This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/af62809c-bfb6-4fe7-8dd6-ca6022cdd540/0/930A4ED2B85AA9FE77ED90FA85044A9C80B38A46.mft
File:                     930A4ED2B85AA9FE77ED90FA85044A9C80B38A46.mft (raw, json)
Hash identifier:          CzKbZd+JrHLh0md0wXyh1ib8tycLJEHOkY983euYFrQ=
Subject key identifier:   A6:09:EA:12:EE:40:2B:A5:67:11:99:B3:02:31:53:1C:4B:41:7F:3F
Authority key identifier: 93:0A:4E:D2:B8:5A:A9:FE:77:ED:90:FA:85:04:4A:9C:80:B3:8A:46
Certificate issuer:       /CN=930A4ED2B85AA9FE77ED90FA85044A9C80B38A46
Certificate serial:       676D9706DB2C755792D2CFEF65DF667AC2B973C2
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/930A4ED2B85AA9FE77ED90FA85044A9C80B38A46.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/af62809c-bfb6-4fe7-8dd6-ca6022cdd540/0/930A4ED2B85AA9FE77ED90FA85044A9C80B38A46.mft
Manifest number:          020B
Signing time:             Sat 20 Dec 2025 16:11:22 +0000
Manifest this update:     Sat 20 Dec 2025 16:06:22 +0000
Manifest next update:     Wed 24 Dec 2025 00:39:22 +0000
Files and hashes:         1: 32372e3132312e38312e302f32342d3234203d3e203535363532.roa (hash: KPO8Dur+z9GVaz2KZy/0xQJy9l93ayQwCwTcViUocP0=)
                          2: 32372e3132312e38362e302f32342d3234203d3e203535363532.roa (hash: 1kY5e/tIJX114u746CW39QHTp2rzxidBD7y122Pd6Ew=)
                          3: 32372e3132312e38302e302f32342d3234203d3e203535363532.roa (hash: 0LRxbu/86kZstCrhrFM+xHSikcX960D6ea8IptSkGsE=)
                          4: 930A4ED2B85AA9FE77ED90FA85044A9C80B38A46.crl (hash: tkNd+au5BsdsP5V4vah4awri11OgQ/N0A4+bQt3aK0A=)
                          5: 32372e3132312e38352e302f32342d3234203d3e203535363532.roa (hash: 3Mqc4bpW2MlccFa1Ubf+/4bclFJ21AcG0i5KBo4oD48=)
                          6: 32372e3132312e38332e302f32342d3234203d3e203535363532.roa (hash: 1Ap1USzQtzqwgDtQDrhH77MKkzf62RSPe2jHuhWF7VY=)
                          7: 32372e3132312e38322e302f32342d3234203d3e203535363532.roa (hash: QtiPgOKAP2zdJvR5FPFABfx4iIby7ldINKqgYGzNT04=)
                          8: 32372e3132312e38342e302f32342d3234203d3e203535363532.roa (hash: bA5Fx/rOlnkAyIC1kdWrOaLkxDABB/Vvu2ebi0eEf0Q=)
                          9: 32372e3132312e38372e302f32342d3234203d3e203535363532.roa (hash: XOQFKUfDG7J0fbl+DTtQtPxTl6ii3+vzoE5o4zQO4bo=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/af62809c-bfb6-4fe7-8dd6-ca6022cdd540/0/930A4ED2B85AA9FE77ED90FA85044A9C80B38A46.crl
                          rsync://repo-rpki.idnic.net/repo/af62809c-bfb6-4fe7-8dd6-ca6022cdd540/0/930A4ED2B85AA9FE77ED90FA85044A9C80B38A46.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/930A4ED2B85AA9FE77ED90FA85044A9C80B38A46.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 24 Dec 2025 00:39:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:6d:97:06:db:2c:75:57:92:d2:cf:ef:65:df:66:7a:c2:b9:73:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=930A4ED2B85AA9FE77ED90FA85044A9C80B38A46
        Validity
