This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/05669807-050e-43ae-8708-b46b8817842c/0/0912BC2A8D2E8BF2553D7106FF6E62228E03C1E4.mft
File:                     0912BC2A8D2E8BF2553D7106FF6E62228E03C1E4.mft (raw, json)
Hash identifier:          2xj0WoFjKzlV7lVTl5KkTHNAUP7zmbv7XSE2QPKH9Jc=
Subject key identifier:   49:BB:4E:92:18:CA:1A:AC:58:B4:44:52:A0:C2:1B:85:DC:B5:00:B3
Authority key identifier: 09:12:BC:2A:8D:2E:8B:F2:55:3D:71:06:FF:6E:62:22:8E:03:C1:E4
Certificate issuer:       /CN=0912BC2A8D2E8BF2553D7106FF6E62228E03C1E4
Certificate serial:       4D4BAB442F8DCF5B304E8AA5877B7BBE428C1C4F
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0912BC2A8D2E8BF2553D7106FF6E62228E03C1E4.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/05669807-050e-43ae-8708-b46b8817842c/0/0912BC2A8D2E8BF2553D7106FF6E62228E03C1E4.mft
Manifest number:          0545
Signing time:             Sun 25 Jan 2026 13:11:20 +0000
Manifest this update:     Sun 25 Jan 2026 13:06:20 +0000
Manifest next update:     Thu 29 Jan 2026 00:04:20 +0000
Files and hashes:         1: 3130332e3133302e3138322e302f32332d3233203d3e20313338303833.roa (hash: /xZYFYyOB1e+pblVdjFbZfEDRpifvi0rioH8bq15tlY=)
                          2: 0912BC2A8D2E8BF2553D7106FF6E62228E03C1E4.crl (hash: Bx/hXN2iiBRFkrcdf6tg7jdDrxMv0H9C5Z8Q6hvCmlg=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/05669807-050e-43ae-8708-b46b8817842c/0/0912BC2A8D2E8BF2553D7106FF6E62228E03C1E4.crl
                          rsync://repo-rpki.idnic.net/repo/05669807-050e-43ae-8708-b46b8817842c/0/0912BC2A8D2E8BF2553D7106FF6E62228E03C1E4.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0912BC2A8D2E8BF2553D7106FF6E62228E03C1E4.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 28 Jan 2026 14:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:4b:ab:44:2f:8d:cf:5b:30:4e:8a:a5:87:7b:7b:be:42:8c:1c:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0912BC2A8D2E8BF2553D7106FF6E62228E03C1E4
        Validity
            Not Before: Jan 25 13:06:20 2026 GMT
            Not After : Jan 29 00:04:20 2026 GMT
        Subject: CN=49BB4E9218CA1AAC58B44452A0C21B85DCB500B3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:df:79:ee:0f:d2:fd:39:86:03:f3:ed:bf:a6:
                    c3:e5:2e:b9:75:5e:19:c1:cb:0f:ae:0a:04:93:ba:
                    87:05:ee:bb:3f:38:1c:dc:9d:73:69:30:f6:d9:7e:
                    5a:53:16:1b:29:1e:7e:1f:33:32:71:f7:79:47:43:
                    c3:ae:1e:0f:73:1d:a9:8e:ca:f8:5e:81:20:4b:c9:
                    39:72:77:0d:73:6e:86:f1:6e:93:39:f3:c5:5f:16:
                    87:49:6a:59:86:4b:a7:f1:95:11:a1:c2:d6:a1:bf:
                    8f:72:8b:0e:47:5a:f2:31:39:e5:bf:f0:13:98:16:
                    3e:5d:87:16:49:80:d1:5c:4d:13:38:15:20:54:b1:
                    f4:a5:8b:15:33:01:b8:75:c1:fe:d0:c8:49:ff:f7:
                    94:24:73:8a:96:6d:69:fc:73:73:1f:b0:48:e5:72:
                    51:59:04:2a:7f:71:e7:9a:4d:5b:b0:0d:ca:37:ff:
                    6f:e3:33:d0:ee:75:09:17:3d:3c:72:30:5f:19:03:
                    de:25:86:b6:b5:73:0d:af:26:30:31:40:12:9c:a3:
                    02:05:81:42:ec:18:1e:a4:43:16:50:5e:38:23:f1:
                    65:0d:61:cb:51:42:97:96:23:e8:fa:5c:cb:35:17:
                    fc:bc:2d:5a:42:66:cc:03:d1:7d:3d:7a:d8:bc:6e:
                    21:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:BB:4E:92:18:CA:1A:AC:58:B4:44:52:A0:C2:1B:85:DC:B5:00:B3
            X509v3 Authority Key Identifier:
                keyid:09:12:BC:2A:8D:2E:8B:F2:55:3D:71:06:FF:6E:62:22:8E:03:C1:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/05669807-050e-43ae-8708-b46b8817842c/0/0912BC2A8D2E8BF2553D7106FF6E62228E03C1E4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0912BC2A8D2E8BF2553D7106FF6E62228E03C1E4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/05669807-050e-43ae-8708-b46b8817842c/0/0912BC2A8D2E8BF2553D7106FF6E62228E03C1E4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:dd:76:f6:96:64:8b:8d:e1:d5:bd:4a:fe:78:5a:31:21:c4:
         aa:4c:39:51:50:3c:e1:08:cd:da:3c:a3:51:54:e8:97:1b:6d:
         af:05:eb:ec:59:23:ac:0b:c0:cf:99:8a:ff:84:93:98:0c:53:
         90:3e:16:ce:f0:b4:6a:a6:f7:f2:01:c9:b9:5d:4d:df:21:9f:
         0d:8a:d7:c6:be:c9:38:47:2c:58:4c:80:d1:67:8c:ce:84:ec:
         13:92:4e:f2:0b:91:ed:4c:52:db:40:e6:10:5d:19:37:af:a7:
         1e:bc:c0:cf:1f:1c:53:6e:54:f8:cc:f6:8c:5f:c0:e6:2c:ae:
         c0:91:54:b7:07:3d:4e:14:22:76:71:0f:af:8a:78:c1:54:bd:
         1a:90:2e:81:26:25:2a:4e:cf:f6:62:19:8f:00:41:64:3d:dc:
         82:a2:2a:89:16:29:d6:22:f8:67:e2:3e:ce:36:22:9c:13:89:
         43:d7:eb:a2:8f:50:23:b1:1b:35:99:4d:ea:9f:69:ba:f7:04:
         e5:a1:c5:95:b8:f7:e4:93:c0:d7:8a:03:9f:e0:e6:9f:1b:92:
         1d:f2:1f:4b:ee:c6:78:fe:21:8e:17:fb:2d:c4:7f:d0:d4:e9:
         44:ef:3d:6b:7d:44:51:03:4f:6e:25:55:a0:cc:62:35:21:95:
         11:b0:4a:63
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUTUurRC+Nz1swToqlh3t7vkKMHE8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDkxMkJDMkE4RDJFOEJGMjU1M0Q3MTA2RkY2RTYyMjI4
RTAzQzFFNDAeFw0yNjAxMjUxMzA2MjBaFw0yNjAxMjkwMDA0MjBaMDMxMTAvBgNV
BAMTKDQ5QkI0RTkyMThDQTFBQUM1OEI0NDQ1MkEwQzIxQjg1RENCNTAwQjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC733nuD9L9OYYD8+2/psPlLrl1
XhnByw+uCgSTuocF7rs/OBzcnXNpMPbZflpTFhspHn4fMzJx93lHQ8OuHg9zHamO
yvhegSBLyTlydw1zbobxbpM588VfFodJalmGS6fxlRGhwtahv49yiw5HWvIxOeW/
8BOYFj5dhxZJgNFcTRM4FSBUsfSlixUzAbh1wf7QyEn/95Qkc4qWbWn8c3MfsEjl
clFZBCp/ceeaTVuwDco3/2/jM9DudQkXPTxyMF8ZA94lhra1cw2vJjAxQBKcowIF
gULsGB6kQxZQXjgj8WUNYctRQpeWI+j6XMs1F/y8LVpCZswD0X09eti8biH3AgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUSbtOkhjKGqxYtERSoMIbhdy1ALMwHwYDVR0j
BBgwFoAUCRK8Ko0ui/JVPXEG/25iIo4DweQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w
NTY2OTgwNy0wNTBlLTQzYWUtODcwOC1iNDZiODgxNzg0MmMvMC8wOTEyQkMyQThE
MkU4QkYyNTUzRDcxMDZGRjZFNjIyMjhFMDNDMUU0LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMDkxMkJDMkE4RDJFOEJGMjU1M0Q3MTA2RkY2RTYyMjI4RTAz
QzFFNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDU2Njk4MDctMDUwZS00M2FlLTg3
MDgtYjQ2Yjg4MTc4NDJjLzAvMDkxMkJDMkE4RDJFOEJGMjU1M0Q3MTA2RkY2RTYy
MjI4RTAzQzFFNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAJTddvaWZIuN4dW9Sv54WjEhxKpMOVFQPOEI
zdo8o1FU6Jcbba8F6+xZI6wLwM+Ziv+Ek5gMU5A+Fs7wtGqm9/IBybldTd8hnw2K
18a+yThHLFhMgNFnjM6E7BOSTvILke1MUttA5hBdGTevpx68wM8fHFNuVPjM9oxf
wOYsrsCRVLcHPU4UInZxD6+KeMFUvRqQLoEmJSpOz/ZiGY8AQWQ93IKiKokWKdYi
+GfiPs42IpwTiUPX66KPUCOxGzWZTeqfabr3BOWhxZW49+STwNeKA5/g5p8bkh3y
H0vuxnj+IY4X+y3Ef9DU6UTvPWt9RFEDT24lVaDMYjUhlRGwSmM=
-----END CERTIFICATE-----
Generated at Sun Jan 25 23:57:23 2026 by rpki-client