This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/993895e2-4020-4c3f-987f-dacdf8e8ea29/1/94A6235DB03EF9CA77387E4A3F13885A6FA1DD07.mft
File:                     94A6235DB03EF9CA77387E4A3F13885A6FA1DD07.mft (raw, json)
Hash identifier:          31tQLtqgyid1jXR3zCtSKGS0oAAU8Oa8EQoKsOQ8uTE=
Subject key identifier:   7A:40:C6:E8:6A:2A:54:68:6D:02:5B:2C:76:86:93:42:47:0A:23:8D
Authority key identifier: 94:A6:23:5D:B0:3E:F9:CA:77:38:7E:4A:3F:13:88:5A:6F:A1:DD:07
Certificate issuer:       /CN=94A6235DB03EF9CA77387E4A3F13885A6FA1DD07
Certificate serial:       6578816E2DEA04FC00B276EB4715106C52990CC8
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/94A6235DB03EF9CA77387E4A3F13885A6FA1DD07.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/993895e2-4020-4c3f-987f-dacdf8e8ea29/1/94A6235DB03EF9CA77387E4A3F13885A6FA1DD07.mft
Manifest number:          1E
Signing time:             Fri 05 Dec 2025 14:51:14 +0000
Manifest this update:     Fri 05 Dec 2025 14:46:14 +0000
Manifest next update:     Mon 08 Dec 2025 20:45:14 +0000
Files and hashes:         1: 94A6235DB03EF9CA77387E4A3F13885A6FA1DD07.crl (hash: 2uZlmdZ2ehdcgJjxijqJal9zkcfmw17fsH0aWrL30ds=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/993895e2-4020-4c3f-987f-dacdf8e8ea29/1/94A6235DB03EF9CA77387E4A3F13885A6FA1DD07.crl
                          rsync://repo-rpki.idnic.net/repo/993895e2-4020-4c3f-987f-dacdf8e8ea29/1/94A6235DB03EF9CA77387E4A3F13885A6FA1DD07.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/94A6235DB03EF9CA77387E4A3F13885A6FA1DD07.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 08 Dec 2025 20:45:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:78:81:6e:2d:ea:04:fc:00:b2:76:eb:47:15:10:6c:52:99:0c:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=94A6235DB03EF9CA77387E4A3F13885A6FA1DD07
        Validity
            Not Before: Dec  5 14:46:14 2025 GMT
            Not After : Dec  8 20:45:14 2025 GMT
        Subject: CN=7A40C6E86A2A54686D025B2C76869342470A238D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:a6:b6:be:30:83:5d:98:34:1e:a1:df:d3:9b:
                    86:45:6b:0a:90:95:0f:77:6b:34:09:10:b0:7f:1a:
                    8f:0c:27:7d:66:ac:81:2c:45:da:74:b4:60:8d:a7:
                    63:6e:8e:aa:a4:8c:05:0d:94:09:37:2d:bd:1f:7d:
                    6a:55:9b:d1:68:85:c7:7a:00:fa:5b:36:b4:3c:a8:
                    fb:11:04:8f:15:b5:a4:b4:5a:e9:e3:e2:c4:c0:2d:
                    fb:30:16:1e:d7:91:24:52:2a:0b:0a:e4:52:22:3d:
                    99:bc:50:b3:5f:88:54:7d:e4:5d:f0:11:f3:06:c9:
                    bb:ea:ad:ea:c1:6f:81:55:12:b3:ac:88:d0:49:f8:
                    70:b9:7c:84:44:c6:29:f1:17:65:8e:b1:ed:ab:72:
                    78:81:2d:a6:52:3b:7e:ae:f7:2a:7c:13:5c:a9:84:
                    20:62:45:02:a8:a1:7a:f4:a8:af:b0:19:81:1e:42:
                    72:ca:95:02:23:3a:d8:a0:67:38:5b:a1:43:45:fd:
                    86:dc:e1:8f:8a:cd:40:d6:a2:04:d7:06:01:ca:0e:
                    75:e8:0c:da:24:4f:a0:3a:6e:fa:76:aa:56:54:e6:
                    a1:28:91:97:e6:6d:18:87:23:75:3e:c9:0a:db:e4:
                    ee:66:81:86:46:39:6a:19:64:d1:ee:52:1d:18:8b:
                    5f:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:40:C6:E8:6A:2A:54:68:6D:02:5B:2C:76:86:93:42:47:0A:23:8D
            X509v3 Authority Key Identifier:
                keyid:94:A6:23:5D:B0:3E:F9:CA:77:38:7E:4A:3F:13:88:5A:6F:A1:DD:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/993895e2-4020-4c3f-987f-dacdf8e8ea29/1/94A6235DB03EF9CA77387E4A3F13885A6FA1DD07.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/94A6235DB03EF9CA77387E4A3F13885A6FA1DD07.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/993895e2-4020-4c3f-987f-dacdf8e8ea29/1/94A6235DB03EF9CA77387E4A3F13885A6FA1DD07.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:0f:e7:ee:ac:22:13:af:a5:10:74:ea:f3:c6:d7:99:30:4c:
         64:eb:e8:54:d5:f6:b9:35:7c:a0:af:ec:43:04:a8:5d:a8:07:
         ce:43:a7:96:d9:7b:05:dd:42:c7:59:23:1a:60:bb:71:0b:80:
         32:56:5b:67:33:8f:3f:3b:03:2a:30:38:98:61:64:ef:12:32:
         03:75:d0:8e:e4:cd:22:60:3c:a2:68:87:28:df:cd:9a:8a:0d:
         e1:6f:83:49:08:85:8d:26:82:4d:e7:72:65:55:9e:52:38:b2:
         ac:98:64:69:46:14:5f:f4:ce:40:3e:bb:1c:ef:51:23:ce:ad:
         3a:3f:5a:6e:93:b0:7a:24:89:f8:84:cb:bd:88:46:3f:f3:7c:
         75:7a:07:24:ea:76:9f:94:d0:49:67:c1:a4:50:17:b3:cc:90:
         d6:09:a5:68:b5:11:0a:8f:ea:1e:14:7a:dd:61:86:bf:ec:31:
         d6:ea:7b:af:f4:ad:42:e2:2d:45:a2:48:0c:d8:11:17:ea:ff:
         ec:37:2d:fc:f6:fe:f6:b6:ac:5b:90:45:59:e2:6e:09:18:f1:
         a7:4d:d9:f7:09:9c:9e:84:e5:98:5a:d5:9c:3a:e1:e8:e8:4b:
         31:18:2f:e7:0c:92:3c:22:eb:88:09:c8:77:cb:53:01:98:90:
         d5:00:f7:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 18:56:51 2025 by rpki-client