This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/0fcf7c9e-f8c3-4015-881b-a2c21819d6b9/0/A0098405BC0A535E6E4D613793C362C743319143.mft
File:                     A0098405BC0A535E6E4D613793C362C743319143.mft (raw, json)
Hash identifier:          9wsIcj/PQgP0eesf5Z7rmi36X/E3rvzhx34Q7uJ1d6Y=
Subject key identifier:   CD:70:2D:44:E2:E3:CC:B3:CC:F9:77:75:E6:97:1E:FA:F0:45:EA:B0
Authority key identifier: A0:09:84:05:BC:0A:53:5E:6E:4D:61:37:93:C3:62:C7:43:31:91:43
Certificate issuer:       /CN=A0098405BC0A535E6E4D613793C362C743319143
Certificate serial:       172C1F6E3E61085C07C78700E76CF688383980C1
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A0098405BC0A535E6E4D613793C362C743319143.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/0fcf7c9e-f8c3-4015-881b-a2c21819d6b9/0/A0098405BC0A535E6E4D613793C362C743319143.mft
Manifest number:          0102
Signing time:             Sat 24 Jan 2026 09:21:07 +0000
Manifest this update:     Sat 24 Jan 2026 09:16:07 +0000
Manifest next update:     Tue 27 Jan 2026 18:34:07 +0000
Files and hashes:         1: 3130332e3135372e38302e302f32342d3234203d3e20313431313133.roa (hash: Q6e0e1mxnvq7Z9cyA+57spYXR6whshtcuglsUxuXceY=)
                          2: A0098405BC0A535E6E4D613793C362C743319143.crl (hash: rST11BeafBlm4AgaFGdP2Aly5dd3O6vjTeI54hNJN7M=)
                          3: 323030313a6466353a313738303a3a2f34382d3438203d3e20313431313133.roa (hash: ULILjGfRQgoXvgl0tXvCQV4c2a3dPck8tfEpBWTuXWg=)
                          4: 3130332e3135372e38312e302f32342d3234203d3e20313431313133.roa (hash: 7E801eHzByrlpX824SF5Bv9nBKvFuISx0tzFKJn/f5I=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/0fcf7c9e-f8c3-4015-881b-a2c21819d6b9/0/A0098405BC0A535E6E4D613793C362C743319143.crl
                          rsync://repo-rpki.idnic.net/repo/0fcf7c9e-f8c3-4015-881b-a2c21819d6b9/0/A0098405BC0A535E6E4D613793C362C743319143.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A0098405BC0A535E6E4D613793C362C743319143.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 27 Jan 2026 18:34:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:2c:1f:6e:3e:61:08:5c:07:c7:87:00:e7:6c:f6:88:38:39:80:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A0098405BC0A535E6E4D613793C362C743319143
        Validity
            Not Before: Jan 24 09:16:07 2026 GMT
            Not After : Jan 27 18:34:07 2026 GMT
        Subject: CN=CD702D44E2E3CCB3CCF97775E6971EFAF045EAB0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:a6:f5:ea:21:3a:e4:da:26:c5:c3:49:51:ce:
                    11:5f:8c:99:c1:22:c3:8b:3f:2b:f3:64:a8:c6:1a:
                    0e:3f:14:f1:5f:ce:27:67:15:79:a0:dd:ed:3f:68:
                    30:01:cb:98:b0:ed:56:77:3a:24:ee:b6:33:a4:82:
                    09:7d:15:83:9c:97:05:3b:98:51:1e:26:e9:a7:cf:
                    d3:47:30:2d:32:d9:72:51:77:6b:0c:dc:8e:d6:bf:
                    a3:c9:f6:8f:d2:ab:9d:f6:3e:0e:e6:29:42:19:44:
                    80:09:6a:15:3d:fe:f6:97:79:a3:d3:2c:de:13:27:
                    f5:0d:6e:29:94:61:7c:c9:1b:32:02:cf:ed:cd:ca:
                    fe:41:bd:9f:f8:5d:6e:e7:5b:ed:1e:65:18:93:17:
                    37:41:24:8a:42:c3:07:2a:71:4d:61:af:42:54:e9:
                    d8:2a:e4:2f:72:10:9f:3c:2e:90:f0:db:b0:db:3a:
                    ed:4a:e6:6a:64:3c:cd:5a:ec:e6:0c:62:26:47:d3:
                    3b:ab:f4:23:1c:7e:f8:d6:a5:7e:c4:5e:4d:e4:09:
                    d0:7e:b5:74:96:32:2d:be:13:ee:bc:c9:61:6b:6c:
                    a7:bd:05:a4:6f:52:17:a6:eb:0f:a8:70:9f:0d:76:
                    d0:fe:11:6d:45:98:6a:67:fa:d1:8b:44:fa:93:8e:
                    f5:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:70:2D:44:E2:E3:CC:B3:CC:F9:77:75:E6:97:1E:FA:F0:45:EA:B0
            X509v3 Authority Key Identifier:
                keyid:A0:09:84:05:BC:0A:53:5E:6E:4D:61:37:93:C3:62:C7:43:31:91:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/0fcf7c9e-f8c3-4015-881b-a2c21819d6b9/0/A0098405BC0A535E6E4D613793C362C743319143.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A0098405BC0A535E6E4D613793C362C743319143.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0fcf7c9e-f8c3-4015-881b-a2c21819d6b9/0/A0098405BC0A535E6E4D613793C362C743319143.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:c1:9a:5d:25:fb:f1:bb:f4:b8:70:47:06:77:e0:21:29:56:
         0f:7d:b8:d7:28:d1:7f:fb:a3:56:cf:a7:a8:87:12:30:b5:6f:
         a3:56:06:d1:3e:f6:6d:bc:2a:1d:35:d9:d1:f1:05:64:be:c9:
         4d:d1:39:de:b0:20:9b:1e:21:ee:3b:8d:7e:8e:c9:14:15:af:
         27:16:5f:fe:7d:d6:7b:d7:a8:5b:7b:ae:71:7c:c9:91:9a:7b:
         a9:f6:3b:e3:a2:06:f6:48:17:72:53:03:20:97:8c:3a:20:30:
         69:df:6d:80:ad:3c:8c:ed:10:94:cd:15:b2:61:3b:e3:59:b5:
         20:3f:3e:ad:dd:92:8b:57:be:0b:96:9e:c7:dd:07:23:b8:56:
         39:27:52:4e:5f:27:cc:11:f2:71:79:f5:11:da:e2:49:5b:62:
         64:7e:7f:6a:2b:b5:77:b2:20:d5:27:81:4a:ae:ad:62:68:02:
         81:42:ab:cd:d5:ee:fe:9d:76:d0:21:6e:1b:4e:58:d4:cb:43:
         e6:cd:bc:3d:4b:e6:ef:55:0b:be:c5:a9:2c:93:a0:8a:cc:00:
         f4:cf:1a:b3:62:ea:71:af:2c:75:5c:24:67:75:ea:4b:1c:60:
         3e:93:ef:d9:0f:86:ca:14:df:41:ef:3e:28:4d:63:07:7a:69:
         2f:8f:9d:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 19:00:22 2026 by rpki-client