This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/edde8fb8-3a77-487e-9dfc-f479d6b33809/0/9F1E176A521C3CEFE1D787F898211547A2D65955.mft
File:                     9F1E176A521C3CEFE1D787F898211547A2D65955.mft (raw, json)
Hash identifier:          4U2LeenrW3vI+6AjKcAPEOWh2yQlcKslLAhwn/bOlx8=
Subject key identifier:   83:05:3F:4D:FA:B0:BD:A4:9C:0C:CD:31:9D:8A:EC:86:8B:8E:3C:2E
Authority key identifier: 9F:1E:17:6A:52:1C:3C:EF:E1:D7:87:F8:98:21:15:47:A2:D6:59:55
Certificate issuer:       /CN=9F1E176A521C3CEFE1D787F898211547A2D65955
Certificate serial:       2FE2CF344F67AE49B0A68873C9999E0E8452B634
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F1E176A521C3CEFE1D787F898211547A2D65955.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/edde8fb8-3a77-487e-9dfc-f479d6b33809/0/9F1E176A521C3CEFE1D787F898211547A2D65955.mft
Manifest number:          015B
Signing time:             Sat 06 Dec 2025 15:41:32 +0000
Manifest this update:     Sat 06 Dec 2025 15:36:32 +0000
Manifest next update:     Tue 09 Dec 2025 16:54:32 +0000
Files and hashes:         1: 3130332e37382e3233352e302f32342d3234203d3e203634333032.roa (hash: 2H20WDiLKraA5nZo1WLQY+1jKj2wwmLh+BUhMHSZcKQ=)
                          2: 3130332e37382e3233322e302f32322d3232203d3e203634333032.roa (hash: 67RbGhY+6ZVaOK1MwCZS3qjFq9gsaQZlwx9Mn1hUNpU=)
                          3: 3130332e37382e3233342e302f32342d3234203d3e203634333032.roa (hash: s3bVTDEV08gnmOxg2zw3dDA0YDxRgug+TOFOTtwInUc=)
                          4: 3130332e37382e3233332e302f32342d3234203d3e203634333032.roa (hash: qyEXaTUVLtEVprYtVPGwVwuspaFKdLEJ/OENEecXpuE=)
                          5: 9F1E176A521C3CEFE1D787F898211547A2D65955.crl (hash: O3NvfQGyEB1xOztF2yoERN5E962mOJix/4iz+FGISqk=)
                          6: 323030313a6466363a356130303a3a2f34382d3438203d3e203634333032.roa (hash: 6uu5L9LCXycUnW0VXTaRuOdsIdBD80z20frDdHYbxHE=)
                          7: 3130332e37382e3233322e302f32342d3234203d3e203634333032.roa (hash: 17orHFCQWF/5DGMqqWKbU6pKgsvlNi/agPyICUt65aw=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/edde8fb8-3a77-487e-9dfc-f479d6b33809/0/9F1E176A521C3CEFE1D787F898211547A2D65955.crl
                          rsync://repo-rpki.idnic.net/repo/edde8fb8-3a77-487e-9dfc-f479d6b33809/0/9F1E176A521C3CEFE1D787F898211547A2D65955.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F1E176A521C3CEFE1D787F898211547A2D65955.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 09 Dec 2025 15:57:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:e2:cf:34:4f:67:ae:49:b0:a6:88:73:c9:99:9e:0e:84:52:b6:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9F1E176A521C3CEFE1D787F898211547A2D65955
        Validity
            Not Before: Dec  6 15:36:32 2025 GMT
            Not After : Dec  9 16:54:32 2025 GMT
        Subject: CN=83053F4DFAB0BDA49C0CCD319D8AEC868B8E3C2E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:57:8e:eb:61:80:0f:e3:e4:73:06:3a:38:7a:
                    da:b6:e2:4d:51:53:e6:66:1c:d7:03:15:da:c2:2e:
                    8d:be:6a:10:40:82:75:d9:c5:22:94:0b:44:b6:55:
                    54:72:da:f4:c5:74:23:74:6a:64:0a:7f:4f:a5:79:
                    c0:3c:03:b8:5e:c7:4e:df:91:ec:86:fe:4a:92:51:
                    91:cb:41:e7:fe:31:55:d8:b3:cb:ff:25:cb:2b:56:
                    d4:d9:43:b3:63:6f:5d:a7:46:1c:c5:53:69:b8:e9:
                    29:a9:29:27:49:f2:2c:db:6b:20:35:01:ea:b4:42:
                    a1:7c:61:2f:a5:78:da:da:17:07:64:35:bc:ab:e0:
                    cc:ff:2e:82:b0:e8:38:75:f2:77:4c:60:e9:dc:a4:
                    b6:80:54:5c:a3:0f:d9:e1:18:80:2d:22:dc:84:56:
                    12:4d:81:7f:8a:97:8d:e4:64:df:c2:25:cb:f6:3f:
