This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/f9d6acc6-0af3-4b97-99a4-0f45e8ecf576/0/0A8E8E063785238467D4AD1F507CC97B30DBB959.mft
File:                     0A8E8E063785238467D4AD1F507CC97B30DBB959.mft (raw, json)
Hash identifier:          5pv1HTKuehInEflt691eZMBnihys5JUD4MBVSQKaOak=
Subject key identifier:   7A:9E:DC:25:3E:39:45:6C:3D:7B:6D:C8:D5:79:89:48:33:19:A6:44
Authority key identifier: 0A:8E:8E:06:37:85:23:84:67:D4:AD:1F:50:7C:C9:7B:30:DB:B9:59
Certificate issuer:       /CN=0A8E8E063785238467D4AD1F507CC97B30DBB959
Certificate serial:       4E6E44B420AEF2E421F03F8AF17312B720338AA4
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0A8E8E063785238467D4AD1F507CC97B30DBB959.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/f9d6acc6-0af3-4b97-99a4-0f45e8ecf576/0/0A8E8E063785238467D4AD1F507CC97B30DBB959.mft
Manifest number:          0196
Signing time:             Sat 06 Dec 2025 20:21:26 +0000
Manifest this update:     Sat 06 Dec 2025 20:16:26 +0000
Manifest next update:     Wed 10 Dec 2025 07:28:26 +0000
Files and hashes:         1: 323430363a356334303a383838383a3a2f34382d3438203d3e20313331373035.roa (hash: xhrHJkeZ6ORZKPQ3ePW270bQNoXqgZH/hWdzMzXe/Ng=)
                          2: 323430363a356334303a373737373a3a2f34382d3438203d3e20313331373035.roa (hash: uxf3gr1qNXj16NXsE/3S99HOdYs6kHV+q6L/TWnS+ag=)
                          3: 323430363a356334303a393939393a3a2f34382d3438203d3e20313331373035.roa (hash: cSd8oWkoy/PciTBhaM2sT+kEpSFLFHXqmquC1grDeYk=)
                          4: 323430363a356334303a3a2f33362d3438203d3e20313331373035.roa (hash: vVX9J+iIt5S0zLOqjzNP9A3DgvrDc3RqZLM36XJo31Q=)
                          5: 323430363a356334303a323030303a3a2f33362d3438203d3e20313331373035.roa (hash: 34w8SIWSSd8kqURH0Jn+B/R9XKBmDHxtyVWAlqGJxJo=)
                          6: 0A8E8E063785238467D4AD1F507CC97B30DBB959.crl (hash: lSDu52SaJ1N+hzWHC98sTqPntOnPu0IwFruR9uqXIk4=)
                          7: 323430363a356334303a313030303a3a2f33362d3438203d3e20313331373035.roa (hash: Mk93/Py1aNdqibCxnW5rDhu68jIUBJ5f2wQcM99902Q=)
                          8: 3130332e3135342e3137382e302f32332d3234203d3e20313331373035.roa (hash: z6Vlo67b6HowiJ4eNQMIImpcN0YW2LjWV36x2SeZA5M=)
                          9: 3130332e3135342e3137382e302f32342d3234203d3e20313331373035.roa (hash: dY5S+6E2tTu7kTt3kud9rHyNZ8ICT/4MYY6A5gKdkm0=)
                          10: 323430363a356334303a3a2f33322d3438203d3e20313331373035.roa (hash: ZrrNvfIdpKFxME3MijZJjel9mkVCFWr1LKlyTLKuOmk=)
                          11: 3130332e3135342e3137392e302f32342d3234203d3e20313331373035.roa (hash: fuYAXhPxVSs3uQDGyVoloAUdGAB1vPzhCZLoObuSwWo=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/f9d6acc6-0af3-4b97-99a4-0f45e8ecf576/0/0A8E8E063785238467D4AD1F507CC97B30DBB959.crl
                          rsync://repo-rpki.idnic.net/repo/f9d6acc6-0af3-4b97-99a4-0f45e8ecf576/0/0A8E8E063785238467D4AD1F507CC97B30DBB959.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0A8E8E063785238467D4AD1F507CC97B30DBB959.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 09 Dec 2025 15:57:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:6e:44:b4:20:ae:f2:e4:21:f0:3f:8a:f1:73:12:b7:20:33:8a:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0A8E8E063785238467D4AD1F507CC97B30DBB959
