This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/0eb96005-83a9-41e4-af5b-f3eaa8f23651/0/E84DB44F0008624F8E7693BC3BE1F9BFCDDFA280.mft
File:                     E84DB44F0008624F8E7693BC3BE1F9BFCDDFA280.mft (raw, json)
Hash identifier:          s5d0X12OyMsMJUpexT40Tj2pJQY6y9tK1g8KEk2vjv8=
Subject key identifier:   52:AD:51:F1:BB:03:42:BA:33:B6:4F:EB:37:D3:2C:D0:F0:3E:94:DC
Authority key identifier: E8:4D:B4:4F:00:08:62:4F:8E:76:93:BC:3B:E1:F9:BF:CD:DF:A2:80
Certificate issuer:       /CN=E84DB44F0008624F8E7693BC3BE1F9BFCDDFA280
Certificate serial:       1F272F601E439FF3A4BCE6CD9294418D3E369C26
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E84DB44F0008624F8E7693BC3BE1F9BFCDDFA280.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/0eb96005-83a9-41e4-af5b-f3eaa8f23651/0/E84DB44F0008624F8E7693BC3BE1F9BFCDDFA280.mft
Manifest number:          0512
Signing time:             Sat 24 Jan 2026 03:11:11 +0000
Manifest this update:     Sat 24 Jan 2026 03:06:11 +0000
Manifest next update:     Tue 27 Jan 2026 07:35:11 +0000
Files and hashes:         1: 3130332e3132302e3133382e302f32342d3234203d3e20313338303537.roa (hash: i3kLGZdC4b7g0r22OaWIQLyO15cZEfzn1gqotYUiYWU=)
                          2: E84DB44F0008624F8E7693BC3BE1F9BFCDDFA280.crl (hash: oe378Vz6YsJ7hJMFkCEPlQZTUeY/NrXOH49ckrxrG2M=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/0eb96005-83a9-41e4-af5b-f3eaa8f23651/0/E84DB44F0008624F8E7693BC3BE1F9BFCDDFA280.crl
                          rsync://repo-rpki.idnic.net/repo/0eb96005-83a9-41e4-af5b-f3eaa8f23651/0/E84DB44F0008624F8E7693BC3BE1F9BFCDDFA280.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E84DB44F0008624F8E7693BC3BE1F9BFCDDFA280.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 27 Jan 2026 07:35:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:27:2f:60:1e:43:9f:f3:a4:bc:e6:cd:92:94:41:8d:3e:36:9c:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E84DB44F0008624F8E7693BC3BE1F9BFCDDFA280
        Validity
            Not Before: Jan 24 03:06:11 2026 GMT
            Not After : Jan 27 07:35:11 2026 GMT
        Subject: CN=52AD51F1BB0342BA33B64FEB37D32CD0F03E94DC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:9f:ec:5d:65:00:ee:9a:75:02:aa:c7:ca:6f:
                    a4:f5:ef:9b:ad:51:52:64:4e:ff:cf:b7:3f:76:0f:
                    28:50:74:8b:98:24:5c:58:87:6b:f8:93:9d:91:4f:
                    d3:6d:1e:3b:2c:95:54:6b:bc:a7:0e:e6:30:1f:77:
                    f4:57:68:03:12:f9:a4:68:1a:18:0e:d9:47:28:2a:
                    b2:50:22:95:a8:f6:f9:aa:71:59:7f:fe:32:81:53:
                    ba:0e:47:52:b0:cd:30:17:09:19:e1:2d:54:3a:c8:
                    c6:20:ab:1d:f7:7b:bc:bd:b6:fc:28:22:90:11:12:
                    ed:d3:9e:92:b4:76:42:b1:90:3e:3e:69:dc:ad:9e:
                    77:05:d6:5b:bb:42:f7:00:5b:56:04:0e:c0:76:31:
                    45:3d:3e:f3:08:23:48:ec:40:c4:6d:ac:1e:5f:48:
                    3b:3b:6d:68:26:26:a6:1c:a8:2f:ce:1d:a8:d1:99:
                    1c:7f:c2:bf:f4:d0:9b:42:89:04:23:8b:9c:e9:a6:
                    7e:25:30:58:09:72:7a:64:83:b4:43:07:16:8a:b9:
                    62:a0:81:d9:be:44:75:2d:38:82:72:83:eb:44:0c:
                    30:54:da:89:c0:d0:14:58:e0:b7:03:1f:5c:ba:ff:
                    c2:f7:65:c8:5f:03:12:e3:0c:63:ef:f3:a4:ca:1c:
                    4e:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:AD:51:F1:BB:03:42:BA:33:B6:4F:EB:37:D3:2C:D0:F0:3E:94:DC
            X509v3 Authority Key Identifier:
                keyid:E8:4D:B4:4F:00:08:62:4F:8E:76:93:BC:3B:E1:F9:BF:CD:DF:A2:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/0eb96005-83a9-41e4-af5b-f3eaa8f23651/0/E84DB44F0008624F8E7693BC3BE1F9BFCDDFA280.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E84DB44F0008624F8E7693BC3BE1F9BFCDDFA280.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0eb96005-83a9-41e4-af5b-f3eaa8f23651/0/E84DB44F0008624F8E7693BC3BE1F9BFCDDFA280.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:b9:e7:22:9b:30:8d:8f:21:d4:f4:2d:c1:7c:d6:c1:1f:16:
         62:2c:ce:6a:93:a7:1e:35:36:1b:35:b3:b8:ee:cf:62:67:37:
         e4:78:79:36:07:39:7a:d8:dc:cf:cb:cd:ef:b7:10:64:4a:7f:
         2f:6f:cb:c8:9b:22:0e:01:0f:bd:89:d0:76:19:66:32:81:dd:
         7d:a0:ff:c0:7c:f7:01:0b:74:de:dd:f5:5b:21:55:25:07:79:
         68:1f:ae:23:0e:0b:14:a2:98:e5:21:c1:57:4c:38:ea:7b:ed:
         75:4d:35:7c:0c:42:e8:9e:dc:c9:70:40:d0:d5:99:80:ab:e5:
         38:d5:01:e1:70:87:cc:d6:dc:c8:0e:bf:ce:06:d4:6b:8e:73:
         3d:4e:c4:bb:1f:cd:e3:83:9b:4e:63:ee:83:6b:bd:16:68:d6:
         6b:d8:04:64:bd:df:f8:22:6e:2c:08:34:9f:42:ee:4d:f3:0c:
         cf:0b:0d:c7:9b:f4:db:ae:69:f0:f2:62:06:35:36:9c:fe:5f:
         51:c5:c9:d5:f2:11:83:64:ff:86:18:d3:b9:28:53:c2:bd:e2:
         ce:ca:5c:ca:8d:56:9b:00:d4:71:a4:25:02:96:02:48:97:c8:
         9d:86:fa:7a:02:a6:3f:11:de:07:b8:19:6d:12:80:57:f4:60:
         17:6e:cf:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:55:39 2026 by rpki-client