This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/3305177a-a500-4996-b3ff-70c144edfece/0/95FC6072A4A690A61A0B5F14B36882B43DA2F098.mft
File:                     95FC6072A4A690A61A0B5F14B36882B43DA2F098.mft (raw, json)
Hash identifier:          aQKA3HpkMtIaSpzhLq6nUGsY7rY9it1Pdy2Jo2w4NnQ=
Subject key identifier:   B3:37:44:90:96:BB:E3:16:EA:91:01:FD:5B:EB:52:4B:A1:61:A5:C9
Authority key identifier: 95:FC:60:72:A4:A6:90:A6:1A:0B:5F:14:B3:68:82:B4:3D:A2:F0:98
Certificate issuer:       /CN=95FC6072A4A690A61A0B5F14B36882B43DA2F098
Certificate serial:       5A4CADCD9E8DE6835C656B08F6C81B74FC0A5140
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/95FC6072A4A690A61A0B5F14B36882B43DA2F098.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3305177a-a500-4996-b3ff-70c144edfece/0/95FC6072A4A690A61A0B5F14B36882B43DA2F098.mft
Manifest number:          053C
Signing time:             Thu 18 Dec 2025 03:31:42 +0000
Manifest this update:     Thu 18 Dec 2025 03:26:42 +0000
Manifest next update:     Sun 21 Dec 2025 03:34:42 +0000
Files and hashes:         1: 323430343a666230303a3a2f33322d3332203d3e203538343734.roa (hash: T0GxcffUorQqKvKWvoQBmwT56g/pt1WC0GNCeIbnIXI=)
                          2: 95FC6072A4A690A61A0B5F14B36882B43DA2F098.crl (hash: prjNhDKUVaOrd1kX4TZ8WgDUtMu4jMJJmKUpNQaTPbI=)
                          3: 3130332e32382e35362e302f32342d3234203d3e203538343734.roa (hash: lS8odvouHADOZvGcEIZX6cESZX3v05ZwGGbLJRnmmPg=)
                          4: 3130332e32382e35382e302f32342d3234203d3e203538343734.roa (hash: SVVnOcpEzNW3GyvGQSrBzvX2ix4zPecYqTfJmTpW5Ek=)
                          5: 34332e3234382e3231352e302f32342d3234203d3e203538343734.roa (hash: 2rfcy4tUpo7HgU2cGwZC6pQYZQAR7WSsi/1k28TkJlU=)
                          6: 34332e3234382e3231322e302f32342d3234203d3e203538343734.roa (hash: lJiN/1jPk6sVzBu+b+dWtXwNwMFWgXWbUliAdUar1AU=)
                          7: 34332e3234382e3231332e302f32342d3234203d3e203538343734.roa (hash: I3OA1TXXrn7Ho4Bbdaoik2HHmIJMRdT3vdvqOadCgWc=)
                          8: 34332e3234382e3231342e302f32342d3234203d3e203538343734.roa (hash: KABMcwwuj0PcVg0DF+2S7mT8pkOrI1Q8USpOkuuxMXI=)
                          9: 3130332e32382e35372e302f32342d3234203d3e203538343734.roa (hash: RKuA2CS77/iBc1MhX2FD3Oj8MLTo/sw4r4vfbH4WpPI=)
                          10: 3130332e32382e35392e302f32342d3234203d3e203538343734.roa (hash: GggD4UAIQuJ2Ici9kI1FCxhBRH2erQ0+Zgb75d0bwAQ=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/3305177a-a500-4996-b3ff-70c144edfece/0/95FC6072A4A690A61A0B5F14B36882B43DA2F098.crl
                          rsync://repo-rpki.idnic.net/repo/3305177a-a500-4996-b3ff-70c144edfece/0/95FC6072A4A690A61A0B5F14B36882B43DA2F098.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/95FC6072A4A690A61A0B5F14B36882B43DA2F098.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 21 Dec 2025 03:34:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:4c:ad:cd:9e:8d:e6:83:5c:65:6b:08:f6:c8:1b:74:fc:0a:51:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95FC6072A4A690A61A0B5F14B36882B43DA2F098
