This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/9c2c4948-687b-4020-87f4-28ee4b63aa47/0/91982855FD8C4C119B32F9D536B640804091001C.mft
File:                     91982855FD8C4C119B32F9D536B640804091001C.mft (raw, json)
Hash identifier:          whnlyvcvrx25R3wbnipGVHuWbBUk8yJOrEKetJkDlrY=
Subject key identifier:   03:77:6F:62:0C:08:58:4D:E5:B5:70:F6:D6:39:6C:11:E8:D2:1D:D9
Authority key identifier: 91:98:28:55:FD:8C:4C:11:9B:32:F9:D5:36:B6:40:80:40:91:00:1C
Certificate issuer:       /CN=91982855FD8C4C119B32F9D536B640804091001C
Certificate serial:       3345DA480345D257B0F43F52D1E815B00B6C1FDA
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/91982855FD8C4C119B32F9D536B640804091001C.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/9c2c4948-687b-4020-87f4-28ee4b63aa47/0/91982855FD8C4C119B32F9D536B640804091001C.mft
Manifest number:          052E
Signing time:             Sat 06 Dec 2025 20:42:17 +0000
Manifest this update:     Sat 06 Dec 2025 20:37:17 +0000
Manifest next update:     Tue 09 Dec 2025 21:13:17 +0000
Files and hashes:         1: 3130332e35322e36342e302f32322d3234203d3e20313331373335.roa (hash: svxXfJ7ypnOi0ZD+Lr+tu4BVUww3l9AMvmS2fynY310=)
                          2: 3130332e31352e3234302e302f32322d3234203d3e20313331373335.roa (hash: XKkTGgDl7AJdyrktq8gvl18OiQMp7I8a2RgU5SEEXyk=)
                          3: 91982855FD8C4C119B32F9D536B640804091001C.crl (hash: NuanvMFI2b9LdHECYDIW2iO+aA/6ISeC0b6Maaa+REk=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/9c2c4948-687b-4020-87f4-28ee4b63aa47/0/91982855FD8C4C119B32F9D536B640804091001C.crl
                          rsync://repo-rpki.idnic.net/repo/9c2c4948-687b-4020-87f4-28ee4b63aa47/0/91982855FD8C4C119B32F9D536B640804091001C.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/91982855FD8C4C119B32F9D536B640804091001C.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 09 Dec 2025 15:57:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:45:da:48:03:45:d2:57:b0:f4:3f:52:d1:e8:15:b0:0b:6c:1f:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91982855FD8C4C119B32F9D536B640804091001C
        Validity
            Not Before: Dec  6 20:37:17 2025 GMT
            Not After : Dec  9 21:13:17 2025 GMT
        Subject: CN=03776F620C08584DE5B570F6D6396C11E8D21DD9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:4b:09:8a:4a:ff:93:39:9d:11:b7:ac:8f:54:
                    f6:8c:98:0f:22:30:76:c2:ac:d1:df:46:9f:b4:27:
                    9b:d9:b9:21:c3:fc:91:90:75:96:27:10:de:0e:da:
                    6d:02:d6:4a:d8:ad:27:bf:79:7d:16:9a:b5:58:8f:
                    b8:34:76:e9:46:f9:ab:e9:18:3a:58:91:de:cd:b9:
                    87:f4:ba:2d:13:48:81:f7:24:22:a9:fa:b3:15:dc:
                    83:e5:e8:2e:65:14:f0:d0:10:d1:f0:cc:90:68:63:
                    8b:e0:74:6d:54:09:24:ef:7d:a7:e9:a4:e3:52:7d:
                    e8:71:b8:63:63:f8:20:07:c0:e3:cd:15:c3:21:a2:
                    b7:e9:9b:c0:0f:ec:07:4c:07:d1:9d:15:d5:67:40:
                    e1:82:7e:23:2a:7d:32:25:ed:c4:ec:63:b2:d0:17:
                    ec:d8:5d:2e:0c:69:40:0c:6a:ea:7e:e6:7b:f9:d4:
                    94:f1:02:bc:09:2b:b6:b3:a6:28:66:4a:f7:4d:f9:
                    6c:b9:fa:3c:a1:3a:31:22:9b:d8:c1:f9:88:17:6d:
                    a4:77:28:3f:3f:8c:6c:7e:7b:32:07:f6:3c:27:01:
                    59:68:3e:64:29:e1:92:a8:23:35:89:32:d9:44:dc:
                    65:9f:7e:16:7b:eb:7f:7a:a5:89:34:f3:f9:51:a5:
                    46:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:77:6F:62:0C:08:58:4D:E5:B5:70:F6:D6:39:6C:11:E8:D2:1D:D9
            X509v3 Authority Key Identifier:
                keyid:91:98:28:55:FD:8C:4C:11:9B:32:F9:D5:36:B6:40:80:40:91:00:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/9c2c4948-687b-4020-87f4-28ee4b63aa47/0/91982855FD8C4C119B32F9D536B640804091001C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/91982855FD8C4C119B32F9D536B640804091001C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9c2c4948-687b-4020-87f4-28ee4b63aa47/0/91982855FD8C4C119B32F9D536B640804091001C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:fe:d3:fc:c8:f9:62:ca:c0:48:d5:3e:23:7d:0e:a9:be:a7:
         27:48:d8:60:6c:5b:c2:57:11:b8:26:d1:5b:cb:8d:ef:c2:87:
         bc:7f:08:6d:5b:85:e6:11:d7:0b:7f:f4:1e:79:56:6b:1a:40:
         69:fc:c6:62:1e:a9:e2:eb:72:dc:c0:2d:46:29:e6:c6:9b:13:
         17:5b:ab:f0:1a:bc:5f:b6:fd:0d:f9:71:d5:5b:dc:35:1e:09:
         4e:11:43:87:94:89:b2:ad:04:2f:28:da:0a:6d:64:57:d6:28:
         8c:59:40:dc:eb:cb:d4:4b:88:16:99:e9:8d:36:2f:36:c5:f9:
         de:14:99:49:5c:9c:24:02:65:ee:8b:10:2b:8e:17:f1:23:18:
         e2:6b:89:33:1d:97:bb:e9:30:79:6a:58:07:c1:d8:83:56:a3:
         d5:b0:25:78:f7:d5:b0:a0:0e:c4:6f:ce:35:e5:cc:bb:40:3c:
         20:d2:0d:82:dc:cc:3f:46:30:5d:f8:37:6b:47:75:cb:11:0b:
         7d:8f:86:9f:1f:9a:9c:d9:d8:08:b2:26:b5:3b:5c:19:a3:42:
         75:39:67:2f:17:8f:7c:d9:5a:27:09:e7:a9:59:2d:cd:5b:83:
         c0:9f:e4:45:56:9e:48:a2:89:fd:76:5c:4b:6b:71:34:42:fb:
         e1:53:97:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 02:10:20 2025 by rpki-client