                    dd:22:34:22:e6:3b:7c:0b:7a:20:9f:58:8b:f4:a9:
                    2c:9d:60:7a:a9:13:09:1e:f5:0b:39:db:37:dc:78:
                    a8:69:05:f5:f5:9c:dd:94:eb:8f:fa:98:ab:b9:f0:
                    69:76:15:e6:ad:ea:b8:b4:4d:72:7d:2c:53:37:3b:
                    92:8d:95:cd:3e:f0:5b:00:45:9f:6a:08:ae:56:0d:
                    79:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:05:3F:4D:FA:B0:BD:A4:9C:0C:CD:31:9D:8A:EC:86:8B:8E:3C:2E
            X509v3 Authority Key Identifier:
                keyid:9F:1E:17:6A:52:1C:3C:EF:E1:D7:87:F8:98:21:15:47:A2:D6:59:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/edde8fb8-3a77-487e-9dfc-f479d6b33809/0/9F1E176A521C3CEFE1D787F898211547A2D65955.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F1E176A521C3CEFE1D787F898211547A2D65955.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/edde8fb8-3a77-487e-9dfc-f479d6b33809/0/9F1E176A521C3CEFE1D787F898211547A2D65955.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:76:45:34:1c:a9:7e:ce:04:5b:04:06:f5:2c:5c:6f:f1:c9:
         44:31:ff:c1:a7:13:16:20:ef:1f:98:b3:18:7d:cc:95:34:dd:
         80:9f:b4:df:33:9a:02:e0:84:f4:a7:c7:84:8f:94:d6:29:a0:
         d9:27:6c:80:7a:77:6d:01:05:3b:ac:ee:44:12:64:45:44:03:
         fc:03:b5:7c:46:4d:09:9b:aa:dd:f8:a2:97:13:84:77:84:e0:
         d3:ce:77:8d:56:16:ce:a4:ae:08:91:c2:5d:d2:45:38:23:05:
         9d:15:b3:02:06:61:d3:83:c2:3f:25:c3:c7:ba:ef:26:4a:83:
         8c:4d:f0:27:0d:83:72:0c:c5:bd:6a:48:42:d2:a7:ea:2c:e1:
         23:1b:86:06:32:5a:75:5c:31:f4:97:62:e0:6f:0e:48:0f:30:
         ec:22:66:59:22:83:95:8d:e1:b9:c6:bb:1d:f6:e5:19:86:00:
         1c:b5:65:11:b6:81:8b:3d:ee:40:3f:75:10:3f:87:2f:c4:d9:
         66:af:0a:a9:68:69:51:84:c2:61:8e:5c:0c:e9:c0:e3:80:c6:
         cc:c2:c7:6d:eb:3d:b3:f9:fa:5f:f4:7a:f9:f5:e6:50:ab:f8:
         41:9c:71:14:91:b8:0a:6d:0f:a6:a1:c5:44:e4:63:40:4e:9a:
         97:b8:16:2c
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUL+LPNE9nrkmwpohzyZmeDoRStjQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUYxRTE3NkE1MjFDM0NFRkUxRDc4N0Y4OTgyMTE1NDdB
MkQ2NTk1NTAeFw0yNTEyMDYxNTM2MzJaFw0yNTEyMDkxNjU0MzJaMDMxMTAvBgNV
BAMTKDgzMDUzRjRERkFCMEJEQTQ5QzBDQ0QzMTlEOEFFQzg2OEI4RTNDMkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3V47rYYAP4+RzBjo4etq24k1R
U+ZmHNcDFdrCLo2+ahBAgnXZxSKUC0S2VVRy2vTFdCN0amQKf0+lecA8A7hex07f
keyG/kqSUZHLQef+MVXYs8v/JcsrVtTZQ7Njb12nRhzFU2m46SmpKSdJ8izbayA1
Aeq0QqF8YS+leNraFwdkNbyr4Mz/LoKw6Dh18ndMYOncpLaAVFyjD9nhGIAtItyE
VhJNgX+Kl43kZN/CJcv2P90iNCLmO3wLeiCfWIv0qSydYHqpEwke9Qs52zfceKhp
BfX1nN2U64/6mKu58Gl2Feat6ri0TXJ9LFM3O5KNlc0+8FsARZ9qCK5WDXkFAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUgwU/TfqwvaScDM0xnYrshouOPC4wHwYDVR0j
BBgwFoAUnx4XalIcPO/h14f4mCEVR6LWWVUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l
ZGRlOGZiOC0zYTc3LTQ4N2UtOWRmYy1mNDc5ZDZiMzM4MDkvMC85RjFFMTc2QTUy
MUMzQ0VGRTFENzg3Rjg5ODIxMTU0N0EyRDY1OTU1LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvOUYxRTE3NkE1MjFDM0NFRkUxRDc4N0Y4OTgyMTE1NDdBMkQ2
NTk1NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWRkZThmYjgtM2E3Ny00ODdlLTlk
ZmMtZjQ3OWQ2YjMzODA5LzAvOUYxRTE3NkE1MjFDM0NFRkUxRDc4N0Y4OTgyMTE1
NDdBMkQ2NTk1NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAIR2RTQcqX7OBFsEBvUsXG/xyUQx/8GnExYg
7x+Ysxh9zJU03YCftN8zmgLghPSnx4SPlNYpoNknbIB6d20BBTus7kQSZEVEA/wD
tXxGTQmbqt34opcThHeE4NPOd41WFs6krgiRwl3SRTgjBZ0VswIGYdODwj8lw8e6
7yZKg4xN8CcNg3IMxb1qSELSp+os4SMbhgYyWnVcMfSXYuBvDkgPMOwiZlkig5WN
4bnGux325RmGABy1ZRG2gYs97kA/dRA/hy/E2WavCqloaVGEwmGOXAzpwOOAxszC
x23rPbP5+l/0evn15lCr+EGccRSRuAptD6ahxUTkY0BOmpe4Fiw=
-----END CERTIFICATE-----
Generated at Sun Dec 7 02:07:58 2025 by rpki-client