This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/6e2c9285-c09a-4506-a320-fda1a07fd9ec/0/9D25181C9096851A77EB95DA55649E08E3B7941B.mft
File:                     9D25181C9096851A77EB95DA55649E08E3B7941B.mft (raw, json)
Hash identifier:          NBFjtI8mII3fMtBSUUR8BaAp4dN4w5mcmTozY5rbO1A=
Subject key identifier:   34:E2:47:68:68:6D:98:68:EE:54:43:C2:F2:E4:B5:C4:C1:DE:4D:F9
Authority key identifier: 9D:25:18:1C:90:96:85:1A:77:EB:95:DA:55:64:9E:08:E3:B7:94:1B
Certificate issuer:       /CN=9D25181C9096851A77EB95DA55649E08E3B7941B
Certificate serial:       14E7698998A50D4C068AEAD40B008475915927C9
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9D25181C9096851A77EB95DA55649E08E3B7941B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/6e2c9285-c09a-4506-a320-fda1a07fd9ec/0/9D25181C9096851A77EB95DA55649E08E3B7941B.mft
Manifest number:          0249
Signing time:             Wed 24 Dec 2025 12:30:03 +0000
Manifest this update:     Wed 24 Dec 2025 12:25:03 +0000
Manifest next update:     Sat 27 Dec 2025 21:36:03 +0000
Files and hashes:         1: 3130332e3132342e3234352e302f32342d3234203d3e20313338303930.roa (hash: 1HQfbWQz8TQ/U0ue8CqX8CipPvoj254cn3JMlqDQtws=)
                          2: 323430333a653863303a3a2f33322d3332203d3e20313338303930.roa (hash: lF0dOyIyZG9RuRsQ/tt5Ru3/SkbdBI8dlNM+ehbBJXc=)
                          3: 9D25181C9096851A77EB95DA55649E08E3B7941B.crl (hash: 5MkW9nP5Hps3TDH+8GUqlUIhyw75wyCFeINHczRcGLo=)
                          4: 3130332e3132342e3234372e302f32342d3234203d3e20313338303930.roa (hash: 2MI1BO2UxF3UElXDLPD2q10Wy6TxPuTbV7jsB0zYy48=)
                          5: 3130332e3132342e3234342e302f32342d3234203d3e20313338303930.roa (hash: BuwBDfXMOpFxOjhB/2A0CNUSVbMyArJwojKIcFdRjmQ=)
                          6: 3130332e3132342e3234362e302f32342d3234203d3e20313338303930.roa (hash: AFR0edy2SHetpvZoQe2ubb0WOVaatbTPgTEPsgvzJTQ=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/6e2c9285-c09a-4506-a320-fda1a07fd9ec/0/9D25181C9096851A77EB95DA55649E08E3B7941B.crl
                          rsync://repo-rpki.idnic.net/repo/6e2c9285-c09a-4506-a320-fda1a07fd9ec/0/9D25181C9096851A77EB95DA55649E08E3B7941B.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9D25181C9096851A77EB95DA55649E08E3B7941B.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 27 Dec 2025 17:20:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:e7:69:89:98:a5:0d:4c:06:8a:ea:d4:0b:00:84:75:91:59:27:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9D25181C9096851A77EB95DA55649E08E3B7941B
        Validity
            Not Before: Dec 24 12:25:03 2025 GMT
            Not After : Dec 27 21:36:03 2025 GMT
        Subject: CN=34E24768686D9868EE5443C2F2E4B5C4C1DE4DF9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:21:12:36:2e:19:98:b5:03:7c:2f:ab:39:2c:
                    70:03:50:c2:72:c1:7c:df:72:54:f3:c0:f4:19:b5:
                    36:db:a7:e2:35:47:8f:86:79:b8:5c:d7:ab:3e:7e:
                    f0:6a:ed:81:0f:2d:23:cb:15:2d:5e:6c:2e:07:45:
                    51:f7:49:3c:7c:f5:1f:21:d7:f9:f5:4d:8b:d9:ed:
                    f9:c6:0c:6c:b8:0f:31:16:4d:87:94:4d:32:d5:d0:
                    3a:93:0f:90:55:44:c0:cf:96:ef:fd:6e:66:0f:e1:
                    65:ae:18:50:a8:30:5f:3f:ad:57:1b:73:c9:7c:ef:
                    11:d2:7e:de:fc:4d:13:e6:60:cb:96:4d:e1:91:8d:
                    75:7e:20:04:29:4e:ad:72:28:c8:4d:c6:f6:b1:88:
                    22:a8:c6:89:4b:f0:3b:5d:55:13:64:6a:a5:43:02:
                    91:f3:ed:ad:0a:4f:3c:c9:86:90:60:4d:ef:72:af:
                    b1:1f:46:90:7b:0d:3a:89:c5:86:a7:88:1f:ab:cf:
                    ce:f9:14:9c:fe:d7:16:34:6b:d3:02:d8:54:dc:1c:
                    87:71:6a:08:53:37:bf:12:a6:2d:e9:83:0e:72:ad:
                    8b:57:b6:58:b1:01:b2:e6:51:46:e1:94:c5:90:7c:
                    08:82:86:4e:46:f2:3b:6c:f7:ac:b5:21:e3:29:8d:
                    31:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:E2:47:68:68:6D:98:68:EE:54:43:C2:F2:E4:B5:C4:C1:DE:4D:F9
            X509v3 Authority Key Identifier:
                keyid:9D:25:18:1C:90:96:85:1A:77:EB:95:DA:55:64:9E:08:E3:B7:94:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/6e2c9285-c09a-4506-a320-fda1a07fd9ec/0/9D25181C9096851A77EB95DA55649E08E3B7941B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9D25181C9096851A77EB95DA55649E08E3B7941B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6e2c9285-c09a-4506-a320-fda1a07fd9ec/0/9D25181C9096851A77EB95DA55649E08E3B7941B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:2c:c0:cb:f0:6b:07:ab:5a:20:98:12:0a:47:3c:54:9b:b6:
         5b:1f:13:9a:5f:a1:b7:14:fd:e3:83:e9:a9:3b:df:3b:98:af:
         39:7a:45:37:cb:86:56:cc:f9:15:c9:dd:36:53:72:89:1d:54:
         81:89:8e:81:3e:c7:be:1d:3d:c8:2d:d2:39:9a:ea:fe:ea:19:
         c6:87:b9:95:eb:66:1d:aa:65:16:b1:46:09:fd:d5:18:81:c3:
         cc:09:63:4d:eb:3a:eb:a0:7b:1c:a5:24:3c:f2:90:ff:d8:cf:
         33:31:0c:18:a0:36:db:89:07:f5:e1:26:2b:bc:92:b3:17:1a:
         6a:46:79:11:c7:62:e7:51:f7:33:58:59:b3:f1:06:79:09:8b:
         f9:1f:f8:85:ba:f8:30:6c:5e:0b:69:4b:24:4e:70:27:e9:b4:
         45:52:ca:26:34:72:e9:13:17:f0:1f:42:76:34:c3:1a:7c:bc:
         5f:ed:41:65:4e:f9:65:31:c1:ba:7e:4b:bc:51:1c:08:51:6d:
         93:e2:38:be:83:86:a9:1b:37:b4:c1:b7:a6:29:8a:56:3e:6a:
         2c:ee:ea:a7:0c:1b:87:c2:28:de:de:42:1f:df:a7:6b:c8:71:
         8d:8c:33:89:b1:a8:19:6b:d8:9e:9b:cf:99:f9:bf:0f:35:29:
         60:60:bc:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----