This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/1ed46f82-cf11-4e32-b051-6ac334a92622/0/4A4CC1D625A4519B23D73717C879F10A6173AEAB.mft
File:                     4A4CC1D625A4519B23D73717C879F10A6173AEAB.mft (raw, json)
Hash identifier:          vLySud+SSultIhKEDNUoNYplLyKRbnoQkfwzmfIotVM=
Subject key identifier:   AF:BE:8D:E9:E2:38:E6:04:57:EA:46:74:A4:1C:11:FB:D7:E1:BB:3A
Authority key identifier: 4A:4C:C1:D6:25:A4:51:9B:23:D7:37:17:C8:79:F1:0A:61:73:AE:AB
Certificate issuer:       /CN=4A4CC1D625A4519B23D73717C879F10A6173AEAB
Certificate serial:       4AA0FE2BAA4876017D2AB28E6272631852B8117A
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A4CC1D625A4519B23D73717C879F10A6173AEAB.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/1ed46f82-cf11-4e32-b051-6ac334a92622/0/4A4CC1D625A4519B23D73717C879F10A6173AEAB.mft
Manifest number:          02F4
Signing time:             Sun 25 Jan 2026 13:41:40 +0000
Manifest this update:     Sun 25 Jan 2026 13:36:40 +0000
Manifest next update:     Wed 28 Jan 2026 23:38:40 +0000
Files and hashes:         1: 3130332e3233332e3130382e302f32342d3234203d3e203633343838.roa (hash: NTu0pfg5O9FNTQVT/y9O87yuBsSqMNv0sxLjGwJCf2Y=)
                          2: 4A4CC1D625A4519B23D73717C879F10A6173AEAB.crl (hash: 1zrh7Jsu8RsFLNMABLgIhGTKl2p1yW3vOMcXCuIVNDc=)
                          3: 3130332e3233332e3131302e302f32342d3234203d3e203338373538.roa (hash: XkLmfviGVp2EGPILR+re9nqIYX0YPT0FpVRTvK0kmBs=)
                          4: 3130332e3233332e3130392e302f32342d3234203d3e203633343838.roa (hash: GdSTW/OHYTEI/PWuMmTToeVUXPmcixtoxCsRQug+8zk=)
                          5: 3130332e3233332e3131312e302f32342d3234203d3e203633343838.roa (hash: z/YOZWWGc41LH9oZ4KGtThI9u3npxHOn37nVJl/FSQI=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/1ed46f82-cf11-4e32-b051-6ac334a92622/0/4A4CC1D625A4519B23D73717C879F10A6173AEAB.crl
                          rsync://repo-rpki.idnic.net/repo/1ed46f82-cf11-4e32-b051-6ac334a92622/0/4A4CC1D625A4519B23D73717C879F10A6173AEAB.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A4CC1D625A4519B23D73717C879F10A6173AEAB.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 28 Jan 2026 14:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:a0:fe:2b:aa:48:76:01:7d:2a:b2:8e:62:72:63:18:52:b8:11:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4A4CC1D625A4519B23D73717C879F10A6173AEAB
        Validity
            Not Before: Jan 25 13:36:40 2026 GMT
            Not After : Jan 28 23:38:40 2026 GMT
        Subject: CN=AFBE8DE9E238E60457EA4674A41C11FBD7E1BB3A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:a3:0a:98:1a:0b:7a:2c:d8:09:47:1c:de:d6:
                    85:06:80:3a:53:05:1a:97:fd:87:e2:55:94:7b:c1:
                    8c:4a:00:6d:a1:52:47:7c:4a:0a:f9:04:6f:d8:ae:
                    66:ad:ff:ce:c7:b6:17:5b:64:22:05:95:e9:21:52:
                    d5:d9:f4:76:ff:25:d0:29:6e:5c:d6:bb:72:8b:6c:
                    29:03:b7:32:1f:d7:0c:f8:37:f0:d4:0a:d5:c6:d1:
                    29:44:1f:22:22:45:b4:b8:2c:f9:cd:ff:7c:05:d4:
                    4a:b5:8b:17:53:30:bd:9a:4f:c8:35:60:18:02:b6:
                    b6:b9:39:08:4c:32:86:26:80:f2:dd:b4:15:0c:6d:
                    f5:8f:9f:26:c8:1d:fc:27:d8:2d:6b:f7:b9:d7:4f:
                    93:a9:97:8c:8a:bf:75:c4:eb:05:f7:c5:96:00:21:
                    55:dd:e9:96:06:1b:a6:0a:bb:b5:36:5c:e0:94:1f:
                    be:2e:aa:27:c5:3c:79:06:e3:be:eb:54:96:1b:ad:
                    13:2f:27:57:3a:8b:b6:e0:c5:ad:40:75:af:7a:03:
