This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/13f0a83c-2bc0-42a5-a4ae-11a53882df10/0/6A2F662B6D6ADE8BFC30D2CDE49E360152FD38BF.mft
File:                     6A2F662B6D6ADE8BFC30D2CDE49E360152FD38BF.mft (raw, json)
Hash identifier:          fpMXqhJ7yi14FotkLkK836GPaldOgrGbB3jN7+11xD8=
Subject key identifier:   18:ED:D4:17:7E:CC:C5:CE:E9:97:55:F1:C5:BC:12:1E:FE:AA:70:0A
Authority key identifier: 6A:2F:66:2B:6D:6A:DE:8B:FC:30:D2:CD:E4:9E:36:01:52:FD:38:BF
Certificate issuer:       /CN=6A2F662B6D6ADE8BFC30D2CDE49E360152FD38BF
Certificate serial:       1A5090D716FF389D463B0888BF49A2826FDA9213
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6A2F662B6D6ADE8BFC30D2CDE49E360152FD38BF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/13f0a83c-2bc0-42a5-a4ae-11a53882df10/0/6A2F662B6D6ADE8BFC30D2CDE49E360152FD38BF.mft
Manifest number:          0241
Signing time:             Sat 24 Jan 2026 21:52:16 +0000
Manifest this update:     Sat 24 Jan 2026 21:47:16 +0000
Manifest next update:     Wed 28 Jan 2026 06:00:16 +0000
Files and hashes:         1: 3130332e3135382e3132382e302f32332d3234203d3e203338333230.roa (hash: k8S4ytxUaj76beyPRcDHD1fQEEQNVlrOr14776a6SbE=)
                          2: 6A2F662B6D6ADE8BFC30D2CDE49E360152FD38BF.crl (hash: 81Y0b7RhlorIRV7qpf7YFMHrSoJmLEOgYtcEGI6QSxM=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/13f0a83c-2bc0-42a5-a4ae-11a53882df10/0/6A2F662B6D6ADE8BFC30D2CDE49E360152FD38BF.crl
                          rsync://repo-rpki.idnic.net/repo/13f0a83c-2bc0-42a5-a4ae-11a53882df10/0/6A2F662B6D6ADE8BFC30D2CDE49E360152FD38BF.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6A2F662B6D6ADE8BFC30D2CDE49E360152FD38BF.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 28 Jan 2026 06:00:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:50:90:d7:16:ff:38:9d:46:3b:08:88:bf:49:a2:82:6f:da:92:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6A2F662B6D6ADE8BFC30D2CDE49E360152FD38BF
        Validity
            Not Before: Jan 24 21:47:16 2026 GMT
            Not After : Jan 28 06:00:16 2026 GMT
        Subject: CN=18EDD4177ECCC5CEE99755F1C5BC121EFEAA700A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:24:8b:ea:a3:d3:7e:c4:27:bf:c5:04:f8:8e:
                    1c:4d:f6:9e:bb:35:56:20:e9:2c:62:18:42:d8:ae:
                    41:c8:33:46:26:55:ba:16:31:c6:d2:f5:fe:79:7a:
                    fb:7e:b8:89:8d:8c:7c:70:74:03:c5:b9:2e:a9:3e:
                    26:7a:34:40:90:08:fe:ac:e3:3f:04:fa:31:57:88:
                    ae:6a:03:b6:4c:8d:26:39:19:20:7c:a1:bf:58:08:
                    59:6a:0a:e9:34:c2:21:a3:f1:0e:e1:35:74:5a:ee:
                    d6:26:61:43:b1:1f:4f:01:22:0e:51:d9:7f:52:10:
                    0a:1a:29:90:45:60:c7:c6:ed:66:c6:75:6a:46:8d:
                    93:3f:3a:a7:6d:b8:bf:6d:1f:39:76:e9:95:7c:cb:
                    6f:af:35:b9:b1:9f:35:71:04:73:01:08:a8:cb:2b:
                    8f:92:63:f5:4f:d8:87:c5:d7:aa:3a:5d:22:10:10:
                    83:1d:66:9d:64:cd:a0:1a:12:fe:34:ed:5b:87:dd:
                    cc:b8:12:4d:4b:0a:11:6c:b5:1e:ac:ee:32:86:f8:
                    55:c0:5c:c4:5e:18:c7:92:f7:18:df:77:4c:77:72:
                    7e:46:df:2a:0c:78:4b:c7:68:07:06:2e:03:15:3c:
                    54:95:1f:c9:8a:42:04:f2:66:13:cd:33:00:a9:90:
                    71:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:ED:D4:17:7E:CC:C5:CE:E9:97:55:F1:C5:BC:12:1E:FE:AA:70:0A
            X509v3 Authority Key Identifier:
                keyid:6A:2F:66:2B:6D:6A:DE:8B:FC:30:D2:CD:E4:9E:36:01:52:FD:38:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/13f0a83c-2bc0-42a5-a4ae-11a53882df10/0/6A2F662B6D6ADE8BFC30D2CDE49E360152FD38BF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6A2F662B6D6ADE8BFC30D2CDE49E360152FD38BF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/13f0a83c-2bc0-42a5-a4ae-11a53882df10/0/6A2F662B6D6ADE8BFC30D2CDE49E360152FD38BF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:db:ef:fc:bf:fb:36:a1:f6:94:88:6e:53:d8:9b:ec:bb:74:
         0f:56:34:2b:32:13:3b:b5:9f:2b:33:3f:98:ca:4d:49:88:19:
         5a:a8:9a:55:46:48:f3:37:5b:07:99:cd:f2:10:c7:21:09:a7:
         8d:c5:8f:f9:01:f2:ce:26:bc:13:d7:3f:1a:53:73:7b:8f:88:
         03:2e:66:68:f8:da:76:14:60:c0:cf:4c:26:a1:e4:9a:51:a2:
         a0:27:01:e8:98:15:5f:61:dc:cb:51:2e:3f:43:0c:28:ea:d6:
         67:14:5c:11:8b:de:a9:f4:57:b0:7f:08:2b:0a:8c:03:f2:cb:
         ba:6b:39:91:74:b7:ad:df:0e:8c:65:c7:b9:97:dd:46:7f:d0:
         24:2c:00:88:8b:86:6b:7b:2d:27:2b:68:58:8c:9b:f9:c7:b8:
         97:42:b7:88:d0:10:f3:84:b9:99:6a:d4:89:83:e1:4b:25:3c:
         ce:3e:2e:d2:26:bf:d1:d5:6b:18:68:93:cc:42:79:16:36:ed:
         e6:10:7c:0c:7f:44:c6:60:e6:87:d5:9b:1c:c4:7c:c5:9c:e8:
         c9:2f:4b:c8:5e:f5:bf:f4:c7:a6:f5:82:1e:9e:ae:79:98:12:
         5f:c1:81:21:ba:69:1a:9e:d6:fa:7f:26:3a:01:56:87:1a:1c:
         0c:6b:3e:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 20:32:53 2026 by rpki-client