This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/69acb4a8-7804-4526-84d2-869b91a6719d/0/9EDE64DBC4098881F11B70123DF514D38F7881EE.mft
File:                     9EDE64DBC4098881F11B70123DF514D38F7881EE.mft (raw, json)
Hash identifier:          nRXSrBlSeNSRNwSIuYDV9qtraN+Ep+PLza5E3wAK+0o=
Subject key identifier:   FA:9B:17:E7:81:E4:B2:64:59:12:A5:50:66:A2:76:E3:EE:E9:87:99
Authority key identifier: 9E:DE:64:DB:C4:09:88:81:F1:1B:70:12:3D:F5:14:D3:8F:78:81:EE
Certificate issuer:       /CN=9EDE64DBC4098881F11B70123DF514D38F7881EE
Certificate serial:       5B7A53BF89AAC3962FD86D1E6416CAEB817C7930
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9EDE64DBC4098881F11B70123DF514D38F7881EE.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/69acb4a8-7804-4526-84d2-869b91a6719d/0/9EDE64DBC4098881F11B70123DF514D38F7881EE.mft
Manifest number:          0536
Signing time:             Thu 18 Dec 2025 05:42:18 +0000
Manifest this update:     Thu 18 Dec 2025 05:37:18 +0000
Manifest next update:     Sun 21 Dec 2025 10:38:18 +0000
Files and hashes:         1: 3230322e37322e3230342e302f32342d3234203d3e203538353532.roa (hash: IOVVBORu5O/pgeUVzl7VawBTg7EM0DqmgCa3hNVO+Xc=)
                          2: 3230322e37322e3139352e302f32342d3234203d3e203138313533.roa (hash: V8XIKsuHM3AcbKg6tSx3WP5UFaD99XoTgjHedx3ebJM=)
                          3: 3230322e37322e3230362e302f32342d3234203d3e203138313533.roa (hash: dCgYQVEarcna28gmSfUk7VoXXuxd4x7SFqSDwv0sDbY=)
                          4: 3230322e37322e3139342e302f32342d3234203d3e203538353532.roa (hash: RQlHQFKjRMocIaoJ23CKpmV6pCLM6t6aYekY3LLmG4U=)
                          5: 3230322e37322e3139362e302f32342d3234203d3e203138313533.roa (hash: puFXisSoUi7NizeL8UnUBZSF9nSgq80apGurKcIfDx4=)
                          6: 3230322e37322e3139392e302f32342d3234203d3e203538353532.roa (hash: 5QPif0gj1bjrqgACnfODfusTFmrjqdVRY0shct/itK4=)
                          7: 3230322e37322e3139332e302f32342d3234203d3e203138313533.roa (hash: bEx2L/DI98HUxCv/5pxB9Xae6pY7P92MPJV4QBKaeJ0=)
                          8: 3230322e37322e3230372e302f32342d3234203d3e203538333839.roa (hash: mMGZsm6q2Cz9y5dWG/zQD6+ULZz3IpMnOmvYJyKBkxU=)
                          9: 3230322e37322e3230342e302f32332d3233203d3e203538353532.roa (hash: GdxXTcqOs77ZDWh2maZVFcjOZNFSKj6ecuomfp+ELnY=)
                          10: 3230322e37322e3230332e302f32342d3234203d3e203538353532.roa (hash: ClWieUUujizdV+v3zWqEr3zcFrew9Y3pcCg166brANs=)
                          11: 3230322e37322e3230352e302f32342d3234203d3e203538353532.roa (hash: EZK2HW82EoviLvpddG+zTsR++pGZRfxBTBEevg15VUQ=)
                          12: 3230322e37322e3230312e302f32342d3234203d3e203138313533.roa (hash: gVVEZCabi7tKzG7WnkOcz1INBITtjz6Gg7pU/p/uLbE=)
                          13: 3230322e37322e3139322e302f32342d3234203d3e203138313533.roa (hash: 4JRHGlgTjiQ2E4ohNDpjmFcrV1mqUH90bgY8D6I5glU=)
                          14: 9EDE64DBC4098881F11B70123DF514D38F7881EE.crl (hash: wMJ8Liy9BrquodF2psR+KDTkBrUlFfaaBx6mCVePloM=)
                          15: 3230322e37322e3230322e302f32342d3234203d3e203138313533.roa (hash: Jse+7YyAFU6B19QF+EnGon6ubeg0wEMkIY6HtcfnBwc=)
                          16: 3230322e37322e3139382e302f32342d3234203d3e203538353532.roa (hash: z35rtBPMp8YFiSMqabTLze0z5N+QVHUo3BCJ9n9BLFY=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/69acb4a8-7804-4526-84d2-869b91a6719d/0/9EDE64DBC4098881F11B70123DF514D38F7881EE.crl
