This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/3305177a-a500-4996-b3ff-70c144edfece/0/95FC6072A4A690A61A0B5F14B36882B43DA2F098.mft
File:                     95FC6072A4A690A61A0B5F14B36882B43DA2F098.mft (raw, json)
Hash identifier:          Obgz2cX+NsKMOG4HpED+9Wt2i4Ca4XScjZN7+VQZy14=
Subject key identifier:   E1:DA:9E:8E:94:0B:85:D1:11:41:54:F8:26:50:3D:01:23:AD:C8:C9
Authority key identifier: 95:FC:60:72:A4:A6:90:A6:1A:0B:5F:14:B3:68:82:B4:3D:A2:F0:98
Certificate issuer:       /CN=95FC6072A4A690A61A0B5F14B36882B43DA2F098
Certificate serial:       09D41010022959281A2ED9CD7ECED5CA5D97B5DC
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/95FC6072A4A690A61A0B5F14B36882B43DA2F098.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3305177a-a500-4996-b3ff-70c144edfece/0/95FC6072A4A690A61A0B5F14B36882B43DA2F098.mft
Manifest number:          053D
Signing time:             Sat 20 Dec 2025 03:42:20 +0000
Manifest this update:     Sat 20 Dec 2025 03:37:20 +0000
Manifest next update:     Tue 23 Dec 2025 09:57:20 +0000
Files and hashes:         1: 323430343a666230303a3a2f33322d3332203d3e203538343734.roa (hash: T0GxcffUorQqKvKWvoQBmwT56g/pt1WC0GNCeIbnIXI=)
                          2: 3130332e32382e35372e302f32342d3234203d3e203538343734.roa (hash: RKuA2CS77/iBc1MhX2FD3Oj8MLTo/sw4r4vfbH4WpPI=)
                          3: 3130332e32382e35382e302f32342d3234203d3e203538343734.roa (hash: SVVnOcpEzNW3GyvGQSrBzvX2ix4zPecYqTfJmTpW5Ek=)
                          4: 3130332e32382e35362e302f32342d3234203d3e203538343734.roa (hash: lS8odvouHADOZvGcEIZX6cESZX3v05ZwGGbLJRnmmPg=)
                          5: 34332e3234382e3231322e302f32342d3234203d3e203538343734.roa (hash: lJiN/1jPk6sVzBu+b+dWtXwNwMFWgXWbUliAdUar1AU=)
                          6: 34332e3234382e3231352e302f32342d3234203d3e203538343734.roa (hash: 2rfcy4tUpo7HgU2cGwZC6pQYZQAR7WSsi/1k28TkJlU=)
                          7: 95FC6072A4A690A61A0B5F14B36882B43DA2F098.crl (hash: v2bUdMTv9Z3XhPrNzT0Vyc70KflZz8CY7sJO6hXa33Y=)
                          8: 34332e3234382e3231342e302f32342d3234203d3e203538343734.roa (hash: KABMcwwuj0PcVg0DF+2S7mT8pkOrI1Q8USpOkuuxMXI=)
                          9: 3130332e32382e35392e302f32342d3234203d3e203538343734.roa (hash: GggD4UAIQuJ2Ici9kI1FCxhBRH2erQ0+Zgb75d0bwAQ=)
                          10: 34332e3234382e3231332e302f32342d3234203d3e203538343734.roa (hash: I3OA1TXXrn7Ho4Bbdaoik2HHmIJMRdT3vdvqOadCgWc=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/3305177a-a500-4996-b3ff-70c144edfece/0/95FC6072A4A690A61A0B5F14B36882B43DA2F098.crl
                          rsync://repo-rpki.idnic.net/repo/3305177a-a500-4996-b3ff-70c144edfece/0/95FC6072A4A690A61A0B5F14B36882B43DA2F098.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/95FC6072A4A690A61A0B5F14B36882B43DA2F098.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 23 Dec 2025 09:57:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:d4:10:10:02:29:59:28:1a:2e:d9:cd:7e:ce:d5:ca:5d:97:b5:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95FC6072A4A690A61A0B5F14B36882B43DA2F098
