This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/04f28235-0ba8-4e14-8b85-29c3a4a76eab/0/DB03D7B542C60D3D72565734C86589420DF070A0.mft
File:                     DB03D7B542C60D3D72565734C86589420DF070A0.mft (raw, json)
Hash identifier:          b/B/f7hFzPPFkiVZJDG3DfoTOzjZk1yeL/Zx91zBvYM=
Subject key identifier:   E0:75:A3:DF:0E:86:C0:65:C0:61:B5:09:0C:23:6C:28:E1:41:B7:58
Authority key identifier: DB:03:D7:B5:42:C6:0D:3D:72:56:57:34:C8:65:89:42:0D:F0:70:A0
Certificate issuer:       /CN=DB03D7B542C60D3D72565734C86589420DF070A0
Certificate serial:       4101B14749F736A959A1B5E5296B10C3F6DE39F6
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB03D7B542C60D3D72565734C86589420DF070A0.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/04f28235-0ba8-4e14-8b85-29c3a4a76eab/0/DB03D7B542C60D3D72565734C86589420DF070A0.mft
Manifest number:          025C
Signing time:             Sat 24 Jan 2026 03:32:15 +0000
Manifest this update:     Sat 24 Jan 2026 03:27:15 +0000
Manifest next update:     Tue 27 Jan 2026 08:53:15 +0000
Files and hashes:         1: 3130332e3138362e3231322e302f32332d3234203d3e20313439373134.roa (hash: J4k4RdB2cM1E1T6rzDg02YfTq6FIMpH6pD8r2mvujP4=)
                          2: DB03D7B542C60D3D72565734C86589420DF070A0.crl (hash: /PPFTYiE7efgwOL16dYZP1m6Je2uHzPSpKZ12H0cC5U=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/04f28235-0ba8-4e14-8b85-29c3a4a76eab/0/DB03D7B542C60D3D72565734C86589420DF070A0.crl
                          rsync://repo-rpki.idnic.net/repo/04f28235-0ba8-4e14-8b85-29c3a4a76eab/0/DB03D7B542C60D3D72565734C86589420DF070A0.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB03D7B542C60D3D72565734C86589420DF070A0.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 27 Jan 2026 08:53:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:01:b1:47:49:f7:36:a9:59:a1:b5:e5:29:6b:10:c3:f6:de:39:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DB03D7B542C60D3D72565734C86589420DF070A0
        Validity
            Not Before: Jan 24 03:27:15 2026 GMT
            Not After : Jan 27 08:53:15 2026 GMT
        Subject: CN=E075A3DF0E86C065C061B5090C236C28E141B758
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:5c:d5:8f:9b:c8:21:19:66:db:aa:ad:0f:ff:
                    9e:56:5d:12:ee:0a:75:1e:c2:1d:4c:b0:e8:08:d4:
                    c9:7c:f9:e9:7e:6c:b4:8b:a4:0a:62:83:99:2d:ae:
                    e4:91:ca:b5:72:56:a1:88:74:b4:0b:b3:28:30:b0:
                    ca:ab:b6:b6:ac:8f:25:29:7d:da:a9:aa:84:ed:ef:
                    01:e1:3f:10:72:f7:5f:de:6b:fe:56:7e:17:20:6b:
                    0f:46:6d:90:45:cc:34:d8:a3:85:f1:50:5c:ae:7c:
                    ec:d6:a7:8b:79:16:9c:9b:f8:fa:95:53:d2:71:e8:
                    98:a0:41:3a:d6:34:84:d4:18:47:05:87:8f:11:b4:
                    4c:14:0e:c1:06:98:70:3c:98:a9:fb:12:b0:d6:24:
                    2a:68:7d:74:75:c7:48:d1:73:c4:04:ad:0f:1e:21:
                    da:f2:88:e7:84:03:8f:f7:a3:fb:5d:7c:11:af:44:
                    84:cc:f8:e0:a3:46:be:44:af:e1:e8:07:3e:ef:ca:
                    e1:86:3b:3a:0a:c9:58:d5:8d:7c:3e:c1:a4:46:1c:
                    2d:4a:0c:13:3b:08:45:3a:44:20:09:3a:9f:19:a1:
                    f7:75:70:fa:6c:96:e1:21:c0:ca:a5:97:31:f2:ad:
                    a8:8f:dd:f8:b0:5e:a9:5a:c7:79:71:29:35:74:b1:
                    ee:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:75:A3:DF:0E:86:C0:65:C0:61:B5:09:0C:23:6C:28:E1:41:B7:58
            X509v3 Authority Key Identifier:
                keyid:DB:03:D7:B5:42:C6:0D:3D:72:56:57:34:C8:65:89:42:0D:F0:70:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/04f28235-0ba8-4e14-8b85-29c3a4a76eab/0/DB03D7B542C60D3D72565734C86589420DF070A0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB03D7B542C60D3D72565734C86589420DF070A0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/04f28235-0ba8-4e14-8b85-29c3a4a76eab/0/DB03D7B542C60D3D72565734C86589420DF070A0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:a1:ec:0f:af:d0:c1:6d:5f:bb:ab:37:ee:7b:00:3f:06:fa:
         8a:cf:1c:98:64:76:48:88:cb:a2:0a:36:47:3a:8c:d8:df:bd:
         ab:33:3a:ce:91:7e:51:35:8e:58:e3:6d:19:95:2d:6c:3f:36:
         d6:f0:4e:46:64:65:95:b4:e1:c7:29:d4:49:3e:62:8d:9d:97:
         5a:85:dc:1d:cd:09:57:f3:85:8e:a9:a3:ff:10:b9:6b:93:d1:
         ea:53:ad:f0:0f:2b:46:04:9d:0f:8c:f2:8c:3b:9e:b1:ff:11:
         b9:56:9f:83:c1:32:a9:a9:56:b4:b6:c7:4b:25:a2:0b:f9:36:
         68:42:f2:b9:66:bf:cb:10:6d:e8:f5:7b:48:2f:eb:fc:ed:ac:
         5b:a7:30:c8:5f:42:0d:1f:85:b0:73:3a:a0:4d:6f:28:ee:3c:
         ca:ef:3f:9a:fb:66:da:fe:f4:4a:4d:97:19:62:e7:91:34:8b:
         17:03:67:58:9f:a8:03:bb:c6:13:43:08:7c:9f:65:5c:fb:9e:
         08:15:57:9b:bc:26:c4:05:4b:f6:66:05:df:51:71:4a:a2:1d:
         33:a0:c3:14:3f:1b:01:ce:91:a4:15:d7:38:3d:af:bc:64:c1:
         aa:78:7c:ce:bb:37:26:26:c3:d4:65:f0:77:fb:05:7f:38:36:
         13:8b:32:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 00:45:01 2026 by rpki-client