This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/50d00718-5210-4438-b64d-62ec1f3ebcd0/0/94F6C26027B9F72AA8701D1296627FA57809A6F3.mft
File:                     94F6C26027B9F72AA8701D1296627FA57809A6F3.mft (raw, json)
Hash identifier:          b6XgHiCvOFiUZaspfzZ0LatKRv79MVagaYHvjYec8yE=
Subject key identifier:   11:0A:67:58:5F:26:9D:B4:8D:36:79:78:E1:EB:29:E2:50:C3:CD:97
Authority key identifier: 94:F6:C2:60:27:B9:F7:2A:A8:70:1D:12:96:62:7F:A5:78:09:A6:F3
Certificate issuer:       /CN=94F6C26027B9F72AA8701D1296627FA57809A6F3
Certificate serial:       6970CDE054B6AA1CE4BD4D7E1C56F97F7B1A4171
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/94F6C26027B9F72AA8701D1296627FA57809A6F3.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/50d00718-5210-4438-b64d-62ec1f3ebcd0/0/94F6C26027B9F72AA8701D1296627FA57809A6F3.mft
Manifest number:          0127
Signing time:             Tue 02 Dec 2025 09:23:46 +0000
Manifest this update:     Tue 02 Dec 2025 09:18:46 +0000
Manifest next update:     Fri 05 Dec 2025 15:45:46 +0000
Files and hashes:         1: 3130332e3131332e3132342e302f32322d3234203d3e20313337333433.roa (hash: VlfA2F9WRPy+vssWvwHG73lbx3hyMs2V96FvcvqUxfA=)
                          2: 94F6C26027B9F72AA8701D1296627FA57809A6F3.crl (hash: MwEuHsdOshNW1LN9RnUN9K2Tudv0c8WGERVccJPoRVE=)
                          3: 3130332e3131332e3132342e302f32342d3234203d3e20313337333433.roa (hash: o89Hh5vp0Qt2o58GB1JQke74RyM5ltdrLMS25ekXGFY=)
                          4: 3130332e3131332e3132342e302f32322d3232203d3e20313337333433.roa (hash: PA93RwBGZzvBREAFM1iYNGPBBAoGkHxnKXuygsv1ptE=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/50d00718-5210-4438-b64d-62ec1f3ebcd0/0/94F6C26027B9F72AA8701D1296627FA57809A6F3.crl
                          rsync://repo-rpki.idnic.net/repo/50d00718-5210-4438-b64d-62ec1f3ebcd0/0/94F6C26027B9F72AA8701D1296627FA57809A6F3.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/94F6C26027B9F72AA8701D1296627FA57809A6F3.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 05 Dec 2025 15:45:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:70:cd:e0:54:b6:aa:1c:e4:bd:4d:7e:1c:56:f9:7f:7b:1a:41:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=94F6C26027B9F72AA8701D1296627FA57809A6F3
        Validity
            Not Before: Dec  2 09:18:46 2025 GMT
            Not After : Dec  5 15:45:46 2025 GMT
        Subject: CN=110A67585F269DB48D367978E1EB29E250C3CD97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:27:da:38:74:f7:c9:c9:53:8a:bd:56:18:21:
                    01:1b:dd:a6:e5:50:e8:94:c0:d9:1e:81:1b:83:d7:
                    a2:5e:2e:a4:b0:c5:7a:13:5e:97:b7:78:01:c0:0a:
                    1c:f8:fc:ed:e4:16:d5:77:9f:37:86:80:09:87:86:
                    9f:6c:03:4c:f4:f2:f2:e7:3f:dc:11:5b:86:a6:2f:
                    c0:bc:6e:91:9a:0a:18:ba:de:36:a2:07:8a:2b:87:
                    49:cc:39:07:b8:e0:11:f8:cf:31:2c:62:09:4e:f0:
                    b3:0b:39:62:9d:fe:00:63:a6:3b:4f:67:3c:dd:3c:
                    ae:d4:b0:50:a5:2d:69:a6:60:64:78:7c:9e:5e:fe:
                    03:6c:ff:61:30:83:ca:5a:89:fd:5a:5b:46:6c:e5:
                    3c:b0:bc:b6:b4:7c:f9:a2:fc:21:9b:e0:5d:82:99:
                    40:d3:ee:44:94:13:77:1b:52:ac:4f:1b:e3:84:22:
                    4f:16:e1:a8:47:5a:3f:88:6c:9f:25:64:29:54:0e:
                    ce:cc:fc:4f:aa:d1:e2:58:d1:e9:e6:bc:93:5c:f9:
                    d1:ae:a1:2f:b2:85:75:be:da:cc:ec:da:76:ae:28:
                    52:f3:1c:1e:86:13:c3:15:a8:86:1d:b8:10:c0:63:
                    2b:0f:a7:a0:0c:60:1a:af:9b:63:42:cd:81:d4:ae:
                    12:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:0A:67:58:5F:26:9D:B4:8D:36:79:78:E1:EB:29:E2:50:C3:CD:97
            X509v3 Authority Key Identifier:
                keyid:94:F6:C2:60:27:B9:F7:2A:A8:70:1D:12:96:62:7F:A5:78:09:A6:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/50d00718-5210-4438-b64d-62ec1f3ebcd0/0/94F6C26027B9F72AA8701D1296627FA57809A6F3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/94F6C26027B9F72AA8701D1296627FA57809A6F3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/50d00718-5210-4438-b64d-62ec1f3ebcd0/0/94F6C26027B9F72AA8701D1296627FA57809A6F3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:0d:3f:69:2b:59:92:26:a0:5c:be:fd:f9:81:a2:f9:ae:29:
         8b:97:39:da:e3:05:3c:ab:9b:f4:28:14:97:3d:6a:b2:04:e8:
         17:9f:c6:29:c1:73:c8:52:0a:45:8d:0a:fb:23:dd:ea:4d:b7:
         d9:1e:cd:af:29:c8:7f:08:85:ea:a2:5b:e1:c2:5b:75:9a:d3:
         56:9f:32:92:f3:32:21:e9:7f:66:d2:d0:3e:b8:07:a6:11:df:
         82:dc:8c:e8:d1:e4:7b:2f:99:96:16:ec:6f:72:1e:1b:31:3b:
         e5:d9:e1:15:d2:83:9d:84:bb:af:fe:9e:8c:ac:8e:83:4e:15:
         34:bf:37:94:0b:30:05:fe:e7:77:77:db:17:64:b2:42:f5:56:
         39:54:8d:52:37:5b:04:cf:3e:be:c3:5c:54:74:33:f2:df:a9:
         18:d9:35:97:53:91:6d:ac:9c:8c:4c:5f:e3:d0:69:a4:74:2e:
         3f:6f:3a:d0:4c:a6:66:ed:4f:cc:07:e9:b2:64:84:30:ba:80:
         0e:ad:b2:8f:61:f2:b9:69:64:f2:ce:16:98:ca:94:00:e5:2a:
         f9:6a:06:f2:4f:b9:ec:62:c6:c8:3b:5b:4c:81:51:af:9f:ac:
         60:9c:95:7d:63:21:16:99:74:a3:61:81:90:6b:8a:7e:76:7e:
         57:a1:1e:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 13:57:09 2025 by rpki-client