This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/0d3f095b-7130-4122-af25-7d2e7a11b1b1/0/1F969EE9B0838D22156118A888B81BF27B859BD5.mft
File:                     1F969EE9B0838D22156118A888B81BF27B859BD5.mft (raw, json)
Hash identifier:          PQA+CTs0Iiv/r6Vh5fJBYDLVRmSOY4ifSUqX9U2uDa0=
Subject key identifier:   44:B2:8F:1C:D4:E0:03:72:BC:1B:77:61:66:00:88:00:44:C7:4B:E3
Authority key identifier: 1F:96:9E:E9:B0:83:8D:22:15:61:18:A8:88:B8:1B:F2:7B:85:9B:D5
Certificate issuer:       /CN=1F969EE9B0838D22156118A888B81BF27B859BD5
Certificate serial:       3FA0C04C266A21F67C272A38A124AEDD6B54BC87
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1F969EE9B0838D22156118A888B81BF27B859BD5.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/0d3f095b-7130-4122-af25-7d2e7a11b1b1/0/1F969EE9B0838D22156118A888B81BF27B859BD5.mft
Manifest number:          02A0
Signing time:             Sat 24 Jan 2026 14:42:00 +0000
Manifest this update:     Sat 24 Jan 2026 14:37:00 +0000
Manifest next update:     Wed 28 Jan 2026 01:14:00 +0000
Files and hashes:         1: 3230322e35372e31392e302f32342d3234203d3e20313339393831.roa (hash: Sm/MByCUVOhu6ULq3sIzfHgpRtekl1ETdukmwPQMprw=)
                          2: 3230322e35372e32342e302f32332d3233203d3e20313430343639.roa (hash: 0bz9arJVEpW8niw69al2HqlLatQbtnCd6cPuE1FtiQQ=)
                          3: 3230322e35372e32312e302f32342d3234203d3e20313431363733.roa (hash: bCrGS2h+/zPAS+2DepWngEarE7NIIMpAdATexMqAfyQ=)
                          4: 3230322e35372e32362e302f32332d3233203d3e20313430343639.roa (hash: i0qXLSeEhZMkdN2DfH6rqQw93/yoa+3wg07gaHoYz0k=)
                          5: 3230322e35372e32372e302f32342d3234203d3e20313430343639.roa (hash: jfT+fFK9MuHkEFZ88hcVlJwwMYmz7o5P6pVJldda2zA=)
                          6: 3230322e35372e32362e302f32342d3234203d3e20313430343639.roa (hash: pyK+jcOUykm+t8TqsiBiASQSX3weZBQz2lnXkKpEWw8=)
                          7: 3230322e35372e32352e302f32342d3234203d3e20313430343639.roa (hash: N2Cye2k2ArU32sR4BIWlxYfXaoMWkhmX2inof4bL/qc=)
                          8: 3230322e35372e32302e302f32332d3233203d3e20313431363733.roa (hash: HB4BEaVD5xfGQGvt67YetoiSjWiGFie2TAF+weL5UPc=)
                          9: 1F969EE9B0838D22156118A888B81BF27B859BD5.crl (hash: 5eRzQpxH27J8uFXvLysYu64zrf545Z38KJm/xcTJYmI=)
                          10: 3230322e35372e32342e302f32342d3234203d3e20313430343639.roa (hash: s1oc4oY30dv4ZziJEtii0WqAjWHN4yIZ+Wcll5R6Lx0=)
                          11: 3230322e35372e32302e302f32342d3234203d3e20313431363733.roa (hash: 1S76/HrjUbBiAn5ZM34FLqmHD8p3H4UjIcnlsDjI5eo=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/0d3f095b-7130-4122-af25-7d2e7a11b1b1/0/1F969EE9B0838D22156118A888B81BF27B859BD5.crl
