This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/018e2e74-f6c7-49f4-ad58-f00cde3eda60/0/9B123580240DE1580D07828D18D711FDE8163C25.mft
File:                     9B123580240DE1580D07828D18D711FDE8163C25.mft (raw, json)
Hash identifier:          leg0zh7luGbbCQHj+xnAEZ9yPxvSqzLzyM+klW8CYOw=
Subject key identifier:   4A:95:52:F9:DE:98:F8:0D:F0:76:81:4D:11:7A:9F:38:F4:3E:AA:A7
Authority key identifier: 9B:12:35:80:24:0D:E1:58:0D:07:82:8D:18:D7:11:FD:E8:16:3C:25
Certificate issuer:       /CN=9B123580240DE1580D07828D18D711FDE8163C25
Certificate serial:       50231F1A6CFD873E62B38814E302F2040F16CE0D
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9B123580240DE1580D07828D18D711FDE8163C25.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/018e2e74-f6c7-49f4-ad58-f00cde3eda60/0/9B123580240DE1580D07828D18D711FDE8163C25.mft
Manifest number:          01C9
Signing time:             Sun 21 Dec 2025 22:11:21 +0000
Manifest this update:     Sun 21 Dec 2025 22:06:21 +0000
Manifest next update:     Thu 25 Dec 2025 07:06:21 +0000
Files and hashes:         1: 323030313a6466373a626230303a3a2f34382d3438203d3e20313338303531.roa (hash: cb2aylHiHSC4fi9/lMSvkqhTCdu9b24WuShT1wCqpZM=)
                          2: 3130332e3133342e35352e302f32342d3234203d3e20313338303531.roa (hash: LI4oNjcJfbE/Yzr7G/KxIrW20ZM4hPrDcoUuP8eNTj0=)
                          3: 9B123580240DE1580D07828D18D711FDE8163C25.crl (hash: umuJ8Bklgm0GvDkiPSFvcD/NIjxkFhYQIUrQMl2THng=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/018e2e74-f6c7-49f4-ad58-f00cde3eda60/0/9B123580240DE1580D07828D18D711FDE8163C25.crl
                          rsync://repo-rpki.idnic.net/repo/018e2e74-f6c7-49f4-ad58-f00cde3eda60/0/9B123580240DE1580D07828D18D711FDE8163C25.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9B123580240DE1580D07828D18D711FDE8163C25.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 24 Dec 2025 07:39:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:23:1f:1a:6c:fd:87:3e:62:b3:88:14:e3:02:f2:04:0f:16:ce:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9B123580240DE1580D07828D18D711FDE8163C25
        Validity
            Not Before: Dec 21 22:06:21 2025 GMT
            Not After : Dec 25 07:06:21 2025 GMT
        Subject: CN=4A9552F9DE98F80DF076814D117A9F38F43EAAA7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:77:d6:74:29:e2:9c:2c:ff:9e:69:c6:14:09:
                    3c:02:af:b0:14:f8:6a:eb:5f:23:ba:7d:d1:0f:c2:
                    55:aa:73:29:25:30:f8:16:d7:c2:45:92:2a:8e:13:
                    dc:98:51:a1:99:15:49:fa:0b:45:f9:5d:66:03:81:
                    7a:b5:6f:7b:a1:74:d7:6d:0f:31:3a:e8:9b:ac:81:
                    86:1a:6b:8f:10:bf:cf:f5:d3:fe:fa:ec:5a:bf:cc:
                    85:76:32:d2:02:9b:f4:1e:91:88:6b:da:89:2c:64:
                    2c:78:56:15:c3:5f:ee:fd:32:d5:e8:5f:ff:47:62:
                    38:34:9a:c2:85:2f:58:10:5c:99:66:9f:78:d6:90:
                    5e:76:4b:dd:42:ff:3d:82:72:70:bb:14:84:71:00:
                    55:be:16:c3:b0:db:a1:5e:b7:63:22:43:b8:73:8d:
                    1c:35:b2:82:c1:25:65:bb:1c:61:49:34:74:5e:1b:
                    00:b6:ad:02:c6:62:cb:d3:c7:87:ff:70:ee:9d:ba:
                    94:15:2a:59:e1:4b:16:f6:ba:8c:0d:8c:64:29:e2:
                    c8:cd:88:be:e9:4c:f7:7d:45:94:94:cd:8a:18:0f:
                    e8:6f:c3:2d:70:e9:35:10:5b:ac:5f:dd:f0:66:2e:
