This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/89a40089-6041-45ed-8e44-a997c8acf480/0/98906779AB8F30762B65B3E6AD7F48326A08605E.mft
File:                     98906779AB8F30762B65B3E6AD7F48326A08605E.mft (raw, json)
Hash identifier:          /a0b2RtGVTqh07+8eYyzHY1F/vJBL4kTfVLxaq7o1j0=
Subject key identifier:   91:11:75:2F:A4:D0:F9:75:56:D4:F3:F4:AB:2A:2F:6B:48:78:C7:2F
Authority key identifier: 98:90:67:79:AB:8F:30:76:2B:65:B3:E6:AD:7F:48:32:6A:08:60:5E
Certificate issuer:       /CN=98906779AB8F30762B65B3E6AD7F48326A08605E
Certificate serial:       1035DB8CADD4FCE2975E30D60503BF2E6311BF29
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/98906779AB8F30762B65B3E6AD7F48326A08605E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/89a40089-6041-45ed-8e44-a997c8acf480/0/98906779AB8F30762B65B3E6AD7F48326A08605E.mft
Manifest number:          01A1
Signing time:             Mon 01 Dec 2025 08:52:35 +0000
Manifest this update:     Mon 01 Dec 2025 08:47:35 +0000
Manifest next update:     Thu 04 Dec 2025 17:20:35 +0000
Files and hashes:         1: 98906779AB8F30762B65B3E6AD7F48326A08605E.crl (hash: sFeQIQC1hzmhIctIRorJwZDzdmMbMiqWNaWRR7tWyjg=)
                          2: 3130332e3132362e3233322e302f32342d3234203d3e20313530393738.roa (hash: eIcKVswkxVzPLsHeuZgtjUH51030AdVpi+kyPLC0pTE=)
                          3: 3130332e3132362e3233322e302f32332d3233203d3e20313530393738.roa (hash: 7rcqjDK1en4Ve1PM9Wuc4mrM+RdU8sJ+v75czM9rFEY=)
                          4: 3130332e3132362e3233332e302f32342d3234203d3e20313530393738.roa (hash: bdtz3V8NAXQ4FsPLxYoFwHQihtebd8fh/UmhU4gX81I=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/89a40089-6041-45ed-8e44-a997c8acf480/0/98906779AB8F30762B65B3E6AD7F48326A08605E.crl
                          rsync://repo-rpki.idnic.net/repo/89a40089-6041-45ed-8e44-a997c8acf480/0/98906779AB8F30762B65B3E6AD7F48326A08605E.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/98906779AB8F30762B65B3E6AD7F48326A08605E.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 04 Dec 2025 17:20:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:35:db:8c:ad:d4:fc:e2:97:5e:30:d6:05:03:bf:2e:63:11:bf:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98906779AB8F30762B65B3E6AD7F48326A08605E
        Validity
            Not Before: Dec  1 08:47:35 2025 GMT
            Not After : Dec  4 17:20:35 2025 GMT
        Subject: CN=9111752FA4D0F97556D4F3F4AB2A2F6B4878C72F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:93:27:61:bc:7f:d5:99:7c:10:0e:c8:83:11:
                    c2:ec:d8:89:81:7f:00:c5:6f:c0:5b:ea:2c:f0:b8:
                    62:c8:b8:9e:68:70:70:31:70:fa:11:df:5b:2a:c2:
                    9b:b1:fe:30:41:ec:8a:15:b7:3f:86:66:98:df:c3:
                    7c:3d:7c:df:8c:ab:94:bf:c6:48:54:06:bc:16:b9:
                    f8:ed:6c:a0:e8:0b:c8:24:ea:bf:8a:36:9a:a0:de:
                    ea:ce:8a:68:05:78:25:85:1b:85:49:5c:5c:24:65:
                    d6:89:7b:36:7c:75:74:aa:c7:0c:0c:a3:f3:ef:d9:
                    2a:19:a8:a4:25:a8:e0:93:58:75:e0:53:82:ab:c5:
                    11:51:d1:3c:48:c4:4a:59:74:1a:df:18:53:f8:9b:
                    52:15:99:5b:6c:58:9a:e6:be:53:88:6b:32:1f:d4:
                    96:ef:4d:2f:81:c3:c2:83:e7:6f:09:84:69:60:1f:
                    81:38:6c:8d:26:00:d8:49:e9:56:48:92:09:e7:9b:
                    f0:40:fb:d0:2c:4a:c5:65:b1:30:ed:90:33:78:e7:
                    23:bf:1c:7b:e2:e6:69:5b:fc:50:9f:89:4c:4f:b9:
                    36:31:46:47:0c:73:3f:33:d0:90:e5:48:7a:d0:c4:
                    66:d2:59:cb:f4:67:92:d2:b7:9b:32:17:79:89:28:
                    0f:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:11:75:2F:A4:D0:F9:75:56:D4:F3:F4:AB:2A:2F:6B:48:78:C7:2F
            X509v3 Authority Key Identifier:
                keyid:98:90:67:79:AB:8F:30:76:2B:65:B3:E6:AD:7F:48:32:6A:08:60:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/89a40089-6041-45ed-8e44-a997c8acf480/0/98906779AB8F30762B65B3E6AD7F48326A08605E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/98906779AB8F30762B65B3E6AD7F48326A08605E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/89a40089-6041-45ed-8e44-a997c8acf480/0/98906779AB8F30762B65B3E6AD7F48326A08605E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:6d:dd:f5:5c:d1:49:54:7e:f5:13:71:e7:22:c5:26:9f:ce:
         db:39:e1:df:9a:7f:16:6e:55:6e:d3:99:dc:88:b1:43:2b:68:
         ba:34:84:36:b8:c9:49:f5:f7:4f:a3:86:cc:ca:40:dd:8c:0c:
         28:ad:51:f2:c3:24:c7:96:a2:ee:22:a1:c2:74:e0:ed:8b:a1:
         3a:b0:06:21:ae:71:9e:22:78:6f:6d:86:59:73:0b:b6:1d:5b:
         d8:ef:2e:a8:bb:2e:71:f2:0b:97:55:7c:09:a9:15:62:0b:d6:
         09:63:e0:86:58:c2:a7:27:c6:d6:98:58:b9:71:bd:e4:c9:0d:
         a2:7e:cf:e8:10:e7:4d:20:36:f8:b3:5e:47:a1:8a:61:a1:bb:
         ea:8a:46:5a:2c:8f:31:44:23:b8:62:48:e1:da:d7:c4:e1:02:
         1c:f3:d8:a9:e1:b3:3d:62:a3:03:7c:b4:0e:74:1c:2e:49:e5:
         7e:dc:0b:bb:fc:4b:46:ca:9d:ae:c4:28:0c:b1:4e:5d:7e:6f:
         b6:25:b4:5b:35:e9:87:3e:bc:24:51:89:a3:d5:aa:27:a3:88:
         49:a9:79:97:50:16:17:5d:9f:01:4f:35:7c:e0:75:98:84:23:
         8c:9e:1f:bf:39:54:74:68:dc:b9:62:4c:9d:7e:45:e6:00:73:
         ae:9a:9b:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 14:14:23 2025 by rpki-client