                          rsync://repo-rpki.idnic.net/repo/0d3f095b-7130-4122-af25-7d2e7a11b1b1/0/1F969EE9B0838D22156118A888B81BF27B859BD5.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1F969EE9B0838D22156118A888B81BF27B859BD5.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 28 Jan 2026 01:14:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:a0:c0:4c:26:6a:21:f6:7c:27:2a:38:a1:24:ae:dd:6b:54:bc:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F969EE9B0838D22156118A888B81BF27B859BD5
        Validity
            Not Before: Jan 24 14:37:00 2026 GMT
            Not After : Jan 28 01:14:00 2026 GMT
        Subject: CN=44B28F1CD4E00372BC1B77616600880044C74BE3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:17:06:21:7a:a4:73:ec:15:17:a6:0f:63:92:
                    d9:b1:3f:6c:c4:25:87:d8:21:20:d0:2a:d7:34:f8:
                    3b:32:89:88:93:3f:f3:ff:74:7d:d7:b2:07:f4:cc:
                    6e:d8:e5:60:2a:7f:10:e7:77:b8:37:93:89:d7:68:
                    db:31:df:a5:db:fc:74:0f:91:a4:14:51:ca:94:b7:
                    c6:3f:2a:8c:ba:41:90:3b:6d:2a:61:89:6d:08:cf:
                    d2:8e:d2:8b:f4:55:34:b8:69:7c:42:03:80:09:9e:
                    4e:49:76:8d:65:c1:cf:ea:4b:32:ef:d3:26:d0:9e:
                    02:1c:ad:e5:6a:0e:f7:ed:3b:ab:cc:62:8f:24:b1:
                    23:d5:65:2d:1d:45:e6:ff:42:98:e7:29:b6:6e:05:
                    cd:06:44:f2:ba:3e:bf:fe:53:26:ec:ba:16:7a:bc:
                    3d:31:fc:31:5e:e2:2c:a8:b9:70:bc:fb:19:0a:bb:
                    52:f1:96:20:5d:e8:f6:b4:ff:48:d4:e4:85:44:d1:
                    07:2d:ec:45:91:f2:42:f0:36:a0:02:68:73:58:76:
                    b1:8f:ee:5d:c1:e2:70:08:76:50:f4:9e:4e:34:8e:
                    3b:f8:f0:10:b3:99:2b:91:0a:66:5c:5b:dc:16:e8:
                    fb:a7:b8:a3:d1:1a:b8:52:cb:5f:da:1f:cc:e6:bc:
                    b5:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:B2:8F:1C:D4:E0:03:72:BC:1B:77:61:66:00:88:00:44:C7:4B:E3
            X509v3 Authority Key Identifier:
                keyid:1F:96:9E:E9:B0:83:8D:22:15:61:18:A8:88:B8:1B:F2:7B:85:9B:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/0d3f095b-7130-4122-af25-7d2e7a11b1b1/0/1F969EE9B0838D22156118A888B81BF27B859BD5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1F969EE9B0838D22156118A888B81BF27B859BD5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0d3f095b-7130-4122-af25-7d2e7a11b1b1/0/1F969EE9B0838D22156118A888B81BF27B859BD5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:14:72:0f:5a:8b:1a:c5:79:a1:f5:30:3b:b8:d0:3e:ad:db:
