This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/12ea77b5-88f7-4085-b331-975024cd046d/0/74D4F2785CA261D018C909BA622D8244292BCB3E.mft
File:                     74D4F2785CA261D018C909BA622D8244292BCB3E.mft (raw, json)
Hash identifier:          Bhrekvf1YDsoUGtb5q6iJxzUg/Kr6xjKPM9NN0mdu4Y=
Subject key identifier:   A0:5D:9A:DD:CC:0F:2A:75:1E:08:CC:C8:D7:AB:29:AD:89:D8:EE:4B
Authority key identifier: 74:D4:F2:78:5C:A2:61:D0:18:C9:09:BA:62:2D:82:44:29:2B:CB:3E
Certificate issuer:       /CN=74D4F2785CA261D018C909BA622D8244292BCB3E
Certificate serial:       1CE5667029E92EE62B5535141289C78728243913
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/74D4F2785CA261D018C909BA622D8244292BCB3E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/12ea77b5-88f7-4085-b331-975024cd046d/0/74D4F2785CA261D018C909BA622D8244292BCB3E.mft
Manifest number:          0382
Signing time:             Fri 23 Jan 2026 21:31:41 +0000
Manifest this update:     Fri 23 Jan 2026 21:26:41 +0000
Manifest next update:     Tue 27 Jan 2026 08:10:41 +0000
Files and hashes:         1: 3130332e3130332e3134342e302f32342d3234203d3e20313336383631.roa (hash: qaTsYAuDwYq3vmdm+MP/d1P3xUHxCKcLJsCvSBVNIeQ=)
                          2: 74D4F2785CA261D018C909BA622D8244292BCB3E.crl (hash: tZadDGpVOasfu7gC1OANcft+SifBZZ0lrY6SQ1yp7EM=)
                          3: 3130332e3130332e3134352e302f32342d3234203d3e20313336383631.roa (hash: u6oloP9Y8JGAma8cxbntxH8WmfQY01P9oCREk7+XMxs=)
                          4: 3130332e3130332e3134372e302f32342d3234203d3e20313336383631.roa (hash: GRVghrICNAdxouBIwXYTRSPY6doN9zN/lvPgtUZIKw0=)
                          5: 3130332e3130332e3134362e302f32342d3234203d3e20313336383631.roa (hash: gj/8lggfR8myqoNqzBWaOnMDIVL5S0r8bZN2DAfp+nY=)
                          6: 323430313a663563303a3a2f33322d3438203d3e20313336383631.roa (hash: EZvYjhUqWVWt3m8BlTlpwuqAgPj6OBoR83LID+/r3xw=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/12ea77b5-88f7-4085-b331-975024cd046d/0/74D4F2785CA261D018C909BA622D8244292BCB3E.crl
                          rsync://repo-rpki.idnic.net/repo/12ea77b5-88f7-4085-b331-975024cd046d/0/74D4F2785CA261D018C909BA622D8244292BCB3E.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/74D4F2785CA261D018C909BA622D8244292BCB3E.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 27 Jan 2026 08:10:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:e5:66:70:29:e9:2e:e6:2b:55:35:14:12:89:c7:87:28:24:39:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74D4F2785CA261D018C909BA622D8244292BCB3E
        Validity
            Not Before: Jan 23 21:26:41 2026 GMT
            Not After : Jan 27 08:10:41 2026 GMT
        Subject: CN=A05D9ADDCC0F2A751E08CCC8D7AB29AD89D8EE4B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:d1:72:54:b0:17:15:ca:be:50:17:79:a7:fe:
                    cb:31:f2:a4:0a:1f:fd:ac:91:10:a1:53:83:b1:86:
                    1f:22:70:5d:de:1e:6e:bc:39:34:4d:41:90:dc:a5:
                    94:43:f6:b0:87:ac:e1:59:9b:2f:50:73:0c:e9:05:
                    91:6a:1f:5f:7e:75:78:19:bb:e2:f3:31:41:75:2a:
                    33:ea:9c:51:65:94:b9:e6:22:c5:31:1f:b6:6e:2d:
                    7f:35:d8:ac:bb:ff:c1:5d:c0:5c:96:b2:78:cd:72:
                    1a:18:ff:89:6c:f0:a7:13:16:b4:d7:0a:be:b0:19:
                    38:95:10:2f:ae:18:29:36:6f:6b:46:8a:bc:4a:53:
                    3b:1b:29:2b:fb:dc:f7:04:18:18:52:cb:98:c9:a3:
                    6c:91:9c:c3:62:2c:4b:e5:22:54:3d:2e:ab:2b:ab:
                    d3:1d:40:a9:af:62:87:d4:e0:75:2f:82:b0:96:6b:
                    46:45:55:34:65:6b:a0:8a:5e:d8:3b:4e:df:ff:c6:
                    dd:46:a4:cd:f8:8b:11:87:75:02:4a:72:13:ed:2c:
                    01:f1:97:7e:6d:13:cb:a0:32:75:a2:50:34:68:bc:
                    c5:60:47:a6:6f:90:e1:3c:cc:04:4c:94:26:a1:08:
                    ea:83:01:49:29:4f:94:33:6e:35:c5:42:72:4b:9d:
                    c8:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:5D:9A:DD:CC:0F:2A:75:1E:08:CC:C8:D7:AB:29:AD:89:D8:EE:4B
            X509v3 Authority Key Identifier:
                keyid:74:D4:F2:78:5C:A2:61:D0:18:C9:09:BA:62:2D:82:44:29:2B:CB:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/12ea77b5-88f7-4085-b331-975024cd046d/0/74D4F2785CA261D018C909BA622D8244292BCB3E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/74D4F2785CA261D018C909BA622D8244292BCB3E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/12ea77b5-88f7-4085-b331-975024cd046d/0/74D4F2785CA261D018C909BA622D8244292BCB3E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:60:4d:21:f7:6e:b1:6a:b4:7d:22:4c:99:e5:b8:a6:73:e4:
         23:92:ba:f0:3b:6b:97:2b:63:6c:0a:3f:bb:53:fc:c3:0e:86:
         29:fa:9e:8b:36:5c:64:e9:0b:ab:25:66:13:3d:f4:89:57:20:
         1d:3d:96:a6:19:f8:96:6c:8b:c8:bd:1f:20:4a:6a:48:b2:a0:
         3a:87:dc:93:7a:6c:0b:4c:7a:10:9b:c9:f1:d1:77:38:07:4d:
         6f:6b:1c:cd:d0:d3:f9:71:71:d3:34:40:1d:0a:b5:a8:1d:e9:
         e9:62:43:50:ce:b8:7e:81:6d:15:50:ca:61:70:4d:dd:d9:54:
         ad:f9:32:42:14:84:b9:6e:37:4f:3f:9c:20:65:1a:00:eb:ed:
         3f:57:ef:02:83:b7:5c:5d:10:48:bc:14:db:94:f9:7c:1b:ae:
         78:13:5d:84:f5:b9:35:e0:28:f2:ed:d9:1c:0e:88:04:d2:cf:
         65:b9:b2:cb:bb:4f:a9:35:1d:e5:0a:e7:ed:7b:f9:d3:e8:1d:
         b1:58:3d:3b:fd:c1:d5:f1:97:3a:8b:1f:af:92:bf:4a:64:fc:
         a9:5c:57:b8:86:21:9e:d0:53:ff:17:84:c1:e6:27:9f:2d:09:
         7f:7b:e4:aa:a8:e1:64:72:82:a4:33:e0:7c:14:31:93:df:53:
         81:ef:3d:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:37:15 2026 by rpki-client