This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/21cbc927-f4e2-4153-b66b-ce1ec02d7410/0/91E7E283422E38A6A6EDB38593EE074DF8FA29C6.mft
File:                     91E7E283422E38A6A6EDB38593EE074DF8FA29C6.mft (raw, json)
Hash identifier:          aDlaTxF/gVgg6IDwQGIpkXgTd9Yhk/vI0NztemSqz4g=
Subject key identifier:   9A:C6:5C:1A:83:E3:D9:34:07:C7:91:04:A3:E3:BB:33:2C:E8:59:D3
Authority key identifier: 91:E7:E2:83:42:2E:38:A6:A6:ED:B3:85:93:EE:07:4D:F8:FA:29:C6
Certificate issuer:       /CN=91E7E283422E38A6A6EDB38593EE074DF8FA29C6
Certificate serial:       71BEE3E16389A6617B3C0C105A3DFED591BAEB0C
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/91E7E283422E38A6A6EDB38593EE074DF8FA29C6.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/21cbc927-f4e2-4153-b66b-ce1ec02d7410/0/91E7E283422E38A6A6EDB38593EE074DF8FA29C6.mft
Manifest number:          0530
Signing time:             Thu 18 Dec 2025 15:21:21 +0000
Manifest this update:     Thu 18 Dec 2025 15:16:21 +0000
Manifest next update:     Sun 21 Dec 2025 15:54:21 +0000
Files and hashes:         1: 91E7E283422E38A6A6EDB38593EE074DF8FA29C6.crl (hash: ApNIiyHWdGic1/EoXbZJ8rPln6TM1dzqcp4fZY5d/Xo=)
                          2: 3130332e3134322e31342e302f32332d3234203d3e20313339333735.roa (hash: Grgdt8iRUAIyZ2qFHWZrH4g5ALyIzB9vEqddBLCgUpI=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/21cbc927-f4e2-4153-b66b-ce1ec02d7410/0/91E7E283422E38A6A6EDB38593EE074DF8FA29C6.crl
                          rsync://repo-rpki.idnic.net/repo/21cbc927-f4e2-4153-b66b-ce1ec02d7410/0/91E7E283422E38A6A6EDB38593EE074DF8FA29C6.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/91E7E283422E38A6A6EDB38593EE074DF8FA29C6.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 21 Dec 2025 15:54:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:be:e3:e1:63:89:a6:61:7b:3c:0c:10:5a:3d:fe:d5:91:ba:eb:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91E7E283422E38A6A6EDB38593EE074DF8FA29C6
        Validity
            Not Before: Dec 18 15:16:21 2025 GMT
            Not After : Dec 21 15:54:21 2025 GMT
        Subject: CN=9AC65C1A83E3D93407C79104A3E3BB332CE859D3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:31:e7:1a:b3:3c:fe:da:cc:18:d7:1e:50:ad:
                    f4:c7:b0:17:09:3a:85:cd:2a:de:17:0c:2d:cf:78:
                    b3:56:f4:4d:53:27:e3:d1:cd:d3:06:2d:79:ee:88:
                    c5:0d:67:c3:a0:45:45:c7:8b:16:87:2d:5d:eb:b0:
                    fd:06:ee:57:27:2e:f9:bc:46:a7:06:65:ca:15:c4:
                    fe:2e:bf:87:7a:a3:45:13:ef:72:a8:aa:aa:ea:85:
                    bc:d0:34:2a:72:b2:60:8e:ed:e1:39:da:90:17:d3:
                    fc:af:86:15:20:0b:3e:48:67:f0:ec:e5:bb:a2:20:
                    41:cf:06:84:b7:9a:a8:a5:fe:e9:90:c0:42:8a:99:
                    79:68:1e:b6:f2:b0:4c:f4:35:83:5b:94:1e:df:9d:
                    fa:c3:95:e3:60:c6:78:a9:d7:ce:ee:81:c8:39:b3:
                    c4:e3:47:c3:43:2a:82:98:77:8d:94:f1:8e:5f:dc:
                    67:c9:d3:e6:1c:a5:3c:d8:9a:f7:02:0a:2a:99:23:
                    41:c9:85:11:5e:13:21:7d:d7:dd:75:da:11:37:4f:
                    e8:19:6e:14:3a:8d:c6:7a:1d:9c:dd:2d:2e:03:24:
                    b9:28:1b:6b:3a:be:78:48:27:08:a2:49:97:7a:be:
                    55:55:0d:b6:82:a9:55:34:de:96:5b:10:38:35:b1:
                    b5:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:C6:5C:1A:83:E3:D9:34:07:C7:91:04:A3:E3:BB:33:2C:E8:59:D3
            X509v3 Authority Key Identifier:
                keyid:91:E7:E2:83:42:2E:38:A6:A6:ED:B3:85:93:EE:07:4D:F8:FA:29:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/21cbc927-f4e2-4153-b66b-ce1ec02d7410/0/91E7E283422E38A6A6EDB38593EE074DF8FA29C6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/91E7E283422E38A6A6EDB38593EE074DF8FA29C6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/21cbc927-f4e2-4153-b66b-ce1ec02d7410/0/91E7E283422E38A6A6EDB38593EE074DF8FA29C6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ef:45:16:b3:f7:0f:7a:9e:c1:e7:49:08:9a:06:29:70:a9:7a:
         2f:51:8b:52:7c:20:35:03:c7:67:82:9f:a9:8d:ec:04:ad:34:
         92:f7:ea:26:67:3e:8f:43:11:98:a1:7b:54:b9:e2:1f:13:fd:
         e1:73:c5:35:f2:63:4e:11:0d:54:65:46:f9:78:b3:ae:32:60:
         4f:fe:24:f8:df:77:41:d9:e5:c8:4a:c9:84:1b:83:3c:d8:83:
         9d:21:4b:db:0f:a5:3f:76:30:8d:b2:b7:57:68:12:b4:3b:84:
         7e:c7:97:72:b9:1f:57:b1:46:24:5f:10:3a:b5:21:6d:22:0c:
         38:9e:80:d0:aa:0e:b6:44:e9:ad:df:30:98:d6:cb:10:36:64:
         63:e8:46:42:dc:da:b6:2a:d1:16:3c:cb:a3:68:62:69:4c:6f:
         66:02:9c:79:c3:6b:e3:30:1f:b7:49:fe:4e:ee:76:f4:56:08:
         64:e5:e9:5f:1e:14:71:70:6e:96:56:9f:b7:62:34:b1:b0:94:
         01:03:4f:c1:41:d2:bb:8b:ae:24:b9:fd:84:e0:6f:82:3a:db:
         93:27:9f:3f:98:88:e9:d2:7a:c9:93:dc:71:95:f5:d5:72:4f:
         36:65:a1:5a:af:c0:f8:e3:3a:45:66:52:e4:26:71:13:40:d8:
         be:e2:bc:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 09:12:32 2025 by rpki-client