This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/9db927df-bc9c-4be6-a1fa-2e125c469f71/0/9EE9E8715DE7A995273D27BD16FBF33DC09CF652.mft
File:                     9EE9E8715DE7A995273D27BD16FBF33DC09CF652.mft (raw, json)
Hash identifier:          b+4rt2mRvQb+TPaJSRxO7yB59EORor3k6BnZP0ff/4A=
Subject key identifier:   82:2A:6E:69:31:17:83:AC:AD:5D:ED:0F:E6:7E:23:0C:02:93:DF:01
Authority key identifier: 9E:E9:E8:71:5D:E7:A9:95:27:3D:27:BD:16:FB:F3:3D:C0:9C:F6:52
Certificate issuer:       /CN=9EE9E8715DE7A995273D27BD16FBF33DC09CF652
Certificate serial:       3D6391B50AA11351CAE378945F813DCB344A3B48
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9EE9E8715DE7A995273D27BD16FBF33DC09CF652.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/9db927df-bc9c-4be6-a1fa-2e125c469f71/0/9EE9E8715DE7A995273D27BD16FBF33DC09CF652.mft
Manifest number:          F8
Signing time:             Tue 06 Jan 2026 04:50:05 +0000
Manifest this update:     Tue 06 Jan 2026 04:45:05 +0000
Manifest next update:     Fri 09 Jan 2026 08:37:05 +0000
Files and hashes:         1: 3136302e32322e36362e302f32342d3234203d3e20313532383134.roa (hash: JUUaehnloKhTb4CXmYBNJbFrHSQ9nWl3U3tWDUYZLk4=)
                          2: 3136302e32322e36372e302f32342d3234203d3e20313532383134.roa (hash: Ey7L9KsZTmEk5ltcrs4Z+pnj7s7l3HrY1Uvag6NQq84=)
                          3: 9EE9E8715DE7A995273D27BD16FBF33DC09CF652.crl (hash: vY5MRYZslVzenTGyPj90zZSB3I2mq0YnE1ua6Iqmadk=)
                          4: 3136302e32322e36362e302f32332d3233203d3e20313532383134.roa (hash: n4Oi/nBqUvnEfpPYXXTcmZ2bFem4wR2z3sm1N0yX44M=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/9db927df-bc9c-4be6-a1fa-2e125c469f71/0/9EE9E8715DE7A995273D27BD16FBF33DC09CF652.crl
                          rsync://repo-rpki.idnic.net/repo/9db927df-bc9c-4be6-a1fa-2e125c469f71/0/9EE9E8715DE7A995273D27BD16FBF33DC09CF652.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9EE9E8715DE7A995273D27BD16FBF33DC09CF652.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 09 Jan 2026 08:37:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:63:91:b5:0a:a1:13:51:ca:e3:78:94:5f:81:3d:cb:34:4a:3b:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9EE9E8715DE7A995273D27BD16FBF33DC09CF652
        Validity
            Not Before: Jan  6 04:45:05 2026 GMT
            Not After : Jan  9 08:37:05 2026 GMT
        Subject: CN=822A6E69311783ACAD5DED0FE67E230C0293DF01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:db:33:c4:52:53:ca:dc:8a:b5:64:4e:1e:9e:
                    fd:f3:a6:86:32:eb:0a:56:67:5f:78:47:42:0c:49:
                    9a:15:7b:7a:d6:2e:c1:9e:0f:fe:9d:f3:d6:2c:ba:
                    e6:38:03:19:87:a2:7a:6b:b2:a4:87:f8:c0:3e:e2:
                    fe:c5:48:65:fb:d8:3a:81:60:fb:28:15:22:5b:c3:
                    50:d8:97:83:ed:f6:08:17:aa:77:39:1c:8f:9a:1e:
                    1e:1e:9d:3a:21:c2:6a:15:30:52:22:03:d4:8b:38:
                    a9:f6:3a:15:1a:f7:c1:70:5a:62:3f:6a:e0:fa:2f:
                    c2:44:93:d4:61:b5:eb:cc:e5:3b:e3:25:8e:47:64:
                    f5:52:7b:15:10:07:69:26:41:81:cb:c7:36:a2:2c:
                    4f:ba:e8:b3:03:e8:be:3c:5b:18:03:07:34:f3:55:
                    72:df:de:7d:32:3f:8f:f4:3d:f2:c3:04:ec:5c:fa:
                    0d:26:8b:87:63:66:8c:26:14:03:d6:3b:ca:40:90:
                    2d:02:f6:42:b3:a3:79:3a:2e:5a:d2:be:3a:0d:ee:
                    01:ad:49:30:58:93:01:99:d3:06:f6:73:97:65:19:
                    01:29:3e:7b:6a:30:e2:b1:6e:44:9c:6a:b4:98:07:
                    4f:0f:08:96:14:e3:7c:e1:44:10:42:4a:36:36:55:
                    9d:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:2A:6E:69:31:17:83:AC:AD:5D:ED:0F:E6:7E:23:0C:02:93:DF:01
            X509v3 Authority Key Identifier:
                keyid:9E:E9:E8:71:5D:E7:A9:95:27:3D:27:BD:16:FB:F3:3D:C0:9C:F6:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/9db927df-bc9c-4be6-a1fa-2e125c469f71/0/9EE9E8715DE7A995273D27BD16FBF33DC09CF652.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9EE9E8715DE7A995273D27BD16FBF33DC09CF652.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9db927df-bc9c-4be6-a1fa-2e125c469f71/0/9EE9E8715DE7A995273D27BD16FBF33DC09CF652.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:03:79:51:5d:bd:03:60:6d:86:86:dd:a1:c6:d8:37:92:6c:
         c5:cc:dc:da:7c:12:a1:02:3e:e4:b1:7d:1c:a7:c8:5e:c4:2f:
         7e:c6:01:c4:8d:b8:f1:bd:35:21:b6:49:5d:25:93:fb:9e:b1:
         60:18:26:95:b3:11:f4:58:38:68:ae:15:d2:e6:6c:4a:69:04:
         cd:74:93:80:14:61:3d:e6:df:76:49:18:3e:aa:bf:28:f2:81:
         15:2a:5d:cf:00:1b:8d:d4:96:88:c5:33:7d:e2:5e:25:19:a1:
         24:4b:39:93:b6:fa:d3:96:11:2c:92:cb:67:78:05:f8:61:e6:
         d5:2d:0c:a7:f5:6e:5f:2d:57:9f:58:1e:38:46:3e:a6:c2:ad:
         59:c5:03:7c:3d:3b:5f:5b:ce:67:ba:ed:78:76:c0:08:75:96:
         f6:c5:e7:24:9b:f3:bd:c9:d4:b7:11:b6:63:3e:2d:cd:b5:5e:
         93:e3:84:88:84:65:ca:16:81:7d:a2:df:e4:32:1e:e3:65:77:
         e4:ae:cc:0a:fe:06:9f:b9:f9:86:14:6e:33:f1:06:09:0d:0a:
         19:08:d9:bd:ab:40:8e:6c:44:5b:c9:5e:53:17:f5:20:27:0f:
         2a:d0:a8:47:ef:75:76:77:df:eb:40:dd:d3:23:49:0c:d0:8c:
         00:43:ae:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 7 07:19:01 2026 by rpki-client