This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/d7224191-bff0-4815-be0e-a2aa8d38d5a0/0/9B0395E989465D693E38FF5140C2FABE1631B562.mft
File:                     9B0395E989465D693E38FF5140C2FABE1631B562.mft (raw, json)
Hash identifier:          G+zNpt47h282THtR/0AnJ+WtTqN6Z+0cLxPib04mjqg=
Subject key identifier:   BE:47:E9:E9:F3:DF:38:60:75:FB:C0:AD:EB:17:02:05:BB:51:B2:9D
Authority key identifier: 9B:03:95:E9:89:46:5D:69:3E:38:FF:51:40:C2:FA:BE:16:31:B5:62
Certificate issuer:       /CN=9B0395E989465D693E38FF5140C2FABE1631B562
Certificate serial:       5F80DD72B850687B4DF4608B0A47757663FB1021
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9B0395E989465D693E38FF5140C2FABE1631B562.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/d7224191-bff0-4815-be0e-a2aa8d38d5a0/0/9B0395E989465D693E38FF5140C2FABE1631B562.mft
Manifest number:          E6
Signing time:             Wed 03 Dec 2025 04:10:05 +0000
Manifest this update:     Wed 03 Dec 2025 04:05:05 +0000
Manifest next update:     Sat 06 Dec 2025 15:56:05 +0000
Files and hashes:         1: 9B0395E989465D693E38FF5140C2FABE1631B562.crl (hash: y33pl92dej+krTiHcVK/georBqsdsQ8YoLgY5lpZjdw=)
                          2: 3130332e31382e3233322e302f32332d3234203d3e20313530323331.roa (hash: wUtK6lO7dD/y5QIQIRKJysOh0xNgmCTXdRc7wOm6Gq4=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/d7224191-bff0-4815-be0e-a2aa8d38d5a0/0/9B0395E989465D693E38FF5140C2FABE1631B562.crl
                          rsync://repo-rpki.idnic.net/repo/d7224191-bff0-4815-be0e-a2aa8d38d5a0/0/9B0395E989465D693E38FF5140C2FABE1631B562.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9B0395E989465D693E38FF5140C2FABE1631B562.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 06 Dec 2025 12:07:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:80:dd:72:b8:50:68:7b:4d:f4:60:8b:0a:47:75:76:63:fb:10:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9B0395E989465D693E38FF5140C2FABE1631B562
        Validity
            Not Before: Dec  3 04:05:05 2025 GMT
            Not After : Dec  6 15:56:05 2025 GMT
        Subject: CN=BE47E9E9F3DF386075FBC0ADEB170205BB51B29D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:e7:03:2d:d5:f8:f2:cf:e8:1f:8c:00:3f:41:
                    84:4c:43:27:85:25:b3:3b:93:07:40:c7:e5:b3:64:
                    fc:5f:bd:1f:d5:4f:98:aa:d2:9a:02:34:f1:db:8c:
                    e9:44:1d:4d:f2:b0:2b:5c:95:c1:55:7c:28:cf:d3:
                    0d:29:4d:02:89:e1:a4:52:14:4e:bc:40:73:72:60:
                    8e:fa:46:8f:8f:30:58:5f:bf:b5:b6:14:92:75:6b:
                    44:f4:ea:1d:01:4c:8d:02:25:53:2b:b6:d8:a9:80:
                    cd:53:fb:72:18:1d:c5:1a:e1:3a:02:0d:8d:7b:21:
                    23:da:d0:6b:91:56:80:ca:d4:ec:3c:e1:98:c6:be:
                    10:f6:8e:f7:75:bf:1d:84:77:61:1e:f8:db:f8:5c:
                    ca:fd:74:f3:79:99:29:f8:54:80:6c:f6:49:ab:20:
                    9b:bb:10:77:b0:bd:2c:09:c4:0f:6e:21:b3:13:1a:
                    65:32:19:ef:14:94:17:09:b5:8a:71:49:d9:9b:38:
                    10:07:9c:76:e3:98:82:44:fd:b1:34:66:57:c2:6e:
                    c3:a7:e8:1b:c8:a1:75:0b:db:20:27:cc:74:d5:20:
                    fb:e4:15:98:30:f7:25:e0:ea:34:c5:15:86:73:7f:
                    14:d9:d0:20:f7:86:32:b4:09:97:c6:ab:e6:b3:63:
                    73:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:47:E9:E9:F3:DF:38:60:75:FB:C0:AD:EB:17:02:05:BB:51:B2:9D
            X509v3 Authority Key Identifier:
                keyid:9B:03:95:E9:89:46:5D:69:3E:38:FF:51:40:C2:FA:BE:16:31:B5:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/d7224191-bff0-4815-be0e-a2aa8d38d5a0/0/9B0395E989465D693E38FF5140C2FABE1631B562.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9B0395E989465D693E38FF5140C2FABE1631B562.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d7224191-bff0-4815-be0e-a2aa8d38d5a0/0/9B0395E989465D693E38FF5140C2FABE1631B562.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:77:13:24:21:38:c0:f7:a9:fb:88:ea:ee:e8:e0:27:c5:9e:
         7b:42:45:46:8b:2b:4c:fe:ec:11:69:ae:47:ab:5b:03:99:f0:
         c0:a3:c5:0f:62:68:2c:83:b1:2c:54:83:d1:c5:64:80:c7:43:
         bc:91:db:5b:88:2c:11:ca:52:bd:7a:f1:3e:49:5a:3e:3f:73:
         28:d5:b2:fa:d1:a7:3f:7b:ec:84:c4:cf:75:ca:70:58:10:45:
         3f:dc:44:b0:1b:a1:a5:da:9a:12:79:cd:f1:f1:c0:f0:68:db:
         be:11:75:40:71:76:6a:33:e0:e3:9e:0c:78:bf:a6:fc:33:0e:
         f9:eb:b3:08:90:99:7e:ee:06:76:a9:e9:bb:e1:ac:8a:19:6c:
         42:d3:57:72:cc:a4:26:86:22:b0:a4:c3:9c:c3:9a:44:52:7d:
         72:2c:16:3f:1d:70:44:9c:12:08:32:98:26:3e:08:2a:6c:9e:
         f9:b7:7d:5a:ee:49:bb:8a:c0:ed:e6:ff:85:cf:8a:e3:73:98:
         3f:db:db:6a:ae:55:1d:93:a2:93:76:7d:69:52:c5:38:b4:7a:
         66:22:d0:01:c6:39:77:50:04:c1:d6:b2:bb:26:26:f9:c3:73:
         9c:94:ff:33:5d:03:72:e6:1a:b1:95:07:85:13:8b:67:2d:82:
         b5:a9:1a:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 14:13:23 2025 by rpki-client