This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/134d8277-2910-4075-b937-66f943518e29/0/D7D98B5F7BCA3741F01911488372E855D91DBF9C.mft
File:                     D7D98B5F7BCA3741F01911488372E855D91DBF9C.mft (raw, json)
Hash identifier:          hVZpkA8nmMbuONDIMzcstdHE4VG2t7bDpb135taUPEE=
Subject key identifier:   84:30:18:14:6B:AD:E9:88:26:42:A8:87:3A:86:5E:03:42:13:64:02
Authority key identifier: D7:D9:8B:5F:7B:CA:37:41:F0:19:11:48:83:72:E8:55:D9:1D:BF:9C
Certificate issuer:       /CN=D7D98B5F7BCA3741F01911488372E855D91DBF9C
Certificate serial:       14A123B162F70821D47FC988703A0AC5D791C1B4
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D7D98B5F7BCA3741F01911488372E855D91DBF9C.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/134d8277-2910-4075-b937-66f943518e29/0/D7D98B5F7BCA3741F01911488372E855D91DBF9C.mft
Manifest number:          0213
Signing time:             Sat 24 Jan 2026 08:31:45 +0000
Manifest this update:     Sat 24 Jan 2026 08:26:45 +0000
Manifest next update:     Tue 27 Jan 2026 12:46:45 +0000
Files and hashes:         1: 3130332e3138312e38302e302f32342d3234203d3e20313439373032.roa (hash: 4tLHfUAaxrKkU1/ID8Cs3rzd8UlebdYrCEqhL3fN6eQ=)
                          2: D7D98B5F7BCA3741F01911488372E855D91DBF9C.crl (hash: d7OCioX4k0mJ7FGQlCQLa0+QVRFt2XpT5Qrb6FNOQ1o=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/134d8277-2910-4075-b937-66f943518e29/0/D7D98B5F7BCA3741F01911488372E855D91DBF9C.crl
                          rsync://repo-rpki.idnic.net/repo/134d8277-2910-4075-b937-66f943518e29/0/D7D98B5F7BCA3741F01911488372E855D91DBF9C.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D7D98B5F7BCA3741F01911488372E855D91DBF9C.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 27 Jan 2026 12:46:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:a1:23:b1:62:f7:08:21:d4:7f:c9:88:70:3a:0a:c5:d7:91:c1:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D7D98B5F7BCA3741F01911488372E855D91DBF9C
        Validity
            Not Before: Jan 24 08:26:45 2026 GMT
            Not After : Jan 27 12:46:45 2026 GMT
        Subject: CN=843018146BADE9882642A8873A865E0342136402
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:23:21:53:5f:7e:75:44:0e:1c:d6:ab:fc:0f:
                    0f:22:68:6b:cb:a5:14:1b:cf:01:b8:7e:98:c8:fa:
                    64:d7:0d:58:da:8c:76:15:19:68:b3:79:2c:b5:43:
                    b1:cf:b9:25:6f:43:74:7f:6c:ea:e3:48:09:1e:cb:
                    c6:70:21:e3:4a:61:9c:1d:17:ab:65:bf:eb:fb:80:
                    d0:31:d6:fa:d5:06:67:5a:3c:cc:e1:0f:18:39:ea:
                    a3:73:80:0c:2a:cf:04:74:3a:8e:85:7a:9c:f5:8c:
                    e2:5c:f6:c3:ab:6a:04:6f:77:db:8b:31:75:10:71:
                    a1:ef:b0:53:bf:35:49:95:13:41:53:2d:95:72:82:
                    c8:e1:38:63:36:21:81:78:e5:3f:d8:34:81:30:64:
                    30:60:7c:5c:93:65:eb:da:c8:f8:60:78:96:3e:4f:
                    ed:2e:ad:78:e5:52:76:11:e3:ad:59:f6:12:39:92:
                    78:c5:86:7f:e9:a8:a0:35:c9:ad:64:b4:de:cc:b5:
                    3f:24:68:73:53:05:92:85:6a:f3:22:05:5a:84:8c:
                    b0:63:6a:6d:ed:82:11:3e:32:79:a5:86:af:a6:a1:
                    66:e3:68:38:50:d4:d0:6d:4d:d9:bf:d2:11:2d:f3:
                    36:7c:89:ed:e5:ab:44:06:89:51:e6:b1:49:5b:c1:
                    76:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:30:18:14:6B:AD:E9:88:26:42:A8:87:3A:86:5E:03:42:13:64:02
            X509v3 Authority Key Identifier:
                keyid:D7:D9:8B:5F:7B:CA:37:41:F0:19:11:48:83:72:E8:55:D9:1D:BF:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/134d8277-2910-4075-b937-66f943518e29/0/D7D98B5F7BCA3741F01911488372E855D91DBF9C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D7D98B5F7BCA3741F01911488372E855D91DBF9C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/134d8277-2910-4075-b937-66f943518e29/0/D7D98B5F7BCA3741F01911488372E855D91DBF9C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:c5:6b:e0:98:08:ed:5a:d0:b3:04:ec:a5:1c:fc:c9:50:03:
         0a:b6:68:09:1c:10:bd:1e:59:5e:bd:1e:2f:36:6c:b8:99:37:
         a2:b4:ec:2b:5f:60:4e:32:42:22:d8:46:92:d2:40:af:6c:c3:
         5f:dd:0b:0f:ea:4e:e6:3f:ce:ac:0b:06:77:37:83:03:22:5b:
         71:fb:98:ca:ba:99:49:a4:bf:91:fc:8e:97:e6:20:3b:39:c9:
         ea:68:5a:cf:28:96:33:62:4b:56:86:81:f6:7e:94:a8:81:08:
         ea:31:9e:ef:00:21:a6:25:4e:ee:f2:ca:0e:5a:6d:4c:1d:af:
         a3:1d:0c:47:11:9d:61:a9:12:df:b9:a2:36:5c:d7:24:88:af:
         5b:2b:fd:72:67:eb:4d:b4:ab:7b:27:c9:1e:67:a4:16:ca:56:
         c2:90:29:c8:54:9a:b1:1f:59:c3:73:c2:a1:71:72:0a:13:3e:
         b6:62:4d:80:61:61:65:31:30:91:31:2a:9a:9e:be:72:8e:32:
         ca:f3:79:03:34:18:15:37:3f:04:d7:a3:2c:e5:93:ee:e9:8c:
         4c:6c:d3:77:6d:0c:f3:6c:f7:e7:fe:4e:02:fc:0f:3f:c6:e7:
         01:4c:fb:28:2c:32:da:15:c1:43:79:4e:16:3b:6b:cc:68:88:
         84:e9:a9:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:59:32 2026 by rpki-client