This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/8216f1bd-958e-47f5-948e-87e11e92e601/0/4E9222CE79B9CFEF260C837523FE2684407D535B.mft
File:                     4E9222CE79B9CFEF260C837523FE2684407D535B.mft (raw, json)
Hash identifier:          2CiqakP4DJvYrubCfsl7+pZOq6PVJXmYEqFbsByVwRo=
Subject key identifier:   0A:21:A5:91:FC:42:AC:ED:F0:13:D6:14:72:5E:AE:C6:CE:51:EF:FD
Authority key identifier: 4E:92:22:CE:79:B9:CF:EF:26:0C:83:75:23:FE:26:84:40:7D:53:5B
Certificate issuer:       /CN=4E9222CE79B9CFEF260C837523FE2684407D535B
Certificate serial:       56DC825C9701B11C0FFC68A761546A181E2DCB00
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4E9222CE79B9CFEF260C837523FE2684407D535B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/8216f1bd-958e-47f5-948e-87e11e92e601/0/4E9222CE79B9CFEF260C837523FE2684407D535B.mft
Manifest number:          9E
Signing time:             Fri 28 Nov 2025 15:30:56 +0000
Manifest this update:     Fri 28 Nov 2025 15:25:56 +0000
Manifest next update:     Tue 02 Dec 2025 02:51:56 +0000
Files and hashes:         1: 4E9222CE79B9CFEF260C837523FE2684407D535B.crl (hash: 1RMPW+ZQkYZ15UQ7MENo1kjsx0VZWpZjNsT4j46QPqQ=)
                          2: 3130332e3234322e37362e302f32342d3234203d3e20313338303737.roa (hash: ZyJrdfvAEVZbeVLqPiqVTGVt7Z4QPKAa+3EvCLOTlmU=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/8216f1bd-958e-47f5-948e-87e11e92e601/0/4E9222CE79B9CFEF260C837523FE2684407D535B.crl
                          rsync://repo-rpki.idnic.net/repo/8216f1bd-958e-47f5-948e-87e11e92e601/0/4E9222CE79B9CFEF260C837523FE2684407D535B.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4E9222CE79B9CFEF260C837523FE2684407D535B.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 02 Dec 2025 02:51:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:dc:82:5c:97:01:b1:1c:0f:fc:68:a7:61:54:6a:18:1e:2d:cb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4E9222CE79B9CFEF260C837523FE2684407D535B
        Validity
            Not Before: Nov 28 15:25:56 2025 GMT
            Not After : Dec  2 02:51:56 2025 GMT
        Subject: CN=0A21A591FC42ACEDF013D614725EAEC6CE51EFFD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:23:41:64:85:eb:b8:34:52:ac:ba:0f:38:66:
                    c6:a8:a5:6e:39:d8:de:31:79:60:78:8a:43:0b:c2:
                    de:25:22:58:96:b4:0b:90:70:95:53:27:e7:4a:77:
                    74:35:5c:56:1e:7d:ef:12:bd:ae:a0:d1:ab:83:28:
                    1d:85:cb:f8:f4:b1:e5:72:b1:8b:6b:7f:ff:f1:be:
                    35:cd:f8:c5:bd:4a:d0:95:f7:b7:78:c3:bd:48:68:
                    97:10:2f:e2:e2:37:d3:ca:47:e1:4f:72:64:6b:a3:
                    1e:09:90:3e:71:b0:e0:7d:22:52:5c:63:aa:82:84:
                    fa:f7:8c:ce:a3:45:ae:bf:c7:8b:87:53:b7:8d:0e:
                    68:ce:7e:60:4e:99:d7:31:f6:5a:fc:e9:c0:d5:10:
                    5a:b4:05:42:e8:59:f0:3c:bf:d1:f5:9a:7b:18:e9:
                    80:58:83:cb:67:af:2b:0d:0f:b6:7e:90:fe:91:ee:
                    91:6f:a5:45:00:df:a9:2f:23:6a:da:1b:07:33:d4:
                    75:fd:87:84:89:6e:11:e2:af:10:e8:65:cd:f5:d6:
                    56:07:29:88:17:fc:dc:41:0e:01:b6:78:5a:be:54:
                    19:54:16:bf:22:1c:20:ce:b1:c3:1e:0c:84:d8:53:
                    4d:96:77:4c:86:43:3a:eb:64:0c:ef:73:83:38:95:
                    0c:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:21:A5:91:FC:42:AC:ED:F0:13:D6:14:72:5E:AE:C6:CE:51:EF:FD
            X509v3 Authority Key Identifier:
                keyid:4E:92:22:CE:79:B9:CF:EF:26:0C:83:75:23:FE:26:84:40:7D:53:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/8216f1bd-958e-47f5-948e-87e11e92e601/0/4E9222CE79B9CFEF260C837523FE2684407D535B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4E9222CE79B9CFEF260C837523FE2684407D535B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8216f1bd-958e-47f5-948e-87e11e92e601/0/4E9222CE79B9CFEF260C837523FE2684407D535B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:d3:c8:2c:f9:5d:7a:a7:3d:f3:5c:fe:cb:e8:33:bc:c8:c7:
         7c:6c:d7:c9:de:bd:ce:5f:24:d7:e6:9b:a2:0f:74:4d:b8:fa:
         53:86:7f:60:bc:9a:ed:3c:07:00:87:a2:8f:39:84:0f:f1:b3:
         1b:de:66:6d:e1:3b:17:6c:49:9e:4a:da:e5:df:ff:fb:8a:35:
         f7:30:8a:07:20:9f:8a:98:21:60:f0:12:56:db:33:e1:f4:29:
         49:6e:71:ed:57:d1:a3:6d:1c:9b:bb:57:2b:7a:bf:15:f3:d7:
         7f:42:f0:f7:58:0c:71:98:82:51:cd:5c:5e:92:6d:c4:b0:e8:
         99:7b:5f:5d:2c:a4:4f:18:1a:92:57:fb:d8:10:f4:88:cc:61:
         31:67:99:f8:47:a6:5f:cc:e6:77:0f:48:1c:cd:f0:a2:1b:fe:
         1e:23:68:44:02:5a:5c:53:09:e6:78:32:45:77:1f:bc:51:f3:
         64:bf:9d:63:6e:b3:10:c7:86:e6:53:8c:ee:e3:38:ad:a6:0b:
         f1:f9:93:58:75:3c:37:68:b4:4a:2a:ef:69:e7:0a:fd:6a:bb:
         51:62:24:af:0e:36:5d:ce:72:ef:2d:bb:85:80:ad:58:24:37:
         a0:0c:13:a1:53:d1:31:97:db:07:f0:6f:9d:5d:6f:72:4f:bc:
         ee:47:48:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 30 06:48:37 2025 by rpki-client