This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/3305177a-a500-4996-b3ff-70c144edfece/0/95FC6072A4A690A61A0B5F14B36882B43DA2F098.mft
File:                     95FC6072A4A690A61A0B5F14B36882B43DA2F098.mft (raw, json)
Hash identifier:          5v3bX/rXUFm8Qoe2AqaGG5MVWr+gRRJiEaoWSKm8uhw=
Subject key identifier:   71:41:F3:E9:FE:8F:FB:CA:52:0D:1F:9E:FD:4E:81:FF:91:CC:FF:B4
Authority key identifier: 95:FC:60:72:A4:A6:90:A6:1A:0B:5F:14:B3:68:82:B4:3D:A2:F0:98
Certificate issuer:       /CN=95FC6072A4A690A61A0B5F14B36882B43DA2F098
Certificate serial:       67A0B6C15721C8B40624E37B8974493DDB3EF5B9
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/95FC6072A4A690A61A0B5F14B36882B43DA2F098.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3305177a-a500-4996-b3ff-70c144edfece/0/95FC6072A4A690A61A0B5F14B36882B43DA2F098.mft
Manifest number:          0542
Signing time:             Wed 31 Dec 2025 08:01:54 +0000
Manifest this update:     Wed 31 Dec 2025 07:56:54 +0000
Manifest next update:     Sat 03 Jan 2026 13:22:54 +0000
Files and hashes:         1: 3130332e32382e35362e302f32342d3234203d3e203538343734.roa (hash: lS8odvouHADOZvGcEIZX6cESZX3v05ZwGGbLJRnmmPg=)
                          2: 34332e3234382e3231352e302f32342d3234203d3e203538343734.roa (hash: 2rfcy4tUpo7HgU2cGwZC6pQYZQAR7WSsi/1k28TkJlU=)
                          3: 95FC6072A4A690A61A0B5F14B36882B43DA2F098.crl (hash: j7QysFvmwg/txywB37lM9vMsB1ePPXtE4si1W0ll4mg=)
                          4: 323430343a666230303a3a2f33322d3332203d3e203538343734.roa (hash: T0GxcffUorQqKvKWvoQBmwT56g/pt1WC0GNCeIbnIXI=)
                          5: 34332e3234382e3231332e302f32342d3234203d3e203538343734.roa (hash: I3OA1TXXrn7Ho4Bbdaoik2HHmIJMRdT3vdvqOadCgWc=)
                          6: 3130332e32382e35392e302f32342d3234203d3e203538343734.roa (hash: GggD4UAIQuJ2Ici9kI1FCxhBRH2erQ0+Zgb75d0bwAQ=)
                          7: 34332e3234382e3231342e302f32342d3234203d3e203538343734.roa (hash: KABMcwwuj0PcVg0DF+2S7mT8pkOrI1Q8USpOkuuxMXI=)
                          8: 3130332e32382e35382e302f32342d3234203d3e203538343734.roa (hash: SVVnOcpEzNW3GyvGQSrBzvX2ix4zPecYqTfJmTpW5Ek=)
                          9: 3130332e32382e35372e302f32342d3234203d3e203538343734.roa (hash: RKuA2CS77/iBc1MhX2FD3Oj8MLTo/sw4r4vfbH4WpPI=)
                          10: 34332e3234382e3231322e302f32342d3234203d3e203538343734.roa (hash: lJiN/1jPk6sVzBu+b+dWtXwNwMFWgXWbUliAdUar1AU=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/3305177a-a500-4996-b3ff-70c144edfece/0/95FC6072A4A690A61A0B5F14B36882B43DA2F098.crl
                          rsync://repo-rpki.idnic.net/repo/3305177a-a500-4996-b3ff-70c144edfece/0/95FC6072A4A690A61A0B5F14B36882B43DA2F098.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/95FC6072A4A690A61A0B5F14B36882B43DA2F098.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 Jan 2026 13:22:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:a0:b6:c1:57:21:c8:b4:06:24:e3:7b:89:74:49:3d:db:3e:f5:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95FC6072A4A690A61A0B5F14B36882B43DA2F098
