This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/1/4DF3DB3DA21D0022202130736E4CCB048C1D5158.mft
File:                     4DF3DB3DA21D0022202130736E4CCB048C1D5158.mft (raw, json)
Hash identifier:          vmQwnpq/yyzOz/fKnWHInPYG8IYYC173sm9OgTDGSiA=
Subject key identifier:   D2:9C:56:C2:1B:52:70:72:45:E8:F7:90:BF:A9:F3:59:80:16:77:C0
Authority key identifier: 4D:F3:DB:3D:A2:1D:00:22:20:21:30:73:6E:4C:CB:04:8C:1D:51:58
Certificate issuer:       /CN=4DF3DB3DA21D0022202130736E4CCB048C1D5158
Certificate serial:       637889DDFB70901D7ED78749D6321CF1AB010AE0
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4DF3DB3DA21D0022202130736E4CCB048C1D5158.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/1/4DF3DB3DA21D0022202130736E4CCB048C1D5158.mft
Manifest number:          0117
Signing time:             Sun 25 Jan 2026 08:51:29 +0000
Manifest this update:     Sun 25 Jan 2026 08:46:29 +0000
Manifest next update:     Wed 28 Jan 2026 17:42:29 +0000
Files and hashes:         1: 323430343a393763303a3230303a3a2f34302d3430203d3e20313533303837.roa (hash: m4Qjt6x6f7mHe4i/Iubt+ryvfk1k2wGsuQa/3iUQfPg=)
                          2: 323430343a393763303a323230303a3a2f34302d3430203d3e20313533303837.roa (hash: 8BghnefMyUfpQWuZ7yB+zaBc31qeLaaDPm1YLasmkKU=)
                          3: 323430343a393763303a353030303a3a2f33362d3336203d3e20313533303837.roa (hash: ajp2RV8pB0t7xjb6AMg24tD94YiYauZ1iojKxpZ1J3o=)
                          4: 323430343a393763303a3a2f33322d3332203d3e20313533303837.roa (hash: RbbbhN7gQjhRmlONdMhkhAU8C3rOa0UopxhZkN4y+0U=)
                          5: 323430343a393763303a393763303a3a2f34342d3434203d3e20313533303837.roa (hash: jwvNujssv5IpW6wUm1bDQwCkCbwLEP4pJ6+PadQVpUw=)
                          6: 4DF3DB3DA21D0022202130736E4CCB048C1D5158.crl (hash: h/eZY1Id5YanM4e7R+Jl+M1af3HZ+EXChxertnwbfk4=)
                          7: 323430343a393763303a363030303a3a2f33362d3336203d3e20313533303837.roa (hash: 9sSxWhK1ekW9sX4kW8H5um/xDsKQzfqceGtwbeCUELE=)
                          8: 323430343a393763303a3232303a3a2f34342d3434203d3e20313533303837.roa (hash: EApvDBvKIpb3TW1OvFKqCBw8otauBBFdv2Yvyf2DIxU=)
                          9: 323430343a393763303a643030303a3a2f33362d3336203d3e20313533303837.roa (hash: vK7js0VcvkoTEio6OPE0bIxYoKi2WhD/AFizRZR03iE=)
                          10: 323430343a393763303a653030303a3a2f33362d3336203d3e20313533303837.roa (hash: odQ4TQODv/Nxx9TjvaaJpyigmRoWi0QI8IwNfXz5bHo=)
                          11: 323430343a393763303a623030303a3a2f33362d3336203d3e20313533303837.roa (hash: mn8CNzPntuzIh9ykEoLvol7d+gOHgPTC5fCQWZQ5dbs=)
                          12: 323430343a393763303a373030303a3a2f33362d3336203d3e20313533303837.roa (hash: lNdW3pOZi8eT+J9dyaHX5GGSIEb0ecFMMO3Pho99eNg=)
                          13: 323430343a393763303a393763303a3a2f34382d3438203d3e20313533303837.roa (hash: UH1OeEapN00xpdN52GP23gFWyVB860/o2X8O7dKpC+0=)
                          14: 323430343a393763303a3a2f34302d3430203d3e20313533303837.roa (hash: wtGa4g73t3mkeuxwfJNw0nrWS6hzNcTp0PysGI1hEyo=)
                          15: 323430343a393763303a3130333a3a2f34382d3438203d3e20313533303837.roa (hash: sjFkPQRbAFB+/y9Sh73guddwprpnyTSYhc+NK3cVMUk=)
                          16: 323430343a393763303a323330303a3a2f34302d3430203d3e20313533303837.roa (hash: 4uXivfruDrV6vIQDaw3CdwZggXYUI8C5CzvO1Aezvw8=)
