This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/0e46a305-df77-4587-8703-a905c53779ac/0/4ACFA054E26D225A10C6B0FD316D21263924491E.mft
File:                     4ACFA054E26D225A10C6B0FD316D21263924491E.mft (raw, json)
Hash identifier:          O4X2ju8rY58A8v8b+TcjkvMfHUr2LWFJDnusZ7S6dOk=
Subject key identifier:   04:80:A1:59:2D:85:06:7E:4B:7D:EC:21:B7:0C:2A:A7:6E:03:94:50
Authority key identifier: 4A:CF:A0:54:E2:6D:22:5A:10:C6:B0:FD:31:6D:21:26:39:24:49:1E
Certificate issuer:       /CN=4ACFA054E26D225A10C6B0FD316D21263924491E
Certificate serial:       3AE0E7ADF600F48295C66268655D082CE32D62B0
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4ACFA054E26D225A10C6B0FD316D21263924491E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/0e46a305-df77-4587-8703-a905c53779ac/0/4ACFA054E26D225A10C6B0FD316D21263924491E.mft
Manifest number:          0542
Signing time:             Fri 23 Jan 2026 21:11:17 +0000
Manifest this update:     Fri 23 Jan 2026 21:06:17 +0000
Manifest next update:     Mon 26 Jan 2026 21:56:17 +0000
Files and hashes:         1: 4ACFA054E26D225A10C6B0FD316D21263924491E.crl (hash: Un3tKi/3ysh2qN4EiBWextTjhFuy3eVd9EVhv354srw=)
                          2: 3130332e32342e3231322e302f32342d3234203d3e20313332363439.roa (hash: Occ9qukgsG4ZnF1Qic+Tc5XTBoYcoc2YAGi7zbsnbGs=)
                          3: 3130332e32342e3231342e302f32342d3234203d3e20313332363439.roa (hash: yAXaSsyAZCT1TlzRq2Ly3hqQXPTOIb4fK/X1XVhMrsQ=)
                          4: 3130332e32342e3231322e302f32322d3232203d3e20313332363439.roa (hash: 45SWUlBMje1Gil0mHOq3QhxOP8W4+J1eu/35dWSuGkk=)
                          5: 3130332e32342e3231352e302f32342d3234203d3e20313332363439.roa (hash: 8s60aKm8BvyPqQYfQkCsPX1L1uTLkhjy/eeXecR9yKI=)
                          6: 323430363a653930303a3a2f34382d3438203d3e20313332363439.roa (hash: wG+9X966FrXEy+/eGU93wsgmxZZCxywdW61E71ZhOio=)
                          7: 3130332e32342e3231332e302f32342d3234203d3e20313332363439.roa (hash: rU6CTRCIbPGkygtk9vCtJAvLoojM7auukeL4M4/e+W4=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/0e46a305-df77-4587-8703-a905c53779ac/0/4ACFA054E26D225A10C6B0FD316D21263924491E.crl
                          rsync://repo-rpki.idnic.net/repo/0e46a305-df77-4587-8703-a905c53779ac/0/4ACFA054E26D225A10C6B0FD316D21263924491E.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4ACFA054E26D225A10C6B0FD316D21263924491E.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 26 Jan 2026 21:56:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:e0:e7:ad:f6:00:f4:82:95:c6:62:68:65:5d:08:2c:e3:2d:62:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ACFA054E26D225A10C6B0FD316D21263924491E
        Validity
            Not Before: Jan 23 21:06:17 2026 GMT
            Not After : Jan 26 21:56:17 2026 GMT
        Subject: CN=0480A1592D85067E4B7DEC21B70C2AA76E039450
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:58:4a:c3:17:72:b7:ad:da:db:ae:5c:f3:1e:
                    47:16:b0:d8:5a:84:98:5a:3b:6d:49:5a:0f:ac:68:
                    2f:ed:b9:ce:38:92:66:64:93:a1:75:61:15:a0:a9:
                    d0:ef:19:2c:4a:2d:8b:d3:66:38:4a:06:e8:2e:35:
                    26:bb:de:a1:51:e3:20:27:62:84:07:a5:ed:5a:7e:
                    ae:2a:ec:b6:b7:c6:86:d5:b9:88:17:ee:ba:14:13:
                    80:a2:18:1b:d2:e1:d7:1f:f7:2a:bf:35:30:e6:d0:
                    c3:87:fd:7c:e8:d4:10:cc:e8:76:ff:3e:c7:f6:f8:
                    70:aa:8e:ab:94:00:3d:5a:e7:02:d1:51:56:8f:ee:
                    3d:3f:9b:4b:8f:65:7f:da:8c:1b:81:35:fa:af:0a:
                    b5:94:b1:d7:aa:69:e5:bb:2d:14:0a:5f:e7:6d:34:
                    00:71:0d:6d:37:81:bb:5e:83:6b:a3:21:65:cd:fc:
                    4e:62:f5:06:aa:b6:18:7f:e6:ba:35:1b:fe:12:84:
                    84:88:dd:a5:b1:e5:88:fe:97:02:50:fb:5b:6f:c4:
                    44:95:cd:ea:4f:6a:92:56:1d:18:b8:5f:ef:5e:4a:
                    41:05:05:e2:d0:d8:a9:b7:36:2c:00:3c:ac:64:c0:
                    14:2c:2a:a3:07:13:4d:a9:2f:81:03:06:46:81:b4:
                    7c:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:80:A1:59:2D:85:06:7E:4B:7D:EC:21:B7:0C:2A:A7:6E:03:94:50
            X509v3 Authority Key Identifier:
                keyid:4A:CF:A0:54:E2:6D:22:5A:10:C6:B0:FD:31:6D:21:26:39:24:49:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/0e46a305-df77-4587-8703-a905c53779ac/0/4ACFA054E26D225A10C6B0FD316D21263924491E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4ACFA054E26D225A10C6B0FD316D21263924491E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0e46a305-df77-4587-8703-a905c53779ac/0/4ACFA054E26D225A10C6B0FD316D21263924491E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:7f:64:ae:51:3f:9d:eb:d5:63:0d:0f:bb:23:88:ab:8c:a7:
         46:80:16:f6:b8:d8:49:91:2c:e0:7a:eb:bd:ca:2e:5b:38:6d:
         b7:c5:03:4b:73:c5:04:0e:d6:4d:44:2f:89:33:00:45:07:bb:
         2a:9b:0c:49:de:57:8c:62:5b:0d:ca:20:b0:9d:2b:e9:af:10:
         7d:dd:68:71:0c:c2:c0:c4:c6:f8:2f:42:b3:3e:b2:15:d4:4b:
         4f:c6:4c:6f:6d:8b:8b:0b:44:42:63:9d:15:1b:a1:ec:dd:61:
         d3:16:8d:bf:5a:32:d5:40:08:8b:41:4c:19:83:9a:b9:42:f6:
         81:06:47:85:3f:a1:40:5d:ae:79:20:fe:8f:2d:c4:ed:18:7a:
         6c:4d:3e:4e:c7:ee:7e:0f:e3:ca:90:6a:16:ba:84:9b:de:52:
         ae:81:a0:18:bc:16:50:bc:76:e3:c2:a1:bd:4b:82:ce:58:b7:
         fe:0f:2c:91:ab:47:04:dc:a9:06:dd:4f:d2:6b:af:75:21:79:
         89:33:fe:04:68:42:67:3e:61:6d:9f:63:c7:92:d6:63:e0:e0:
         dd:3a:e1:b0:39:e1:31:13:df:db:a8:85:b5:b0:fd:7e:cf:85:
         e1:d3:fe:49:be:18:91:66:66:ae:9d:2a:c1:ca:4c:39:e3:2e:
         42:e1:73:be
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUOuDnrfYA9IKVxmJoZV0ILOMtYrAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEFDRkEwNTRFMjZEMjI1QTEwQzZCMEZEMzE2RDIxMjYz
OTI0NDkxRTAeFw0yNjAxMjMyMTA2MTdaFw0yNjAxMjYyMTU2MTdaMDMxMTAvBgNV
BAMTKDA0ODBBMTU5MkQ4NTA2N0U0QjdERUMyMUI3MEMyQUE3NkUwMzk0NTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDWErDF3K3rdrbrlzzHkcWsNha
hJhaO21JWg+saC/tuc44kmZkk6F1YRWgqdDvGSxKLYvTZjhKBuguNSa73qFR4yAn
YoQHpe1afq4q7La3xobVuYgX7roUE4CiGBvS4dcf9yq/NTDm0MOH/Xzo1BDM6Hb/
Psf2+HCqjquUAD1a5wLRUVaP7j0/m0uPZX/ajBuBNfqvCrWUsdeqaeW7LRQKX+dt
NABxDW03gbteg2ujIWXN/E5i9Qaqthh/5ro1G/4ShISI3aWx5Yj+lwJQ+1tvxESV
zepPapJWHRi4X+9eSkEFBeLQ2Km3NiwAPKxkwBQsKqMHE02pL4EDBkaBtHzzAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUBIChWS2FBn5Lfewhtwwqp24DlFAwHwYDVR0j
BBgwFoAUSs+gVOJtIloQxrD9MW0hJjkkSR4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w
ZTQ2YTMwNS1kZjc3LTQ1ODctODcwMy1hOTA1YzUzNzc5YWMvMC80QUNGQTA1NEUy
NkQyMjVBMTBDNkIwRkQzMTZEMjEyNjM5MjQ0OTFFLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNEFDRkEwNTRFMjZEMjI1QTEwQzZCMEZEMzE2RDIxMjYzOTI0
NDkxRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGU0NmEzMDUtZGY3Ny00NTg3LTg3
MDMtYTkwNWM1Mzc3OWFjLzAvNEFDRkEwNTRFMjZEMjI1QTEwQzZCMEZEMzE2RDIx
MjYzOTI0NDkxRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAA5/ZK5RP53r1WMND7sjiKuMp0aAFva42EmR
LOB6673KLls4bbfFA0tzxQQO1k1EL4kzAEUHuyqbDEneV4xiWw3KILCdK+mvEH3d
aHEMwsDExvgvQrM+shXUS0/GTG9ti4sLREJjnRUboezdYdMWjb9aMtVACItBTBmD
mrlC9oEGR4U/oUBdrnkg/o8txO0YemxNPk7H7n4P48qQaha6hJveUq6BoBi8FlC8
duPCob1Lgs5Yt/4PLJGrRwTcqQbdT9Jrr3UheYkz/gRoQmc+YW2fY8eS1mPg4N06
4bA54TET39uohbWw/X7PheHT/km+GJFmZq6dKsHKTDnjLkLhc74=
-----END CERTIFICATE-----
Generated at Sun Jan 25 23:22:15 2026 by rpki-client