This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/160fe2ac-29f6-43a2-be64-06a3ae9d8d20/0/9AD7127EC430A4C9B61F6AF6096D6DB6F51EFE34.mft
File:                     9AD7127EC430A4C9B61F6AF6096D6DB6F51EFE34.mft (raw, json)
Hash identifier:          jqqCOkpsO3OiWslwGw02JvS7s5g+xHLpl/B/MfHdst4=
Subject key identifier:   C0:EC:81:CD:BD:7D:45:20:BA:83:25:64:85:69:03:26:B6:3D:77:29
Authority key identifier: 9A:D7:12:7E:C4:30:A4:C9:B6:1F:6A:F6:09:6D:6D:B6:F5:1E:FE:34
Certificate issuer:       /CN=9AD7127EC430A4C9B61F6AF6096D6DB6F51EFE34
Certificate serial:       5A4C6B3AD55DBD399136E97C7089904991F19115
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9AD7127EC430A4C9B61F6AF6096D6DB6F51EFE34.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/160fe2ac-29f6-43a2-be64-06a3ae9d8d20/0/9AD7127EC430A4C9B61F6AF6096D6DB6F51EFE34.mft
Manifest number:          0305
Signing time:             Tue 02 Dec 2025 21:41:16 +0000
Manifest this update:     Tue 02 Dec 2025 21:36:16 +0000
Manifest next update:     Sat 06 Dec 2025 03:45:16 +0000
Files and hashes:         1: 9AD7127EC430A4C9B61F6AF6096D6DB6F51EFE34.crl (hash: YC5wa/Jn4gNdaTatjHyiyH9gnyFKmLx7vKdSmCLdZCg=)
                          2: 3130332e3136352e3135352e302f32342d3234203d3e20313431393231.roa (hash: UCQ+6t66v8utMHeVS3kaXKI1L1pu3itaqPBPEwMHjF8=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/160fe2ac-29f6-43a2-be64-06a3ae9d8d20/0/9AD7127EC430A4C9B61F6AF6096D6DB6F51EFE34.crl
                          rsync://repo-rpki.idnic.net/repo/160fe2ac-29f6-43a2-be64-06a3ae9d8d20/0/9AD7127EC430A4C9B61F6AF6096D6DB6F51EFE34.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9AD7127EC430A4C9B61F6AF6096D6DB6F51EFE34.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 06 Dec 2025 03:45:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:4c:6b:3a:d5:5d:bd:39:91:36:e9:7c:70:89:90:49:91:f1:91:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9AD7127EC430A4C9B61F6AF6096D6DB6F51EFE34
        Validity
            Not Before: Dec  2 21:36:16 2025 GMT
            Not After : Dec  6 03:45:16 2025 GMT
        Subject: CN=C0EC81CDBD7D4520BA83256485690326B63D7729
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:85:fc:d4:fc:15:3c:c3:ea:9f:74:e2:5b:f7:
                    fc:47:33:01:76:37:70:37:2f:1d:fa:c2:0c:a8:6d:
                    5a:a4:52:3b:8d:10:26:44:04:0b:32:62:9a:2e:6a:
                    21:98:22:0e:24:d1:b4:ca:f1:51:ec:b1:50:1b:9a:
                    5c:fa:1b:2d:a4:57:77:56:1c:8e:98:68:d0:cf:52:
                    91:b4:66:3f:45:94:b2:ae:7c:ce:6a:09:27:ff:90:
                    7d:ac:96:b1:1e:e3:65:96:d5:0f:87:c9:2a:45:9a:
                    84:71:36:79:ac:84:b0:6d:97:de:94:67:d7:7b:06:
                    92:72:c0:55:1a:de:d9:b3:3b:74:f8:cf:ee:d2:3b:
                    e1:ae:e8:94:22:23:70:e6:ec:cf:46:28:4a:e5:8a:
                    7e:39:9b:5b:9b:59:e9:a2:f0:d2:b3:5a:38:8b:b7:
                    0c:a9:bf:7d:70:7f:e6:d9:17:a1:31:5e:94:40:5f:
                    e2:2d:37:a6:52:13:a6:6a:8f:55:9f:3d:dc:f1:da:
                    46:2d:69:b2:dd:fb:30:17:e7:40:f3:fa:bb:77:9c:
                    38:3a:c3:06:a9:75:6f:18:f2:86:50:09:12:c1:de:
                    f5:8f:9f:17:fa:9d:51:e7:31:b8:81:98:d4:79:13:
                    c1:3e:65:53:f1:67:00:18:03:15:a1:4c:7b:a1:58:
                    fd:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:EC:81:CD:BD:7D:45:20:BA:83:25:64:85:69:03:26:B6:3D:77:29
            X509v3 Authority Key Identifier:
                keyid:9A:D7:12:7E:C4:30:A4:C9:B6:1F:6A:F6:09:6D:6D:B6:F5:1E:FE:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/160fe2ac-29f6-43a2-be64-06a3ae9d8d20/0/9AD7127EC430A4C9B61F6AF6096D6DB6F51EFE34.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9AD7127EC430A4C9B61F6AF6096D6DB6F51EFE34.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/160fe2ac-29f6-43a2-be64-06a3ae9d8d20/0/9AD7127EC430A4C9B61F6AF6096D6DB6F51EFE34.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:e3:97:68:28:1c:a2:d8:a5:27:29:3b:3a:9e:5e:df:a6:69:
         b4:18:4b:85:2c:09:4d:f4:c0:63:f6:fd:ac:0d:79:43:5f:3a:
         ac:d3:82:64:b0:eb:41:3f:ed:3e:c9:e0:ac:bb:6b:ed:e1:a7:
         d4:91:10:73:e0:be:e7:c2:dd:08:c5:32:a0:e7:90:98:a8:13:
         23:04:9c:9f:ee:3e:6d:21:4c:5f:8d:55:aa:51:6e:73:e6:14:
         82:13:d4:5e:27:27:e3:e3:98:55:53:b9:83:aa:77:80:b9:72:
         4a:f7:17:3c:0c:35:01:a8:27:00:64:8d:b3:2b:26:e3:3e:36:
         cc:71:10:0f:bb:1f:e1:50:f4:bf:95:7a:95:d7:c9:a8:2a:23:
         3f:d0:1d:6a:d4:cc:8d:0e:db:07:7f:bd:db:ef:b0:a3:46:e2:
         ef:6b:71:86:3a:fa:5f:1e:52:e4:65:5c:f7:36:cb:cf:5d:3f:
         24:96:58:c6:e6:39:84:7c:f5:8f:06:ce:88:b2:f6:06:af:f9:
         c6:67:99:4f:9d:20:80:5b:41:3e:d1:6d:99:81:8a:5d:4f:5f:
         04:ea:5a:d4:18:c3:73:57:2c:24:2b:36:40:65:77:2c:37:48:
         5b:5f:ec:6e:7f:0b:a9:41:d9:f8:f8:73:62:41:74:b3:7e:29:
         b3:5f:df:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 14:13:28 2025 by rpki-client