                          17: 323430343a393763303a3232323a3a2f34382d3438203d3e20313533303837.roa (hash: wzrRIRPSPMpZXs/6SqbPwUgiCefzNUlDE+HufEdbYVA=)
                          18: 323430343a393763303a3232333a3a2f34382d3438203d3e20313533303837.roa (hash: CoVHqDze9/9Ad7yystdU0IkQDdi+UUE5paHmjRb7ddU=)
                          19: 323430343a393763303a333030303a3a2f33362d3336203d3e20313533303837.roa (hash: hFSaz/g1QnbG2lr8TgOJJdh8bcxNOKHTZPQyaXMiTuo=)
                          20: 323430343a393763303a3a2f33362d3336203d3e20313533303837.roa (hash: /2j20KxiHUqPzb25Ob8Vnswz982vobPobznvUU3v3l0=)
                          21: 323430343a393763303a3136333a3a2f34382d3438203d3e20313533303837.roa (hash: 1NH1eG3Zfl97MOtxtfrsqqGCWGbmYZJJ7WvL5sj1ARU=)
                          22: 323430343a393763303a333130303a3a2f34302d3430203d3e20313533303837.roa (hash: GtLJlyIT44yOE5pTxubbE+JVbv879K3iwKIQBgBcJ2I=)
                          23: 323430343a393763303a663030303a3a2f33362d3336203d3e20313533303837.roa (hash: 6M8Pqc3cx4r9Johealtry1Gw+jVdKKETBKeugC/gwSo=)
                          24: 323430343a393763303a393030303a3a2f33362d3336203d3e20313533303837.roa (hash: OViwO9PklTzUH02BjuZLXgkeh74Fe3vDWeCkgzs68vI=)
                          25: 323430343a393763303a323232323a3a2f34382d3438203d3e20313533303837.roa (hash: 6h5ukYFuCno4f7DUxvLhYVLFCjOWP5SiTwkMYTzIF/4=)
                          26: 323430343a393763303a393730303a3a2f34302d3430203d3e20313533303837.roa (hash: 5B2JZlTjn+LkK2wM5nDYDuRQs9xZXGxH5pBH421APJg=)
                          27: 323430343a393763303a323233303a3a2f34342d3434203d3e20313533303837.roa (hash: x6IB55et7Umm41gvuMH6aPtv2IqrtCDIYQnCW4yZ0Jc=)
                          28: 323430343a393763303a633030303a3a2f33362d3336203d3e20313533303837.roa (hash: BVieKtpjSLtSo/dKiDHRcHA8rEhJMn29aKZFmH29jqw=)
                          29: 323430343a393763303a383030303a3a2f33362d3336203d3e20313533303837.roa (hash: QP61IhleORRzGf5/ZoBkFFGoF5n6EhGqldep0K1H6sA=)
                          30: 323430343a393763303a313630303a3a2f34302d3430203d3e20313533303837.roa (hash: xiP480ZV+GHJ2/4depZViI+46Z/6Gy8Oy9ISHx8BOoQ=)
                          31: 323430343a393763303a343030303a3a2f33362d3336203d3e20313533303837.roa (hash: jqvg3e8AqoLRJ/K75B/MsSSeNm5CmK8WuhFVMvH1GPY=)
                          32: 323430343a393763303a3136323a3a2f34382d3438203d3e20313533303837.roa (hash: xoql0u4cJ/KRzzlhzdPt4uyRXe/QNmDlgTST+s7tLx0=)
                          33: 323430343a393763303a333132363a3a2f34382d3438203d3e20313533303837.roa (hash: SOe6CNGwh7AV/ME3NGZRGYorNCiEvzdLsEvnR8QiyAQ=)
                          34: 323430343a393763303a3937303a3a2f34342d3434203d3e20313533303837.roa (hash: 3REo8lPESzPESEgFYfKabImyxXr3e1MH5zR+5WqeqWA=)
                          35: 323430343a393763303a323030303a3a2f33362d3336203d3e20313533303837.roa (hash: ASP8j+vBPIfNxGlKZjOVhw8wDXvVplT0wShhkxku/nY=)
                          36: 323430343a393763303a323232303a3a2f34342d3434203d3e20313533303837.roa (hash: faTcPr5R7d5SON6aopxvVZHUN4/VFaOooXiyhEzUbUA=)
                          37: 323430343a393763303a613030303a3a2f33362d3336203d3e20313533303837.roa (hash: N6mGANoBckRU2bg5hxStsxuo2HX2wdIPxHilFclib3s=)
                          38: 323430343a393763303a313030303a3a2f33362d3336203d3e20313533303837.roa (hash: gMiVXZLJ/9DguVi8cY3O9jgAHLxkekctq4KTVNjceI0=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/1/4DF3DB3DA21D0022202130736E4CCB048C1D5158.crl
