This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/af62809c-bfb6-4fe7-8dd6-ca6022cdd540/0/930A4ED2B85AA9FE77ED90FA85044A9C80B38A46.mft
File:                     930A4ED2B85AA9FE77ED90FA85044A9C80B38A46.mft (raw, json)
Hash identifier:          HKkqjOGMyjBymTbb0L0W0xMSDQZxg1D1CG2fKT1+ka8=
Subject key identifier:   CD:69:19:53:03:E1:DB:C7:BF:D7:3E:F6:B6:8B:A6:15:F5:38:1C:5B
Authority key identifier: 93:0A:4E:D2:B8:5A:A9:FE:77:ED:90:FA:85:04:4A:9C:80:B3:8A:46
Certificate issuer:       /CN=930A4ED2B85AA9FE77ED90FA85044A9C80B38A46
Certificate serial:       4C67607AB794A10859A6ED1CCAF98B330C3F1CF9
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/930A4ED2B85AA9FE77ED90FA85044A9C80B38A46.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/af62809c-bfb6-4fe7-8dd6-ca6022cdd540/0/930A4ED2B85AA9FE77ED90FA85044A9C80B38A46.mft
Manifest number:          0203
Signing time:             Tue 02 Dec 2025 06:11:21 +0000
Manifest this update:     Tue 02 Dec 2025 06:06:21 +0000
Manifest next update:     Fri 05 Dec 2025 07:04:21 +0000
Files and hashes:         1: 930A4ED2B85AA9FE77ED90FA85044A9C80B38A46.crl (hash: VURqMt5IS4fyBPnbUrIgHv7EK78EvRT8pqIFjsfJwco=)
                          2: 32372e3132312e38332e302f32342d3234203d3e203535363532.roa (hash: 1Ap1USzQtzqwgDtQDrhH77MKkzf62RSPe2jHuhWF7VY=)
                          3: 32372e3132312e38342e302f32342d3234203d3e203535363532.roa (hash: bA5Fx/rOlnkAyIC1kdWrOaLkxDABB/Vvu2ebi0eEf0Q=)
                          4: 32372e3132312e38352e302f32342d3234203d3e203535363532.roa (hash: 3Mqc4bpW2MlccFa1Ubf+/4bclFJ21AcG0i5KBo4oD48=)
                          5: 32372e3132312e38302e302f32342d3234203d3e203535363532.roa (hash: 0LRxbu/86kZstCrhrFM+xHSikcX960D6ea8IptSkGsE=)
                          6: 32372e3132312e38372e302f32342d3234203d3e203535363532.roa (hash: XOQFKUfDG7J0fbl+DTtQtPxTl6ii3+vzoE5o4zQO4bo=)
                          7: 32372e3132312e38362e302f32342d3234203d3e203535363532.roa (hash: 1kY5e/tIJX114u746CW39QHTp2rzxidBD7y122Pd6Ew=)
                          8: 32372e3132312e38312e302f32342d3234203d3e203535363532.roa (hash: KPO8Dur+z9GVaz2KZy/0xQJy9l93ayQwCwTcViUocP0=)
                          9: 32372e3132312e38322e302f32342d3234203d3e203535363532.roa (hash: QtiPgOKAP2zdJvR5FPFABfx4iIby7ldINKqgYGzNT04=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/af62809c-bfb6-4fe7-8dd6-ca6022cdd540/0/930A4ED2B85AA9FE77ED90FA85044A9C80B38A46.crl
                          rsync://repo-rpki.idnic.net/repo/af62809c-bfb6-4fe7-8dd6-ca6022cdd540/0/930A4ED2B85AA9FE77ED90FA85044A9C80B38A46.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/930A4ED2B85AA9FE77ED90FA85044A9C80B38A46.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 05 Dec 2025 07:04:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:67:60:7a:b7:94:a1:08:59:a6:ed:1c:ca:f9:8b:33:0c:3f:1c:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=930A4ED2B85AA9FE77ED90FA85044A9C80B38A46
        Validity
