This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/1192021e-3904-4115-af5e-3edb713baa14/0/C24FD85D1F493383773D253EBB38BED908305E45.mft
File:                     C24FD85D1F493383773D253EBB38BED908305E45.mft (raw, json)
Hash identifier:          KMRPeQv7Y36O+uxmYIZzPc4/SY+BA4aH1cI0GmHOvhI=
Subject key identifier:   44:11:27:0D:1C:03:3F:1E:45:67:00:2B:A7:98:05:1C:22:C9:18:9A
Authority key identifier: C2:4F:D8:5D:1F:49:33:83:77:3D:25:3E:BB:38:BE:D9:08:30:5E:45
Certificate issuer:       /CN=C24FD85D1F493383773D253EBB38BED908305E45
Certificate serial:       4526D90858B6F0AF72964DB7738B0D53E7226E92
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C24FD85D1F493383773D253EBB38BED908305E45.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/1192021e-3904-4115-af5e-3edb713baa14/0/C24FD85D1F493383773D253EBB38BED908305E45.mft
Manifest number:          0278
Signing time:             Sun 25 Jan 2026 02:41:05 +0000
Manifest this update:     Sun 25 Jan 2026 02:36:05 +0000
Manifest next update:     Wed 28 Jan 2026 03:55:05 +0000
Files and hashes:         1: 323430373a613563303a313a3a2f34382d3438203d3e20313432333339.roa (hash: uev3miSgW3ZPH8225ZsPIsE3cXJFEhdn0RKfMczyL+Q=)
                          2: 3130332e3136392e3134382e302f32342d3234203d3e20313432333339.roa (hash: NWVwsgB2dXAzGfRzRtWC/6x1tcqD7Irs7AzETBCx59Q=)
                          3: C24FD85D1F493383773D253EBB38BED908305E45.crl (hash: U1DJZQyCLnqHkQgYDCEtW1KxDwRUsO7It1cj20cY/hU=)
                          4: 323430373a613563303a3a2f33322d3332203d3e20313432333339.roa (hash: 7KHGCRWZOjkL1VAY0QoUCT7SgQgusxdAgE4yokAO21g=)
                          5: 323430373a613563303a3a2f34382d3438203d3e20313432333339.roa (hash: /W9eJzZVpyB/z5tgobQScs/0TG2lb+p8hosfeUn800Q=)
                          6: 3130332e3136392e3134382e302f32332d3233203d3e20313432333339.roa (hash: gJAqHQjFUTPg0AFGSgF8qhY2vJwwNEihrQ5zJgvbzfU=)
                          7: 323430373a613563303a31343a3a2f34382d3438203d3e20313432333339.roa (hash: JsI09r/ZNnEPFeCt6WLBPTMEkxJRdrp4JE3T6ebsTQM=)
                          8: 3130332e3136392e3134392e302f32342d3234203d3e20313432333339.roa (hash: FZgWhwDV11eis/PBOFUSnOmvx9HizVeVS1+vHaVIVOU=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/1192021e-3904-4115-af5e-3edb713baa14/0/C24FD85D1F493383773D253EBB38BED908305E45.crl
                          rsync://repo-rpki.idnic.net/repo/1192021e-3904-4115-af5e-3edb713baa14/0/C24FD85D1F493383773D253EBB38BED908305E45.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C24FD85D1F493383773D253EBB38BED908305E45.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 28 Jan 2026 03:55:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:26:d9:08:58:b6:f0:af:72:96:4d:b7:73:8b:0d:53:e7:22:6e:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C24FD85D1F493383773D253EBB38BED908305E45
        Validity
            Not Before: Jan 25 02:36:05 2026 GMT
