This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/acaccf26-8354-49c8-998a-0a44a64eb909/0/92E0AE79CBF46A2DC24CDD3A7FD48A842BCFEE8D.mft
File:                     92E0AE79CBF46A2DC24CDD3A7FD48A842BCFEE8D.mft (raw, json)
Hash identifier:          zT5rjURisQz5On1H0Xets8MiD8pZnlK7cYy4yIJmKyk=
Subject key identifier:   AF:83:DF:EC:6F:E4:53:B8:26:81:68:C4:A0:6B:76:A0:D1:B1:36:EB
Authority key identifier: 92:E0:AE:79:CB:F4:6A:2D:C2:4C:DD:3A:7F:D4:8A:84:2B:CF:EE:8D
Certificate issuer:       /CN=92E0AE79CBF46A2DC24CDD3A7FD48A842BCFEE8D
Certificate serial:       5EF28E6143BFD44305F67470EDB0CA20405D04E7
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/92E0AE79CBF46A2DC24CDD3A7FD48A842BCFEE8D.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/acaccf26-8354-49c8-998a-0a44a64eb909/0/92E0AE79CBF46A2DC24CDD3A7FD48A842BCFEE8D.mft
Manifest number:          0119
Signing time:             Thu 18 Dec 2025 03:41:07 +0000
Manifest this update:     Thu 18 Dec 2025 03:36:07 +0000
Manifest next update:     Sun 21 Dec 2025 06:31:07 +0000
Files and hashes:         1: 3135372e32302e3233362e302f32342d3234203d3e203538333639.roa (hash: bfQroZp46y/yg4SRsgG4Dw7Km0ZcaitbZyshPVWtdM8=)
                          2: 92E0AE79CBF46A2DC24CDD3A7FD48A842BCFEE8D.crl (hash: AFGL2wg9m7GfW4+hapoO7SwelB19y9dJuuOGu2aGVNM=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/acaccf26-8354-49c8-998a-0a44a64eb909/0/92E0AE79CBF46A2DC24CDD3A7FD48A842BCFEE8D.crl
                          rsync://repo-rpki.idnic.net/repo/acaccf26-8354-49c8-998a-0a44a64eb909/0/92E0AE79CBF46A2DC24CDD3A7FD48A842BCFEE8D.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/92E0AE79CBF46A2DC24CDD3A7FD48A842BCFEE8D.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Dec 2025 09:41:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:f2:8e:61:43:bf:d4:43:05:f6:74:70:ed:b0:ca:20:40:5d:04:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92E0AE79CBF46A2DC24CDD3A7FD48A842BCFEE8D
        Validity
            Not Before: Dec 18 03:36:07 2025 GMT
            Not After : Dec 21 06:31:07 2025 GMT
        Subject: CN=AF83DFEC6FE453B8268168C4A06B76A0D1B136EB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:a8:76:7d:57:61:3f:b7:96:85:be:5f:fd:5c:
                    4f:fe:11:97:ea:5c:a9:a6:42:b9:68:1d:85:93:29:
                    ac:6b:08:48:33:af:52:5a:f1:86:a3:46:bd:cc:ff:
                    f1:4e:c7:8a:da:2d:56:13:1e:6c:65:e3:5e:32:31:
                    83:f7:5d:23:2c:58:9c:48:bf:8c:d5:62:75:1d:35:
                    54:ff:60:7c:28:b0:00:0a:55:46:9d:19:64:ce:eb:
                    9e:00:a3:d2:27:46:9f:7e:3b:ec:61:b8:d2:f5:00:
                    a6:62:24:af:8d:7e:a1:f5:d0:a9:aa:6d:eb:34:93:
                    bf:33:93:f0:30:00:20:7d:2b:0f:cb:2c:54:84:61:
                    b7:47:60:1d:d6:aa:22:04:9d:84:6b:1b:ab:ce:3e:
                    54:70:9e:a4:50:61:f9:d2:b3:06:96:03:2e:de:e4:
                    f5:97:05:79:e8:90:23:26:92:77:54:c8:00:0a:34:
                    ee:77:ba:41:08:d2:03:1b:71:1b:91:b3:4b:46:d3:
                    5b:5b:b5:7c:79:e1:01:80:56:e2:df:02:04:9f:f6:
                    c5:3f:8a:76:1c:34:3b:a9:79:94:1c:8a:d3:e3:de:
                    b5:d4:78:00:f4:63:dd:40:69:72:0a:9f:86:72:0f:
                    68:20:ff:ca:8e:78:64:33:ac:eb:af:53:da:46:89:
                    1a:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:83:DF:EC:6F:E4:53:B8:26:81:68:C4:A0:6B:76:A0:D1:B1:36:EB
            X509v3 Authority Key Identifier:
                keyid:92:E0:AE:79:CB:F4:6A:2D:C2:4C:DD:3A:7F:D4:8A:84:2B:CF:EE:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/acaccf26-8354-49c8-998a-0a44a64eb909/0/92E0AE79CBF46A2DC24CDD3A7FD48A842BCFEE8D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/92E0AE79CBF46A2DC24CDD3A7FD48A842BCFEE8D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/acaccf26-8354-49c8-998a-0a44a64eb909/0/92E0AE79CBF46A2DC24CDD3A7FD48A842BCFEE8D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:ef:93:30:72:4c:bf:62:76:3a:80:28:52:1a:90:81:4d:6f:
         6a:a9:3e:e3:5e:3c:e9:cc:78:d5:d5:e2:cc:f0:07:d1:df:9f:
         c3:51:92:71:96:5f:f8:14:46:f9:21:11:09:02:19:e5:82:7f:
         07:6c:2d:32:c2:8e:ab:74:f5:e5:b8:8b:b2:a5:a0:ab:9b:cb:
         d7:f2:02:2b:e6:96:35:32:e3:6b:53:c1:36:63:01:4f:ce:dd:
         b6:9e:83:b1:3b:f4:9f:ad:59:ee:f1:d4:53:77:62:65:21:6a:
         ff:ee:2c:14:a8:d6:72:3e:36:f9:87:d8:36:12:51:af:5c:8a:
         15:2a:18:d8:3e:f9:3e:b6:55:89:44:71:17:f2:b0:80:0f:c8:
         2d:d0:8d:1e:62:ef:f8:0a:21:bf:ec:3f:46:69:99:a6:00:dd:
         60:45:54:10:fe:a6:0d:03:9a:3f:0a:6c:18:b5:6b:50:fa:f7:
         05:a8:a2:c5:02:ba:48:b0:99:b1:c1:41:05:4f:b1:2c:7b:17:
         e0:2c:d2:83:2d:62:46:57:15:cd:5b:3a:cd:03:7a:8c:c2:02:
         9c:1a:37:d1:82:02:49:8c:f5:77:02:11:0f:c6:8e:8b:6f:82:
         f3:9a:36:48:c4:18:64:8c:95:e7:97:84:00:e2:0f:ef:36:49:
         a3:0d:19:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 18 22:36:11 2025 by rpki-client