This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/1b4e195e-12de-4c3c-93e5-522ee54018d6/0/9FEB25155CF1AFF90AE11DA0298F164D554986F4.mft
File:                     9FEB25155CF1AFF90AE11DA0298F164D554986F4.mft (raw, json)
Hash identifier:          G0UFg52xTuUbG6qDLNFSi6OZiTDtAnRTAEJMIEVljcY=
Subject key identifier:   F7:6C:0B:97:18:F7:4D:A9:7B:48:35:44:7B:F4:9C:89:38:E0:8D:17
Authority key identifier: 9F:EB:25:15:5C:F1:AF:F9:0A:E1:1D:A0:29:8F:16:4D:55:49:86:F4
Certificate issuer:       /CN=9FEB25155CF1AFF90AE11DA0298F164D554986F4
Certificate serial:       1CCD0819F33316A979B4E413BE974E3440C7A6CA
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9FEB25155CF1AFF90AE11DA0298F164D554986F4.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/1b4e195e-12de-4c3c-93e5-522ee54018d6/0/9FEB25155CF1AFF90AE11DA0298F164D554986F4.mft
Manifest number:          0542
Signing time:             Sun 25 Jan 2026 18:31:50 +0000
Manifest this update:     Sun 25 Jan 2026 18:26:50 +0000
Manifest next update:     Thu 29 Jan 2026 01:48:50 +0000
Files and hashes:         1: 3130332e31302e36302e302f32342d3234203d3e203338373538.roa (hash: vr66fn8B7rAPP+TZSIsfhj0n+lp991jln8PENhk4tOQ=)
                          2: 3132322e3130322e34302e302f32312d3234203d3e203338373538.roa (hash: oTh96cvu9N7dUKNXeMRvCfiS16/pskUDIN5zzPcyPFs=)
                          3: 323430343a336530303a3a2f33322d3438203d3e203338373538.roa (hash: AMgNEXA3HgeJ9JW4vEN8yPqkkgaxJIY9BD1424Sv1Zo=)
                          4: 3131342e3132392e31362e302f32312d3234203d3e203338373538.roa (hash: EdvOiYuEQSs6Tte4v6yMNFw5asiVZESXMxoQoYWb3vI=)
                          5: 9FEB25155CF1AFF90AE11DA0298F164D554986F4.crl (hash: CF70adSjKjYz2QwSIod280HUBCJe4yIMs4kxXiBg1Cs=)
                          6: 3130332e31302e36332e302f32342d3234203d3e203338373538.roa (hash: lTXl5JSGNXk2H6QC/ExXfaBTFR2N2ANdTqoiPB9R7qw=)
                          7: 3132302e32392e3135322e302f32312d3234203d3e203338373538.roa (hash: RS9Byz+j3EdqEQMObrbAR7PmpA8rmEiuqCAVbbyaqzQ=)
                          8: 3230322e39332e3232342e302f32312d3234203d3e203338373538.roa (hash: pHeh4WZc6QAiJI01oIhwHizGh3B/+0TL7uxRsM4Hqog=)
                          9: 3130332e31302e36322e302f32342d3234203d3e203338373538.roa (hash: WjmWZuOqqVrHpn2Iht/6D/CnYopSoMqLYwKVON2A9VQ=)
                          10: 34332e3235322e37322e302f32322d3234203d3e203338373538.roa (hash: CXQZIZNdSuRyo3numXoAqSwoFv1BpTDqqmtfJIixEeM=)
                          11: 3138302e3137382e39362e302f32302d3234203d3e203338373538.roa (hash: kpFmjz57IgAP8PtBxnCHq8wcPp57kSPI2nlME92Fnyg=)
                          12: 3230332e3137362e3137362e302f32322d3234203d3e203338373538.roa (hash: fs11mYHw0N1XTmtPs5VLrZKEd/NebYnoDSeOf+OjB1M=)
                          13: 3130332e31302e36312e302f32342d3234203d3e203338373538.roa (hash: fpx270ixaq11nCmgYzT3PO4j149L6mmMafh/Cax7edM=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/1b4e195e-12de-4c3c-93e5-522ee54018d6/0/9FEB25155CF1AFF90AE11DA0298F164D554986F4.crl
