This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/059acb97-6e87-4e31-a569-a2660df4f2b8/0/03315D0E966A85B878EA9058B8CF03EAF2881889.mft
File:                     03315D0E966A85B878EA9058B8CF03EAF2881889.mft (raw, json)
Hash identifier:          1BX+SubvdMpkp3m6ZRCLuFxJd2/e5mXB+XQ5uHJ41Yk=
Subject key identifier:   F8:90:7B:30:74:11:0E:0F:A1:28:A9:7A:5B:FA:05:1D:A7:0C:BC:91
Authority key identifier: 03:31:5D:0E:96:6A:85:B8:78:EA:90:58:B8:CF:03:EA:F2:88:18:89
Certificate issuer:       /CN=03315D0E966A85B878EA9058B8CF03EAF2881889
Certificate serial:       AE041EAC2A6D479C7021EE04B411BA876C5A1A
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/03315D0E966A85B878EA9058B8CF03EAF2881889.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/059acb97-6e87-4e31-a569-a2660df4f2b8/0/03315D0E966A85B878EA9058B8CF03EAF2881889.mft
Manifest number:          0542
Signing time:             Sun 25 Jan 2026 02:12:04 +0000
Manifest this update:     Sun 25 Jan 2026 02:07:04 +0000
Manifest next update:     Wed 28 Jan 2026 03:43:04 +0000
Files and hashes:         1: 03315D0E966A85B878EA9058B8CF03EAF2881889.crl (hash: BxjAfmrxj2sZ9NezKAh9dHw4fCQMf8TYh9NsBG1MRxE=)
                          2: 3132352e36322e39322e302f32322d3234203d3e20313338383032.roa (hash: /mrf9uGudGqcY2xOJDkK2ay/Dazo8lduBDgmiiL0FaY=)
                          3: 34352e3132322e35322e302f32322d3234203d3e20313335343438.roa (hash: DkpLk9wjtee+olEloYKtXa5HH1pKUw3+B87062+6qXc=)
                          4: 3133392e352e34302e302f32322d3234203d3e20313335343438.roa (hash: FiOfMQpB+2gj2/QXJXJKgiwN/buCJemHWYRysKfxPV0=)
                          5: 3130332e3131372e38322e302f32332d3234203d3e20313335343438.roa (hash: FQaLrXQaTAavmrBmVo9QPPvdOGdpfu5PAx/qFXOh+QY=)
                          6: 3130332e36342e31342e302f32342d3234203d3e20313335343438.roa (hash: QC8bpRsjoPax2VeFVISF7pou7WEj+SsbxVAbvHu+cPo=)
                          7: 34352e3132352e37322e302f32322d3234203d3e20313335343438.roa (hash: 0xR4iUHdKDDCOxdGEjjw5dfszyruo+MDrchNeNEqs2w=)
                          8: 3130332e39372e3235312e302f32342d3234203d3e20313335343438.roa (hash: hoLbivleHtt89cCReqbvfZYyTkoCRfwcqA081C1+9Gw=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/059acb97-6e87-4e31-a569-a2660df4f2b8/0/03315D0E966A85B878EA9058B8CF03EAF2881889.crl
                          rsync://repo-rpki.idnic.net/repo/059acb97-6e87-4e31-a569-a2660df4f2b8/0/03315D0E966A85B878EA9058B8CF03EAF2881889.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/03315D0E966A85B878EA9058B8CF03EAF2881889.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 28 Jan 2026 03:43:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            ae:04:1e:ac:2a:6d:47:9c:70:21:ee:04:b4:11:ba:87:6c:5a:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03315D0E966A85B878EA9058B8CF03EAF2881889
        Validity
            Not Before: Jan 25 02:07:04 2026 GMT
            Not After : Jan 28 03:43:04 2026 GMT
        Subject: CN=F8907B3074110E0FA128A97A5BFA051DA70CBC91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:af:24:b6:99:79:25:c1:09:48:25:38:3e:3a:
                    d5:9f:ff:2d:4d:b3:13:79:9d:3e:c1:4d:72:bd:92:
                    10:db:3f:3e:e2:3e:fe:b9:59:49:a6:34:76:47:8b:
                    69:dc:c3:55:2c:29:3d:b5:1d:6b:52:83:fd:29:fa:
                    78:9c:54:3d:55:d1:ce:03:66:28:78:7f:83:e3:73:
                    00:fc:37:84:ce:06:df:11:98:7c:d8:31:a3:f2:b8:
                    6b:c1:f3:52:0b:15:ba:03:d7:ed:9b:8f:37:e3:3d:
                    67:ed:ab:92:b8:e4:ce:0d:25:16:cb:1f:fb:fb:bf:
                    b7:1b:8d:e1:d8:ca:2f:8c:5f:3c:ea:9d:31:a0:3d:
                    34:1b:a9:7a:1a:9e:02:ec:61:95:78:79:fc:18:98:
                    33:72:30:d6:0d:09:bf:93:9a:22:35:14:87:a4:bb:
                    1d:a7:28:76:1e:8d:c7:42:f1:5f:5f:96:78:97:9b:
                    c6:01:3c:f9:08:eb:07:11:93:f5:7d:42:70:ea:ed:
                    29:d6:0c:86:82:c5:fa:24:cf:2f:be:bd:e6:66:7f:
                    49:3a:d1:64:b7:f1:91:7a:87:70:69:da:d5:06:8b:
                    f1:67:03:eb:da:6b:a4:ac:96:b4:58:b8:95:81:56:
                    f6:ab:a2:6e:ba:a7:1e:07:a7:a1:53:a2:c4:c9:8a:
                    57:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:90:7B:30:74:11:0E:0F:A1:28:A9:7A:5B:FA:05:1D:A7:0C:BC:91
            X509v3 Authority Key Identifier:
                keyid:03:31:5D:0E:96:6A:85:B8:78:EA:90:58:B8:CF:03:EA:F2:88:18:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/059acb97-6e87-4e31-a569-a2660df4f2b8/0/03315D0E966A85B878EA9058B8CF03EAF2881889.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/03315D0E966A85B878EA9058B8CF03EAF2881889.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/059acb97-6e87-4e31-a569-a2660df4f2b8/0/03315D0E966A85B878EA9058B8CF03EAF2881889.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:27:e5:33:2e:99:4a:cf:7d:84:3e:e6:20:7a:10:0a:26:d7:
         26:8c:1b:e7:f5:04:0d:25:70:76:ee:89:1a:af:24:94:ea:26:
         db:ab:c8:b2:20:cc:c0:99:0d:98:52:88:87:ce:a4:85:e2:f7:
         d4:25:b8:35:4f:64:fb:13:78:73:2d:e8:5c:9b:19:b5:23:56:
         ab:89:44:c8:5c:77:46:c7:5e:97:b9:b0:00:17:8d:10:9c:b8:
         c6:cb:e5:59:7d:4b:72:f9:39:8b:32:9b:a0:a4:eb:57:e7:21:
         30:0a:56:62:ad:38:d6:4c:a4:48:c2:9e:29:c7:29:d3:be:95:
         ef:ca:9a:1c:e2:54:dc:22:db:17:0f:b7:63:76:93:11:a6:d6:
         5b:de:77:8a:1f:cd:95:e0:3e:07:bc:f0:93:8d:30:62:b2:19:
         95:87:80:d9:8f:d3:03:4c:b9:11:4c:3f:be:49:0a:0f:8b:8c:
         4b:99:e3:73:83:53:83:fe:04:a3:37:b5:19:ac:8a:e6:71:e9:
         32:c2:98:63:5b:4c:ca:73:0b:8b:12:2d:6c:f2:96:ef:10:29:
         d3:8a:dc:57:53:1d:d9:a8:4d:da:76:31:74:57:54:67:ad:a9:
         db:0d:f4:4f:81:82:ea:0b:55:d0:c5:26:e7:4b:c0:35:ff:c9:
         38:8f:d5:fb
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUAK4EHqwqbUeccCHuBLQRuodsWhowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDMzMTVEMEU5NjZBODVCODc4RUE5MDU4QjhDRjAzRUFG
Mjg4MTg4OTAeFw0yNjAxMjUwMjA3MDRaFw0yNjAxMjgwMzQzMDRaMDMxMTAvBgNV
BAMTKEY4OTA3QjMwNzQxMTBFMEZBMTI4QTk3QTVCRkEwNTFEQTcwQ0JDOTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqryS2mXklwQlIJTg+OtWf/y1N
sxN5nT7BTXK9khDbPz7iPv65WUmmNHZHi2ncw1UsKT21HWtSg/0p+nicVD1V0c4D
Zih4f4PjcwD8N4TOBt8RmHzYMaPyuGvB81ILFboD1+2bjzfjPWftq5K45M4NJRbL
H/v7v7cbjeHYyi+MXzzqnTGgPTQbqXoangLsYZV4efwYmDNyMNYNCb+TmiI1FIek
ux2nKHYejcdC8V9flniXm8YBPPkI6wcRk/V9QnDq7SnWDIaCxfokzy++veZmf0k6
0WS38ZF6h3Bp2tUGi/FnA+vaa6SslrRYuJWBVvarom66px4Hp6FTosTJilcHAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQU+JB7MHQRDg+hKKl6W/oFHacMvJEwHwYDVR0j
BBgwFoAUAzFdDpZqhbh46pBYuM8D6vKIGIkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w
NTlhY2I5Ny02ZTg3LTRlMzEtYTU2OS1hMjY2MGRmNGYyYjgvMC8wMzMxNUQwRTk2
NkE4NUI4NzhFQTkwNThCOENGMDNFQUYyODgxODg5LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMDMzMTVEMEU5NjZBODVCODc4RUE5MDU4QjhDRjAzRUFGMjg4
MTg4OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDU5YWNiOTctNmU4Ny00ZTMxLWE1
NjktYTI2NjBkZjRmMmI4LzAvMDMzMTVEMEU5NjZBODVCODc4RUE5MDU4QjhDRjAz
RUFGMjg4MTg4OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAKon5TMumUrPfYQ+5iB6EAom1yaMG+f1BA0l
cHbuiRqvJJTqJturyLIgzMCZDZhSiIfOpIXi99QluDVPZPsTeHMt6FybGbUjVquJ
RMhcd0bHXpe5sAAXjRCcuMbL5Vl9S3L5OYsym6Ck61fnITAKVmKtONZMpEjCninH
KdO+le/KmhziVNwi2xcPt2N2kxGm1lved4ofzZXgPge88JONMGKyGZWHgNmP0wNM
uRFMP75JCg+LjEuZ43ODU4P+BKM3tRmsiuZx6TLCmGNbTMpzC4sSLWzylu8QKdOK
3FdTHdmoTdp2MXRXVGetqdsN9E+BguoLVdDFJudLwDX/yTiP1fs=
-----END CERTIFICATE-----
Generated at Mon Jan 26 04:24:03 2026 by rpki-client