This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/acaccf26-8354-49c8-998a-0a44a64eb909/0/92E0AE79CBF46A2DC24CDD3A7FD48A842BCFEE8D.mft
File:                     92E0AE79CBF46A2DC24CDD3A7FD48A842BCFEE8D.mft (raw, json)
Hash identifier:          bp9OtFs8u+KZ8TRGfuWog6qe9BcAayMIcimV2P2NnAM=
Subject key identifier:   DD:92:1F:F1:32:F8:AF:DE:67:A1:6D:A6:B4:8D:65:D0:24:26:ED:55
Authority key identifier: 92:E0:AE:79:CB:F4:6A:2D:C2:4C:DD:3A:7F:D4:8A:84:2B:CF:EE:8D
Certificate issuer:       /CN=92E0AE79CBF46A2DC24CDD3A7FD48A842BCFEE8D
Certificate serial:       51B87C91F61B05CEE22BD9F020BD4439339F47C3
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/92E0AE79CBF46A2DC24CDD3A7FD48A842BCFEE8D.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/acaccf26-8354-49c8-998a-0a44a64eb909/0/92E0AE79CBF46A2DC24CDD3A7FD48A842BCFEE8D.mft
Manifest number:          0114
Signing time:             Sat 06 Dec 2025 19:11:09 +0000
Manifest this update:     Sat 06 Dec 2025 19:06:09 +0000
Manifest next update:     Wed 10 Dec 2025 01:50:09 +0000
Files and hashes:         1: 3135372e32302e3233362e302f32342d3234203d3e203538333639.roa (hash: bfQroZp46y/yg4SRsgG4Dw7Km0ZcaitbZyshPVWtdM8=)
                          2: 92E0AE79CBF46A2DC24CDD3A7FD48A842BCFEE8D.crl (hash: wTpA0Z7SuY3AIxAD/JUgAojJjiUkJLhVnbCBoubmcU8=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/acaccf26-8354-49c8-998a-0a44a64eb909/0/92E0AE79CBF46A2DC24CDD3A7FD48A842BCFEE8D.crl
                          rsync://repo-rpki.idnic.net/repo/acaccf26-8354-49c8-998a-0a44a64eb909/0/92E0AE79CBF46A2DC24CDD3A7FD48A842BCFEE8D.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/92E0AE79CBF46A2DC24CDD3A7FD48A842BCFEE8D.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 09 Dec 2025 06:55:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:b8:7c:91:f6:1b:05:ce:e2:2b:d9:f0:20:bd:44:39:33:9f:47:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92E0AE79CBF46A2DC24CDD3A7FD48A842BCFEE8D
        Validity
            Not Before: Dec  6 19:06:09 2025 GMT
            Not After : Dec 10 01:50:09 2025 GMT
        Subject: CN=DD921FF132F8AFDE67A16DA6B48D65D02426ED55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:8f:34:dc:f0:5d:20:67:c6:83:56:70:7a:05:
                    5b:29:3c:24:08:72:c5:ad:10:08:1f:f2:7a:27:8b:
                    d0:57:f6:ab:f3:8c:1e:21:84:74:21:90:f8:7c:35:
                    59:ed:ae:8f:8e:f0:3b:88:fa:45:a9:e0:0b:e7:22:
                    64:af:67:3e:3b:0b:b5:35:0d:6c:4e:67:b5:f5:40:
                    ee:10:e3:55:d6:37:4b:5f:2b:30:40:a0:cf:e6:0e:
                    21:08:da:12:1f:c2:e8:e5:3c:3c:80:b6:77:47:fd:
                    36:c2:d3:a2:d3:c5:2c:1b:a2:b3:0b:ca:9a:3d:25:
                    26:e4:68:03:6c:28:49:a6:e5:c7:63:48:1a:97:b6:
                    a4:43:de:4e:0b:74:83:01:2d:2d:38:a2:34:36:00:
                    17:56:a6:12:8c:22:b8:97:26:58:93:82:9c:22:c7:
                    0d:8a:20:cb:3a:29:9f:9b:ce:1b:c1:d1:4b:65:65:
                    7d:dc:75:01:01:90:62:b5:5a:b1:2b:fe:f3:5e:ae:
                    68:47:f5:90:0e:01:6c:a6:d4:ab:f9:5c:74:29:c5:
                    09:13:43:65:29:f8:74:73:fb:94:c7:93:87:bf:82:
                    b5:c1:ff:3b:ab:3e:7e:1e:5f:17:6c:7d:5e:97:70:
                    fd:09:b8:c6:63:28:d8:ac:89:13:24:93:d7:2f:de:
                    24:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:92:1F:F1:32:F8:AF:DE:67:A1:6D:A6:B4:8D:65:D0:24:26:ED:55
            X509v3 Authority Key Identifier:
                keyid:92:E0:AE:79:CB:F4:6A:2D:C2:4C:DD:3A:7F:D4:8A:84:2B:CF:EE:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/acaccf26-8354-49c8-998a-0a44a64eb909/0/92E0AE79CBF46A2DC24CDD3A7FD48A842BCFEE8D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/92E0AE79CBF46A2DC24CDD3A7FD48A842BCFEE8D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/acaccf26-8354-49c8-998a-0a44a64eb909/0/92E0AE79CBF46A2DC24CDD3A7FD48A842BCFEE8D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:1a:09:f8:7b:42:87:a6:4a:5c:c0:fc:93:ea:85:32:95:7b:
         c8:af:de:ff:7b:9d:22:31:f0:6b:fc:32:79:7d:44:93:e7:28:
         70:70:e0:0e:1d:f1:08:7b:0e:97:03:1f:9d:fc:2c:81:d9:42:
         37:32:c0:0a:44:74:74:ed:2a:c8:dd:91:b0:8f:fa:e1:3f:52:
         ad:8c:2a:ba:a5:9e:f6:5e:8d:1b:63:d8:a0:9b:a2:55:1c:fa:
         a6:da:71:0e:61:56:8f:27:f3:62:9f:97:a3:4e:2a:0a:bf:61:
         6e:6b:53:e5:79:e5:a6:3a:cf:c4:77:e2:da:30:6f:d0:7a:f1:
         f7:66:70:02:2f:2d:63:fb:74:99:fd:bf:fc:ce:ad:b1:c8:64:
         2d:9c:14:dc:be:81:c2:11:36:ec:e8:7e:94:ae:23:d8:d0:bc:
         6b:f4:9a:75:05:64:0e:22:cb:d8:93:20:e2:bb:a2:50:06:67:
         ce:d7:9e:cd:b9:a3:57:78:b4:4e:b9:3e:b6:4d:89:6c:1d:84:
         b9:c3:9e:de:72:03:b2:a0:d1:cd:b3:6b:73:f0:44:66:4b:b5:
         e7:11:7e:af:3d:3b:16:81:69:51:cd:42:5a:06:bd:33:6a:b9:
         81:50:0f:9c:35:b8:0f:71:d1:ea:46:2e:57:8e:43:9e:d0:6e:
         f6:50:f5:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 09:21:09 2025 by rpki-client