This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/360b9a87-8058-466f-b4a9-a777b4681ae1/0/F9CF581400AB7EE53AB913B25561ED007481F16F.mft
File:                     F9CF581400AB7EE53AB913B25561ED007481F16F.mft (raw, json)
Hash identifier:          hkkr2h5uhyDfB01Grr0DLp5XsBLs3JEJ7MUh1j8RdKs=
Subject key identifier:   AC:19:8E:5B:BC:C9:14:FC:15:F8:5A:C9:68:45:D3:5B:0B:B5:3C:F3
Authority key identifier: F9:CF:58:14:00:AB:7E:E5:3A:B9:13:B2:55:61:ED:00:74:81:F1:6F
Certificate issuer:       /CN=F9CF581400AB7EE53AB913B25561ED007481F16F
Certificate serial:       27661AE1854BE4EFCF894BE41E4FF04A0E27DD58
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F9CF581400AB7EE53AB913B25561ED007481F16F.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/360b9a87-8058-466f-b4a9-a777b4681ae1/0/F9CF581400AB7EE53AB913B25561ED007481F16F.mft
Manifest number:          0200
Signing time:             Thu 18 Dec 2025 20:21:54 +0000
Manifest this update:     Thu 18 Dec 2025 20:16:54 +0000
Manifest next update:     Mon 22 Dec 2025 06:01:54 +0000
Files and hashes:         1: 3130332e31382e3131342e302f32332d3234203d3e203435323837.roa (hash: cToTFt90KwlvxZE7MCLFACc5g9QO0So5rb9HSJhKMTM=)
                          2: F9CF581400AB7EE53AB913B25561ED007481F16F.crl (hash: tPiPrUgtZG3Y5Zp8EEpccp4hnvWSRe3hUG8wtzPCDJY=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/360b9a87-8058-466f-b4a9-a777b4681ae1/0/F9CF581400AB7EE53AB913B25561ED007481F16F.crl
                          rsync://repo-rpki.idnic.net/repo/360b9a87-8058-466f-b4a9-a777b4681ae1/0/F9CF581400AB7EE53AB913B25561ED007481F16F.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F9CF581400AB7EE53AB913B25561ED007481F16F.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 22 Dec 2025 03:43:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:66:1a:e1:85:4b:e4:ef:cf:89:4b:e4:1e:4f:f0:4a:0e:27:dd:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F9CF581400AB7EE53AB913B25561ED007481F16F
        Validity
            Not Before: Dec 18 20:16:54 2025 GMT
            Not After : Dec 22 06:01:54 2025 GMT
        Subject: CN=AC198E5BBCC914FC15F85AC96845D35B0BB53CF3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:7e:25:cd:c8:a6:39:0b:7c:9d:94:6a:c0:85:
                    ac:55:73:99:47:a7:17:3b:76:72:22:64:a3:9f:91:
                    fd:c5:c2:6f:7b:c9:24:5d:95:1c:13:e5:e6:bd:de:
                    78:41:ff:ea:3f:13:c0:c6:58:d5:1c:62:4c:ef:7b:
                    c9:aa:cf:b9:45:e0:28:59:e5:9a:8c:96:13:aa:ff:
                    60:bc:8e:6f:ad:95:d9:26:e3:e8:b6:3b:ba:a0:87:
                    9f:37:ff:01:50:be:f5:9e:d2:07:f3:76:74:bc:97:
                    0a:64:86:49:f9:59:86:ab:83:59:f3:e3:70:94:e7:
                    17:f4:38:1b:48:6d:19:b5:76:fd:68:26:3b:e4:12:
                    4e:8f:7a:98:74:c3:97:84:15:a9:3f:55:98:c5:f7:
                    75:30:d0:84:a9:8d:78:b2:37:bb:88:e3:9b:4e:6e:
                    ae:e8:12:e1:94:2d:ea:a6:2c:e3:ce:0a:3d:96:a4:
                    7d:b6:f7:8d:5a:18:60:84:ab:4e:5f:cd:8a:20:c1:
                    1f:23:96:f5:55:7d:b7:8f:66:1e:c9:0e:fe:45:34:
                    8c:89:51:8d:64:df:cd:f9:b6:8f:b4:f9:80:84:98:
                    2e:09:de:39:5a:f5:1c:80:82:0d:12:ec:f9:7a:d1:
                    56:ea:76:93:55:8c:da:e2:f2:7d:e5:fa:e9:13:86:
                    92:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:19:8E:5B:BC:C9:14:FC:15:F8:5A:C9:68:45:D3:5B:0B:B5:3C:F3
            X509v3 Authority Key Identifier:
                keyid:F9:CF:58:14:00:AB:7E:E5:3A:B9:13:B2:55:61:ED:00:74:81:F1:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/360b9a87-8058-466f-b4a9-a777b4681ae1/0/F9CF581400AB7EE53AB913B25561ED007481F16F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F9CF581400AB7EE53AB913B25561ED007481F16F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/360b9a87-8058-466f-b4a9-a777b4681ae1/0/F9CF581400AB7EE53AB913B25561ED007481F16F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:f1:55:98:e3:e8:c1:92:7a:d0:68:9a:ed:9d:10:e7:ae:6a:
         af:09:d2:c1:ae:74:1d:d2:9b:ed:40:27:e6:b9:58:c2:8b:f3:
         d8:fd:c4:a5:c1:da:61:c5:20:a3:7d:45:68:a6:74:9b:03:ee:
         4d:49:15:44:40:24:7f:72:0c:76:fa:3f:a5:55:cc:25:37:47:
         3d:5a:27:d8:eb:64:03:03:5f:46:6f:b3:3c:2f:5f:81:49:51:
         9b:fe:c2:d6:fd:b3:cd:64:bf:92:72:cf:4e:bf:20:cf:48:14:
         5a:d7:c0:e7:bb:8e:41:b7:ba:d7:81:b8:f0:09:75:80:44:15:
         2d:b7:49:53:d9:eb:8f:51:dd:ed:34:15:97:a7:1c:d7:57:11:
         43:58:84:33:30:4d:60:35:16:ed:89:97:6b:05:10:f2:04:73:
         67:03:34:b5:f7:c7:63:fd:70:a7:b9:9b:78:4d:e5:20:da:c5:
         42:75:53:ab:12:06:41:a2:78:7a:48:0a:42:78:44:fe:6e:c0:
         1f:7f:b1:65:47:e6:5c:c4:ed:18:24:fd:a7:cf:11:be:31:da:
         e0:e2:45:64:8d:86:4c:7e:35:c0:7e:e2:e4:e9:80:3b:fd:f6:
         f2:99:8c:98:89:ed:ce:19:10:ef:0d:5a:1f:f0:de:68:ed:d3:
         04:a8:a7:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 21:07:37 2025 by rpki-client