This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/f46c5f2c-2412-4264-aa0a-1899c37b62bb/0/94980F009D62A16111BD1186549F0579B0CED71F.mft
File:                     94980F009D62A16111BD1186549F0579B0CED71F.mft (raw, json)
Hash identifier:          03Ra9/RZf7rddmJ6oMBnkE+BLVdTbk/x2pfjb+iJxxE=
Subject key identifier:   8A:66:93:03:4A:59:77:7E:A0:70:4D:BE:41:BE:44:85:F7:D1:7A:36
Authority key identifier: 94:98:0F:00:9D:62:A1:61:11:BD:11:86:54:9F:05:79:B0:CE:D7:1F
Certificate issuer:       /CN=94980F009D62A16111BD1186549F0579B0CED71F
Certificate serial:       2613F161F68CDD8E8F1C9EE291FD53EC18F6504D
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/94980F009D62A16111BD1186549F0579B0CED71F.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/f46c5f2c-2412-4264-aa0a-1899c37b62bb/0/94980F009D62A16111BD1186549F0579B0CED71F.mft
Manifest number:          04B6
Signing time:             Tue 30 Dec 2025 09:41:21 +0000
Manifest this update:     Tue 30 Dec 2025 09:36:21 +0000
Manifest next update:     Fri 02 Jan 2026 21:36:21 +0000
Files and hashes:         1: 94980F009D62A16111BD1186549F0579B0CED71F.crl (hash: Y63shPhlLs/ZBp3+stPiDRq6RAiFy2fL8V6iUqMI+z0=)
                          2: 3130332e3135352e3130342e302f32342d3234203d3e20313431303531.roa (hash: K/Ew8HGNEEXALuqDZCUg14kFUyIms5Tb1ZdOOrTK4qI=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/f46c5f2c-2412-4264-aa0a-1899c37b62bb/0/94980F009D62A16111BD1186549F0579B0CED71F.crl
                          rsync://repo-rpki.idnic.net/repo/f46c5f2c-2412-4264-aa0a-1899c37b62bb/0/94980F009D62A16111BD1186549F0579B0CED71F.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/94980F009D62A16111BD1186549F0579B0CED71F.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 Jan 2026 21:36:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:13:f1:61:f6:8c:dd:8e:8f:1c:9e:e2:91:fd:53:ec:18:f6:50:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=94980F009D62A16111BD1186549F0579B0CED71F
        Validity
            Not Before: Dec 30 09:36:21 2025 GMT
            Not After : Jan  2 21:36:21 2026 GMT
        Subject: CN=8A6693034A59777EA0704DBE41BE4485F7D17A36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:bd:2b:2b:72:2e:80:db:b7:68:82:97:39:0e:
                    b9:d4:99:a9:20:47:77:d4:cb:6a:b9:87:04:a8:3b:
                    a4:3c:b0:a2:ea:be:ff:7e:0d:e5:ae:b7:21:04:eb:
                    cf:23:d2:a1:81:44:20:8f:d4:32:5d:2f:7b:51:34:
                    c6:40:80:44:84:ef:0d:0a:94:e9:c2:52:06:ca:fd:
                    a3:64:ca:c7:f3:6d:d5:46:c6:bf:8b:31:d5:6a:0b:
                    81:fc:14:64:10:8c:c7:a0:11:57:fd:62:39:8a:eb:
                    0a:92:f9:23:ba:9e:73:10:cc:9c:41:ac:23:7c:aa:
                    08:cb:53:be:4b:b8:15:4e:77:a3:40:09:0b:06:ad:
                    de:b8:c5:2a:53:62:fa:c9:3f:a8:03:c3:ec:07:9b:
                    34:31:68:34:63:04:e5:cf:2f:b2:83:c0:02:1d:72:
                    70:f2:ea:63:cf:e6:71:5f:37:fc:47:e8:06:7c:63:
                    64:66:4a:16:d8:73:d6:88:26:2a:f9:b9:98:7a:0b:
                    9b:8f:72:ce:ef:7f:35:d2:7e:15:64:df:aa:84:7e:
                    bb:49:bc:00:b7:58:0e:07:78:98:36:e3:1c:4d:b6:
                    cf:e3:5d:8a:47:11:01:1d:69:13:30:26:1d:08:4c:
                    cc:05:46:0e:37:a0:06:b8:de:02:95:3b:57:c8:98:
                    a8:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:66:93:03:4A:59:77:7E:A0:70:4D:BE:41:BE:44:85:F7:D1:7A:36
            X509v3 Authority Key Identifier:
                keyid:94:98:0F:00:9D:62:A1:61:11:BD:11:86:54:9F:05:79:B0:CE:D7:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/f46c5f2c-2412-4264-aa0a-1899c37b62bb/0/94980F009D62A16111BD1186549F0579B0CED71F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/94980F009D62A16111BD1186549F0579B0CED71F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f46c5f2c-2412-4264-aa0a-1899c37b62bb/0/94980F009D62A16111BD1186549F0579B0CED71F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:26:e8:b1:44:90:22:99:41:3c:e4:67:61:68:91:9b:32:4f:
         fd:6c:ab:52:03:b2:4b:d7:81:a3:91:da:a1:ea:7b:87:a9:b1:
         bb:73:bb:d2:74:bc:c3:f0:b7:25:f8:eb:11:13:a6:b6:f6:7f:
         b6:fc:4c:80:99:d3:f1:66:38:b4:af:7a:0b:a2:13:08:f7:61:
         a2:b0:96:08:20:5f:41:54:6e:2b:bd:82:7a:b2:f4:13:ca:c4:
         81:fd:66:0b:53:47:ce:61:11:c3:a2:63:55:d5:30:4e:a5:b7:
         7f:ce:2d:fa:f0:3d:25:18:c7:47:06:58:21:40:ed:f0:79:f1:
         46:cb:41:30:82:71:5e:d1:72:cf:6d:a5:3c:78:d4:e0:0a:b1:
         e2:11:5a:b1:e3:2b:79:65:97:21:c6:c9:d2:96:fa:53:a7:88:
         2d:46:d7:1d:75:8b:b9:48:1b:76:6e:82:40:f4:7c:9d:fa:15:
         65:eb:b4:cb:f7:ae:d3:31:71:bd:74:8f:e2:32:22:05:84:cd:
         8a:6b:d8:b9:e5:f1:d1:4c:15:08:95:88:e6:bd:63:f3:e2:65:
         77:b3:24:06:b1:f5:6b:a4:fa:1b:c2:2d:12:c7:d2:ec:73:89:
         bf:17:38:11:1b:b6:e1:f4:9d:25:f8:dc:af:47:26:a4:f7:4b:
         c7:85:c2:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 31 03:36:19 2025 by rpki-client