         30:d6:2e:41:ee:3f:fb:a8:e0:a5:c3:79:ab:6e:2c:9b:ae:e6:
         38:b3:22:8a:b2:8b:6c:67:6d:12:4f:d9:b5:be:2b:2c:7b:13:
         37:25:b0:a3:16:a9:54:88:cf:3a:87:83:b8:9d:d3:7b:80:b2:
         2a:13:f3:47:22:f0:9a:6c:48:7f:ba:3b:b0:e6:99:4a:79:92:
         54:07:ef:d1:4e:e5:da:1b:db:ed:a1:80:e9:b5:99:53:45:4c:
         ac:66:ba:e6:f6:ba:52:e2:9d:b5:90:c1:6d:d7:21:6c:df:83:
         3b:09:08:35:61:c9:69:7c:00:b2:09:86:16:49:82:d9:8b:4c:
         03:b3:46:a6:26:c1:87:62:3d:dc:54:75:98:a8:f0:7f:ea:9d:
         8d:f2:7b:7b:10:91:80:17:b4:50:8c:47:00:30:5f:ba:ac:94:
         ba:54:8a:5d:d1:99:7c:1b:40:5a:f2:ce:98:8f:cb:ee:f6:56:
         58:07:b2:1a:79:75:f8:89:98:ed:57:5e:b2:8b:1d:99:ff:ad:
         41:1b:80:25:87:e3:fd:57:44:9c:23:76:12:4a:9c:28:6f:03:
         34:64:44:d2:f5:df:86:ee:cc:9b:25:06:11:1a:87:da:f4:f9:
         e7:69:b2:a2
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUP6DATCZqIfZ8Jyo4oSSu3WtUvIcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUY5NjlFRTlCMDgzOEQyMjE1NjExOEE4ODhCODFCRjI3
Qjg1OUJENTAeFw0yNjAxMjQxNDM3MDBaFw0yNjAxMjgwMTE0MDBaMDMxMTAvBgNV
BAMTKDQ0QjI4RjFDRDRFMDAzNzJCQzFCNzc2MTY2MDA4ODAwNDRDNzRCRTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXFwYheqRz7BUXpg9jktmxP2zE
JYfYISDQKtc0+DsyiYiTP/P/dH3Xsgf0zG7Y5WAqfxDnd7g3k4nXaNsx36Xb/HQP
kaQUUcqUt8Y/Koy6QZA7bSphiW0Iz9KO0ov0VTS4aXxCA4AJnk5Jdo1lwc/qSzLv
0ybQngIcreVqDvftO6vMYo8ksSPVZS0dReb/QpjnKbZuBc0GRPK6Pr/+UybsuhZ6
vD0x/DFe4iyouXC8+xkKu1LxliBd6Pa0/0jU5IVE0Qct7EWR8kLwNqACaHNYdrGP
7l3B4nAIdlD0nk40jjv48BCzmSuRCmZcW9wW6PunuKPRGrhSy1/aH8zmvLURAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQURLKPHNTgA3K8G3dhZgCIAETHS+MwHwYDVR0j
BBgwFoAUH5ae6bCDjSIVYRioiLgb8nuFm9UwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w
ZDNmMDk1Yi03MTMwLTQxMjItYWYyNS03ZDJlN2ExMWIxYjEvMC8xRjk2OUVFOUIw
ODM4RDIyMTU2MTE4QTg4OEI4MUJGMjdCODU5QkQ1LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMUY5NjlFRTlCMDgzOEQyMjE1NjExOEE4ODhCODFCRjI3Qjg1
OUJENS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGQzZjA5NWItNzEzMC00MTIyLWFm
MjUtN2QyZTdhMTFiMWIxLzAvMUY5NjlFRTlCMDgzOEQyMjE1NjExOEE4ODhCODFC
RjI3Qjg1OUJENS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBABgUcg9aixrFeaH1MDu40D6t2zDWLkHuP/uo
4KXDeatuLJuu5jizIoqyi2xnbRJP2bW+Kyx7EzclsKMWqVSIzzqHg7id03uAsioT
80ci8JpsSH+6O7DmmUp5klQH79FO5dob2+2hgOm1mVNFTKxmuub2ulLinbWQwW3X
IWzfgzsJCDVhyWl8ALIJhhZJgtmLTAOzRqYmwYdiPdxUdZio8H/qnY3ye3sQkYAX
tFCMRwAwX7qslLpUil3RmXwbQFryzpiPy+72VlgHshp5dfiJmO1XXrKLHZn/rUEb
gCWH4/1XRJwjdhJKnChvAzRkRNL134buzJslBhEah9r0+edpsqI=
-----END CERTIFICATE-----
Generated at Sun Jan 25 19:00:16 2026 by rpki-client