            Not Before: Dec  2 06:06:21 2025 GMT
            Not After : Dec  5 07:04:21 2025 GMT
        Subject: CN=CD69195303E1DBC7BFD73EF6B68BA615F5381C5B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:b7:f8:b6:cf:1e:dc:9d:ab:8b:b6:49:ad:9d:
                    92:5a:4d:f7:4a:35:10:37:e3:bd:f0:d7:e7:36:73:
                    c4:4c:a8:d3:55:95:e1:88:dc:6a:6b:1b:7b:08:dc:
                    32:4b:e6:f3:d1:c0:f4:ba:aa:73:90:f0:43:04:4b:
                    46:20:c6:13:26:69:76:21:c9:bd:1e:f4:22:39:85:
                    f3:e3:be:5b:6f:25:8d:f3:01:22:e9:76:1b:6a:fb:
                    f4:91:b3:6f:24:b3:14:6a:bf:92:ae:6f:4a:74:81:
                    3f:da:6e:3b:aa:4c:6b:c2:74:80:98:f1:ea:73:99:
                    e8:1d:43:88:aa:09:9a:7c:e0:50:7e:33:75:68:44:
                    e0:e2:cb:9e:f2:c0:87:93:9e:c4:c3:5a:e3:33:98:
                    e2:99:ce:12:33:b3:a9:67:0c:45:6c:77:32:77:ff:
                    e4:7c:f1:dd:6b:5d:4a:3f:bf:3a:ff:1f:e9:f5:87:
                    15:4c:b8:de:b9:45:d9:cf:6a:29:8a:6e:ca:2d:54:
                    98:d9:b5:5b:81:a4:c4:55:5a:4a:4e:05:6d:b2:24:
                    69:ef:7c:05:06:e7:d8:f1:46:d7:d8:35:96:ce:ca:
                    f6:d3:a2:16:6d:9a:65:f9:4d:a4:8f:e3:bf:ea:c0:
                    8b:8e:59:a0:5c:03:ec:57:4b:6b:4c:7e:3e:45:88:
                    e5:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:69:19:53:03:E1:DB:C7:BF:D7:3E:F6:B6:8B:A6:15:F5:38:1C:5B
            X509v3 Authority Key Identifier:
                keyid:93:0A:4E:D2:B8:5A:A9:FE:77:ED:90:FA:85:04:4A:9C:80:B3:8A:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/af62809c-bfb6-4fe7-8dd6-ca6022cdd540/0/930A4ED2B85AA9FE77ED90FA85044A9C80B38A46.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/930A4ED2B85AA9FE77ED90FA85044A9C80B38A46.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/af62809c-bfb6-4fe7-8dd6-ca6022cdd540/0/930A4ED2B85AA9FE77ED90FA85044A9C80B38A46.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:58:24:40:e3:5d:e1:28:4e:d0:12:2e:67:3b:50:cb:00:ae:
         aa:45:f6:1c:d5:ad:a0:bb:16:ab:7c:3c:d8:f9:f0:37:02:32:
         54:11:a7:96:c3:9b:92:89:4b:b3:f8:83:e6:74:27:da:a9:1d:
         1b:db:0d:57:46:d5:7d:b8:79:29:07:63:27:d5:35:7a:21:2e:
         87:1a:f0:60:90:a2:f2:9d:43:d2:52:0d:93:fc:53:7a:11:0e:
         c3:31:79:2b:60:1a:92:2c:fc:27:c2:a4:0c:e9:9c:fe:5d:a7:
         0a:fb:e1:25:f1:1f:f2:c0:25:63:b7:31:2b:b7:36:83:bd:7c:
         2d:11:ee:81:92:0a:62:c1:6a:7a:cf:d0:06:2d:f0:53:6e:14:
         3b:22:ab:be:bf:60:02:13:40:85:04:5b:3f:ea:be:8f:a1:bc:
         30:97:1c:ad:f4:02:a6:87:93:f7:d7:55:47:00:23:23:85:dd:
         c0:38:74:a2:c9:c4:fb:d7:ce:0f:f4:fc:58:1a:34:0d:16:4a:
         fd:eb:72:93:50:5e:d8:bd:98:c1:82:b4:d9:b4:f4:ed:04:bb:
         68:0b:43:2b:ec:99:de:f0:fd:b8:f9:82:0e:e0:4e:29:5d:c6:
         39:58:61:6b:cf:9c:d3:95:03:d4:79:5e:ad:9a:fd:a6:01:b7:
         6b:72:3a:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 13:56:25 2025 by rpki-client