This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/66926c82-c8e5-4f97-8994-2c40653817ce/0/9BEEED1DCEE081F653A0D37A8175E2C40BB82B23.mft
File:                     9BEEED1DCEE081F653A0D37A8175E2C40BB82B23.mft (raw, json)
Hash identifier:          bIlFqqBRxxP7rjiG2FNdkfGgrECqScinbTxIVjzbXZM=
Subject key identifier:   87:95:7E:DE:70:39:8E:31:55:05:96:0F:9A:38:AD:23:13:06:99:59
Authority key identifier: 9B:EE:ED:1D:CE:E0:81:F6:53:A0:D3:7A:81:75:E2:C4:0B:B8:2B:23
Certificate issuer:       /CN=9BEEED1DCEE081F653A0D37A8175E2C40BB82B23
Certificate serial:       7A8245EB5AB94F837E201410580EBD59B2645F31
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9BEEED1DCEE081F653A0D37A8175E2C40BB82B23.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/66926c82-c8e5-4f97-8994-2c40653817ce/0/9BEEED1DCEE081F653A0D37A8175E2C40BB82B23.mft
Manifest number:          01FD
Signing time:             Thu 18 Dec 2025 06:12:01 +0000
Manifest this update:     Thu 18 Dec 2025 06:07:01 +0000
Manifest next update:     Sun 21 Dec 2025 15:53:01 +0000
Files and hashes:         1: 9BEEED1DCEE081F653A0D37A8175E2C40BB82B23.crl (hash: UnNSsV6QYW4o1t03/7AwIeuHBAkOoM6L7DxSFI6ArRs=)
                          2: 3130332e32362e3139302e302f32342d3234203d3e203536323836.roa (hash: i0HuNTLfQDOrpSQS9//DmLXkPRXfxAWy4FCWZTlf46A=)
                          3: 3130332e32362e3139312e302f32342d3234203d3e20313530323639.roa (hash: LiqrFpCZi9jjQ9ExuAGMLd7TL59TSrfkrGld2vDA3ec=)
                          4: 3130332e32362e3139302e302f32332d3234203d3e203536323836.roa (hash: 2AfHqO9heo5Z0jXbgmEkhELWS6FN1LPkikP7RRxHBrw=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/66926c82-c8e5-4f97-8994-2c40653817ce/0/9BEEED1DCEE081F653A0D37A8175E2C40BB82B23.crl
                          rsync://repo-rpki.idnic.net/repo/66926c82-c8e5-4f97-8994-2c40653817ce/0/9BEEED1DCEE081F653A0D37A8175E2C40BB82B23.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9BEEED1DCEE081F653A0D37A8175E2C40BB82B23.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 21 Dec 2025 15:53:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:82:45:eb:5a:b9:4f:83:7e:20:14:10:58:0e:bd:59:b2:64:5f:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9BEEED1DCEE081F653A0D37A8175E2C40BB82B23
        Validity
            Not Before: Dec 18 06:07:01 2025 GMT
            Not After : Dec 21 15:53:01 2025 GMT
        Subject: CN=87957EDE70398E315505960F9A38AD2313069959
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:0a:cc:f0:33:64:35:95:f8:48:f5:92:cf:7e:
                    2f:ff:89:f1:6a:d8:7d:fd:81:e6:65:c9:ee:56:61:
                    7c:72:73:67:e9:d0:f1:92:68:9a:48:b9:4a:2e:0b:
                    23:d2:97:78:da:20:4c:2c:51:d2:3d:47:80:ea:b3:
                    33:ad:5f:06:b0:3f:51:ee:0f:81:8b:bf:2d:7d:d2:
                    24:cb:12:68:0d:bb:5a:5d:42:47:32:8f:60:7e:67:
                    e3:10:49:9a:69:40:59:47:ae:3e:f1:e5:48:4e:c9:
                    f4:99:c2:a3:d6:7d:98:5a:0f:0d:b8:8b:87:10:17:
                    0b:6e:b9:c3:6c:3f:cb:39:9f:de:b3:a8:a8:bc:60:
                    ed:36:e2:dd:0f:1f:62:c8:8f:7a:2e:35:da:fa:6a:
                    57:f1:03:6d:bf:9c:79:a2:9b:9d:24:f3:8f:a9:18:
                    19:74:a3:94:55:2f:d8:f7:32:a1:9b:f5:d2:8a:0f:
                    37:e5:0a:60:d1:d5:84:9e:b7:ae:6e:cb:7e:6f:0b:
                    c1:14:86:66:4c:7b:27:ee:22:3f:7d:0f:bc:34:27:
                    7c:28:8c:7a:36:99:5b:4f:92:77:a1:3b:57:2d:e8:
                    10:11:1d:13:ec:f4:a6:50:5d:07:0a:21:2d:28:e8:
                    c8:6f:12:96:ea:d4:82:97:9c:5c:d7:8e:4e:49:91:
                    d1:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:95:7E:DE:70:39:8E:31:55:05:96:0F:9A:38:AD:23:13:06:99:59
            X509v3 Authority Key Identifier:
                keyid:9B:EE:ED:1D:CE:E0:81:F6:53:A0:D3:7A:81:75:E2:C4:0B:B8:2B:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/66926c82-c8e5-4f97-8994-2c40653817ce/0/9BEEED1DCEE081F653A0D37A8175E2C40BB82B23.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9BEEED1DCEE081F653A0D37A8175E2C40BB82B23.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/66926c82-c8e5-4f97-8994-2c40653817ce/0/9BEEED1DCEE081F653A0D37A8175E2C40BB82B23.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:90:7e:12:95:86:51:c5:ce:4c:35:ba:a3:71:42:34:52:2b:
         84:47:76:2a:35:e6:1b:ad:68:cb:94:a9:a0:cf:3f:b8:ba:82:
         82:d2:2d:65:f2:36:9a:d0:af:d8:52:00:ac:6f:5b:60:f5:9b:
         70:8f:01:87:ee:7d:52:ff:b0:b6:d5:46:ac:32:4a:72:76:80:
         59:e4:19:bc:a2:3a:ad:34:cb:cc:0b:9e:96:bd:2a:95:97:90:
         9f:58:fc:fa:7e:a9:86:37:9c:52:a1:63:09:6d:3e:1e:60:2c:
         27:d5:37:72:1e:75:f4:5b:a5:70:b1:3c:77:ea:8e:40:ea:59:
         c0:f4:4b:b9:9e:bf:01:89:78:1a:b0:c3:29:3a:f8:81:ac:69:
         5e:6d:6e:da:b0:1f:0a:6d:7f:72:e2:27:94:3e:90:ec:94:b2:
         fb:26:c1:c6:47:1d:fc:33:e4:03:96:67:8f:db:2c:2f:55:31:
         53:91:a5:93:91:46:e8:1a:18:7a:1c:76:44:61:d9:02:7d:7b:
         e4:54:c9:1b:0d:34:14:20:b0:26:4d:f2:54:b7:58:26:6b:1f:
         af:50:f3:22:9d:bb:00:21:a6:31:f5:b3:40:f4:2c:00:e5:71:
         16:7f:bf:c2:07:e0:c0:4c:e5:7b:e1:d4:66:65:c6:9f:7b:90:
         e5:7e:b0:a9
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUeoJF61q5T4N+IBQQWA69WbJkXzEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUJFRUVEMURDRUUwODFGNjUzQTBEMzdBODE3NUUyQzQw
QkI4MkIyMzAeFw0yNTEyMTgwNjA3MDFaFw0yNTEyMjExNTUzMDFaMDMxMTAvBgNV
BAMTKDg3OTU3RURFNzAzOThFMzE1NTA1OTYwRjlBMzhBRDIzMTMwNjk5NTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDsCszwM2Q1lfhI9ZLPfi//ifFq
2H39geZlye5WYXxyc2fp0PGSaJpIuUouCyPSl3jaIEwsUdI9R4DqszOtXwawP1Hu
D4GLvy190iTLEmgNu1pdQkcyj2B+Z+MQSZppQFlHrj7x5UhOyfSZwqPWfZhaDw24
i4cQFwtuucNsP8s5n96zqKi8YO024t0PH2LIj3ouNdr6alfxA22/nHmim50k84+p
GBl0o5RVL9j3MqGb9dKKDzflCmDR1YSet65uy35vC8EUhmZMeyfuIj99D7w0J3wo
jHo2mVtPknehO1ct6BARHRPs9KZQXQcKIS0o6MhvEpbq1IKXnFzXjk5JkdHXAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUh5V+3nA5jjFVBZYPmjitIxMGmVkwHwYDVR0j
BBgwFoAUm+7tHc7ggfZToNN6gXXixAu4KyMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82
NjkyNmM4Mi1jOGU1LTRmOTctODk5NC0yYzQwNjUzODE3Y2UvMC85QkVFRUQxRENF
RTA4MUY2NTNBMEQzN0E4MTc1RTJDNDBCQjgyQjIzLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvOUJFRUVEMURDRUUwODFGNjUzQTBEMzdBODE3NUUyQzQwQkI4
MkIyMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjY5MjZjODItYzhlNS00Zjk3LTg5
OTQtMmM0MDY1MzgxN2NlLzAvOUJFRUVEMURDRUUwODFGNjUzQTBEMzdBODE3NUUy
QzQwQkI4MkIyMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAJ+QfhKVhlHFzkw1uqNxQjRSK4RHdio15hut
aMuUqaDPP7i6goLSLWXyNprQr9hSAKxvW2D1m3CPAYfufVL/sLbVRqwySnJ2gFnk
GbyiOq00y8wLnpa9KpWXkJ9Y/Pp+qYY3nFKhYwltPh5gLCfVN3IedfRbpXCxPHfq
jkDqWcD0S7mevwGJeBqwwyk6+IGsaV5tbtqwHwptf3LiJ5Q+kOyUsvsmwcZHHfwz
5AOWZ4/bLC9VMVORpZORRugaGHocdkRh2QJ9e+RUyRsNNBQgsCZN8lS3WCZrH69Q
8yKduwAhpjH1s0D0LADlcRZ/v8IH4MBM5Xvh1GZlxp97kOV+sKk=
-----END CERTIFICATE-----
Generated at Sat Dec 20 05:02:08 2025 by rpki-client