This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/cafcbfbb-ba3f-4d53-a04f-14d6f4be0cb1/0/9C0DBD7AE1932E6B9D0983FC48E32143D8A4CF93.mft
File:                     9C0DBD7AE1932E6B9D0983FC48E32143D8A4CF93.mft (raw, json)
Hash identifier:          6yFf9Zlxsve5D6ZLMezh6QnPfuhliipFhF6+wn0o+UA=
Subject key identifier:   85:9F:BF:DD:AB:6C:32:04:8A:27:3B:78:10:12:96:D5:BD:FA:64:87
Authority key identifier: 9C:0D:BD:7A:E1:93:2E:6B:9D:09:83:FC:48:E3:21:43:D8:A4:CF:93
Certificate issuer:       /CN=9C0DBD7AE1932E6B9D0983FC48E32143D8A4CF93
Certificate serial:       296C2ED732258C1B1E47FA899A6041BCA530E343
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9C0DBD7AE1932E6B9D0983FC48E32143D8A4CF93.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/cafcbfbb-ba3f-4d53-a04f-14d6f4be0cb1/0/9C0DBD7AE1932E6B9D0983FC48E32143D8A4CF93.mft
Manifest number:          A9
Signing time:             Tue 16 Dec 2025 18:01:36 +0000
Manifest this update:     Tue 16 Dec 2025 17:56:36 +0000
Manifest next update:     Sat 20 Dec 2025 02:11:36 +0000
Files and hashes:         1: 9C0DBD7AE1932E6B9D0983FC48E32143D8A4CF93.crl (hash: l36HqwxBICFAQg6okdoQqh0EKntnMhBeYZBTgHAg7Ks=)
                          2: 3136302e3138372e3233312e302f32342d3234203d3e20313533313430.roa (hash: mdfPWkwanzfVl6roK/rM6ll9riZUs320X01YsS/31ms=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/cafcbfbb-ba3f-4d53-a04f-14d6f4be0cb1/0/9C0DBD7AE1932E6B9D0983FC48E32143D8A4CF93.crl
                          rsync://repo-rpki.idnic.net/repo/cafcbfbb-ba3f-4d53-a04f-14d6f4be0cb1/0/9C0DBD7AE1932E6B9D0983FC48E32143D8A4CF93.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9C0DBD7AE1932E6B9D0983FC48E32143D8A4CF93.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Dec 2025 02:11:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:6c:2e:d7:32:25:8c:1b:1e:47:fa:89:9a:60:41:bc:a5:30:e3:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9C0DBD7AE1932E6B9D0983FC48E32143D8A4CF93
        Validity
            Not Before: Dec 16 17:56:36 2025 GMT
            Not After : Dec 20 02:11:36 2025 GMT
        Subject: CN=859FBFDDAB6C32048A273B78101296D5BDFA6487
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:68:8f:ee:24:e6:7c:25:df:92:91:96:39:a7:
                    4f:1c:b3:07:4a:43:8c:24:d0:7f:c2:56:06:af:36:
                    08:1d:dd:37:eb:ac:d8:60:64:a6:ed:6a:09:e9:db:
                    eb:11:22:10:ca:d9:e6:61:07:96:e1:c0:e3:ee:d8:
                    ff:6c:27:15:69:e0:dd:75:a0:b9:d3:2e:65:91:b6:
                    90:66:7c:ac:55:c3:3a:09:09:19:83:e6:a2:54:ca:
                    40:80:68:e4:e8:66:9d:84:a0:ec:8c:bf:9d:d5:a3:
                    29:fd:48:22:8e:7c:08:76:7b:0c:47:60:d2:1d:10:
                    e0:17:2c:57:27:a0:33:8b:5a:92:16:34:5c:9e:5b:
                    e0:d0:d0:a6:99:ec:72:a0:da:9a:b4:1a:af:75:bc:
                    52:b9:59:48:13:84:f5:be:69:1e:23:b6:02:8f:46:
                    55:5a:71:2d:0c:b6:bd:f5:06:33:8c:44:49:fc:35:
                    6e:b5:6f:dc:c8:53:e8:b4:c0:55:9c:bf:6f:19:eb:
                    59:b6:c2:23:70:3b:7f:77:1d:da:c1:0c:9b:dc:bd:
                    4a:e0:c9:ff:19:dc:72:a6:6b:83:9d:b7:c1:a5:73:
                    26:72:34:dd:7d:24:3f:1e:90:2b:b9:c5:2a:0c:0b:
                    4d:24:c0:6f:af:bf:c4:87:15:92:4f:54:44:d9:41:
                    75:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:9F:BF:DD:AB:6C:32:04:8A:27:3B:78:10:12:96:D5:BD:FA:64:87
            X509v3 Authority Key Identifier:
                keyid:9C:0D:BD:7A:E1:93:2E:6B:9D:09:83:FC:48:E3:21:43:D8:A4:CF:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/cafcbfbb-ba3f-4d53-a04f-14d6f4be0cb1/0/9C0DBD7AE1932E6B9D0983FC48E32143D8A4CF93.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9C0DBD7AE1932E6B9D0983FC48E32143D8A4CF93.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cafcbfbb-ba3f-4d53-a04f-14d6f4be0cb1/0/9C0DBD7AE1932E6B9D0983FC48E32143D8A4CF93.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b9:8d:d3:1b:39:03:51:95:4b:63:43:f9:4c:2a:d8:0f:0e:60:
         4c:6b:b1:7c:0c:b8:41:84:7f:f1:ce:f4:0e:1f:3d:7f:f3:97:
         f7:20:1c:9c:08:f2:42:84:f7:d7:44:b1:0a:77:0d:c1:94:7c:
         a4:6f:82:a7:64:67:f9:45:2f:de:aa:33:40:04:4a:11:33:0d:
         05:d9:66:79:ec:41:f7:b3:da:81:0a:f1:65:2f:ce:19:55:d1:
         86:18:7f:8b:5a:b8:5c:24:d2:4f:b1:e2:60:4e:3d:ad:35:bb:
         c8:ab:00:4e:db:49:aa:52:0f:29:ad:90:e8:83:df:d0:5e:07:
         1e:94:31:f6:17:d2:aa:50:0e:e4:33:a4:4c:15:0a:9e:45:95:
         54:c3:4c:b2:96:91:ed:e9:03:e9:e5:7b:cc:49:31:9a:e9:75:
         9b:30:29:01:94:90:db:64:24:de:38:de:af:45:4b:29:ae:3a:
         8c:fd:30:3a:4b:93:09:ce:84:1d:87:03:a3:e4:c1:88:2d:b3:
         5c:3f:28:50:57:cc:94:a2:40:51:b3:29:01:df:7c:55:90:f7:
         54:4a:f3:b8:28:1c:33:80:75:b4:20:27:c4:50:e8:93:ef:9e:
         27:5f:ec:9d:6a:0c:62:16:d0:69:c5:bf:fe:35:ed:dd:e7:8c:
         2f:00:9b:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 18 11:11:00 2025 by rpki-client