                          rsync://repo-rpki.idnic.net/repo/1b4e195e-12de-4c3c-93e5-522ee54018d6/0/9FEB25155CF1AFF90AE11DA0298F164D554986F4.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9FEB25155CF1AFF90AE11DA0298F164D554986F4.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 28 Jan 2026 14:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:cd:08:19:f3:33:16:a9:79:b4:e4:13:be:97:4e:34:40:c7:a6:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9FEB25155CF1AFF90AE11DA0298F164D554986F4
        Validity
            Not Before: Jan 25 18:26:50 2026 GMT
            Not After : Jan 29 01:48:50 2026 GMT
        Subject: CN=F76C0B9718F74DA97B4835447BF49C8938E08D17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:58:44:4f:32:ab:1c:1a:50:f1:33:aa:3d:ec:
                    dd:a4:9c:2a:a9:14:96:19:97:ea:88:5b:65:da:5c:
                    45:67:8c:71:7b:da:3f:79:37:51:1e:4b:39:bd:04:
                    e8:e5:14:7c:03:85:c8:f2:a0:1b:4e:1a:48:07:d1:
                    10:42:13:f1:69:b2:8b:b1:c4:cc:7a:42:4f:d3:0d:
                    3b:bb:95:e5:5e:da:4c:e0:82:26:d2:ed:8d:a3:aa:
                    90:76:7f:9f:de:d2:28:27:41:02:90:e8:e5:8c:8e:
                    0f:63:67:b5:19:b1:bf:b2:f5:ef:82:2c:35:bd:f0:
                    f0:2c:d5:ce:d0:85:78:51:14:70:83:0d:a0:ce:dd:
                    9b:c3:3b:28:47:74:e4:96:82:5d:60:72:41:07:6b:
                    df:c8:8c:16:ed:ba:e6:e8:b5:f5:10:9d:d7:93:cc:
                    f5:0a:19:20:21:16:e4:5d:57:91:03:4d:bb:47:a2:
                    e5:02:da:13:7f:37:53:84:4c:12:c3:bd:25:aa:c0:
                    15:cd:3f:a9:e4:4b:61:92:59:90:9b:0a:ec:4c:26:
                    91:1f:37:bf:09:66:40:c7:e6:94:93:ae:58:bc:95:
                    e0:24:5f:85:bb:30:32:a6:c5:06:32:38:24:0f:34:
                    78:92:86:95:36:ab:60:76:f1:9d:03:d6:2e:3f:ef:
                    8d:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:6C:0B:97:18:F7:4D:A9:7B:48:35:44:7B:F4:9C:89:38:E0:8D:17
            X509v3 Authority Key Identifier:
                keyid:9F:EB:25:15:5C:F1:AF:F9:0A:E1:1D:A0:29:8F:16:4D:55:49:86:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/1b4e195e-12de-4c3c-93e5-522ee54018d6/0/9FEB25155CF1AFF90AE11DA0298F164D554986F4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9FEB25155CF1AFF90AE11DA0298F164D554986F4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1b4e195e-12de-4c3c-93e5-522ee54018d6/0/9FEB25155CF1AFF90AE11DA0298F164D554986F4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:19:f8:69:57:14:7b:96:db:89:52:d7:3c:d5:4f:21:3d:77:
         ef:14:f4:93:58:ec:c5:10:ec:13:e5:3d:4c:81:31:e8:e1:22:
         a7:b4:f8:05:6d:07:83:74:d4:f6:92:a8:f5:29:d8:ae:1f:d7:
         6e:79:42:36:5f:4d:4d:20:b4:39:10:62:81:dc:bf:3c:44:cd:
         ba:ea:bc:74:70:ae:8c:5d:03:c6:ed:b6:08:43:61:a3:fe:a2:
         2d:74:65:b0:08:25:c3:e5:cf:cc:d0:fa:40:6b:45:a4:e8:28:
         10:33:94:7f:1d:74:12:b9:39:4a:90:79:c7:c0:96:57:13:10:
         4b:a2:c8:41:fd:15:a8:66:73:6d:6c:44:77:39:1d:07:a4:f1:
         3d:2a:ac:4d:21:4c:2b:d7:97:de:37:a1:13:cb:b3:52:7e:7c:
         81:5e:ea:89:ac:43:10:48:03:be:2e:1a:9d:bb:5f:a7:36:9c:
         f5:9b:2a:dd:c0:2c:b3:66:4b:28:2a:c1:53:91:d2:b3:61:24:
         06:b7:74:a1:e9:f9:1c:2b:41:83:db:a5:81:3c:aa:00:ce:5e:
         58:09:07:1e:1a:36:04:d4:c0:91:11:1c:0a:2d:d0:c2:28:05:
         df:c1:2c:34:f7:ec:d8:94:70:ed:9d:2e:fa:4b:a0:8e:3a:70:
         23:86:1a:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 01:12:06 2026 by rpki-client