        Validity
            Not Before: Dec 18 03:26:42 2025 GMT
            Not After : Dec 21 03:34:42 2025 GMT
        Subject: CN=B337449096BBE316EA9101FD5BEB524BA161A5C9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:2e:ec:77:01:1d:0c:ca:60:5d:bc:38:36:f7:
                    48:45:64:ca:81:76:60:f1:7b:32:4e:cc:ae:54:94:
                    a4:b8:24:d3:60:fa:c1:09:db:d4:c5:1b:7f:24:1f:
                    8c:68:57:62:ae:9d:54:e1:75:93:ee:d8:49:bb:53:
                    98:db:a5:5b:73:d6:19:5b:45:85:b1:2b:ce:30:22:
                    41:31:46:c2:f6:61:35:44:56:be:25:5e:fd:18:6e:
                    ca:02:0b:77:1c:1d:10:a4:db:14:50:5a:27:70:a2:
                    8c:13:d1:63:77:c3:3f:04:c9:27:86:6d:d9:c5:cf:
                    28:2e:13:b2:6f:b1:d3:97:f4:eb:f3:56:c6:d5:a3:
                    21:93:f9:ff:08:e5:f9:30:fb:94:b5:5e:be:31:b9:
                    47:cf:74:73:85:e2:41:8d:27:61:e2:74:57:a4:3f:
                    c2:2e:ab:85:34:52:e5:57:4f:4a:ad:76:c0:83:ef:
                    41:0f:02:d1:13:bb:91:e3:98:ff:b4:82:ca:b1:f2:
                    ee:9f:96:de:be:10:57:81:bd:6f:39:71:81:77:70:
                    e6:44:29:12:a8:46:d9:45:2b:2e:6c:db:a3:91:6d:
                    b3:d4:19:84:af:9c:1d:58:d9:56:b8:36:cd:ab:2b:
                    c2:55:db:3c:d7:ea:3c:75:d7:2d:75:6a:ea:a4:98:
                    0e:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:37:44:90:96:BB:E3:16:EA:91:01:FD:5B:EB:52:4B:A1:61:A5:C9
            X509v3 Authority Key Identifier:
                keyid:95:FC:60:72:A4:A6:90:A6:1A:0B:5F:14:B3:68:82:B4:3D:A2:F0:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3305177a-a500-4996-b3ff-70c144edfece/0/95FC6072A4A690A61A0B5F14B36882B43DA2F098.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/95FC6072A4A690A61A0B5F14B36882B43DA2F098.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3305177a-a500-4996-b3ff-70c144edfece/0/95FC6072A4A690A61A0B5F14B36882B43DA2F098.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:ac:d7:ee:88:82:74:3e:5a:3b:94:73:13:65:65:d3:91:e2:
         65:f2:ec:d8:cc:56:7b:eb:30:81:05:b6:52:ce:0b:97:5a:0e:
         17:07:8d:92:15:1d:f3:5b:4a:54:aa:58:f2:a0:d9:40:26:4b:
         ff:22:15:aa:e3:ca:5f:86:4e:7e:37:bc:78:76:cc:fd:36:47:
         52:56:fe:0e:2d:5b:f1:13:e1:6e:8b:d2:2b:43:72:22:1c:48:
         05:20:65:02:8d:fc:50:31:fa:db:a7:0c:bb:49:fc:d9:83:df:
         70:a5:a4:63:67:9d:c7:14:0b:f6:c0:ce:72:cc:94:18:22:6a:
         42:87:8d:0c:d7:7e:90:8b:ef:46:30:0f:5d:79:7f:01:6c:9e:
         51:08:1a:0c:05:c8:40:02:c6:ca:23:8b:06:7f:07:40:db:6a:
         4c:64:b7:91:52:e3:4c:29:fb:eb:2e:77:a1:7a:17:32:c6:5e:
         e6:13:06:12:54:f9:8f:10:d5:f2:eb:63:ad:1f:6e:95:d4:c9:
         ec:9e:6f:aa:90:39:28:ce:7a:64:45:e4:76:71:d5:d0:39:31:
         3b:9d:7c:04:e0:a6:84:80:56:af:2e:05:37:64:6c:eb:c4:42:
         a7:ae:cc:5e:1a:24:6d:41:38:9f:41:a7:b3:ec:cd:17:3a:3c:
         90:d8:e2:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 11:21:54 2025 by rpki-client