This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/11791b73-bb08-4a83-a197-b6360f1d47de/0/F9B3A4FD209FB6DF8BDC168B15C872083A3495A2.mft
File:                     F9B3A4FD209FB6DF8BDC168B15C872083A3495A2.mft (raw, json)
Hash identifier:          m0H8D0yv+pIomJvObQYJQEC8ujUDlA5O8+rJ24B+NzA=
Subject key identifier:   F7:D8:B4:9D:AC:A4:11:CD:BD:78:78:B4:7F:CF:1A:38:46:EE:09:0E
Authority key identifier: F9:B3:A4:FD:20:9F:B6:DF:8B:DC:16:8B:15:C8:72:08:3A:34:95:A2
Certificate issuer:       /CN=F9B3A4FD209FB6DF8BDC168B15C872083A3495A2
Certificate serial:       646B06603AA246E58E1ACFB33F7A0FA1A457D10A
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F9B3A4FD209FB6DF8BDC168B15C872083A3495A2.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/11791b73-bb08-4a83-a197-b6360f1d47de/0/F9B3A4FD209FB6DF8BDC168B15C872083A3495A2.mft
Manifest number:          0532
Signing time:             Thu 18 Dec 2025 07:52:47 +0000
Manifest this update:     Thu 18 Dec 2025 07:47:47 +0000
Manifest next update:     Sun 21 Dec 2025 16:52:47 +0000
Files and hashes:         1: F9B3A4FD209FB6DF8BDC168B15C872083A3495A2.crl (hash: BXkbXAvAcUcBHAljO925urODMIlezortklc1ub4GDEk=)
                          2: 3130332e3130362e3134352e302f32342d3234203d3e203538333639.roa (hash: /luPqRWa7rmModkmPq2AOhn1AxfZ3BxWQ7kt8Fx95y4=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/11791b73-bb08-4a83-a197-b6360f1d47de/0/F9B3A4FD209FB6DF8BDC168B15C872083A3495A2.crl
                          rsync://repo-rpki.idnic.net/repo/11791b73-bb08-4a83-a197-b6360f1d47de/0/F9B3A4FD209FB6DF8BDC168B15C872083A3495A2.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F9B3A4FD209FB6DF8BDC168B15C872083A3495A2.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 21 Dec 2025 16:52:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:6b:06:60:3a:a2:46:e5:8e:1a:cf:b3:3f:7a:0f:a1:a4:57:d1:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F9B3A4FD209FB6DF8BDC168B15C872083A3495A2
        Validity
            Not Before: Dec 18 07:47:47 2025 GMT
            Not After : Dec 21 16:52:47 2025 GMT
        Subject: CN=F7D8B49DACA411CDBD7878B47FCF1A3846EE090E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:19:1e:16:f5:9d:f9:f7:78:e0:cc:cd:f2:f7:
                    27:c9:17:19:d2:4f:c2:d0:51:6a:85:d1:04:4e:16:
                    69:cf:a3:bf:1c:96:9c:78:b3:4a:7f:e9:a5:bf:04:
                    49:9a:70:e6:0a:a3:82:89:77:72:35:13:6b:cf:10:
                    a5:d7:83:dc:ff:e0:3a:6c:b6:82:0e:2a:69:35:89:
                    a0:c7:1c:e8:f8:3c:31:71:9e:9a:a6:01:a6:71:0e:
                    8d:6f:f5:ec:63:e8:18:00:80:f3:17:53:0f:74:86:
                    21:e2:20:4a:36:9e:8a:12:6c:d3:52:25:04:15:40:
                    3a:50:76:67:c4:12:31:5d:82:64:ca:b0:b5:34:23:
                    c7:c6:c6:d0:97:33:15:50:69:4c:5f:20:e9:cc:69:
                    5d:dc:9b:8e:4a:ea:48:df:42:d5:20:b9:9a:68:b3:
                    d5:45:3b:13:a0:60:af:83:36:b8:52:d4:7b:b4:f0:
                    39:bc:02:7b:44:4b:9b:b1:8d:5a:6a:0b:68:d9:33:
                    a7:fd:a6:0e:34:34:81:99:a0:24:a8:e0:16:81:56:
                    3e:67:37:f5:4d:b8:9a:f2:6e:73:87:3e:3c:87:d2:
                    ca:a5:30:69:6d:91:b2:68:89:a4:32:e0:13:0a:bd:
                    50:a5:e1:41:14:ac:73:5c:c1:f5:62:c1:fe:ed:c1:
                    d4:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:D8:B4:9D:AC:A4:11:CD:BD:78:78:B4:7F:CF:1A:38:46:EE:09:0E
            X509v3 Authority Key Identifier:
                keyid:F9:B3:A4:FD:20:9F:B6:DF:8B:DC:16:8B:15:C8:72:08:3A:34:95:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/11791b73-bb08-4a83-a197-b6360f1d47de/0/F9B3A4FD209FB6DF8BDC168B15C872083A3495A2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F9B3A4FD209FB6DF8BDC168B15C872083A3495A2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/11791b73-bb08-4a83-a197-b6360f1d47de/0/F9B3A4FD209FB6DF8BDC168B15C872083A3495A2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:c8:e3:be:5a:b3:25:15:a4:9c:2c:9b:00:a5:c6:de:4e:26:
         c9:a2:54:69:19:e2:44:56:a8:96:e9:1b:cc:64:d4:1f:19:1c:
         35:66:37:18:12:78:b6:ba:9a:0f:80:c6:21:6e:21:15:43:bf:
         86:80:08:85:f1:3a:46:03:40:e0:2b:21:3e:ae:18:2a:87:17:
         31:3d:20:8e:3b:10:f0:f1:d2:2c:d0:9c:13:e3:df:18:82:a2:
         82:c5:5a:c9:98:6e:d9:16:b7:ed:5d:15:82:19:31:ce:c4:af:
         17:52:20:9e:e4:46:a9:c0:d4:4c:64:7a:29:6a:4a:fc:5a:d6:
         cc:b5:5f:77:62:e5:ae:10:1b:9d:9e:20:31:87:63:33:40:16:
         c9:e9:09:53:00:4b:4c:f6:66:8f:3e:cf:4b:1a:2f:a3:2f:b1:
         7e:fa:8e:96:bd:ec:a9:2e:1c:35:50:95:93:f5:93:3e:e1:05:
         df:5e:78:bc:58:90:97:fc:61:87:26:c2:b3:79:fb:04:8b:6b:
         b4:64:df:3b:1a:06:4d:54:0a:1f:67:3f:1b:ed:be:17:a1:b0:
         ed:fa:c6:d3:8f:25:fd:10:98:5b:79:5e:5d:3d:0b:6e:14:a0:
         4f:ba:fb:77:dd:03:a5:6d:11:a7:0f:29:32:bc:7a:a7:87:7a:
         31:9c:99:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 18:15:09 2025 by rpki-client