This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/0588dff7-6a92-4293-8800-b53e2a918aca/1/97776FFF02B90FFC17B658A0B1A598DBEA888F04.mft
File:                     97776FFF02B90FFC17B658A0B1A598DBEA888F04.mft (raw, json)
Hash identifier:          yczj//cNaQT+hibUcGEpaPbb49CyPutl5DpbapwcDXw=
Subject key identifier:   60:A1:C3:4B:11:B1:A7:EF:1A:C9:12:B7:7D:DE:0F:C3:18:E7:A8:39
Authority key identifier: 97:77:6F:FF:02:B9:0F:FC:17:B6:58:A0:B1:A5:98:DB:EA:88:8F:04
Certificate issuer:       /CN=97776FFF02B90FFC17B658A0B1A598DBEA888F04
Certificate serial:       728E6B81F720AED18BBEB925FF772C0FB6FCF699
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/97776FFF02B90FFC17B658A0B1A598DBEA888F04.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/0588dff7-6a92-4293-8800-b53e2a918aca/1/97776FFF02B90FFC17B658A0B1A598DBEA888F04.mft
Manifest number:          0118
Signing time:             Sun 25 Jan 2026 02:21:09 +0000
Manifest this update:     Sun 25 Jan 2026 02:16:09 +0000
Manifest next update:     Wed 28 Jan 2026 12:32:09 +0000
Files and hashes:         1: 323030313a6466333a633334303a3a2f34382d3438203d3e20313532333932.roa (hash: DWvVDDRpAMOpRUqp8QzsrLlGUPEfbewyxxzSjcofq2U=)
                          2: 97776FFF02B90FFC17B658A0B1A598DBEA888F04.crl (hash: sAtCDrWveU9bOj6+ix4qK5TVyjImEuEhlAUv4Tqe4Vk=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/0588dff7-6a92-4293-8800-b53e2a918aca/1/97776FFF02B90FFC17B658A0B1A598DBEA888F04.crl
                          rsync://repo-rpki.idnic.net/repo/0588dff7-6a92-4293-8800-b53e2a918aca/1/97776FFF02B90FFC17B658A0B1A598DBEA888F04.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/97776FFF02B90FFC17B658A0B1A598DBEA888F04.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 28 Jan 2026 12:32:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:8e:6b:81:f7:20:ae:d1:8b:be:b9:25:ff:77:2c:0f:b6:fc:f6:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97776FFF02B90FFC17B658A0B1A598DBEA888F04
        Validity
            Not Before: Jan 25 02:16:09 2026 GMT
            Not After : Jan 28 12:32:09 2026 GMT
        Subject: CN=60A1C34B11B1A7EF1AC912B77DDE0FC318E7A839
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:7b:90:ca:82:a8:f2:05:b0:3d:72:8b:cb:34:
                    1c:1f:ad:cd:21:9c:ea:0a:7a:1f:64:39:ff:8c:be:
                    f6:63:d5:99:a8:92:dc:25:ab:27:df:68:bc:16:5b:
                    0c:bc:a3:3f:5c:31:54:24:63:0b:5d:98:65:42:a5:
                    cb:e7:ff:2d:6e:14:e3:0b:26:61:fd:49:a1:ce:10:
                    66:5a:80:38:97:e9:51:d8:0b:aa:ff:6a:2b:b2:3f:
                    8c:af:c7:5e:69:7b:1e:e4:b8:1c:48:50:e3:2b:50:
                    d5:2f:fe:4b:88:8e:df:52:48:85:b3:ea:cd:31:97:
                    c7:1c:ba:3f:2f:64:8c:b4:70:65:cc:5e:76:83:79:
                    fb:5e:d5:61:a2:1a:b2:19:6f:cf:96:85:29:f4:69:
                    d1:9d:04:40:70:97:92:c4:90:ed:7e:ee:c7:6b:45:
                    8a:ac:0b:01:eb:1e:84:7a:62:32:0d:3d:cf:3a:fa:
                    5a:68:47:11:ca:61:80:4a:a0:18:e3:07:15:82:b0:
                    d9:06:72:8e:37:7c:de:b8:12:22:44:d0:e9:72:64:
                    50:c5:2b:70:8b:a5:05:bb:17:07:6c:7f:e3:f2:ef:
                    a6:12:fd:07:86:49:36:35:2d:1c:91:22:3e:e5:c5:
                    88:4b:11:2b:a6:d4:3e:d0:6b:5d:3f:72:5b:10:d4:
