This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/15bf718d-911e-43d6-8e3c-0d1b3646e276/0/94EDA4B2360B47DC65386E3E7EBAE35B997F2A42.mft
File:                     94EDA4B2360B47DC65386E3E7EBAE35B997F2A42.mft (raw, json)
Hash identifier:          YOpQPKbm/9QGkqp5SF1qRpum6iewFniU1yqYTTAWA8s=
Subject key identifier:   EF:2F:35:51:83:4F:08:50:C4:37:ED:9F:D4:DB:4F:77:4D:4C:17:04
Authority key identifier: 94:ED:A4:B2:36:0B:47:DC:65:38:6E:3E:7E:BA:E3:5B:99:7F:2A:42
Certificate issuer:       /CN=94EDA4B2360B47DC65386E3E7EBAE35B997F2A42
Certificate serial:       4E6E7FFAA329CFDCEF8C609C8DA3A0E15FB6E41E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/94EDA4B2360B47DC65386E3E7EBAE35B997F2A42.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/15bf718d-911e-43d6-8e3c-0d1b3646e276/0/94EDA4B2360B47DC65386E3E7EBAE35B997F2A42.mft
Manifest number:          0537
Signing time:             Thu 01 Jan 2026 23:30:55 +0000
Manifest this update:     Thu 01 Jan 2026 23:25:55 +0000
Manifest next update:     Mon 05 Jan 2026 00:26:55 +0000
Files and hashes:         1: 3130332e3134342e3235302e302f32332d3234203d3e20313339343335.roa (hash: JjtMSSCssV5HqQAouXYm4WHr16DMfc7UE3Z2A9weGck=)
                          2: 94EDA4B2360B47DC65386E3E7EBAE35B997F2A42.crl (hash: +uC5sKtbPnTlK2kRRU66FVM3QxPvBhWxuQBw3rRCJFA=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/15bf718d-911e-43d6-8e3c-0d1b3646e276/0/94EDA4B2360B47DC65386E3E7EBAE35B997F2A42.crl
                          rsync://repo-rpki.idnic.net/repo/15bf718d-911e-43d6-8e3c-0d1b3646e276/0/94EDA4B2360B47DC65386E3E7EBAE35B997F2A42.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/94EDA4B2360B47DC65386E3E7EBAE35B997F2A42.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 05 Jan 2026 00:26:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:6e:7f:fa:a3:29:cf:dc:ef:8c:60:9c:8d:a3:a0:e1:5f:b6:e4:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=94EDA4B2360B47DC65386E3E7EBAE35B997F2A42
        Validity
            Not Before: Jan  1 23:25:55 2026 GMT
            Not After : Jan  5 00:26:55 2026 GMT
        Subject: CN=EF2F3551834F0850C437ED9FD4DB4F774D4C1704
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:40:dc:24:e1:3a:c2:ef:46:66:18:cc:d8:5b:
                    b1:ae:d8:36:27:af:76:2b:0e:11:4a:d2:68:c7:a0:
                    1b:f7:b3:5b:88:26:39:5f:e7:03:f5:d8:97:c0:07:
                    75:10:d7:f8:ec:61:81:24:1d:88:7b:22:35:9d:d3:
                    be:15:b5:26:78:a2:94:9f:6f:26:1d:67:8b:3b:70:
                    56:08:48:a1:73:3a:62:02:a8:7d:e0:6b:ba:ab:57:
                    18:3e:d6:e5:f6:a9:73:14:d9:49:c7:a9:89:e2:f7:
                    5e:2b:a1:ee:ab:6f:c8:00:64:df:5e:4d:da:07:1e:
                    77:08:f9:b0:cd:fb:9f:9a:6d:ca:c2:20:de:a5:b5:
                    40:81:ad:0f:c6:9b:c9:07:28:32:ef:cf:c3:dc:d0:
                    bb:32:a8:86:55:cc:31:22:1b:66:92:0f:e2:bc:63:
                    b5:d7:03:04:d0:50:a7:82:ce:b0:e8:59:52:e4:cc:
                    a5:6a:95:30:67:35:39:ad:a2:42:43:b8:ee:f4:2a:
                    a1:d0:39:8e:c2:02:7d:f8:19:16:b6:93:91:16:cb:
                    95:50:fa:59:fb:2d:3e:72:3f:99:47:c7:b7:6d:69:
                    43:b6:29:74:60:cf:37:8b:2a:a0:be:54:9b:41:09:
                    5c:71:0e:ae:81:27:90:0b:a0:e8:a9:01:fe:35:60:
                    23:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:2F:35:51:83:4F:08:50:C4:37:ED:9F:D4:DB:4F:77:4D:4C:17:04
            X509v3 Authority Key Identifier:
                keyid:94:ED:A4:B2:36:0B:47:DC:65:38:6E:3E:7E:BA:E3:5B:99:7F:2A:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/15bf718d-911e-43d6-8e3c-0d1b3646e276/0/94EDA4B2360B47DC65386E3E7EBAE35B997F2A42.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/94EDA4B2360B47DC65386E3E7EBAE35B997F2A42.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/15bf718d-911e-43d6-8e3c-0d1b3646e276/0/94EDA4B2360B47DC65386E3E7EBAE35B997F2A42.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:b4:4c:7f:72:05:93:fe:59:d7:f7:e2:d7:4a:be:38:ed:04:
         61:04:02:97:90:75:0f:a4:3f:cf:7d:ed:1b:b7:a0:9a:6f:23:
         64:cd:68:91:7c:5f:71:c3:d7:79:bf:cc:7e:c2:6f:50:92:89:
         29:dd:7b:19:9e:24:a7:c1:51:b6:a5:4e:43:e6:b7:6b:a7:0a:
         3f:1e:c0:00:4f:65:9a:6e:ec:a8:39:27:72:1e:45:a2:c6:f0:
         75:de:8d:35:a4:64:15:9e:b1:9f:c8:80:ab:1f:68:67:bf:5f:
         f3:56:2b:ed:35:83:52:32:59:c4:d5:a1:ee:2e:77:d7:88:93:
         a6:b5:6d:67:1d:67:aa:7f:14:70:76:c3:7c:6b:37:c9:f5:1d:
         c8:4f:f9:3a:c4:7a:f0:ab:de:9f:c7:f2:8c:dc:01:80:df:b7:
         8e:4d:4e:15:63:46:33:a2:55:12:e7:02:ba:11:89:74:12:9e:
         42:4f:9a:c4:67:a6:6f:cc:7f:c8:7f:09:05:8a:8f:10:a5:0c:
         eb:97:3e:11:5b:8c:14:5c:9b:48:3e:d8:7e:98:78:78:c0:91:
         18:45:27:f2:72:0d:41:26:e1:a1:c4:86:29:15:bd:57:7e:1c:
         eb:c6:c9:ef:5f:b6:d6:0c:c3:8a:6f:27:8c:3f:22:4b:53:fe:
         b7:99:c8:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 2 18:54:27 2026 by rpki-client