This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/0560d2df-65ff-43a8-a983-3320cf9fd292/0/60EED32BAAFA382342DABD544A906AFB859D9026.mft
File:                     60EED32BAAFA382342DABD544A906AFB859D9026.mft (raw, json)
Hash identifier:          SFacY1qBTYV/Ju78tFfLEraWW0Bn87SlKRlDdlhww7k=
Subject key identifier:   2F:B1:71:E3:23:D0:C9:0C:91:2E:7B:A6:8E:A1:FA:F9:B0:99:22:23
Authority key identifier: 60:EE:D3:2B:AA:FA:38:23:42:DA:BD:54:4A:90:6A:FB:85:9D:90:26
Certificate issuer:       /CN=60EED32BAAFA382342DABD544A906AFB859D9026
Certificate serial:       4E9E66ED47D972D0B620050652516C744F7C53E0
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/60EED32BAAFA382342DABD544A906AFB859D9026.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/0560d2df-65ff-43a8-a983-3320cf9fd292/0/60EED32BAAFA382342DABD544A906AFB859D9026.mft
Manifest number:          0245
Signing time:             Sat 24 Jan 2026 23:01:26 +0000
Manifest this update:     Sat 24 Jan 2026 22:56:26 +0000
Manifest next update:     Wed 28 Jan 2026 03:35:26 +0000
Files and hashes:         1: 60EED32BAAFA382342DABD544A906AFB859D9026.crl (hash: hFzKCBuXiIPtpQjtXMTG5ib87sB+IiH8l56wgyqEqvQ=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/0560d2df-65ff-43a8-a983-3320cf9fd292/0/60EED32BAAFA382342DABD544A906AFB859D9026.crl
                          rsync://repo-rpki.idnic.net/repo/0560d2df-65ff-43a8-a983-3320cf9fd292/0/60EED32BAAFA382342DABD544A906AFB859D9026.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/60EED32BAAFA382342DABD544A906AFB859D9026.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 28 Jan 2026 03:35:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:9e:66:ed:47:d9:72:d0:b6:20:05:06:52:51:6c:74:4f:7c:53:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60EED32BAAFA382342DABD544A906AFB859D9026
        Validity
            Not Before: Jan 24 22:56:26 2026 GMT
            Not After : Jan 28 03:35:26 2026 GMT
        Subject: CN=2FB171E323D0C90C912E7BA68EA1FAF9B0992223
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:89:6a:42:e5:cb:8c:34:8a:a3:d3:cb:ce:d0:
                    22:cd:38:1f:35:b8:e7:5b:f2:00:c2:4d:4d:b9:45:
                    db:ec:81:e4:63:42:01:37:10:a4:d3:6a:fb:bb:4f:
                    b7:4c:e1:16:cc:1a:2a:95:eb:af:18:f0:1c:78:61:
                    d0:56:f9:68:28:7f:4c:ae:d9:c5:be:3e:9b:a7:cf:
                    24:a2:5a:ec:fb:da:ce:f6:74:29:23:95:1e:40:85:
                    3e:7a:df:4d:f9:f5:61:8c:d1:c8:0b:50:cf:3b:86:
                    99:97:4d:dd:c3:45:62:a0:8d:3e:87:da:c2:94:c7:
                    1a:da:27:1a:13:5b:14:da:82:f6:cc:ea:9c:1b:a5:
                    f4:a0:bf:2c:44:d4:3d:ed:1d:1f:8b:b3:48:35:3b:
                    2a:40:cf:8a:92:37:af:64:2d:ff:12:c6:7c:f2:17:
                    80:a7:01:e2:3e:22:8e:ef:bd:86:63:f0:0d:2a:aa:
                    9e:37:fa:e0:1c:2e:e3:d4:1a:21:b6:77:bc:f8:24:
                    78:36:d6:b6:57:1d:e4:ac:03:19:73:7a:0a:93:ad:
                    37:04:3d:a0:54:a6:42:30:23:b2:58:b4:e5:6d:fa:
                    e5:51:c5:71:c2:44:a6:41:87:18:04:2e:45:a1:26:
                    73:05:53:cc:f3:12:b3:a6:c0:a5:2c:47:11:0f:3c:
                    1b:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:B1:71:E3:23:D0:C9:0C:91:2E:7B:A6:8E:A1:FA:F9:B0:99:22:23
            X509v3 Authority Key Identifier:
                keyid:60:EE:D3:2B:AA:FA:38:23:42:DA:BD:54:4A:90:6A:FB:85:9D:90:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/0560d2df-65ff-43a8-a983-3320cf9fd292/0/60EED32BAAFA382342DABD544A906AFB859D9026.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/60EED32BAAFA382342DABD544A906AFB859D9026.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0560d2df-65ff-43a8-a983-3320cf9fd292/0/60EED32BAAFA382342DABD544A906AFB859D9026.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:4e:3d:05:b0:70:3f:4e:9a:e7:20:10:40:4d:51:d1:47:50:
         35:96:c9:a7:f6:8d:a7:f2:c0:bb:44:89:91:9b:0b:02:eb:e4:
         d4:20:59:87:1c:e7:37:8d:1e:c6:0f:87:21:92:92:9a:bc:c2:
         07:59:0c:b0:b4:0d:44:1b:fa:0b:e5:b5:b3:cc:88:ae:32:ab:
         04:fc:a7:a4:b6:d1:cc:56:28:7c:67:ca:d6:c3:a2:a4:bf:0b:
         69:55:c2:fd:d3:4a:51:75:73:2c:1d:94:90:6e:90:f8:8c:b9:
         6d:47:09:bd:7f:2e:55:21:e5:fd:42:ee:98:11:05:4c:c5:c3:
         57:19:13:e6:cf:55:df:9d:d1:81:32:ad:b8:cb:8d:47:2a:de:
         6c:10:50:3c:d5:88:d5:c3:f6:b6:cd:0b:02:36:2e:2f:ee:d2:
         f7:48:c6:4c:77:f7:12:cd:0c:77:5a:06:9c:cd:4d:9c:a7:f4:
         28:5f:25:ea:84:98:fe:75:15:ed:7d:b1:32:16:ae:39:b3:46:
         df:e0:35:6f:9c:6d:19:c3:18:5b:4b:f9:d1:ad:06:3f:de:cd:
         4d:4c:7c:67:d9:2f:8c:4e:7e:f9:c1:c8:46:87:b5:0d:88:d4:
         02:08:9b:6a:59:64:da:7d:74:2b:7e:f9:d7:6e:16:0f:fd:4b:
         50:b1:04:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:47:09 2026 by rpki-client