This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/20396388-2d6b-476e-963d-1cc381374b1c/0/9D01A7EAAD74D818C4071C1F4AC3284F0A018182.mft
File:                     9D01A7EAAD74D818C4071C1F4AC3284F0A018182.mft (raw, json)
Hash identifier:          Mrw1dggyLja2RbDfdtONZfqu+RphGAsM9Bg+GtEUR64=
Subject key identifier:   8F:2D:BD:A3:CC:5C:12:2B:49:3B:1B:9D:20:0A:4C:7C:BA:5E:BA:4D
Authority key identifier: 9D:01:A7:EA:AD:74:D8:18:C4:07:1C:1F:4A:C3:28:4F:0A:01:81:82
Certificate issuer:       /CN=9D01A7EAAD74D818C4071C1F4AC3284F0A018182
Certificate serial:       19E56058843A33D5DA900646D148BB018D1F78CC
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9D01A7EAAD74D818C4071C1F4AC3284F0A018182.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/20396388-2d6b-476e-963d-1cc381374b1c/0/9D01A7EAAD74D818C4071C1F4AC3284F0A018182.mft
Manifest number:          C4
Signing time:             Fri 26 Dec 2025 04:30:05 +0000
Manifest this update:     Fri 26 Dec 2025 04:25:05 +0000
Manifest next update:     Mon 29 Dec 2025 08:03:05 +0000
Files and hashes:         1: 9D01A7EAAD74D818C4071C1F4AC3284F0A018182.crl (hash: zbL2XA9dLQ+ySFbs3sdJ37A1/xgUITeBVoUFJT4Q+Mw=)
                          2: 3136302e3139312e32362e302f32332d3234203d3e20313533313239.roa (hash: ykQNp9IItK5u/w96SwpnIQP3xqaGsX/ox7vrXOM5+w0=)
                          3: 3136302e3139312e32362e302f32342d3234203d3e20313533313239.roa (hash: ztmYbNJoFZ6N5sFqQdTZmBxa2LX8TH2rkXJjnkiW1fo=)
                          4: 3136302e3139312e32372e302f32342d3234203d3e20313533313239.roa (hash: L103RB4M/KbtAQXK5+bCxunN2Xrasu7SEaoouWKmmF4=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/20396388-2d6b-476e-963d-1cc381374b1c/0/9D01A7EAAD74D818C4071C1F4AC3284F0A018182.crl
                          rsync://repo-rpki.idnic.net/repo/20396388-2d6b-476e-963d-1cc381374b1c/0/9D01A7EAAD74D818C4071C1F4AC3284F0A018182.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9D01A7EAAD74D818C4071C1F4AC3284F0A018182.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 29 Dec 2025 08:03:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:e5:60:58:84:3a:33:d5:da:90:06:46:d1:48:bb:01:8d:1f:78:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9D01A7EAAD74D818C4071C1F4AC3284F0A018182
        Validity
            Not Before: Dec 26 04:25:05 2025 GMT
            Not After : Dec 29 08:03:05 2025 GMT
        Subject: CN=8F2DBDA3CC5C122B493B1B9D200A4C7CBA5EBA4D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:f1:c1:be:8b:73:b6:db:6d:4f:22:d6:60:ac:
                    2f:d9:21:fb:ae:48:6d:57:54:aa:6f:da:43:95:34:
                    64:27:8b:e2:0c:42:32:9a:3b:50:1b:c9:d6:ef:ee:
                    64:f8:9b:07:72:c8:c2:58:98:b6:b1:ee:b0:dd:c5:
                    c1:97:fb:20:c6:09:43:cf:d7:7c:bf:59:5d:68:c7:
                    cf:2f:b7:ad:0c:93:17:0a:4f:f0:68:0f:3c:7d:09:
                    23:eb:43:f7:f1:7e:57:c9:51:98:c9:fa:e0:5c:6c:
                    90:1a:ea:64:89:46:a6:cf:b2:41:51:df:fc:af:f5:
                    a0:4b:56:ae:16:b7:64:2d:38:98:7f:22:95:a8:1e:
                    fa:c3:56:9f:b0:2d:72:91:58:b7:7b:7d:bc:0a:87:
                    e4:ce:ee:4a:26:4b:f0:6c:61:8f:3b:10:1f:b2:48:
                    02:15:3f:2d:22:60:f1:e8:29:65:f4:58:f2:be:c5:
                    a1:9c:58:55:6b:dc:44:ab:7b:de:25:c6:b1:53:f0:
                    78:a5:0f:56:3a:de:99:1c:91:2a:73:0f:c9:d9:6c:
                    3e:5f:59:e9:69:3b:f8:01:fd:eb:69:85:16:5c:b0:
                    9a:20:c6:81:cd:b8:76:b5:0c:94:56:33:6a:1e:86:
                    bc:a2:35:37:b3:b7:c6:6e:6b:36:47:74:90:83:07:
                    36:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:2D:BD:A3:CC:5C:12:2B:49:3B:1B:9D:20:0A:4C:7C:BA:5E:BA:4D
            X509v3 Authority Key Identifier:
                keyid:9D:01:A7:EA:AD:74:D8:18:C4:07:1C:1F:4A:C3:28:4F:0A:01:81:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/20396388-2d6b-476e-963d-1cc381374b1c/0/9D01A7EAAD74D818C4071C1F4AC3284F0A018182.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9D01A7EAAD74D818C4071C1F4AC3284F0A018182.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/20396388-2d6b-476e-963d-1cc381374b1c/0/9D01A7EAAD74D818C4071C1F4AC3284F0A018182.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:28:a9:17:e2:fb:ae:f1:b3:50:1e:7a:90:2b:ab:88:57:02:
         78:98:0b:53:02:24:4a:e0:d6:11:d4:1d:84:94:b0:15:71:1d:
         d4:7e:89:3b:cb:83:10:18:4f:df:d5:b4:4e:a4:6c:97:3f:54:
         90:38:0f:a4:cb:91:c8:cd:1b:11:e6:4c:35:d2:03:1a:c3:ce:
         a0:24:c4:0b:61:d8:34:76:f5:bb:d3:a1:10:db:7b:76:61:95:
         9b:b0:2d:3c:c0:03:de:25:71:7a:a5:c9:21:fb:15:ab:45:bd:
         41:57:29:54:34:19:81:3a:c6:e0:89:3b:30:a0:3d:8e:4c:59:
         d9:b7:a9:75:1b:24:05:f4:39:28:5e:18:76:97:11:80:28:2b:
         bf:39:d9:32:26:de:18:a2:0e:69:8f:af:12:b2:48:3a:c9:4d:
         e9:29:b2:47:c7:71:40:03:75:dd:99:27:e6:a5:14:59:2d:1a:
         56:b1:a9:d7:2b:56:b6:c7:12:e0:2e:b5:c5:51:d3:1e:55:65:
         9a:9f:f4:00:cd:dc:24:22:85:45:bb:62:44:96:32:9e:f1:e9:
         7c:93:90:56:a5:6b:0d:2d:26:08:cb:04:1d:e3:ac:b7:ae:03:
         47:ff:1b:5c:17:c8:ea:27:c0:ea:c5:01:f3:94:42:a7:9c:c4:
         be:87:c2:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 28 06:24:24 2025 by rpki-client