        Validity
            Not Before: Dec 31 07:56:54 2025 GMT
            Not After : Jan  3 13:22:54 2026 GMT
        Subject: CN=7141F3E9FE8FFBCA520D1F9EFD4E81FF91CCFFB4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:36:05:bb:b7:d2:6d:a8:c0:fa:e1:e8:52:76:
                    b6:16:9b:12:e7:5e:d9:04:f5:47:ac:e4:11:81:f0:
                    87:bf:be:8c:65:cc:0e:62:b8:af:4b:ac:59:74:91:
                    3c:78:80:c8:dd:2f:46:79:e3:17:19:6e:00:ce:d5:
                    3f:08:a3:45:e6:17:20:dd:39:55:de:fb:d6:a3:a3:
                    0b:b6:ed:44:a9:73:5e:c9:8e:a2:d3:22:10:07:d3:
                    da:5c:e6:31:e9:e1:5d:b4:07:10:fd:28:d2:39:f0:
                    37:a7:99:4a:f8:b5:01:89:a6:36:01:24:59:b9:b9:
                    77:fb:15:d2:4c:e2:a7:84:de:97:b0:b3:0c:9c:7c:
                    95:d1:ab:90:31:76:93:01:d9:b1:ad:33:63:f3:64:
                    49:fb:3f:bd:5c:6d:62:79:9d:3f:bd:c4:a1:35:18:
                    4e:25:15:f0:4d:2e:aa:18:f3:59:82:e6:96:e3:87:
                    63:51:c5:db:1e:44:2b:05:ad:d9:98:13:e2:ee:db:
                    2c:0e:bf:bf:eb:b6:65:57:9f:4e:38:3e:fe:c1:bb:
                    69:18:5a:da:b2:64:f9:8b:f1:f9:9c:bc:dc:28:fe:
                    04:c2:b9:b8:a2:10:a0:35:c3:f1:b7:b5:6e:5f:dd:
                    50:d7:fb:6e:69:d3:54:ed:d6:a4:21:9d:bb:39:b6:
                    a5:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:41:F3:E9:FE:8F:FB:CA:52:0D:1F:9E:FD:4E:81:FF:91:CC:FF:B4
            X509v3 Authority Key Identifier:
                keyid:95:FC:60:72:A4:A6:90:A6:1A:0B:5F:14:B3:68:82:B4:3D:A2:F0:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3305177a-a500-4996-b3ff-70c144edfece/0/95FC6072A4A690A61A0B5F14B36882B43DA2F098.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/95FC6072A4A690A61A0B5F14B36882B43DA2F098.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3305177a-a500-4996-b3ff-70c144edfece/0/95FC6072A4A690A61A0B5F14B36882B43DA2F098.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:16:fa:74:4a:26:61:c8:95:09:67:6a:34:c9:d2:b1:bc:b1:
         bf:5f:f6:7c:77:31:9f:00:87:5c:cd:da:ed:9a:6a:ea:01:a8:
         bf:01:97:14:d6:98:31:a5:eb:ab:47:41:d9:cf:12:6b:74:2e:
         85:c5:54:d6:3d:2a:9f:4e:6b:00:35:7e:b5:63:dd:cb:6b:59:
         b4:2a:cd:d9:b7:eb:ff:86:2b:ef:fd:fb:72:c5:3a:05:56:32:
         b1:60:f7:b7:41:83:bf:42:e6:ba:74:a6:a5:18:c6:24:54:17:
         05:f5:56:5e:87:4c:77:1d:b8:59:c7:e1:04:c9:06:14:35:41:
         c8:2b:9d:5d:ed:f2:57:52:6b:c6:ea:93:5f:de:4f:cd:cf:b1:
         fa:9d:be:80:04:14:cf:a4:6a:8f:1a:99:82:62:60:95:a8:f0:
         a8:d8:77:b4:54:fd:90:53:38:27:33:02:00:89:15:40:7e:b5:
         32:f0:58:02:a5:44:c3:16:e9:05:70:4f:76:6c:e1:73:82:01:
         67:25:6a:eb:dd:d6:30:b7:4b:06:ff:7a:78:a7:78:69:d5:9c:
         f0:86:23:a7:36:23:96:2d:0e:f0:cd:22:79:a8:62:9b:94:62:
         21:46:39:72:a4:02:b6:90:89:9e:52:e1:95:3a:74:a6:c8:1e:
         b6:5b:94:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 1 18:02:57 2026 by rpki-client