This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/01b6dd9b-d152-4c8f-87b7-629eb808f911/0/C19344D0F4EF3CADE2A7711481E3D1452C621D62.mft
File:                     C19344D0F4EF3CADE2A7711481E3D1452C621D62.mft (raw, json)
Hash identifier:          eslE1PAihIavV4LLGXtQwwf3lNcsLsxYfv+WNMLHMiY=
Subject key identifier:   D5:61:38:A9:70:16:3A:9E:A6:95:40:08:28:75:CC:94:B3:68:D3:E5
Authority key identifier: C1:93:44:D0:F4:EF:3C:AD:E2:A7:71:14:81:E3:D1:45:2C:62:1D:62
Certificate issuer:       /CN=C19344D0F4EF3CADE2A7711481E3D1452C621D62
Certificate serial:       0DF5A2AF194EC679FB51EFCDDA276BF663B84B5F
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C19344D0F4EF3CADE2A7711481E3D1452C621D62.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/01b6dd9b-d152-4c8f-87b7-629eb808f911/0/C19344D0F4EF3CADE2A7711481E3D1452C621D62.mft
Manifest number:          022F
Signing time:             Sat 24 Jan 2026 10:52:05 +0000
Manifest this update:     Sat 24 Jan 2026 10:47:05 +0000
Manifest next update:     Tue 27 Jan 2026 22:35:05 +0000
Files and hashes:         1: C19344D0F4EF3CADE2A7711481E3D1452C621D62.crl (hash: Su0UGQBYKUUff57urxtZBDm9fXQusHojsAWjIpEmfUo=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/01b6dd9b-d152-4c8f-87b7-629eb808f911/0/C19344D0F4EF3CADE2A7711481E3D1452C621D62.crl
                          rsync://repo-rpki.idnic.net/repo/01b6dd9b-d152-4c8f-87b7-629eb808f911/0/C19344D0F4EF3CADE2A7711481E3D1452C621D62.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C19344D0F4EF3CADE2A7711481E3D1452C621D62.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 27 Jan 2026 22:35:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:f5:a2:af:19:4e:c6:79:fb:51:ef:cd:da:27:6b:f6:63:b8:4b:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C19344D0F4EF3CADE2A7711481E3D1452C621D62
        Validity
            Not Before: Jan 24 10:47:05 2026 GMT
            Not After : Jan 27 22:35:05 2026 GMT
        Subject: CN=D56138A970163A9EA69540082875CC94B368D3E5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:e2:09:f4:0b:81:c7:d5:77:3c:1f:c0:a0:6c:
                    53:8f:95:16:ff:cf:73:27:be:81:68:3e:98:15:6e:
                    23:8e:f7:d7:e4:d2:45:18:e5:d6:ad:6f:cd:f1:0a:
                    53:ca:4f:b8:d6:15:92:12:03:8b:ab:da:b9:09:7c:
                    3a:e9:48:27:82:90:98:9a:2e:e3:55:48:63:7c:49:
                    13:a5:57:04:cb:22:d4:e4:d7:61:d1:e0:6d:c6:8d:
                    dc:d2:b3:03:dc:4f:92:99:b6:c2:d5:01:ef:61:b8:
                    51:3f:12:e1:c4:6f:fb:3b:29:54:b3:c4:de:5c:29:
                    ff:2f:db:fc:60:7c:ef:11:4e:9a:59:9d:ae:76:d6:
                    bd:b4:55:84:22:68:37:70:e1:b8:65:f3:7e:71:e6:
                    7d:24:95:e3:48:d6:8f:94:24:8a:ff:cc:f1:ef:25:
                    ee:be:26:2a:a7:dc:de:b7:d7:e8:37:b2:57:21:d5:
                    fe:8d:46:c5:01:a8:01:bb:7c:90:01:bf:5f:dd:05:
                    af:8c:b5:70:4a:51:95:19:b1:f0:d5:80:e2:44:a7:
                    ab:8e:ba:db:03:be:8e:37:5f:3b:1d:08:53:1e:d7:
                    ae:af:1f:4b:02:ba:51:75:f4:2a:16:28:af:7f:d1:
                    9a:73:33:47:47:ed:be:94:27:14:17:4e:e8:8e:85:
                    56:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:61:38:A9:70:16:3A:9E:A6:95:40:08:28:75:CC:94:B3:68:D3:E5
            X509v3 Authority Key Identifier:
                keyid:C1:93:44:D0:F4:EF:3C:AD:E2:A7:71:14:81:E3:D1:45:2C:62:1D:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/01b6dd9b-d152-4c8f-87b7-629eb808f911/0/C19344D0F4EF3CADE2A7711481E3D1452C621D62.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C19344D0F4EF3CADE2A7711481E3D1452C621D62.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/01b6dd9b-d152-4c8f-87b7-629eb808f911/0/C19344D0F4EF3CADE2A7711481E3D1452C621D62.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:3a:69:0d:20:bc:82:a3:8d:43:b9:ff:ab:cf:96:d2:64:13:
         00:4a:3b:17:23:59:34:75:f4:88:df:b1:e1:46:1f:a4:70:58:
         f8:d5:ee:de:ef:73:80:b5:23:7a:8c:d0:f4:76:21:6c:4c:9b:
         84:05:5c:15:32:85:bd:10:02:8b:a1:aa:38:4a:a1:e2:03:ed:
         19:6e:bf:38:09:c5:c6:3c:dc:ec:3f:22:8f:c2:f0:7e:9c:62:
         bb:0f:f6:84:3d:e5:23:83:a8:a6:c9:aa:2d:ee:d0:5c:77:24:
         b5:00:69:34:30:8a:52:d8:5f:cf:fc:4e:45:8f:02:63:a0:51:
         6d:e0:01:79:26:a9:a8:83:8a:a9:30:36:b8:e3:52:9a:42:1d:
         24:33:8c:c0:1e:cb:80:f2:52:ce:90:1c:dc:56:2f:bd:88:13:
         7d:47:93:a7:32:0e:e1:d1:7e:3b:cf:22:64:7b:1d:d5:ee:5a:
         f1:38:df:0c:1b:1a:68:cb:0b:c4:ff:ee:ef:73:1d:57:19:c6:
         18:f4:61:82:ea:75:99:30:c9:3b:8a:eb:3e:7b:32:2d:34:32:
         2d:64:24:1f:4e:f5:38:db:1b:20:11:a8:bb:4f:f6:52:6b:87:
         b4:cf:fe:49:4d:56:14:f9:30:7e:6f:87:71:67:df:6a:92:3d:
         f2:50:58:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:48:45 2026 by rpki-client