        Validity
            Not Before: Dec 20 03:37:20 2025 GMT
            Not After : Dec 23 09:57:20 2025 GMT
        Subject: CN=E1DA9E8E940B85D1114154F826503D0123ADC8C9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:cb:9d:d1:ee:47:0f:ef:15:70:eb:ce:a2:12:
                    e3:04:c3:ff:1c:55:de:62:33:0a:4f:b1:21:88:69:
                    f2:56:b5:41:a9:7e:7d:0d:0b:d5:2c:29:c3:a2:42:
                    b2:39:15:61:76:de:b1:b6:1f:e1:3c:08:e0:09:79:
                    46:04:db:33:75:2b:f7:d5:57:a9:d2:0e:62:3a:2b:
                    8f:5f:13:bb:5f:c7:38:dc:ab:02:99:11:1e:81:4c:
                    cb:f7:4d:35:c4:d0:40:02:60:e3:ee:0d:75:70:13:
                    65:58:8c:af:ac:68:ca:a2:82:9e:69:38:a4:a2:12:
                    a8:61:78:c2:63:4f:91:64:7c:30:d6:f6:45:37:65:
                    b9:31:16:b0:46:21:c0:95:ae:e6:69:54:a1:51:99:
                    d5:0a:bd:47:4a:da:b1:aa:a8:d6:98:ec:ed:a9:a7:
                    35:0f:b8:29:82:72:b1:0f:73:2c:27:52:86:8f:31:
                    09:90:c2:db:6c:f8:f7:f5:d3:71:28:e6:fd:9f:1b:
                    42:4d:29:25:64:dd:6b:ef:9f:10:e4:6d:b3:3c:a7:
                    57:b8:bb:aa:d3:a5:0d:b9:99:97:4d:df:0b:8e:18:
                    78:4b:a9:f8:b5:71:10:61:af:59:e3:bb:e2:38:10:
                    71:69:f7:aa:1a:33:aa:50:d9:82:a1:90:b2:cc:81:
                    eb:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:DA:9E:8E:94:0B:85:D1:11:41:54:F8:26:50:3D:01:23:AD:C8:C9
            X509v3 Authority Key Identifier:
                keyid:95:FC:60:72:A4:A6:90:A6:1A:0B:5F:14:B3:68:82:B4:3D:A2:F0:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3305177a-a500-4996-b3ff-70c144edfece/0/95FC6072A4A690A61A0B5F14B36882B43DA2F098.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/95FC6072A4A690A61A0B5F14B36882B43DA2F098.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3305177a-a500-4996-b3ff-70c144edfece/0/95FC6072A4A690A61A0B5F14B36882B43DA2F098.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:56:c7:2a:c0:94:34:8a:f8:66:08:f8:1c:2e:ad:3c:91:08:
         9d:40:72:dc:53:6e:6e:1e:a1:06:f0:b3:b1:ec:67:e4:f4:da:
         8c:59:38:72:ba:b6:36:a9:0a:e8:fb:f3:0b:65:ac:2b:60:b2:
         f0:f3:0f:11:26:c0:a0:c8:c5:b6:fa:b3:b7:33:79:a7:38:d7:
         ee:30:72:d8:68:82:e2:50:e3:bb:ba:cf:8d:89:24:51:f1:f6:
         89:a3:29:05:4d:49:c4:fa:fd:b0:6d:8c:bf:46:fb:42:2a:b1:
         1e:17:d2:50:30:e5:05:63:0d:cb:27:b7:67:46:c3:f7:56:bf:
         fc:dc:5f:20:cb:61:b3:7d:38:10:90:62:c3:02:b1:87:7b:c4:
         99:2e:dc:94:01:a0:81:85:56:2d:42:fe:b7:03:4f:4e:71:a7:
         ec:ef:d7:3d:81:ce:a7:ee:54:71:92:40:64:96:28:f5:c7:9f:
         8f:76:70:dd:f3:82:01:23:94:d5:b5:88:88:38:60:a4:7c:6b:
         d9:b9:81:0e:54:61:e7:10:c4:ac:f0:13:1c:a5:a4:87:76:2e:
         d0:2b:42:23:0e:f1:54:62:61:83:79:0c:53:10:60:aa:47:18:
         96:2d:f7:5e:97:25:1d:f0:56:bd:d1:fd:5f:ba:23:de:7a:1d:
         9d:ac:f9:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 15:04:57 2025 by rpki-client