                          rsync://repo-rpki.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/1/4DF3DB3DA21D0022202130736E4CCB048C1D5158.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4DF3DB3DA21D0022202130736E4CCB048C1D5158.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 28 Jan 2026 14:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:78:89:dd:fb:70:90:1d:7e:d7:87:49:d6:32:1c:f1:ab:01:0a:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4DF3DB3DA21D0022202130736E4CCB048C1D5158
        Validity
            Not Before: Jan 25 08:46:29 2026 GMT
            Not After : Jan 28 17:42:29 2026 GMT
        Subject: CN=D29C56C21B52707245E8F790BFA9F359801677C0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:13:ca:d8:0b:83:a2:b9:d8:3a:d5:47:4d:42:
                    fa:c2:3a:f2:7e:a9:9a:56:5b:57:76:8f:37:d5:07:
                    90:db:f1:79:3a:6f:e7:36:39:4a:be:39:9a:30:d2:
                    98:50:1d:e2:db:f3:89:32:02:49:bf:56:af:88:b0:
                    f1:17:02:8d:c7:5f:ab:32:9b:11:22:8b:65:31:7d:
                    92:25:4e:36:8d:83:97:f4:ae:2e:f4:c9:2f:e8:17:
                    be:3e:f0:c8:0d:d9:01:0d:90:97:ad:78:bf:95:87:
                    45:6e:b2:a9:c7:96:82:68:a4:86:6a:20:99:8c:7e:
                    7b:ae:4e:99:7d:14:38:1c:1e:2d:73:54:31:2b:47:
                    18:3e:45:8a:27:6c:05:ad:f8:58:7d:6a:48:02:82:
                    0d:71:ac:66:b2:86:74:2f:a9:f4:00:8a:97:b3:b9:
                    08:90:a3:b6:89:80:c1:c6:78:c5:f6:ba:70:04:28:
                    a4:27:2b:05:65:3d:81:dc:2a:c7:21:34:a7:11:f9:
                    99:5a:e7:ea:d1:2a:1e:c6:a0:a8:aa:49:52:fb:e4:
                    8b:2e:16:65:83:32:f2:1f:68:ac:37:1c:ea:94:4c:
                    49:c6:4d:33:d3:c4:ea:88:55:05:9e:d4:ae:53:0c:
                    14:63:69:4e:b7:5e:91:84:1c:da:e4:0d:a7:8b:f8:
                    f8:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:9C:56:C2:1B:52:70:72:45:E8:F7:90:BF:A9:F3:59:80:16:77:C0
            X509v3 Authority Key Identifier:
                keyid:4D:F3:DB:3D:A2:1D:00:22:20:21:30:73:6E:4C:CB:04:8C:1D:51:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/1/4DF3DB3DA21D0022202130736E4CCB048C1D5158.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4DF3DB3DA21D0022202130736E4CCB048C1D5158.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/1/4DF3DB3DA21D0022202130736E4CCB048C1D5158.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:54:b7:76:c3:76:62:b9:65:be:5b:51:d5:b7:ec:d6:93:15:
         c8:69:bd:fa:44:33:4d:a6:bd:c1:99:e4:f1:e0:2d:c5:f1:06:
         21:6b:b0:f9:e4:98:43:0b:54:b5:19:b4:13:10:f5:47:15:95:
         67:c1:fc:96:8a:50:f0:7d:04:89:37:19:0e:3b:41:54:74:f6:
         a3:57:2d:24:48:e7:77:7a:67:63:45:e1:6d:f2:90:a0:cc:bc:
         ad:fb:a5:61:4c:ea:4b:5a:32:0b:48:f6:d6:3f:8c:cd:53:4c:
         7d:4b:3d:c2:de:1f:a5:ac:c9:34:03:21:ed:a1:d8:1e:26:cf:
         6d:33:d4:55:9e:2e:5c:ea:04:b3:5f:18:a3:e2:8e:b9:7a:3c:
         92:fa:10:3c:bb:6f:3a:6a:7c:15:22:11:32:73:45:94:7c:c3:
         b2:80:63:11:27:ac:67:17:f9:76:51:36:e4:ec:3b:43:e7:98:
         0c:a5:cc:bd:db:d8:cb:fb:ae:e2:24:3f:7c:77:a2:25:54:3b:
         81:06:8c:0d:70:c0:04:2f:6d:2e:d7:c5:4c:2d:05:bb:be:0e:
         0d:57:fa:52:0c:4d:f3:5b:b8:f9:50:8e:db:58:4b:7e:9c:7e:
         f7:46:0e:2a:0e:57:47:fd:51:9e:23:61:98:3b:f2:e1:03:9f:
         25:81:41:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----