This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/9ad73895-c84c-464f-9b4f-8d30306b9727/0/9E106F95CC461B5B1F487A53F6B2D5A36F627004.mft
File:                     9E106F95CC461B5B1F487A53F6B2D5A36F627004.mft (raw, json)
Hash identifier:          d2Ey+F5pu/TGw0G4Qtlavj0ltlfnTmqtU84ZbFxPMG8=
Subject key identifier:   23:A7:DB:7E:51:1B:0D:75:2F:73:19:12:1F:79:0E:A6:5F:9C:43:E7
Authority key identifier: 9E:10:6F:95:CC:46:1B:5B:1F:48:7A:53:F6:B2:D5:A3:6F:62:70:04
Certificate issuer:       /CN=9E106F95CC461B5B1F487A53F6B2D5A36F627004
Certificate serial:       4DC53E15BAFFE250A44C8FEB5D5FF06C3F8E0284
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9E106F95CC461B5B1F487A53F6B2D5A36F627004.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/9ad73895-c84c-464f-9b4f-8d30306b9727/0/9E106F95CC461B5B1F487A53F6B2D5A36F627004.mft
Manifest number:          0484
Signing time:             Wed 03 Dec 2025 11:01:11 +0000
Manifest this update:     Wed 03 Dec 2025 10:56:11 +0000
Manifest next update:     Sat 06 Dec 2025 20:06:11 +0000
Files and hashes:         1: 9E106F95CC461B5B1F487A53F6B2D5A36F627004.crl (hash: jBIk4wkVgGjloIIg6NRqp4zTN00kP4U3bTVDo1uJLy4=)
                          2: 3130332e3136322e3131322e302f32332d3234203d3e20313431363532.roa (hash: kXJhf8bjfIsjZr7MyRalHajFn6WxrxEgkOVjsPKw9mY=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/9ad73895-c84c-464f-9b4f-8d30306b9727/0/9E106F95CC461B5B1F487A53F6B2D5A36F627004.crl
                          rsync://repo-rpki.idnic.net/repo/9ad73895-c84c-464f-9b4f-8d30306b9727/0/9E106F95CC461B5B1F487A53F6B2D5A36F627004.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9E106F95CC461B5B1F487A53F6B2D5A36F627004.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 06 Dec 2025 12:07:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:c5:3e:15:ba:ff:e2:50:a4:4c:8f:eb:5d:5f:f0:6c:3f:8e:02:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9E106F95CC461B5B1F487A53F6B2D5A36F627004
        Validity
            Not Before: Dec  3 10:56:11 2025 GMT
            Not After : Dec  6 20:06:11 2025 GMT
        Subject: CN=23A7DB7E511B0D752F7319121F790EA65F9C43E7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:b7:ee:e7:f5:74:02:77:29:34:e7:58:4f:81:
                    09:79:05:57:7e:ea:9c:57:ed:d2:f6:5c:03:06:72:
                    4c:9b:34:ee:bc:87:2b:2e:b6:61:be:bc:32:e7:16:
                    52:fe:68:96:58:f5:1d:83:75:a7:87:54:a8:09:ff:
                    b9:98:2a:2e:73:41:8b:61:86:f2:0b:8c:71:17:d3:
                    27:c0:02:46:85:c7:65:13:8e:7a:2e:03:30:da:79:
                    e0:e8:cb:be:4f:d1:45:fe:c5:88:78:62:98:dc:ec:
                    db:18:5c:de:55:4d:ae:9a:91:2a:f0:f9:00:0c:a5:
                    df:b2:5b:bb:4a:e5:08:69:cd:d5:fb:c4:65:01:95:
                    ff:72:02:01:5e:d3:45:1a:3e:da:82:b3:94:8c:df:
                    96:b4:0c:9f:4f:3a:e7:2e:38:4b:27:22:ab:de:4f:
                    9e:59:c7:da:94:92:50:e4:08:8b:8e:ca:b8:c8:e0:
                    09:f3:f4:d8:a8:3b:00:70:10:46:8f:3b:d2:1a:1e:
                    1d:65:50:fb:e0:25:51:af:3d:11:69:d8:30:26:de:
                    a5:41:26:67:c1:ec:d2:26:98:27:65:fb:f6:82:09:
                    72:60:8a:37:cd:2d:4c:91:f0:2a:a7:74:bb:0e:ed:
                    7f:d4:75:bc:cd:8a:7f:8e:12:ea:19:ad:b4:f6:67:
                    03:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:A7:DB:7E:51:1B:0D:75:2F:73:19:12:1F:79:0E:A6:5F:9C:43:E7
            X509v3 Authority Key Identifier:
                keyid:9E:10:6F:95:CC:46:1B:5B:1F:48:7A:53:F6:B2:D5:A3:6F:62:70:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/9ad73895-c84c-464f-9b4f-8d30306b9727/0/9E106F95CC461B5B1F487A53F6B2D5A36F627004.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9E106F95CC461B5B1F487A53F6B2D5A36F627004.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9ad73895-c84c-464f-9b4f-8d30306b9727/0/9E106F95CC461B5B1F487A53F6B2D5A36F627004.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:1c:23:ce:8d:b4:82:e9:66:d7:0a:08:c3:a6:85:bf:e2:73:
         69:f5:a8:92:cf:35:61:15:64:2c:a5:90:01:6a:f9:ff:68:46:
         72:d1:ed:28:0e:6c:38:e6:8c:76:47:64:37:40:63:a2:60:4d:
         38:dc:2e:f9:ed:c6:ba:35:4b:94:eb:b6:aa:33:f3:25:c9:56:
         df:e7:8f:e0:70:02:84:c2:41:8f:18:a8:45:fc:55:2c:0f:a4:
         41:7c:5a:3a:c8:55:0d:8e:78:c7:5d:2a:3f:6c:99:b0:06:e4:
         ac:05:17:b3:8f:b9:11:1f:03:99:de:cf:97:d7:6c:e1:8b:9b:
         47:3b:b4:a6:b1:f7:fb:c9:9a:79:a7:0c:f6:1c:2e:dd:21:58:
         23:45:c7:b2:f4:3e:ab:84:8c:50:78:91:ba:93:33:1a:50:21:
         a0:c0:ad:3b:eb:d5:2e:e8:35:2e:22:9b:42:e1:73:89:92:ad:
         c5:0f:99:f1:ef:58:bf:dd:fd:17:29:dc:e2:4c:d0:a9:1f:27:
         18:a4:ae:7a:9e:74:1b:b7:37:f0:ba:72:ca:02:0e:7c:8f:c3:
         c7:1f:f6:5e:02:77:76:48:89:26:c2:94:a5:a6:c9:b1:34:13:
         9c:e3:b4:22:e8:fb:c7:d5:d1:b9:a9:2d:70:6c:cc:c2:5b:ff:
         91:9f:dd:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 14:43:35 2025 by rpki-client