564134EE3E4CE65FB9D077E90B1BEB525D699EB
Certificate serial:       01EFEA269ABB4F2C7F92AF070FA94B4F9E49FFBE
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9564134EE3E4CE65FB9D077E90B1BEB525D699EB.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/8088648f-5e0b-4338-911c-9d6467b00a3e/0/9564134EE3E4CE65FB9D077E90B1BEB525D699EB.mft
Manifest number:          0114
Signing time:             Sat 06 Dec 2025 04:12:26 +0000
Manifest this update:     Sat 06 Dec 2025 04:07:26 +0000
Manifest next update:     Tue 09 Dec 2025 11:57:26 +0000
Files and hashes:         1: 9564134EE3E4CE65FB9D077E90B1BEB525D699EB.crl (hash: XpihJyVTG3dT2bcfphHJEO82f3MKjdP9WldVrSf9X/4=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/8088648f-5e0b-4338-911c-9d6467b00a3e/0/9564134EE3E4CE65FB9D077E90B1BEB525D699EB.crl
                          rsync://repo-rpki.idnic.net/repo/8088648f-5e0b-4338-911c-9d6467b00a3e/0/9564134EE3E4CE65FB9D077E90B1BEB525D699EB.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9564134EE3E4CE65FB9D077E90B1BEB525D699EB.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 09 Dec 2025 06:55:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:ef:ea:26:9a:bb:4f:2c:7f:92:af:07:0f:a9:4b:4f:9e:49:ff:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9564134EE3E4CE65FB9D077E90B1BEB525D699EB
        Validity
            Not Before: Dec  6 04:07:26 2025 GMT
            Not After : Dec  9 11:57:26 2025 GMT
        Subject: CN=9A5E3FB7F38EA94274CA98F4C9B23EA4F443C04F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:8a:3b:7e:66:4f:69:f9:fb:f7:9e:43:bd:2b:
                    e9:55:f2:ef:c1:f2:b2:f3:76:2d:65:d9:90:44:04:
                    d3:e8:6e:59:73:cc:a1:38:a8:d1:80:b2:cf:32:42:
                    aa:01:2a:d8:22:d0:64:16:9c:aa:8a:8f:e6:3b:95:
                    60:4c:20:ed:cb:47:16:dd:c8:54:a7:4f:53:57:ed:
                    aa:4d:f2:3d:ce:e9:35:10:aa:35:e2:6f:c8:83:62:
                    be:91:d7:16:14:c0:62:62:4c:fe:2d:2e:05:f2:94:
                    3c:14:77:9d:94:19:e3:56:b5:b2:c1:ac:77:43:f2:
                    1b:33:b9:26:29:30:34:32:19:28:a6:01:c7:85:62:
                    46:f6:d8:81:96:45:e7:bd:8a:5e:ee:11:ec:23:66:
                    51:3f:ae:5c:28:bb:fd:c7:c7:82:cb:a8:ae:a9:94:
                    33:96:2a:f6:da:fa:b4:ec:04:e6:aa:56:c6:b5:b0:
                    dd:bb:7c:be:24:60:7c:ea:5c:a7:d8:87:ac:81:cb:
                    d6:3a:05:1e:17:c8:c2:13:01:4c:82:96:0e:f8:c1:
                    f2:06:6d:fa:aa:bd:76:40:f2:90:b1:a4:89:8a:c3:
                    87:85:2e:4c:13:21:bd:d9:fa:5e:89:2a:07:10:c5:
                    c7:d5:f2:16:a4:68:80:6a:f4:26:c3:88:39:bf:47:
                    1e:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:5E:3F:B7:F3:8E:A9:42:74:CA:98:F4:C9:B2:3E:A4:F4:43:C0:4F
            X509v3 Authority Key Identifier:
                keyid:95:64:13:4E:E3:E4:CE:65:FB:9D:07:7E:90:B1:BE:B5:25:D6:99:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/8088648f-5e0b-4338-911c-9d6467b00a3e/0/9564134EE3E4CE65FB9D077E90B1BEB525D699EB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9564134EE3E4CE65FB9D077E90B1BEB525D699EB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8088648f-5e0b-4338-911c-9d6467b00a3e/0/9564134EE3E4CE65FB9D077E90B1BEB525D699EB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:c5:bd:6b:2f:32:41:f9:91:6e:4a:ab:a1:c5:08:e1:ec:c4:
         8b:07:37:70:41:08:2c:52:24:17:4a:50:6e:a4:3c:91:60:eb:
         16:77:c0:c2:cf:ee:93:de:9c:b3:77:ae:58:3b:fe:d2:63:22:
         26:57:47:49:a0:ba:7a:e3:a1:b0:8a:a4:05:e9:f3:b2:36:b2:
         74:ee:e8:c9:2e:67:18:a7:17:a6:88:ec:64:ec:07:ac:dc:3f:
         28:c5:04:f7:f1:6a:47:3c:fa:42:4a:38:48:4c:38:32:44:a2:
         d9:27:d1:1e:12:fb:25:02:32:7e:5f:17:e4:67:07:1f:3e:ca:
         d2:cc:8e:36:af:7d:93:cd:af:9a:6b:ca:f2:e5:c5:43:ad:80:
         6d:1c:17:43:27:72:46:8d:be:3c:e7:99:97:0e:17:06:6a:7f:
         2f:28:88:40:42:b7:d7:1b:b3:2a:31:0f:b7:15:17:e6:d5:1f:
         59:29:f4:45:7c:ef:c7:1b:32:fd:d1:bb:8d:15:62:3d:d0:bc:
         d1:d4:ce:88:fd:fc:6a:ad:fb:40:18:9c:2b:23:b1:53:2c:17:
         ec:c4:43:24:4c:19:4d:3f:e1:de:4d:fe:56:eb:8e:51:f4:3a:
         26:09:65:fc:f5:ab:1d:aa:81:3d:46:a3:0b:97:ec:98:8d:ac:
         6b:64:ce:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 17:02:05 2025 by rpki-client