This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/05593445-a25d-48e0-abc2-ab05e0650655/0/B10FCCE02720E964D29342E0F3BDFC679A4D7BD6.mft
File:                     B10FCCE02720E964D29342E0F3BDFC679A4D7BD6.mft (raw, json)
Hash identifier:          2eLGvr1q1a4G+ptI+4HPZKJeb49Fk3iu3Y7bXDZAWHs=
Subject key identifier:   C6:38:4D:7D:A2:96:C7:03:0A:72:AA:AB:C5:10:7A:7C:D6:44:E3:42
Authority key identifier: B1:0F:CC:E0:27:20:E9:64:D2:93:42:E0:F3:BD:FC:67:9A:4D:7B:D6
Certificate issuer:       /CN=B10FCCE02720E964D29342E0F3BDFC679A4D7BD6
Certificate serial:       54CA717E0ECF10742BF1F4E550D3A4841A42B3D9
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B10FCCE02720E964D29342E0F3BDFC679A4D7BD6.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/05593445-a25d-48e0-abc2-ab05e0650655/0/B10FCCE02720E964D29342E0F3BDFC679A4D7BD6.mft
Manifest number:          0145
Signing time:             Sun 25 Jan 2026 12:31:42 +0000
Manifest this update:     Sun 25 Jan 2026 12:26:42 +0000
Manifest next update:     Wed 28 Jan 2026 23:19:42 +0000
Files and hashes:         1: B10FCCE02720E964D29342E0F3BDFC679A4D7BD6.crl (hash: K/nhs5Y8x+ijnlgInmL/jQXjPgbOem1qV6Pdk+ekfuQ=)
                          2: 3130332e3134372e3234352e302f32342d3234203d3e20313339393733.roa (hash: rlPU/iIgYoRNsLv+c0V6Y8ev4dELtmVNbR6X//tRgJc=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/05593445-a25d-48e0-abc2-ab05e0650655/0/B10FCCE02720E964D29342E0F3BDFC679A4D7BD6.crl
                          rsync://repo-rpki.idnic.net/repo/05593445-a25d-48e0-abc2-ab05e0650655/0/B10FCCE02720E964D29342E0F3BDFC679A4D7BD6.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B10FCCE02720E964D29342E0F3BDFC679A4D7BD6.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 28 Jan 2026 14:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:ca:71:7e:0e:cf:10:74:2b:f1:f4:e5:50:d3:a4:84:1a:42:b3:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B10FCCE02720E964D29342E0F3BDFC679A4D7BD6
        Validity
            Not Before: Jan 25 12:26:42 2026 GMT
            Not After : Jan 28 23:19:42 2026 GMT
        Subject: CN=C6384D7DA296C7030A72AAABC5107A7CD644E342
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:0a:90:fd:d0:b0:3a:04:a6:bb:74:b8:3d:1f:
                    41:f0:08:5c:04:ed:f1:c8:37:10:c2:d9:67:30:48:
                    df:c1:0b:f8:0b:ad:f3:d6:7f:16:ae:f5:84:83:c8:
                    b0:ee:bf:93:0d:28:7e:3d:81:6e:56:9c:8b:52:f0:
                    49:af:7f:cd:02:4b:67:bb:ae:2e:a2:48:f6:8d:22:
                    1e:3d:d8:d9:20:a1:b4:f8:2e:41:5c:99:4c:66:fd:
                    60:c7:e6:3b:a3:bc:25:ef:c0:64:0f:d7:69:10:88:
                    2b:2c:ed:40:9a:89:e0:80:45:e9:f7:09:c5:04:8a:
                    ff:68:0c:0f:50:92:8f:4b:6d:49:05:37:75:df:3a:
                    49:a2:94:f3:26:dd:ff:9b:86:29:cf:c3:5a:56:77:
                    47:d3:4a:02:02:61:6b:7b:4f:27:2f:0b:85:4b:e8:
                    77:8e:0b:ff:da:fc:e6:8b:54:cc:02:c5:28:b0:f9:
                    e3:4a:4e:8f:6a:0a:1f:72:01:5a:f5:c2:a2:d7:6b:
                    08:b7:51:81:ee:66:11:f8:de:1e:00:82:79:76:be:
                    7b:77:cd:44:2c:c9:2e:03:8f:0f:a4:57:45:50:23:
                    ea:c6:d7:74:11:1f:c1:8a:a3:9c:a5:ce:c9:06:59:
                    92:ee:66:01:ac:63:d8:90:41:bb:06:ff:f4:0c:c8:
                    4c:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:38:4D:7D:A2:96:C7:03:0A:72:AA:AB:C5:10:7A:7C:D6:44:E3:42
            X509v3 Authority Key Identifier:
                keyid:B1:0F:CC:E0:27:20:E9:64:D2:93:42:E0:F3:BD:FC:67:9A:4D:7B:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/05593445-a25d-48e0-abc2-ab05e0650655/0/B10FCCE02720E964D29342E0F3BDFC679A4D7BD6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B10FCCE02720E964D29342E0F3BDFC679A4D7BD6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/05593445-a25d-48e0-abc2-ab05e0650655/0/B10FCCE02720E964D29342E0F3BDFC679A4D7BD6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:cc:a5:be:9e:89:b6:7e:bd:5a:a7:a2:ff:64:bb:05:a7:f2:
         cb:4f:de:c0:87:ad:12:25:58:72:73:d0:6f:b4:68:37:1f:29:
         31:62:64:00:a1:fd:ee:35:e8:05:16:ca:7f:26:76:93:85:0f:
         73:ce:4c:54:5f:ed:6b:f8:af:28:63:5b:cf:e4:e0:79:6c:ba:
         00:23:58:77:3a:b9:a2:98:c9:52:ec:a3:1e:6a:d9:7d:20:72:
         36:dc:73:79:df:81:02:4c:7e:35:8d:fe:31:71:5e:80:24:44:
         06:af:73:b9:a4:74:17:4c:d0:d6:80:86:80:ab:0d:4b:2b:c1:
         eb:2c:77:9d:61:63:e6:d2:b3:72:39:0f:96:40:20:d7:dc:65:
         44:8e:e1:79:4d:88:7b:7f:7f:49:e3:c4:c8:96:12:b2:74:91:
         ea:e1:49:06:bc:a7:25:cd:c2:b5:c4:62:aa:c9:a6:6d:c5:d4:
         19:06:d4:16:38:40:3e:ea:63:c5:43:89:6f:d1:88:88:df:25:
         08:01:2c:a5:f5:5d:89:1a:33:13:ca:8e:79:0a:be:da:e2:69:
         bb:de:49:c5:a4:0f:2d:cf:16:96:7d:15:3e:45:8d:76:b4:de:
         19:10:db:b1:4c:91:2f:2b:0f:b9:26:e2:3f:01:e7:d4:9f:58:
         4a:19:b0:63
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUVMpxfg7PEHQr8fTlUNOkhBpCs9kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjEwRkNDRTAyNzIwRTk2NEQyOTM0MkUwRjNCREZDNjc5
QTREN0JENjAeFw0yNjAxMjUxMjI2NDJaFw0yNjAxMjgyMzE5NDJaMDMxMTAvBgNV
BAMTKEM2Mzg0RDdEQTI5NkM3MDMwQTcyQUFBQkM1MTA3QTdDRDY0NEUzNDIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNCpD90LA6BKa7dLg9H0HwCFwE
7fHINxDC2WcwSN/BC/gLrfPWfxau9YSDyLDuv5MNKH49gW5WnItS8Emvf80CS2e7
ri6iSPaNIh492NkgobT4LkFcmUxm/WDH5jujvCXvwGQP12kQiCss7UCaieCARen3
CcUEiv9oDA9Qko9LbUkFN3XfOkmilPMm3f+bhinPw1pWd0fTSgICYWt7TycvC4VL
6HeOC//a/OaLVMwCxSiw+eNKTo9qCh9yAVr1wqLXawi3UYHuZhH43h4Agnl2vnt3
zUQsyS4Djw+kV0VQI+rG13QRH8GKo5ylzskGWZLuZgGsY9iQQbsG//QMyExjAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUxjhNfaKWxwMKcqqrxRB6fNZE40IwHwYDVR0j
BBgwFoAUsQ/M4Ccg6WTSk0Lg8738Z5pNe9YwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w
NTU5MzQ0NS1hMjVkLTQ4ZTAtYWJjMi1hYjA1ZTA2NTA2NTUvMC9CMTBGQ0NFMDI3
MjBFOTY0RDI5MzQyRTBGM0JERkM2NzlBNEQ3QkQ2LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQjEwRkNDRTAyNzIwRTk2NEQyOTM0MkUwRjNCREZDNjc5QTRE
N0JENi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDU1OTM0NDUtYTI1ZC00OGUwLWFi
YzItYWIwNWUwNjUwNjU1LzAvQjEwRkNDRTAyNzIwRTk2NEQyOTM0MkUwRjNCREZD
Njc5QTREN0JENi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAKDMpb6eibZ+vVqnov9kuwWn8stP3sCHrRIl
WHJz0G+0aDcfKTFiZACh/e416AUWyn8mdpOFD3POTFRf7Wv4ryhjW8/k4HlsugAj
WHc6uaKYyVLsox5q2X0gcjbcc3nfgQJMfjWN/jFxXoAkRAavc7mkdBdM0NaAhoCr
DUsrwessd51hY+bSs3I5D5ZAINfcZUSO4XlNiHt/f0njxMiWErJ0kerhSQa8pyXN
wrXEYqrJpm3F1BkG1BY4QD7qY8VDiW/RiIjfJQgBLKX1XYkaMxPKjnkKvtriabve
ScWkDy3PFpZ9FT5FjXa03hkQ27FMkS8rD7km4j8B59SfWEoZsGM=
-----END CERTIFICATE-----
Generated at Sun Jan 25 20:21:12 2026 by rpki-client