This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/83cbd67b-d190-4a4c-83b6-11887d7c2e99/0/9388695CCB2DCC37F2AB8A3D10E4FDE0C3A975A1.mft
File:                     9388695CCB2DCC37F2AB8A3D10E4FDE0C3A975A1.mft (raw, json)
Hash identifier:          IdiVBMw+bSdXFtnoGvDeBHRDfVav31yK5bhvEnOfm9g=
Subject key identifier:   F7:80:EC:D1:98:43:57:A0:BF:4A:EE:B4:9F:33:30:59:9B:9B:F9:7C
Authority key identifier: 93:88:69:5C:CB:2D:CC:37:F2:AB:8A:3D:10:E4:FD:E0:C3:A9:75:A1
Certificate issuer:       /CN=9388695CCB2DCC37F2AB8A3D10E4FDE0C3A975A1
Certificate serial:       7C803F154176D2000ADEC6C6258EDE7A5767457F
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9388695CCB2DCC37F2AB8A3D10E4FDE0C3A975A1.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/83cbd67b-d190-4a4c-83b6-11887d7c2e99/0/9388695CCB2DCC37F2AB8A3D10E4FDE0C3A975A1.mft
Manifest number:          ED
Signing time:             Fri 05 Dec 2025 17:50:56 +0000
Manifest this update:     Fri 05 Dec 2025 17:45:56 +0000
Manifest next update:     Mon 08 Dec 2025 22:47:56 +0000
Files and hashes:         1: 3136302e32322e39372e302f32342d3234203d3e20313532383238.roa (hash: kwAZ838D0ERhtGt/Ke2PpJnDihw3zY8GMQxxC8oDZ/k=)
                          2: 3136302e32322e39362e302f32342d3234203d3e20313532383238.roa (hash: n7MsU+NqSEfM83vem4uRyZBilJV0EOOi2kf/za1AxU8=)
                          3: 9388695CCB2DCC37F2AB8A3D10E4FDE0C3A975A1.crl (hash: Swho7ToON746tiUrjj5gZ/pqjjddF9MCFp/fhRdPrGI=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/83cbd67b-d190-4a4c-83b6-11887d7c2e99/0/9388695CCB2DCC37F2AB8A3D10E4FDE0C3A975A1.crl
                          rsync://repo-rpki.idnic.net/repo/83cbd67b-d190-4a4c-83b6-11887d7c2e99/0/9388695CCB2DCC37F2AB8A3D10E4FDE0C3A975A1.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9388695CCB2DCC37F2AB8A3D10E4FDE0C3A975A1.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 08 Dec 2025 22:47:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:80:3f:15:41:76:d2:00:0a:de:c6:c6:25:8e:de:7a:57:67:45:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9388695CCB2DCC37F2AB8A3D10E4FDE0C3A975A1
        Validity
            Not Before: Dec  5 17:45:56 2025 GMT
            Not After : Dec  8 22:47:56 2025 GMT
        Subject: CN=F780ECD1984357A0BF4AEEB49F3330599B9BF97C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:84:88:d4:5f:a1:ea:4d:2c:75:6d:f7:53:23:
                    d7:72:03:0e:3e:2e:81:09:b5:87:bc:57:58:b3:1b:
                    bf:a2:d8:3e:7d:84:8d:2b:c5:e1:79:63:a7:9b:ad:
                    10:a2:b6:e0:57:d2:e9:ad:a8:48:a9:e3:65:eb:17:
                    6f:73:89:2a:b7:5e:dd:ea:5d:08:af:3c:83:78:d0:
                    fd:55:8d:1a:cc:5f:5f:c7:28:24:a4:71:24:5a:16:
                    e1:11:51:54:21:b5:0e:a5:7f:ab:9b:29:68:34:ae:
                    98:1b:37:8c:eb:04:6f:3c:4a:02:b1:95:5d:ee:b0:
                    5a:53:36:14:6f:c5:12:3b:14:50:bd:29:83:97:b0:
                    04:28:44:b6:ad:6a:b9:3f:90:5a:0e:07:7d:2c:ea:
                    d7:8e:c7:78:58:3a:15:18:43:06:b1:74:fb:59:23:
                    e6:1c:9d:9f:b2:87:db:43:be:b9:3e:61:c7:43:8d:
                    e9:92:6c:c1:4a:62:41:34:02:2d:08:60:a3:28:1d:
                    26:2d:01:3d:32:e9:99:e0:38:84:e4:fe:66:99:b3:
                    ab:b7:31:49:4d:91:2a:9e:54:ea:7d:36:a9:1f:e1:
                    5b:07:98:73:30:60:9f:07:78:df:ad:69:03:5b:32:
                    f9:4f:bb:af:ce:91:c6:e9:5e:7c:e1:c9:af:c3:8f:
                    7b:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:80:EC:D1:98:43:57:A0:BF:4A:EE:B4:9F:33:30:59:9B:9B:F9:7C
            X509v3 Authority Key Identifier:
                keyid:93:88:69:5C:CB:2D:CC:37:F2:AB:8A:3D:10:E4:FD:E0:C3:A9:75:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/83cbd67b-d190-4a4c-83b6-11887d7c2e99/0/9388695CCB2DCC37F2AB8A3D10E4FDE0C3A975A1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9388695CCB2DCC37F2AB8A3D10E4FDE0C3A975A1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/83cbd67b-d190-4a4c-83b6-11887d7c2e99/0/9388695CCB2DCC37F2AB8A3D10E4FDE0C3A975A1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:d1:5c:6c:c4:7a:6d:83:54:51:4a:60:55:d4:12:b9:d8:f7:
         46:69:49:8b:d4:1d:af:c8:92:fc:d3:f5:8d:6e:ec:19:2e:15:
         14:0d:ab:ce:65:db:e9:bd:eb:82:7d:e2:40:23:1d:89:33:18:
         04:8e:78:94:fa:4d:38:ac:d2:1b:24:ff:b4:14:58:b1:53:aa:
         92:33:63:9f:02:dd:15:78:f5:ca:be:cd:00:e2:c0:79:21:2d:
         fe:eb:64:6a:60:e5:8b:d5:76:09:72:82:f5:65:90:a9:b7:aa:
         90:44:14:c8:57:ed:fd:62:ee:d5:de:c4:f4:ec:95:4c:55:f4:
         a5:0d:e7:1a:94:89:e5:94:33:6e:f0:a3:f6:b7:cb:fb:f9:f7:
         37:07:7d:b4:d9:45:84:24:65:53:57:cd:be:48:5a:3d:e8:07:
         23:31:0b:53:5b:f2:bc:42:ad:16:fa:d3:e6:9b:94:bc:03:76:
         13:08:d8:55:1f:ba:d6:91:e3:71:e3:b4:29:a9:65:78:35:6a:
         90:bd:71:09:fa:d2:52:76:3a:32:b8:6f:6a:9d:8d:d0:07:38:
         a8:de:30:5a:52:6e:c3:ea:7a:9d:a5:89:53:35:f8:1e:e3:dd:
         f0:08:46:8d:78:94:f4:9a:9a:cd:c2:3b:63:33:09:ce:19:b3:
         f3:94:96:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 20:02:47 2025 by rpki-client