                    02:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:A1:C3:4B:11:B1:A7:EF:1A:C9:12:B7:7D:DE:0F:C3:18:E7:A8:39
            X509v3 Authority Key Identifier:
                keyid:97:77:6F:FF:02:B9:0F:FC:17:B6:58:A0:B1:A5:98:DB:EA:88:8F:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/0588dff7-6a92-4293-8800-b53e2a918aca/1/97776FFF02B90FFC17B658A0B1A598DBEA888F04.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/97776FFF02B90FFC17B658A0B1A598DBEA888F04.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0588dff7-6a92-4293-8800-b53e2a918aca/1/97776FFF02B90FFC17B658A0B1A598DBEA888F04.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:e2:11:7b:00:f8:b1:a2:76:0c:d2:8b:d8:e3:4a:c2:5c:15:
         f4:23:04:06:2a:2d:d6:e5:27:20:a1:d5:d2:92:74:db:07:f6:
         54:b7:a7:f8:1c:54:07:2e:35:2b:a3:55:a0:12:d0:1f:53:10:
         9b:12:01:74:d6:f2:ee:98:06:04:11:71:cb:96:ac:bb:82:9e:
         66:07:a6:87:c1:31:98:63:74:80:34:58:7f:69:ef:cf:9e:38:
         16:d4:07:37:76:7b:db:0e:dd:5d:4e:2f:32:b5:dc:b6:89:94:
         97:40:b5:b9:cc:cc:7a:d5:b0:83:da:bb:44:6b:54:2e:e7:8f:
         c9:af:7a:94:3e:eb:5e:b4:20:37:f1:58:d2:f3:4d:31:9d:93:
         2c:95:06:06:75:cf:26:2c:be:db:65:ad:75:9e:85:a6:3d:d3:
         31:26:1d:72:9c:e0:cc:09:fd:30:12:a5:b2:15:23:15:1a:80:
         57:03:28:9a:aa:3c:c8:bb:7d:4b:2b:1b:8b:7f:34:cb:4f:ef:
         36:65:0f:9a:87:d5:ad:0d:49:de:d1:77:bb:39:4b:ae:ed:e8:
         4e:c7:85:d3:de:5c:55:58:9e:33:55:c4:06:e1:79:39:d0:2c:
         40:b7:ed:eb:24:2a:94:6a:45:a7:6c:ba:bd:d1:51:b5:38:07:
         c1:d6:fe:95
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUco5rgfcgrtGLvrkl/3csD7b89pkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTc3NzZGRkYwMkI5MEZGQzE3QjY1OEEwQjFBNTk4REJF
QTg4OEYwNDAeFw0yNjAxMjUwMjE2MDlaFw0yNjAxMjgxMjMyMDlaMDMxMTAvBgNV
BAMTKDYwQTFDMzRCMTFCMUE3RUYxQUM5MTJCNzdEREUwRkMzMThFN0E4MzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCle5DKgqjyBbA9covLNBwfrc0h
nOoKeh9kOf+MvvZj1ZmoktwlqyffaLwWWwy8oz9cMVQkYwtdmGVCpcvn/y1uFOML
JmH9SaHOEGZagDiX6VHYC6r/aiuyP4yvx15pex7kuBxIUOMrUNUv/kuIjt9SSIWz
6s0xl8ccuj8vZIy0cGXMXnaDefte1WGiGrIZb8+WhSn0adGdBEBwl5LEkO1+7sdr
RYqsCwHrHoR6YjINPc86+lpoRxHKYYBKoBjjBxWCsNkGco43fN64EiJE0OlyZFDF
K3CLpQW7Fwdsf+Py76YS/QeGSTY1LRyRIj7lxYhLESum1D7Qa10/clsQ1AINAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUYKHDSxGxp+8ayRK3fd4PwxjnqDkwHwYDVR0j
BBgwFoAUl3dv/wK5D/wXtligsaWY2+qIjwQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w
NTg4ZGZmNy02YTkyLTQyOTMtODgwMC1iNTNlMmE5MThhY2EvMS85Nzc3NkZGRjAy
QjkwRkZDMTdCNjU4QTBCMUE1OThEQkVBODg4RjA0LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvOTc3NzZGRkYwMkI5MEZGQzE3QjY1OEEwQjFBNTk4REJFQTg4
OEYwNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDU4OGRmZjctNmE5Mi00MjkzLTg4
MDAtYjUzZTJhOTE4YWNhLzEvOTc3NzZGRkYwMkI5MEZGQzE3QjY1OEEwQjFBNTk4
REJFQTg4OEYwNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAIviEXsA+LGidgzSi9jjSsJcFfQjBAYqLdbl
JyCh1dKSdNsH9lS3p/gcVAcuNSujVaAS0B9TEJsSAXTW8u6YBgQRccuWrLuCnmYH
pofBMZhjdIA0WH9p78+eOBbUBzd2e9sO3V1OLzK13LaJlJdAtbnMzHrVsIPau0Rr
VC7nj8mvepQ+6160IDfxWNLzTTGdkyyVBgZ1zyYsvttlrXWehaY90zEmHXKc4MwJ
/TASpbIVIxUagFcDKJqqPMi7fUsrG4t/NMtP7zZlD5qH1a0NSd7Rd7s5S67t6E7H
hdPeXFVYnjNVxAbheTnQLEC37eskKpRqRadsur3RUbU4B8HW/pU=
-----END CERTIFICATE-----
Generated at Mon Jan 26 10:58:07 2026 by rpki-client