                          rsync://repo-rpki.idnic.net/repo/69acb4a8-7804-4526-84d2-869b91a6719d/0/9EDE64DBC4098881F11B70123DF514D38F7881EE.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9EDE64DBC4098881F11B70123DF514D38F7881EE.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 21 Dec 2025 10:38:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:7a:53:bf:89:aa:c3:96:2f:d8:6d:1e:64:16:ca:eb:81:7c:79:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9EDE64DBC4098881F11B70123DF514D38F7881EE
        Validity
            Not Before: Dec 18 05:37:18 2025 GMT
            Not After : Dec 21 10:38:18 2025 GMT
        Subject: CN=FA9B17E781E4B2645912A55066A276E3EEE98799
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:e0:47:e0:31:8e:b4:89:26:63:e2:61:ac:f6:
                    9d:a8:03:fe:78:d9:f0:f4:90:00:10:7e:dc:37:27:
                    6e:8c:b6:7a:b8:ee:4f:25:d0:48:42:d9:8b:f6:55:
                    ac:e4:fa:72:5a:62:30:4d:52:51:9f:f5:86:89:6b:
                    ca:fb:30:8a:30:1d:11:1c:f7:43:3f:c8:cd:b6:f5:
                    47:96:e4:3f:6d:fd:82:a2:f4:3f:cc:6a:5f:49:b5:
                    0f:5a:4c:9c:35:60:cb:42:aa:e6:79:f0:40:40:64:
                    52:a5:4b:d5:70:5a:06:85:4e:db:73:a3:07:66:a2:
                    e3:4c:cd:c7:db:dc:07:a2:f7:fb:bf:39:5e:10:dd:
                    21:a1:53:f6:30:a3:46:d5:66:9e:2c:95:47:34:a9:
                    ab:66:13:b0:8f:10:46:71:78:ad:93:98:cc:0d:41:
                    8c:17:36:f0:c5:3c:73:51:12:63:fd:c3:2a:e2:c4:
                    ff:55:cd:7a:7e:ec:eb:84:18:ba:e0:01:02:2a:89:
                    ec:38:00:9e:aa:cf:89:87:23:a1:40:4d:fb:4d:a4:
                    94:3b:7a:60:44:85:c2:d0:9b:57:3d:48:38:4f:36:
                    fb:8e:c2:63:a8:5b:e8:f5:68:f1:0f:e0:24:99:c1:
                    6d:09:7a:77:51:27:90:ae:c1:a3:d3:09:1f:e1:23:
                    fc:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:9B:17:E7:81:E4:B2:64:59:12:A5:50:66:A2:76:E3:EE:E9:87:99
            X509v3 Authority Key Identifier:
                keyid:9E:DE:64:DB:C4:09:88:81:F1:1B:70:12:3D:F5:14:D3:8F:78:81:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/69acb4a8-7804-4526-84d2-869b91a6719d/0/9EDE64DBC4098881F11B70123DF514D38F7881EE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9EDE64DBC4098881F11B70123DF514D38F7881EE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/69acb4a8-7804-4526-84d2-869b91a6719d/0/9EDE64DBC4098881F11B70123DF514D38F7881EE.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:63:e3:52:77:67:0d:fe:57:d7:ee:9c:57:3f:87:aa:26:3a:
         e1:0e:2d:42:57:a3:70:12:8b:44:49:08:5c:f1:7d:ca:97:59:
         32:fe:f5:cf:e0:aa:5d:f8:68:84:ce:36:f8:ed:02:eb:49:ae:
         f2:b0:b7:39:ea:a1:ce:7c:73:e8:a0:23:89:a5:d6:1a:10:a8:
         82:65:b5:09:3d:6f:22:b4:fa:41:44:ce:f2:e7:44:76:91:90:
         11:2e:c7:66:a7:53:0c:f8:c2:01:f8:89:97:99:61:e6:2c:9c:
         80:6b:b8:be:4c:f0:d9:fe:89:d6:25:62:9b:9e:82:0c:44:3d:
         3f:fa:a2:eb:95:05:90:ec:0c:ec:ad:f6:74:4f:f4:7e:fb:c9:
         d4:31:20:e1:22:e8:b1:29:52:cf:f6:47:66:b2:d8:5f:c4:e3:
         87:05:96:20:a8:bd:be:87:11:02:b6:de:35:6b:68:8d:8e:c3:
         3b:54:25:7e:5c:1a:17:73:87:af:28:1a:73:ab:fd:a4:b9:c6:
         6e:8d:e6:44:c6:fb:dc:2c:17:32:63:2f:89:45:b0:66:d8:41:
         6e:36:7f:35:fc:25:ea:5d:7b:28:ae:ec:73:55:f9:cf:1b:31:
         ca:1e:6a:fd:ed:c8:69:24:a1:b3:46:e2:35:07:43:0f:fc:a7:
         68:c8:b9:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 23:39:46 2025 by rpki-client