This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/130dc140-6cd4-4a59-b25c-3a141851c9ec/0/C451166D49539649063AF8F493F51CB1ACE0AB09.mft
File:                     C451166D49539649063AF8F493F51CB1ACE0AB09.mft (raw, json)
Hash identifier:          hn5eYT8k+O/iFvSZeyV4EQakAYI7Bvldv1EzXddD/A4=
Subject key identifier:   0A:4D:F8:92:EA:48:7E:22:3A:AE:0C:58:D8:CE:05:19:3E:4E:66:B1
Authority key identifier: C4:51:16:6D:49:53:96:49:06:3A:F8:F4:93:F5:1C:B1:AC:E0:AB:09
Certificate issuer:       /CN=C451166D49539649063AF8F493F51CB1ACE0AB09
Certificate serial:       46DD5A997BAE52008931CA536B27858607504392
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C451166D49539649063AF8F493F51CB1ACE0AB09.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/130dc140-6cd4-4a59-b25c-3a141851c9ec/0/C451166D49539649063AF8F493F51CB1ACE0AB09.mft
Manifest number:          0217
Signing time:             Sun 25 Jan 2026 20:21:04 +0000
Manifest this update:     Sun 25 Jan 2026 20:16:04 +0000
Manifest next update:     Thu 29 Jan 2026 07:19:04 +0000
Files and hashes:         1: 3230322e35352e3136382e302f32342d3234203d3e203137373639.roa (hash: GjZ1cbaTXfnbMXe6NXLIE1G8vG8knT78bA2UOSSfXJY=)
                          2: 3230322e35352e3136372e302f32342d3234203d3e203137373639.roa (hash: cWz9uXSlQWLa9Ng0/c4IO1YEuQsv0PGxvtj/Shq2axY=)
                          3: 3230322e35352e3136312e302f32342d3234203d3e203137373639.roa (hash: E6giWYKilOtzuxxyRR5Bf2onxUq+uVzIL/QgDucECFM=)
                          4: C451166D49539649063AF8F493F51CB1ACE0AB09.crl (hash: mUW9OOpL8+qypDIdwzR2Nug2nWX8dFsKWvBxbaJ1YEk=)
                          5: 3230322e35352e3136332e302f32342d3234203d3e203137373639.roa (hash: fj4+D3FnvWC2jZGh29lA6NhBfEm+9p3F5NFsLJJnOOA=)
                          6: 3230322e35352e3137302e302f32342d3234203d3e203137373639.roa (hash: FcauiWQCAo10b4251JHpBxlXw/DF6Tp3LqTDNrIkFZE=)
                          7: 3230322e35352e3136362e302f32342d3234203d3e203137373639.roa (hash: rh4Hq0+PJnkMYodh0EEu2Rh0F1326cFssYTeQOpe6mo=)
                          8: 3230322e35352e3137312e302f32342d3234203d3e203137373639.roa (hash: s4QV2LJdIkwWHWXsfO0kzma2mgtldKYGhA7Yd0ZrUKw=)
                          9: 3230322e35352e3136342e302f32342d3234203d3e203137373639.roa (hash: 9n+k1wYDMgpMgw+A5gACjEnWZSRILaiiNarAGXe5WNY=)
                          10: 3230322e35352e3136392e302f32342d3234203d3e203137373639.roa (hash: E22Utfr9APhC4z7JcllyNf8HweB95Yf5C8me+CdvyFE=)
                          11: 3230322e35352e3137352e302f32342d3234203d3e203137373639.roa (hash: 6C+M2mKjL0ChxPYmBY/5rPDruxQaFvTx4uNnx5SBd5k=)
                          12: 3230322e35352e3137322e302f32342d3234203d3e203137373639.roa (hash: IjrbLlYEZOkT769gFvToei/FjO23eUDwwXgDIinpfEU=)
                          13: 3230322e35352e3136302e302f32342d3234203d3e203137373639.roa (hash: p+Uf34Mmlfgto2vZAGmKX9zPbb85GAX+5DX29eoUl2g=)
                          14: 3230322e35352e3137342e302f32342d3234203d3e203137373639.roa (hash: AZl1WqvrrGaN/Hqm3PzVhhQNyD550/D+bGuAXNwzmmo=)
                          15: 3230322e35352e3137332e302f32342d3234203d3e203137373639.roa (hash: 39FnZF9lwp6Zy6W9tvLZyBge1M+UPl6WPVxqAcRECPc=)
                          16: 3230322e35352e3136322e302f32342d3234203d3e203137373639.roa (hash: T5jlMftgO+al5AvueUPJMaV5GzIbWRKqrYOhtXYmc+8=)
                          17: 3230322e35352e3136352e302f32342d3234203d3e203137373639.roa (hash: g5FIe96NvzXk1l3G1SZk+E0uR323nS4gh8FFBV8v4lc=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/130dc140-6cd4-4a59-b25c-3a141851c9ec/0/C451166D49539649063AF8F493F51CB1ACE0AB09.crl