            Not After : Jan 28 03:55:05 2026 GMT
        Subject: CN=4411270D1C033F1E4567002BA798051C22C9189A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:cc:df:c2:94:7f:fd:b9:aa:0c:15:2f:1d:ad:
                    01:51:56:ab:a2:d9:75:6c:11:4e:1c:58:a3:c4:31:
                    44:2f:b6:b5:e3:77:05:e0:af:42:33:2e:d2:94:63:
                    1b:85:34:2b:a6:3a:2d:4f:f5:86:1a:24:f2:58:03:
                    a4:d7:78:51:72:59:b3:be:16:83:29:50:6d:fd:69:
                    c6:fd:47:e4:9b:19:97:8a:4d:a7:c4:35:9f:a7:39:
                    3d:a2:ea:89:14:b9:4c:94:dc:b0:a9:c6:52:42:fb:
                    ff:aa:25:71:d1:f0:2c:dd:e5:56:35:0b:3f:78:14:
                    63:dc:69:ed:2e:62:67:7f:9d:26:dc:6c:01:55:8b:
                    79:5c:31:1e:30:6a:bf:30:91:62:66:3b:5f:69:2d:
                    72:77:9a:0f:34:fb:8a:bf:e3:f7:6b:86:8b:74:2e:
                    48:fc:ca:3a:56:6b:9c:10:c7:f4:b9:a0:09:38:58:
                    d6:3e:a9:60:6f:42:53:e9:51:c6:5b:bc:8c:ee:33:
                    2a:9b:d9:4e:f9:d5:2e:9b:16:f4:8b:c4:84:25:5d:
                    cf:11:61:df:4e:bc:de:1e:f2:4e:e3:ed:e2:36:45:
                    5b:af:f3:38:c3:e4:45:0c:57:e0:a1:f2:97:d3:3f:
                    af:21:6e:52:40:fe:3d:b5:29:47:10:7a:ef:23:92:
                    f3:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:11:27:0D:1C:03:3F:1E:45:67:00:2B:A7:98:05:1C:22:C9:18:9A
            X509v3 Authority Key Identifier:
                keyid:C2:4F:D8:5D:1F:49:33:83:77:3D:25:3E:BB:38:BE:D9:08:30:5E:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/1192021e-3904-4115-af5e-3edb713baa14/0/C24FD85D1F493383773D253EBB38BED908305E45.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C24FD85D1F493383773D253EBB38BED908305E45.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1192021e-3904-4115-af5e-3edb713baa14/0/C24FD85D1F493383773D253EBB38BED908305E45.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:e4:82:c3:34:06:ff:a4:77:52:b0:63:b2:c3:f5:e0:77:4a:
         a1:5b:b4:5e:39:2f:f5:02:1b:b9:80:38:6f:78:dd:c3:97:ee:
         3a:19:9b:d0:93:c2:4d:80:47:b3:4b:d2:56:0e:e2:37:d2:7a:
         f2:17:86:fd:d0:7f:4f:5b:bf:af:12:55:5d:e6:05:54:9d:7f:
         ff:21:56:8a:e1:e4:e5:c3:75:0f:2c:14:1b:a3:7c:fa:72:9d:
         44:af:80:75:3c:9c:4c:53:09:40:e4:87:f5:c8:80:7d:24:f2:
         a1:53:2a:b0:a5:d4:b9:db:f0:e6:fa:29:cc:a6:4e:55:d1:13:
         f5:1e:70:76:39:b1:21:3f:9f:43:ac:95:28:24:4e:31:7c:f7:
         cf:4d:49:8e:55:a7:46:7d:ba:0e:64:0c:50:3f:01:b9:02:88:
         ee:9f:d6:5d:9f:18:4b:5b:6c:32:4b:25:0a:ba:94:79:8e:ae:
         bf:f0:32:40:76:42:a8:6f:ef:c5:63:ec:7a:dd:06:3f:0b:f6:
         a9:e5:ab:ba:9a:e8:61:35:06:c7:bf:38:5f:d7:da:a8:71:ff:
         c6:34:4e:ef:0f:58:c7:17:5b:84:58:de:fe:18:8c:82:b7:6f:
         f9:99:a8:f6:47:57:bb:46:35:ca:2c:4e:ed:55:cd:f9:93:11:
         52:9a:69:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:38:25 2026 by rpki-client