                    41:76:ca:ed:78:05:e1:65:ad:ec:92:24:dd:90:75:
                    80:07:62:da:5f:ec:3f:50:f1:53:ea:85:de:a7:15:
                    86:41:8a:1a:a0:f3:0e:81:11:f3:7d:43:bb:eb:5a:
                    63:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:BE:8D:E9:E2:38:E6:04:57:EA:46:74:A4:1C:11:FB:D7:E1:BB:3A
            X509v3 Authority Key Identifier:
                keyid:4A:4C:C1:D6:25:A4:51:9B:23:D7:37:17:C8:79:F1:0A:61:73:AE:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/1ed46f82-cf11-4e32-b051-6ac334a92622/0/4A4CC1D625A4519B23D73717C879F10A6173AEAB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A4CC1D625A4519B23D73717C879F10A6173AEAB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1ed46f82-cf11-4e32-b051-6ac334a92622/0/4A4CC1D625A4519B23D73717C879F10A6173AEAB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:ae:39:a0:be:95:a5:47:d5:e0:18:f9:45:54:5b:79:ac:15:
         2a:3d:59:e1:c5:f4:fc:68:7f:15:53:c9:32:cb:ed:7d:13:74:
         12:df:c5:0c:53:a1:a6:47:d5:84:b9:1b:f5:10:60:38:b0:06:
         18:4d:54:af:a7:c4:39:2e:45:70:4d:f7:87:42:9b:da:81:b9:
         68:32:f2:9b:34:d5:84:c1:74:95:d3:5c:6e:57:b4:df:a4:a8:
         61:b6:cd:bf:98:ce:a1:ee:79:e9:23:77:bf:4e:46:ed:7f:df:
         86:65:ad:40:8e:32:48:5e:b2:37:ae:33:2e:a4:a2:bf:1d:e1:
         b8:6f:82:ad:4f:11:7b:85:98:a7:17:6b:4c:05:cc:c4:7f:cb:
         ac:a6:cc:ac:b9:4a:54:cc:17:b5:1b:3c:84:6e:42:e8:58:ef:
         bb:67:b8:1f:b3:5f:a4:24:cb:27:3b:87:c1:3e:3b:10:28:5e:
         5c:a3:b8:52:f3:7f:72:00:68:b3:68:12:c0:dd:b5:f9:f5:76:
         fb:7c:2b:6f:68:35:69:37:6f:39:33:92:3d:cc:51:4e:33:1c:
         01:b9:94:cd:68:69:ca:48:c8:d4:f7:73:b7:3b:8c:74:6c:5f:
         0b:11:f5:de:cb:e9:b4:94:da:a1:c2:e0:90:a9:b4:17:b1:8a:
         3f:bd:62:37
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUSqD+K6pIdgF9KrKOYnJjGFK4EXowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEE0Q0MxRDYyNUE0NTE5QjIzRDczNzE3Qzg3OUYxMEE2
MTczQUVBQjAeFw0yNjAxMjUxMzM2NDBaFw0yNjAxMjgyMzM4NDBaMDMxMTAvBgNV
BAMTKEFGQkU4REU5RTIzOEU2MDQ1N0VBNDY3NEE0MUMxMUZCRDdFMUJCM0EwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAowqYGgt6LNgJRxze1oUGgDpT
BRqX/YfiVZR7wYxKAG2hUkd8Sgr5BG/Yrmat/87HthdbZCIFlekhUtXZ9Hb/JdAp
blzWu3KLbCkDtzIf1wz4N/DUCtXG0SlEHyIiRbS4LPnN/3wF1Eq1ixdTML2aT8g1
YBgCtra5OQhMMoYmgPLdtBUMbfWPnybIHfwn2C1r97nXT5Opl4yKv3XE6wX3xZYA
IVXd6ZYGG6YKu7U2XOCUH74uqifFPHkG477rVJYbrRMvJ1c6i7bgxa1Ada96A0F2
yu14BeFlreySJN2QdYAHYtpf7D9Q8VPqhd6nFYZBihqg8w6BEfN9Q7vrWmO7AgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUr76N6eI45gRX6kZ0pBwR+9fhuzowHwYDVR0j
BBgwFoAUSkzB1iWkUZsj1zcXyHnxCmFzrqswDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x
ZWQ0NmY4Mi1jZjExLTRlMzItYjA1MS02YWMzMzRhOTI2MjIvMC80QTRDQzFENjI1
QTQ1MTlCMjNENzM3MTdDODc5RjEwQTYxNzNBRUFCLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNEE0Q0MxRDYyNUE0NTE5QjIzRDczNzE3Qzg3OUYxMEE2MTcz
QUVBQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWVkNDZmODItY2YxMS00ZTMyLWIw
NTEtNmFjMzM0YTkyNjIyLzAvNEE0Q0MxRDYyNUE0NTE5QjIzRDczNzE3Qzg3OUYx
MEE2MTczQUVBQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAJGuOaC+laVH1eAY+UVUW3msFSo9WeHF9Pxo
fxVTyTLL7X0TdBLfxQxToaZH1YS5G/UQYDiwBhhNVK+nxDkuRXBN94dCm9qBuWgy
8ps01YTBdJXTXG5XtN+kqGG2zb+YzqHueekjd79ORu1/34ZlrUCOMkhesjeuMy6k
or8d4bhvgq1PEXuFmKcXa0wFzMR/y6ymzKy5SlTMF7UbPIRuQuhY77tnuB+zX6Qk
yyc7h8E+OxAoXlyjuFLzf3IAaLNoEsDdtfn1dvt8K29oNWk3bzkzkj3MUU4zHAG5
lM1oacpIyNT3c7c7jHRsXwsR9d7L6bSU2qHC4JCptBexij+9Yjc=
-----END CERTIFICATE-----
Generated at Sun Jan 25 23:18:15 2026 by rpki-client