This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/adbd3a50-832e-4127-94e1-48ace164cf26/0/9481EF5008E46F3618B42A0945A1522D5C041511.mft
File:                     9481EF5008E46F3618B42A0945A1522D5C041511.mft (raw, json)
Hash identifier:          WmJDwD+I18KjIcp0F9gmbMNiXKQBU3Bx/QE1aVwMuQ8=
Subject key identifier:   D0:5D:F2:96:6C:B5:8A:EC:A6:F4:26:98:54:30:0E:B4:00:93:6E:02
Authority key identifier: 94:81:EF:50:08:E4:6F:36:18:B4:2A:09:45:A1:52:2D:5C:04:15:11
Certificate issuer:       /CN=9481EF5008E46F3618B42A0945A1522D5C041511
Certificate serial:       3691BF85C88D0642F7A7AB9DB141BE20E1118307
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9481EF5008E46F3618B42A0945A1522D5C041511.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/adbd3a50-832e-4127-94e1-48ace164cf26/0/9481EF5008E46F3618B42A0945A1522D5C041511.mft
Manifest number:          01D3
Signing time:             Thu 04 Dec 2025 15:30:39 +0000
Manifest this update:     Thu 04 Dec 2025 15:25:39 +0000
Manifest next update:     Mon 08 Dec 2025 03:20:39 +0000
Files and hashes:         1: 9481EF5008E46F3618B42A0945A1522D5C041511.crl (hash: gTW8kwHVlvSs/3bsqa2wK+Cv9biJCXcAhT/O2yo2PLk=)
                          2: 3130332e35392e3136302e302f32342d3234203d3e20313530343933.roa (hash: f/j5GPms+0vVrxU9LEjy4LxDht9TfBPHjTn0vLm2+10=)
                          3: 3130332e35392e3136312e302f32342d3234203d3e20313530343933.roa (hash: pGekD2tUpn0xDHnzasQ+6xNuHW0c3qjuIRQwiOzHIVE=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/adbd3a50-832e-4127-94e1-48ace164cf26/0/9481EF5008E46F3618B42A0945A1522D5C041511.crl
                          rsync://repo-rpki.idnic.net/repo/adbd3a50-832e-4127-94e1-48ace164cf26/0/9481EF5008E46F3618B42A0945A1522D5C041511.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9481EF5008E46F3618B42A0945A1522D5C041511.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 08 Dec 2025 03:20:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:91:bf:85:c8:8d:06:42:f7:a7:ab:9d:b1:41:be:20:e1:11:83:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9481EF5008E46F3618B42A0945A1522D5C041511
        Validity
            Not Before: Dec  4 15:25:39 2025 GMT
            Not After : Dec  8 03:20:39 2025 GMT
        Subject: CN=D05DF2966CB58AECA6F4269854300EB400936E02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:fd:bf:a4:70:2e:01:d8:3f:41:27:3c:28:6f:
                    03:14:30:89:eb:33:91:fc:85:2d:1f:2c:2c:25:3c:
                    f6:fc:0e:d2:bd:d0:2e:c3:5f:76:c0:d4:fb:61:00:
                    98:b3:fc:5f:47:1f:89:64:7e:c4:ae:40:c1:92:03:
                    22:0b:0d:c7:d1:b1:ce:79:49:43:69:b5:3e:15:53:
                    62:af:96:1b:ff:c5:40:d4:13:80:05:07:04:76:70:
                    e9:6d:bf:ed:49:42:52:b6:5e:de:20:d1:be:27:38:
                    f0:42:32:c2:99:1a:0f:a6:af:c4:71:91:69:21:6a:
                    2e:8c:89:f1:cc:3b:93:58:2c:e2:49:7d:d9:92:ec:
                    b6:30:b4:97:3a:c6:7f:f8:ec:db:94:a9:56:80:35:
                    27:1d:f5:8f:ae:2e:bd:de:75:d3:08:65:31:18:5a:
                    9a:31:76:24:26:ea:7e:c8:90:ac:24:c8:07:a5:d5:
                    95:75:53:47:5e:6a:fd:64:01:e5:43:ee:55:56:8f:
                    56:c4:18:87:4c:f3:ed:82:9f:21:e7:b9:ed:9e:28:
                    c9:7c:f2:2f:24:b6:95:94:c7:03:a5:9d:f4:0a:8b:
                    91:e1:b6:c8:95:cd:10:df:4e:cc:c0:86:da:15:0a:
                    5c:df:85:b0:24:c2:14:3d:62:f2:28:3f:15:e6:d4:
                    70:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:5D:F2:96:6C:B5:8A:EC:A6:F4:26:98:54:30:0E:B4:00:93:6E:02
            X509v3 Authority Key Identifier:
                keyid:94:81:EF:50:08:E4:6F:36:18:B4:2A:09:45:A1:52:2D:5C:04:15:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/adbd3a50-832e-4127-94e1-48ace164cf26/0/9481EF5008E46F3618B42A0945A1522D5C041511.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9481EF5008E46F3618B42A0945A1522D5C041511.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/adbd3a50-832e-4127-94e1-48ace164cf26/0/9481EF5008E46F3618B42A0945A1522D5C041511.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:b6:91:5b:98:9c:b7:db:16:65:69:43:a0:11:35:41:31:13:
         c5:83:2a:68:ca:e1:c4:81:fd:0a:00:94:43:cc:9e:3d:45:4c:
         82:b4:83:da:31:fb:c7:a2:3a:3d:9b:2a:dc:2d:04:38:71:26:
         7f:35:ea:e2:c2:d1:e8:25:11:b8:ca:51:22:8b:54:08:e1:ab:
         9e:cb:a9:77:91:4e:ce:02:bf:38:06:15:7c:ba:a9:d4:c9:6c:
         63:f8:ca:6d:6b:da:9d:c3:c5:f8:09:0f:cc:93:36:ce:2d:a9:
         86:3b:62:91:3c:2c:b6:b2:53:5d:37:1a:9f:85:92:75:d7:64:
         a6:db:c1:ac:95:44:2e:77:5c:45:1b:37:9c:4a:56:92:0c:57:
         4c:ca:aa:68:e2:53:d8:ef:fc:18:9f:81:c8:a2:d5:a0:97:02:
         03:9a:2b:97:93:87:46:2d:eb:9d:f6:a5:81:68:5a:62:e7:f0:
         28:d4:6c:9f:43:ac:3a:ba:8f:1f:ed:15:56:18:3c:40:b9:a6:
         f0:6e:81:7c:f9:fd:7c:4d:9f:27:6e:06:7e:52:d5:15:03:5e:
         39:8e:72:6c:91:aa:41:9e:df:f4:c2:a1:65:99:47:15:e6:11:
         9a:ce:8c:99:e2:72:d3:8e:6f:88:c4:67:6c:99:e1:28:92:4a:
         29:41:ba:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 23:14:15 2025 by rpki-client