                    a2:cb:45:26:88:d8:25:7e:cc:b7:e0:c1:54:83:e1:
                    93:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:95:52:F9:DE:98:F8:0D:F0:76:81:4D:11:7A:9F:38:F4:3E:AA:A7
            X509v3 Authority Key Identifier:
                keyid:9B:12:35:80:24:0D:E1:58:0D:07:82:8D:18:D7:11:FD:E8:16:3C:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/018e2e74-f6c7-49f4-ad58-f00cde3eda60/0/9B123580240DE1580D07828D18D711FDE8163C25.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9B123580240DE1580D07828D18D711FDE8163C25.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/018e2e74-f6c7-49f4-ad58-f00cde3eda60/0/9B123580240DE1580D07828D18D711FDE8163C25.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:22:c5:41:a6:30:00:8d:25:33:a9:dc:45:11:55:86:98:cd:
         4a:99:75:31:3b:40:e8:3c:dc:83:29:7e:de:30:ce:41:82:ef:
         08:1a:30:3a:fc:97:14:d7:cd:97:c5:a1:93:67:db:c1:a2:9b:
         e1:a0:e0:5c:f3:2c:16:a6:6b:5b:cb:fb:06:ed:12:bc:41:5c:
         65:c0:d6:c9:51:a6:06:8a:19:cb:01:d0:a1:ac:84:0b:8e:ca:
         07:87:8d:c3:da:9d:dc:c9:8e:a4:fa:84:cc:78:92:99:36:f5:
         b1:2d:0a:35:07:b3:48:33:a4:12:09:5a:27:de:e2:c4:dd:a7:
         9c:91:20:60:16:73:af:60:ca:58:b5:1d:f1:bd:4b:bf:84:f0:
         fb:5d:ef:13:c5:0b:1d:45:49:a2:ea:af:d9:51:a6:8e:5a:a7:
         bc:cb:43:0a:78:b4:e6:52:40:2e:08:09:48:68:f8:2b:cc:5e:
         8d:60:02:74:a0:de:02:e2:e5:bb:ba:1c:aa:d6:15:fb:0b:5b:
         a8:84:96:c5:6a:70:3b:c0:fd:73:48:47:3c:81:33:a5:85:1b:
         06:fc:dd:0c:e4:fb:8b:65:c5:46:18:cc:ea:bd:d4:81:08:c4:
         73:c1:de:af:de:64:d8:f7:78:8f:0a:fa:35:02:5d:4a:d3:7d:
         5a:df:12:44
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUUCMfGmz9hz5is4gU4wLyBA8Wzg0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUIxMjM1ODAyNDBERTE1ODBEMDc4MjhEMThENzExRkRF
ODE2M0MyNTAeFw0yNTEyMjEyMjA2MjFaFw0yNTEyMjUwNzA2MjFaMDMxMTAvBgNV
BAMTKDRBOTU1MkY5REU5OEY4MERGMDc2ODE0RDExN0E5RjM4RjQzRUFBQTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmd9Z0KeKcLP+eacYUCTwCr7AU
+GrrXyO6fdEPwlWqcyklMPgW18JFkiqOE9yYUaGZFUn6C0X5XWYDgXq1b3uhdNdt
DzE66JusgYYaa48Qv8/10/767Fq/zIV2MtICm/QekYhr2oksZCx4VhXDX+79MtXo
X/9HYjg0msKFL1gQXJlmn3jWkF52S91C/z2CcnC7FIRxAFW+FsOw26Fet2MiQ7hz
jRw1soLBJWW7HGFJNHReGwC2rQLGYsvTx4f/cO6dupQVKlnhSxb2uowNjGQp4sjN
iL7pTPd9RZSUzYoYD+hvwy1w6TUQW6xf3fBmLqLLRSaI2CV+zLfgwVSD4ZMzAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUSpVS+d6Y+A3wdoFNEXqfOPQ+qqcwHwYDVR0j
BBgwFoAUmxI1gCQN4VgNB4KNGNcR/egWPCUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w
MThlMmU3NC1mNmM3LTQ5ZjQtYWQ1OC1mMDBjZGUzZWRhNjAvMC85QjEyMzU4MDI0
MERFMTU4MEQwNzgyOEQxOEQ3MTFGREU4MTYzQzI1LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvOUIxMjM1ODAyNDBERTE1ODBEMDc4MjhEMThENzExRkRFODE2
M0MyNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDE4ZTJlNzQtZjZjNy00OWY0LWFk
NTgtZjAwY2RlM2VkYTYwLzAvOUIxMjM1ODAyNDBERTE1ODBEMDc4MjhEMThENzEx
RkRFODE2M0MyNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAH0ixUGmMACNJTOp3EURVYaYzUqZdTE7QOg8
3IMpft4wzkGC7wgaMDr8lxTXzZfFoZNn28Gim+Gg4FzzLBama1vL+wbtErxBXGXA
1slRpgaKGcsB0KGshAuOygeHjcPandzJjqT6hMx4kpk29bEtCjUHs0gzpBIJWife
4sTdp5yRIGAWc69gyli1HfG9S7+E8Ptd7xPFCx1FSaLqr9lRpo5ap7zLQwp4tOZS
QC4ICUho+CvMXo1gAnSg3gLi5bu6HKrWFfsLW6iElsVqcDvA/XNIRzyBM6WFGwb8
3Qzk+4tlxUYYzOq91IEIxHPB3q/eZNj3eI8K+jUCXUrTfVrfEkQ=
-----END CERTIFICATE-----
Generated at Mon Dec 22 02:05:12 2025 by rpki-client