                          rsync://repo-rpki.idnic.net/repo/130dc140-6cd4-4a59-b25c-3a141851c9ec/0/C451166D49539649063AF8F493F51CB1ACE0AB09.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C451166D49539649063AF8F493F51CB1ACE0AB09.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 28 Jan 2026 14:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:dd:5a:99:7b:ae:52:00:89:31:ca:53:6b:27:85:86:07:50:43:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C451166D49539649063AF8F493F51CB1ACE0AB09
        Validity
            Not Before: Jan 25 20:16:04 2026 GMT
            Not After : Jan 29 07:19:04 2026 GMT
        Subject: CN=0A4DF892EA487E223AAE0C58D8CE05193E4E66B1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:aa:21:08:c8:b9:50:70:bc:b0:79:e9:df:98:
                    67:a3:06:43:c5:e5:70:15:7d:f6:9f:9f:a5:36:02:
                    b7:cd:47:7e:01:53:a2:62:95:5e:df:7f:39:d3:12:
                    bd:5b:e2:5a:3c:90:44:18:69:37:0b:75:04:70:0d:
                    5c:e6:63:bf:ef:f0:0b:e1:e0:ec:2e:c5:30:82:b8:
                    6c:46:f9:f6:69:61:df:a1:ef:b2:c6:0c:8b:f2:4c:
                    a8:39:a9:94:00:5b:f1:bb:a5:0c:00:db:27:26:d9:
                    a8:38:ab:15:1a:75:9c:f5:bc:42:b3:a3:9d:78:cf:
                    08:c7:52:71:1a:f0:7b:a3:fe:59:b6:3e:13:fb:8d:
                    c0:5b:d9:e8:2b:87:84:a7:f5:95:4f:ff:19:f6:d3:
                    6a:33:65:16:f5:d5:9a:35:29:2e:b2:c6:27:88:92:
                    e9:70:5c:a4:ed:19:13:ba:53:9c:fd:e7:ba:11:4e:
                    0d:43:03:d8:c0:cc:39:6b:0b:ea:64:ad:60:48:9d:
                    20:67:fa:64:d5:56:a3:15:2a:f1:8c:ea:9c:52:cb:
                    9a:8e:94:88:79:6b:c9:e2:58:54:65:3e:b9:11:22:
                    78:5e:37:15:41:e2:72:57:e4:3a:a0:b3:c2:b7:dc:
                    5e:52:56:27:b5:a0:99:99:22:4e:cf:f1:c7:02:a4:
                    10:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:4D:F8:92:EA:48:7E:22:3A:AE:0C:58:D8:CE:05:19:3E:4E:66:B1
            X509v3 Authority Key Identifier:
                keyid:C4:51:16:6D:49:53:96:49:06:3A:F8:F4:93:F5:1C:B1:AC:E0:AB:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/130dc140-6cd4-4a59-b25c-3a141851c9ec/0/C451166D49539649063AF8F493F51CB1ACE0AB09.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C451166D49539649063AF8F493F51CB1ACE0AB09.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/130dc140-6cd4-4a59-b25c-3a141851c9ec/0/C451166D49539649063AF8F493F51CB1ACE0AB09.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:11:4d:70:ed:77:3e:34:3b:57:1d:2b:d5:ea:60:b7:58:ad:
         ca:94:cc:e9:e3:70:38:44:48:86:97:3f:aa:f4:02:8e:93:a8:
         aa:23:f8:4a:34:b2:f1:b2:a3:67:4d:25:ca:f6:82:07:b8:c4:
         ab:6c:6a:df:e4:d3:e4:be:0b:c6:b6:3c:ef:f6:a9:0a:6b:37:
         4c:f9:6c:79:a9:0a:f0:e9:cb:6c:1c:a1:ac:ee:93:6b:75:c6:
         1b:05:c1:c7:44:54:bc:5c:9d:34:c1:27:4c:d6:5a:79:8d:be:
         8f:08:39:58:de:bd:43:12:6e:7b:a0:d4:55:4a:76:28:ff:e1:
         b8:c3:c0:ac:48:05:e6:2a:19:3b:6a:cd:df:39:a1:03:19:f1:
         d6:85:f1:02:e7:37:1e:df:92:be:ac:f8:8e:34:ef:cd:99:0b:
         c2:34:8f:28:53:04:7c:c6:43:e8:a0:ec:a5:f8:56:28:05:ed:
         ac:37:2b:56:64:55:ca:e6:e1:8c:e2:75:aa:03:8d:1f:c6:0f:
         f4:01:e7:5c:b7:86:89:c1:29:53:37:ba:3b:03:da:68:13:e9:
         85:40:4b:00:00:5a:2b:7a:aa:03:95:b2:83:9f:50:b1:7b:5b:
         b7:25:24:99:e2:76:86:23:0d:17:ab:4b:40:59:3e:28:1c:d9:
         24:23:41:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 04:24:18 2026 by rpki-client