This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/d2f1417a-5718-4071-9f35-c122555dac7a/0/95966A8DB250307CF9852483F96922EE520F6E2A.mft
File:                     95966A8DB250307CF9852483F96922EE520F6E2A.mft (raw, json)
Hash identifier:          KVJtcbZxJedyFrPgPb6a4/s9oPkRlufL1heM/C8E9DE=
Subject key identifier:   E2:ED:04:05:8A:00:1F:82:2E:71:4A:05:4B:60:5D:D4:9D:DB:B5:5D
Authority key identifier: 95:96:6A:8D:B2:50:30:7C:F9:85:24:83:F9:69:22:EE:52:0F:6E:2A
Certificate issuer:       /CN=95966A8DB250307CF9852483F96922EE520F6E2A
Certificate serial:       27B5F6495AAF1AB2D601B4AC4A14F1E1A0544C0D
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/95966A8DB250307CF9852483F96922EE520F6E2A.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/d2f1417a-5718-4071-9f35-c122555dac7a/0/95966A8DB250307CF9852483F96922EE520F6E2A.mft
Manifest number:          031B
Signing time:             Sat 06 Dec 2025 19:10:00 +0000
Manifest this update:     Sat 06 Dec 2025 19:05:00 +0000
Manifest next update:     Tue 09 Dec 2025 20:59:00 +0000
Files and hashes:         1: 95966A8DB250307CF9852483F96922EE520F6E2A.crl (hash: dNm6itTqSZTcAkYjrNiOC41Ck/NrhNWAik7txpjZKWo=)
                          2: 3130332e31392e3232392e302f32342d3234203d3e20313332363638.roa (hash: lJA11B888lTAIORO0k9rdft4p7t0vrr4FyWBG++arwA=)
                          3: 3130332e31392e3233302e302f32342d3234203d3e20313332363638.roa (hash: QAndsMLECtqgWCCHyuYe9oOyMMkwnZ8QhtRk2OHf9FQ=)
                          4: 3130332e31392e3233312e302f32342d3234203d3e20313332363638.roa (hash: xt2DiIsS1Hm+P8ldmkaqq+Mf+LiIX+U17UKLw/Y34Uk=)
                          5: 3130332e31392e3232382e302f32342d3234203d3e20313332363638.roa (hash: MitWmX3yxsYyPd+sKi7YcLOVm2fefPu2Qs/7NDCXxb8=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/d2f1417a-5718-4071-9f35-c122555dac7a/0/95966A8DB250307CF9852483F96922EE520F6E2A.crl
                          rsync://repo-rpki.idnic.net/repo/d2f1417a-5718-4071-9f35-c122555dac7a/0/95966A8DB250307CF9852483F96922EE520F6E2A.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/95966A8DB250307CF9852483F96922EE520F6E2A.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 09 Dec 2025 15:57:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:b5:f6:49:5a:af:1a:b2:d6:01:b4:ac:4a:14:f1:e1:a0:54:4c:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95966A8DB250307CF9852483F96922EE520F6E2A
        Validity
            Not Before: Dec  6 19:05:00 2025 GMT
            Not After : Dec  9 20:59:00 2025 GMT
        Subject: CN=E2ED04058A001F822E714A054B605DD49DDBB55D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:70:cc:1e:6a:0d:e8:bd:d0:a6:ed:0d:4b:b0:
                    fa:f4:0c:22:13:df:f9:35:f3:6d:a3:60:da:95:2b:
                    f4:8c:63:72:98:54:2d:31:b1:27:d0:ce:9f:0a:df:
                    98:9f:1b:96:74:bd:33:7c:6b:9f:b8:01:b7:5c:1b:
                    dd:8d:2d:6d:82:eb:cc:61:14:f7:f0:4d:ea:0c:f9:
                    cc:f8:5a:c7:2b:71:26:e7:57:d5:e5:39:a8:95:10:
                    c2:a0:4f:9d:0f:59:8a:2e:32:7c:b2:5b:c3:fc:a3:
                    3e:01:18:be:b2:89:a3:12:62:2f:fd:3d:45:82:12:
                    9f:02:8c:65:35:f0:fe:8a:25:eb:f6:ab:e3:50:d9:
                    40:84:6c:c5:9e:0b:76:19:92:c2:3b:36:6c:90:ef:
                    a7:d5:76:b4:89:61:ea:40:b0:d6:39:e1:5d:86:34:
                    12:c6:a3:93:db:a5:96:f2:4f:5b:94:c7:1b:ad:c4:
                    11:b1:02:3f:62:c8:2f:ad:62:fa:79:e3:76:01:d2:
                    38:b1:6b:17:8e:9c:72:ca:49:ba:de:e4:91:41:fb:
                    a5:1f:0e:f3:46:47:fd:8c:47:1b:6f:42:64:22:e1:
                    a7:f8:67:a1:25:f3:44:6f:25:a0:fe:2e:ec:8d:cc:
                    5e:f7:32:d6:9e:1a:19:5e:6f:dc:b0:0f:2c:2c:34:
                    7a:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:ED:04:05:8A:00:1F:82:2E:71:4A:05:4B:60:5D:D4:9D:DB:B5:5D
            X509v3 Authority Key Identifier:
                keyid:95:96:6A:8D:B2:50:30:7C:F9:85:24:83:F9:69:22:EE:52:0F:6E:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/d2f1417a-5718-4071-9f35-c122555dac7a/0/95966A8DB250307CF9852483F96922EE520F6E2A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/95966A8DB250307CF9852483F96922EE520F6E2A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d2f1417a-5718-4071-9f35-c122555dac7a/0/95966A8DB250307CF9852483F96922EE520F6E2A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:4b:01:0e:31:c3:dd:f2:50:b5:02:38:2c:09:01:4e:66:b6:
         f7:68:60:a0:c5:8a:2f:95:ba:89:97:83:38:c3:f4:ef:26:62:
         c9:0e:82:05:85:00:78:89:a3:41:8b:06:eb:92:9e:28:49:c6:
         3a:dd:d4:95:e2:75:12:dd:aa:3f:31:c8:4d:ac:ce:ba:94:b9:
         46:d6:bc:4b:35:f5:f7:a8:8e:bc:8d:d4:ea:54:b3:b0:4a:90:
         8e:b2:b7:7b:3e:52:8e:88:34:2e:35:17:a3:71:78:03:3a:5d:
         5c:f7:3e:fc:b9:80:17:ef:06:7c:d2:ed:2a:80:07:c4:6f:db:
         2c:53:a7:f0:51:b7:5c:d3:82:39:50:d1:e5:25:c4:0a:10:f2:
         d4:2f:81:40:25:94:b6:38:68:44:61:f9:5f:48:d9:a9:29:22:
         d8:0f:dd:78:d0:6e:33:aa:ac:b6:6c:86:ad:33:71:b9:3c:d2:
         5b:32:f3:89:6a:60:49:bc:dd:6f:74:7a:08:1a:f9:e5:2c:99:
         96:4c:ff:6e:bb:b9:07:44:a9:2b:de:6d:a9:9c:eb:56:c5:e0:
         a9:50:43:d3:bc:f0:26:ce:2d:d2:63:7f:e8:6a:43:58:fc:83:
         ac:21:80:6c:fb:0f:41:9e:b3:f0:2d:e0:97:4b:92:09:71:02:
         ed:a4:4e:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 02:08:56 2025 by rpki-client