        Validity
            Not Before: Dec  6 20:16:26 2025 GMT
            Not After : Dec 10 07:28:26 2025 GMT
        Subject: CN=7A9EDC253E39456C3D7B6DC8D57989483319A644
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:08:08:88:33:cd:bc:4f:45:f8:2a:8a:7d:58:
                    b9:9a:66:11:04:6a:8b:9f:d7:e6:c2:87:45:aa:71:
                    93:6f:c3:be:9e:a6:85:ad:a6:6e:68:9d:d3:dc:39:
                    31:87:32:bc:15:64:52:48:2d:9e:7d:8f:55:41:72:
                    1a:60:d2:c7:24:db:46:6e:1a:2a:53:63:a7:45:c1:
                    0a:8c:92:b3:c7:50:7d:7f:be:33:b8:54:b2:af:2a:
                    7d:5f:b1:ef:f5:b4:52:09:4a:2b:a7:1f:ea:0c:bb:
                    2d:6c:7f:01:d3:ae:46:be:26:a1:3a:1b:39:35:80:
                    66:6e:1d:eb:2e:87:ff:74:e4:49:38:b1:a4:d2:ed:
                    b0:04:03:3e:16:ea:e3:bb:73:54:88:fd:4e:60:aa:
                    3e:9e:67:b6:a6:77:67:64:0f:75:de:f2:48:3a:71:
                    0e:f3:a7:bf:c6:4c:b5:e0:18:56:c7:6b:9c:64:51:
                    de:9b:2f:2a:c7:9d:5d:e2:3e:ce:de:3c:98:a9:f2:
                    9c:db:04:63:95:2b:ed:a8:72:d1:f7:c2:4a:02:9e:
                    eb:29:72:2d:b9:9f:bd:67:33:f6:d5:ea:90:dc:1a:
                    d1:87:92:05:fa:45:7d:99:80:34:c2:1a:75:aa:0d:
                    4b:6c:4e:4b:b2:3f:60:29:0e:0a:83:4a:b3:e7:48:
                    68:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:9E:DC:25:3E:39:45:6C:3D:7B:6D:C8:D5:79:89:48:33:19:A6:44
            X509v3 Authority Key Identifier:
                keyid:0A:8E:8E:06:37:85:23:84:67:D4:AD:1F:50:7C:C9:7B:30:DB:B9:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/f9d6acc6-0af3-4b97-99a4-0f45e8ecf576/0/0A8E8E063785238467D4AD1F507CC97B30DBB959.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0A8E8E063785238467D4AD1F507CC97B30DBB959.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f9d6acc6-0af3-4b97-99a4-0f45e8ecf576/0/0A8E8E063785238467D4AD1F507CC97B30DBB959.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:59:08:17:06:5d:53:cf:49:b8:39:7e:89:91:58:be:9e:c1:
         bf:c2:c8:6f:06:c7:fc:3f:0c:b3:64:84:dc:e2:86:21:eb:f2:
         e1:24:37:0f:84:81:29:1a:cf:7c:84:e9:f7:68:04:0d:2d:71:
         c5:6f:0a:ca:75:e2:af:b0:d6:9e:fe:3a:2d:92:e3:b8:7a:da:
         32:67:63:d3:78:bc:80:7c:4e:61:19:21:8d:be:5e:6b:00:e7:
         0d:ff:ec:cf:3a:a8:e0:6c:40:be:4d:bd:e2:a2:91:89:c0:00:
         9c:e2:e3:1d:d2:06:cb:76:10:20:7c:4f:7a:eb:9b:bb:d6:e3:
         7e:10:cf:df:50:50:3d:a9:e8:fe:4b:51:81:b2:c3:e3:3d:d8:
         d4:e3:26:5d:4b:8d:0e:37:b8:ae:b6:d7:5e:de:9b:38:54:5b:
         bb:9e:d2:c5:62:0b:33:f5:20:63:f5:bd:f2:b3:bc:84:c0:8b:
         34:35:b9:69:0e:23:1f:9b:76:25:cb:17:89:2c:12:20:d4:3b:
         80:fd:a0:5c:ba:d4:12:b5:42:14:cb:e3:09:a7:b9:3c:af:34:
         06:3e:f7:92:4b:97:38:2b:df:91:ec:f1:f4:35:a0:71:c5:09:
         ab:fa:f1:29:8c:7f:46:6d:32:fa:0b:2f:c7:fa:6b:bd:cf:65:
         56:25:1c:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 02:09:12 2025 by rpki-client