This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/9dc6ccd2-8897-4a4e-81ce-c361a5e68dd6/0/9D97131B953D97C18D6B71F6DE63209F6541DB0E.mft
File:                     9D97131B953D97C18D6B71F6DE63209F6541DB0E.mft (raw, json)
Hash identifier:          3ohBQeDUH9VcAfB0WfMV7eblHtOIl7zRB70EKWuGpfI=
Subject key identifier:   84:75:36:CB:62:9F:22:2F:58:7D:39:DA:44:2A:85:16:8B:96:20:D9
Authority key identifier: 9D:97:13:1B:95:3D:97:C1:8D:6B:71:F6:DE:63:20:9F:65:41:DB:0E
Certificate issuer:       /CN=9D97131B953D97C18D6B71F6DE63209F6541DB0E
Certificate serial:       0446B0E18B9A4DE38628E8CC1730725096535C22
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9D97131B953D97C18D6B71F6DE63209F6541DB0E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/9dc6ccd2-8897-4a4e-81ce-c361a5e68dd6/0/9D97131B953D97C18D6B71F6DE63209F6541DB0E.mft
Manifest number:          0192
Signing time:             Tue 16 Dec 2025 23:20:39 +0000
Manifest this update:     Tue 16 Dec 2025 23:15:39 +0000
Manifest next update:     Sat 20 Dec 2025 00:30:39 +0000
Files and hashes:         1: 9D97131B953D97C18D6B71F6DE63209F6541DB0E.crl (hash: ubQDteTWX32mYfW8k/xa8YV0F7lamd5UPgBQrruWeUs=)
                          2: 3130332e3131372e31302e302f32342d3234203d3e20313530343738.roa (hash: +olAq7p56zfhKu5twJLCWaLZ5DJyPxgYj3wH5RLPlus=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/9dc6ccd2-8897-4a4e-81ce-c361a5e68dd6/0/9D97131B953D97C18D6B71F6DE63209F6541DB0E.crl
                          rsync://repo-rpki.idnic.net/repo/9dc6ccd2-8897-4a4e-81ce-c361a5e68dd6/0/9D97131B953D97C18D6B71F6DE63209F6541DB0E.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9D97131B953D97C18D6B71F6DE63209F6541DB0E.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Dec 2025 00:30:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:46:b0:e1:8b:9a:4d:e3:86:28:e8:cc:17:30:72:50:96:53:5c:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9D97131B953D97C18D6B71F6DE63209F6541DB0E
        Validity
            Not Before: Dec 16 23:15:39 2025 GMT
            Not After : Dec 20 00:30:39 2025 GMT
        Subject: CN=847536CB629F222F587D39DA442A85168B9620D9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:d8:df:e2:e8:0a:d9:3e:f8:27:43:99:54:42:
                    e9:8a:f1:15:39:41:e7:af:69:8b:5c:d0:6e:74:a8:
                    fc:12:1b:d4:d1:95:7a:f6:76:bd:d8:cc:cb:18:ed:
                    e6:a9:90:9b:13:e2:cd:c6:3e:24:5e:c7:46:ec:aa:
                    44:3d:d5:43:33:75:9b:0e:59:8a:6e:57:2c:b9:00:
                    15:b4:fd:f9:9d:c2:3c:a1:aa:af:2f:b8:fb:d8:36:
                    ea:d1:4b:7b:92:af:ba:37:81:e6:b7:15:89:1c:54:
                    f8:3d:56:f3:3c:a8:53:4d:b8:c0:c6:72:04:73:6c:
                    1f:1b:51:2b:57:2d:1a:bb:8d:c5:62:d4:e0:33:c9:
                    60:b1:06:dc:cf:cf:79:f5:41:0a:18:a9:65:b1:ad:
                    de:ff:39:57:6b:e0:26:ba:0f:80:28:55:0c:c1:ad:
                    5c:0a:22:ee:ef:fd:8a:74:05:b1:8c:6d:b5:de:cc:
                    06:c9:57:f3:6c:04:06:0c:08:61:5b:ab:68:98:36:
                    e0:5a:4b:bb:a0:4d:b4:df:76:3f:41:d6:ce:0b:09:
                    5f:98:9d:4b:2f:a6:5c:fc:43:20:72:29:32:3e:68:
                    62:df:2f:eb:ea:1b:28:de:5e:c9:98:c9:f2:ee:a1:
                    16:8f:9f:81:96:40:4d:74:75:fa:1e:fc:f6:46:79:
                    37:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:75:36:CB:62:9F:22:2F:58:7D:39:DA:44:2A:85:16:8B:96:20:D9
            X509v3 Authority Key Identifier:
                keyid:9D:97:13:1B:95:3D:97:C1:8D:6B:71:F6:DE:63:20:9F:65:41:DB:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/9dc6ccd2-8897-4a4e-81ce-c361a5e68dd6/0/9D97131B953D97C18D6B71F6DE63209F6541DB0E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9D97131B953D97C18D6B71F6DE63209F6541DB0E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9dc6ccd2-8897-4a4e-81ce-c361a5e68dd6/0/9D97131B953D97C18D6B71F6DE63209F6541DB0E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:31:15:7b:ae:8f:bf:b1:24:cd:25:83:7b:05:a4:4b:99:74:
         5c:8c:eb:5b:d2:ea:0d:75:d1:53:43:ed:64:73:72:1c:77:87:
         03:26:9e:30:68:e6:32:de:dd:9f:17:08:3e:22:79:1a:6d:8a:
         01:58:2f:fe:8f:93:90:21:90:f3:49:32:b1:87:2f:30:40:37:
         75:db:0a:a5:99:75:8b:48:ad:b8:8f:71:ca:b3:ac:18:fe:90:
         10:0e:e7:3b:50:40:a9:76:43:a0:1f:0c:6d:16:37:7d:88:f1:
         e6:94:38:d6:cb:d4:de:b6:0c:a0:ff:95:3d:32:24:d4:0e:bc:
         7f:51:4f:58:61:87:ae:08:2b:f7:94:f0:74:3d:80:ef:9f:21:
         97:d5:f4:09:49:6b:e3:9c:d9:c0:bf:20:8f:31:5c:cf:e7:be:
         5d:2d:fa:88:8f:f2:21:f1:b0:27:41:52:5d:bd:cc:fe:7a:07:
         12:3f:06:d0:99:52:60:93:9d:d0:03:10:d7:9a:53:7b:70:af:
         07:38:1e:d9:0c:b7:cd:d3:34:d6:4f:10:96:05:51:1c:52:13:
         3c:5b:59:1f:5a:15:e9:3e:9f:69:e5:4e:52:ef:d6:c4:48:c8:
         61:53:9b:b2:c1:2b:56:1a:a0:2d:81:95:cb:46:d8:52:a3:ac:
         5a:ab:cb:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 18 23:36:49 2025 by rpki-client