            Not Before: Dec 20 16:06:22 2025 GMT
            Not After : Dec 24 00:39:22 2025 GMT
        Subject: CN=A609EA12EE402BA5671199B30231531C4B417F3F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:26:e1:f5:6c:4e:dc:8d:f7:57:b5:2b:5d:56:
                    5e:e8:ea:10:fa:62:fb:b6:41:64:aa:40:91:d3:c7:
                    25:87:f2:aa:71:c2:71:3c:76:01:96:df:17:0a:95:
                    12:1c:15:77:45:aa:33:b3:86:d4:19:d2:8e:3c:eb:
                    cb:a3:bd:90:38:c4:cc:7f:75:5d:f7:0a:8c:3d:3a:
                    77:bf:16:36:e1:3c:4d:b4:29:58:27:6e:28:bf:2c:
                    55:46:fa:e9:4a:a0:aa:83:45:15:09:99:b8:d2:02:
                    66:eb:7e:d1:5a:28:00:45:da:9b:70:20:f6:65:02:
                    5e:06:ab:16:eb:b8:22:b3:06:3e:96:a4:77:6a:c6:
                    75:8b:fd:75:e3:e5:47:e1:74:2d:31:bf:94:cc:36:
                    54:ac:a9:08:3c:2c:55:c7:48:83:3f:55:33:3d:aa:
                    2a:50:05:9c:81:f7:26:d8:8d:52:83:5b:62:10:c5:
                    4a:c3:19:bf:d6:f3:3c:6e:59:df:a3:61:87:e0:11:
                    2a:b3:d2:29:ef:47:2f:38:44:7d:9e:1f:f6:11:44:
                    f6:64:a6:4b:ef:bc:7a:56:5e:c8:0a:e0:86:77:ba:
                    57:8c:02:77:e2:44:ac:16:32:50:10:05:9c:93:37:
                    f2:e0:1a:6c:89:40:4f:ca:e4:6f:f9:42:93:51:68:
                    ce:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:09:EA:12:EE:40:2B:A5:67:11:99:B3:02:31:53:1C:4B:41:7F:3F
            X509v3 Authority Key Identifier:
                keyid:93:0A:4E:D2:B8:5A:A9:FE:77:ED:90:FA:85:04:4A:9C:80:B3:8A:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/af62809c-bfb6-4fe7-8dd6-ca6022cdd540/0/930A4ED2B85AA9FE77ED90FA85044A9C80B38A46.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/930A4ED2B85AA9FE77ED90FA85044A9C80B38A46.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/af62809c-bfb6-4fe7-8dd6-ca6022cdd540/0/930A4ED2B85AA9FE77ED90FA85044A9C80B38A46.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:3a:6b:18:c3:6b:29:8a:42:a8:2d:b0:27:86:e8:b2:c6:d1:
         b5:f1:8a:10:8f:0c:06:13:e9:fd:37:60:79:e9:e2:08:20:70:
         21:b5:d2:90:6a:0e:58:8e:3b:8d:21:d0:4c:48:67:50:5b:c2:
         f4:72:0c:45:7a:c9:a5:11:ca:bb:9d:db:9e:17:fb:67:d5:ec:
         10:37:b4:64:ab:9c:88:eb:62:fc:7e:dc:34:92:f2:d7:5d:e8:
         b5:17:58:ef:af:5b:8c:2b:d1:22:b6:f4:51:a1:dd:5d:77:1e:
         f8:c4:34:0f:4a:e0:0a:ea:59:8d:9f:7b:77:fe:bc:4f:b8:76:
         ce:07:54:d7:7a:29:fa:cb:2f:2d:cb:cb:ae:53:11:50:97:d0:
         f5:89:00:a8:2c:ad:73:d2:34:72:fa:43:99:bc:6e:6a:14:32:
         68:9f:27:72:14:dd:a6:54:68:4d:16:a2:d2:31:1f:a1:55:18:
         88:0d:02:b2:d1:66:67:79:0a:4b:b9:30:42:8b:f6:7a:9c:bf:
         37:4b:4c:0b:a7:d1:f9:40:1c:12:9f:70:22:4a:08:fe:44:01:
         78:eb:7e:bf:6e:97:12:b0:3c:19:87:9d:c2:ab:a8:83:2a:4e:
         00:05:9f:c9:7c:ac:61:74:1b:df:51:16:66:7d:bf:15:4a:d1:
         e8:c0:d8:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 17:25:20 2025 by rpki-client