This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/7f4fc340-af69-4e8e-a777-747dd829dc3f/0/94AEA11ADC0FE774094CA4A66680C3ECF5092E4C.mft
File:                     94AEA11ADC0FE774094CA4A66680C3ECF5092E4C.mft (raw, json)
Hash identifier:          rjvOgWoYRkqbzL+moUyMdPk4mmMcVbZFX+3CB05RG74=
Subject key identifier:   60:76:4D:ED:A6:55:F5:39:5D:3C:6C:75:5D:44:3B:13:6F:49:74:4D
Authority key identifier: 94:AE:A1:1A:DC:0F:E7:74:09:4C:A4:A6:66:80:C3:EC:F5:09:2E:4C
Certificate issuer:       /CN=94AEA11ADC0FE774094CA4A66680C3ECF5092E4C
Certificate serial:       3A3F40E6E467406ADFA7968BD8B095E3807BF764
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/94AEA11ADC0FE774094CA4A66680C3ECF5092E4C.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/7f4fc340-af69-4e8e-a777-747dd829dc3f/0/94AEA11ADC0FE774094CA4A66680C3ECF5092E4C.mft
Manifest number:          012E
Signing time:             Thu 18 Dec 2025 12:30:43 +0000
Manifest this update:     Thu 18 Dec 2025 12:25:43 +0000
Manifest next update:     Sun 21 Dec 2025 22:54:43 +0000
Files and hashes:         1: 94AEA11ADC0FE774094CA4A66680C3ECF5092E4C.crl (hash: IKLrDymkaWbJ/dQ6aHPfzHV7t5yz3kVWtJb+D34Yclc=)
                          2: 33362e35302e3232322e302f32332d3233203d3e20313532303636.roa (hash: IgVoycKP5/mx7bgYUiplGIVv/fIKosSF5j4o1IpUqEA=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/7f4fc340-af69-4e8e-a777-747dd829dc3f/0/94AEA11ADC0FE774094CA4A66680C3ECF5092E4C.crl
                          rsync://repo-rpki.idnic.net/repo/7f4fc340-af69-4e8e-a777-747dd829dc3f/0/94AEA11ADC0FE774094CA4A66680C3ECF5092E4C.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/94AEA11ADC0FE774094CA4A66680C3ECF5092E4C.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 21 Dec 2025 22:54:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:3f:40:e6:e4:67:40:6a:df:a7:96:8b:d8:b0:95:e3:80:7b:f7:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=94AEA11ADC0FE774094CA4A66680C3ECF5092E4C
        Validity
            Not Before: Dec 18 12:25:43 2025 GMT
            Not After : Dec 21 22:54:43 2025 GMT
        Subject: CN=60764DEDA655F5395D3C6C755D443B136F49744D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:b5:3b:8f:2e:a7:86:fb:d5:3f:dc:f1:1c:fa:
                    4a:bb:a6:18:17:90:c5:e6:e9:a7:ee:be:ce:44:f3:
                    d0:dc:1c:da:4e:7c:1d:87:7d:72:48:d3:41:b1:96:
                    66:da:8c:55:39:b8:71:75:f6:67:64:3c:71:a5:95:
                    4e:a2:ff:ca:c2:85:34:42:ee:13:1a:ea:56:e3:41:
                    95:75:e9:f2:9d:55:7d:37:4e:82:c1:44:e4:e2:cd:
                    de:08:db:fc:2b:9f:86:16:5c:99:d7:a7:b3:e1:a6:
                    96:70:c6:44:64:76:f8:81:b8:36:3b:78:26:4a:5a:
                    e1:43:cc:80:01:44:70:2f:42:b9:0b:86:36:ac:9c:
                    a2:24:03:95:49:5e:5c:54:a4:4c:e6:db:a2:52:34:
                    ee:59:d1:0e:bb:0b:5f:d7:0c:cc:60:46:d6:52:d8:
                    81:c9:5f:6c:cd:74:4b:f1:db:e7:a9:18:68:da:47:
                    00:6e:4f:50:4a:90:ec:2d:23:83:fc:70:3c:a1:e5:
                    39:85:d9:84:1a:1f:b3:ab:cd:50:64:cb:40:4b:0d:
                    80:93:82:30:af:2b:43:4a:2d:6c:c4:e6:31:f4:cc:
                    14:2b:01:2f:cf:aa:8e:e1:02:e1:16:01:e1:c3:6a:
                    16:25:8d:e9:99:fe:d5:50:fb:d4:58:59:a7:8c:2d:
                    52:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:76:4D:ED:A6:55:F5:39:5D:3C:6C:75:5D:44:3B:13:6F:49:74:4D
            X509v3 Authority Key Identifier:
                keyid:94:AE:A1:1A:DC:0F:E7:74:09:4C:A4:A6:66:80:C3:EC:F5:09:2E:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/7f4fc340-af69-4e8e-a777-747dd829dc3f/0/94AEA11ADC0FE774094CA4A66680C3ECF5092E4C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/94AEA11ADC0FE774094CA4A66680C3ECF5092E4C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7f4fc340-af69-4e8e-a777-747dd829dc3f/0/94AEA11ADC0FE774094CA4A66680C3ECF5092E4C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:a9:c0:df:91:c7:ce:3a:2a:51:fc:87:4a:39:b8:a7:e6:26:
         3a:3a:51:77:ff:d8:35:b9:9d:08:42:e4:18:e7:77:fa:b1:a7:
         76:81:3c:12:49:ab:3d:0f:3f:f3:55:eb:f1:1a:08:d9:d0:b9:
         f0:70:eb:8f:60:36:39:36:d0:69:67:f4:d1:38:1a:bd:2c:f6:
         0f:dc:96:bd:f5:5d:aa:b1:a1:b6:04:cd:45:43:9b:ad:01:95:
         d8:0b:8d:e4:fd:a9:42:7d:ff:fe:c3:72:97:02:df:45:4a:bd:
         07:4b:69:db:78:d7:11:9b:d9:17:dc:c6:f9:5a:cd:0d:64:f6:
         d5:ee:4d:1c:65:b9:21:8b:92:28:d1:00:0f:24:2a:7f:dd:71:
         34:18:eb:f1:91:f2:b9:8b:7c:51:81:c4:3a:0c:87:1a:06:3a:
         89:ad:6f:24:8c:63:81:9f:4e:a5:8d:f8:1b:30:5c:4f:af:3f:
         60:8d:28:46:c5:66:28:34:3a:4c:c6:6d:ce:16:32:88:e3:b4:
         37:83:0c:89:0d:2d:d4:3d:39:30:96:8a:85:ba:81:ec:ae:ac:
         b0:ec:0b:8a:32:2e:68:36:72:42:09:b5:2e:8b:7b:60:49:de:
         15:2a:b2:29:7b:b9:70:17:e1:d8:60:dd:47:50:e6:10:52:47:
         9b:e2:27:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 11:17:37 2025 by rpki-client