This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/ccbcc00d-ce79-4216-a62b-e3d50cc79442/0/9973E5D6F7F65DCF015E9DAFCEF394F512E4FD61.mft
File:                     9973E5D6F7F65DCF015E9DAFCEF394F512E4FD61.mft (raw, json)
Hash identifier:          6IdHfWfz3RNauGv1Jmofk9ZhwOO7PQztqa7VfvrEkaQ=
Subject key identifier:   EB:DE:55:E8:4C:A5:C8:E2:B8:48:68:C8:96:D0:D9:35:94:FA:E1:C1
Authority key identifier: 99:73:E5:D6:F7:F6:5D:CF:01:5E:9D:AF:CE:F3:94:F5:12:E4:FD:61
Certificate issuer:       /CN=9973E5D6F7F65DCF015E9DAFCEF394F512E4FD61
Certificate serial:       7889E82C035D5E2E6F5AB23F997E483F7B630EA1
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9973E5D6F7F65DCF015E9DAFCEF394F512E4FD61.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/ccbcc00d-ce79-4216-a62b-e3d50cc79442/0/9973E5D6F7F65DCF015E9DAFCEF394F512E4FD61.mft
Manifest number:          0541
Signing time:             Fri 05 Dec 2025 18:00:52 +0000
Manifest this update:     Fri 05 Dec 2025 17:55:52 +0000
Manifest next update:     Tue 09 Dec 2025 00:47:52 +0000
Files and hashes:         1: 9973E5D6F7F65DCF015E9DAFCEF394F512E4FD61.crl (hash: WI5dOFAh2H5m0vquyMTuoGPmyrah1gOg/m0hVTKxBzM=)
                          2: 3132302e38392e38382e302f32342d3234203d3e203435323839.roa (hash: TyftOcvbZs91N5rxusfIjMZ5akc+NP+roH91JhFQg20=)
                          3: 3130332e3234312e3137392e302f32342d3234203d3e203435323839.roa (hash: pR7u7IsW9E5zx/4Gewaf11qIOvq1r/xgCkMTQFAUEcc=)
                          4: 3230332e3134382e38342e302f32342d3234203d3e203435323839.roa (hash: WDUUBVToiU1iccjikjgrMyjUMVvcr2yL6nTb6EMxpMs=)
                          5: 323430323a613130303a3a2f33322d3332203d3e203435323839.roa (hash: JxgdhcTrs6B/jpG5QUO9aLWXUNbAlaSX869U6y/nYjo=)
                          6: 3130332e332e35392e302f32342d3234203d3e203435323839.roa (hash: JnLquCgIroielTjx4ROKisgjaiP3OgaMmkhANFXPFCc=)
                          7: 3132302e38392e38392e302f32342d3234203d3e203435323839.roa (hash: JqPwBzOb9IGp/J3IK4HU+cGl2mSkMSYQ3owKhX9duIs=)
                          8: 3230332e3134382e38352e302f32342d3234203d3e203435323839.roa (hash: /vst8lOP9Na9sgAVJ1wD7o5HJMQFWxGn08eczXMCCA0=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/ccbcc00d-ce79-4216-a62b-e3d50cc79442/0/9973E5D6F7F65DCF015E9DAFCEF394F512E4FD61.crl
                          rsync://repo-rpki.idnic.net/repo/ccbcc00d-ce79-4216-a62b-e3d50cc79442/0/9973E5D6F7F65DCF015E9DAFCEF394F512E4FD61.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9973E5D6F7F65DCF015E9DAFCEF394F512E4FD61.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 09 Dec 2025 00:47:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:89:e8:2c:03:5d:5e:2e:6f:5a:b2:3f:99:7e:48:3f:7b:63:0e:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9973E5D6F7F65DCF015E9DAFCEF394F512E4FD61
        Validity
            Not Before: Dec  5 17:55:52 2025 GMT
            Not After : Dec  9 00:47:52 2025 GMT
        Subject: CN=EBDE55E84CA5C8E2B84868C896D0D93594FAE1C1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:12:05:73:50:18:14:b7:21:0e:26:09:77:30:
                    91:7c:44:8f:0a:d5:c2:e0:34:e2:e3:3b:91:98:88:
                    e3:c2:52:f2:28:43:15:c0:52:60:79:98:44:4d:bd:
                    ef:da:83:f0:7a:f6:d3:56:01:d6:36:ba:09:40:01:
                    25:34:5b:eb:5a:ae:b5:9c:df:76:ad:89:07:3c:a0:
                    c5:82:e3:f9:33:d6:e7:ca:b5:41:0b:62:d9:13:b2:
                    b6:47:bb:f7:0d:e0:84:1f:72:7e:44:7c:b8:29:0b:
                    f2:d9:f7:5e:f7:5b:f1:4c:7a:d8:35:1b:0b:b1:ef:
                    a6:7b:02:c8:ff:c4:68:d2:2f:28:f0:34:cc:1d:db:
                    6f:ed:b4:58:ec:2b:51:a4:df:55:50:4b:7f:23:92:
                    a5:bb:56:31:2d:51:82:3f:4b:d8:c4:33:69:10:5c:
                    f5:af:38:ee:09:ce:92:83:28:b6:82:73:7f:00:1f:
                    36:15:a6:f9:14:76:dc:4b:39:44:b4:d9:0a:09:15:
                    e5:64:c7:1c:c1:bd:d5:ed:37:e5:2a:e2:1c:58:57:
                    d6:b6:35:54:b7:4b:87:ce:0b:6d:dd:23:8d:8d:94:
                    81:c3:d4:66:53:b0:b4:ac:ac:98:24:fc:9c:67:3f:
                    7e:ea:e0:51:e0:be:ec:0a:49:02:2f:64:0c:28:73:
                    8d:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:DE:55:E8:4C:A5:C8:E2:B8:48:68:C8:96:D0:D9:35:94:FA:E1:C1
            X509v3 Authority Key Identifier:
                keyid:99:73:E5:D6:F7:F6:5D:CF:01:5E:9D:AF:CE:F3:94:F5:12:E4:FD:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/ccbcc00d-ce79-4216-a62b-e3d50cc79442/0/9973E5D6F7F65DCF015E9DAFCEF394F512E4FD61.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9973E5D6F7F65DCF015E9DAFCEF394F512E4FD61.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ccbcc00d-ce79-4216-a62b-e3d50cc79442/0/9973E5D6F7F65DCF015E9DAFCEF394F512E4FD61.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:d2:35:58:6c:3b:63:3e:c0:93:d8:47:f0:41:2f:d4:8c:20:
         40:ae:90:53:e9:4a:0b:ef:f9:c5:92:ce:5c:5f:42:25:06:e2:
         0b:6e:2c:7c:3b:83:6a:74:f0:7a:7e:6f:d8:45:fb:5d:a9:ba:
         46:e0:3f:09:7d:45:6e:a6:5f:8f:c4:fa:20:10:52:43:b9:0a:
         60:cc:9f:bc:5a:33:40:77:d0:06:ea:d0:95:e5:bb:ce:14:b8:
         47:1e:42:f9:56:91:b8:64:16:7b:b8:37:61:cc:48:c5:a4:f4:
         a6:77:eb:14:af:92:94:41:33:88:b7:60:4e:c0:95:83:3f:d0:
         9b:c5:24:8a:e4:18:49:88:85:ff:2d:4a:0f:a6:f1:dc:e0:a1:
         06:33:c6:e8:19:c1:db:b9:00:50:2e:d1:3f:a4:87:a4:38:ad:
         c7:e2:d7:ae:eb:ef:87:3d:a9:c9:33:bc:6b:b8:dc:46:24:47:
         dd:25:65:72:14:d1:01:7a:12:10:1f:58:1d:90:ad:29:d3:02:
         a2:39:e4:06:7d:83:eb:d7:83:3e:c4:96:3b:14:ad:13:2e:73:
         8d:3c:9c:2b:9e:6f:24:2f:13:eb:4f:82:4f:29:8a:56:21:b8:
         48:bb:ea:42:a0:5a:72:c9:58:63:9a:dd:dd:b0:86:78:97:64:
         75:a6:69:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 00:48:57 2025 by rpki-client