This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/236561d4-23c8-4c9b-890e-4f2632e52c97/1/E3928623409C1C10E292F838F8308E11636E6C03.mft
File:                     E3928623409C1C10E292F838F8308E11636E6C03.mft (raw, json)
Hash identifier:          U2avF0rq6KZZmrAD3dzWkZFqXBMzvR4CNigkdL4GySQ=
Subject key identifier:   3B:01:7C:30:84:2F:00:A0:16:ED:09:21:D8:63:BA:6F:D7:B2:6B:24
Authority key identifier: E3:92:86:23:40:9C:1C:10:E2:92:F8:38:F8:30:8E:11:63:6E:6C:03
Certificate issuer:       /CN=E3928623409C1C10E292F838F8308E11636E6C03
Certificate serial:       10472BE4F458F36AC30C1AF44EE2B09BB4D22DA9
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E3928623409C1C10E292F838F8308E11636E6C03.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/236561d4-23c8-4c9b-890e-4f2632e52c97/1/E3928623409C1C10E292F838F8308E11636E6C03.mft
Manifest number:          F8
Signing time:             Sat 24 Jan 2026 09:02:19 +0000
Manifest this update:     Sat 24 Jan 2026 08:57:19 +0000
Manifest next update:     Tue 27 Jan 2026 12:28:19 +0000
Files and hashes:         1: 323030313a6466343a6334303a3a2f34382d3438203d3e20313533303639.roa (hash: yKi1/CgLy/vSnVRFpQJ8qbRC3Gfhckznl3idTXbJhUE=)
                          2: E3928623409C1C10E292F838F8308E11636E6C03.crl (hash: mnWnxzxieMCfJ3UQrzeivVf+JIxf3YF7WlBKjLktCQM=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/236561d4-23c8-4c9b-890e-4f2632e52c97/1/E3928623409C1C10E292F838F8308E11636E6C03.crl
                          rsync://repo-rpki.idnic.net/repo/236561d4-23c8-4c9b-890e-4f2632e52c97/1/E3928623409C1C10E292F838F8308E11636E6C03.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E3928623409C1C10E292F838F8308E11636E6C03.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 27 Jan 2026 12:28:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:47:2b:e4:f4:58:f3:6a:c3:0c:1a:f4:4e:e2:b0:9b:b4:d2:2d:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E3928623409C1C10E292F838F8308E11636E6C03
        Validity
            Not Before: Jan 24 08:57:19 2026 GMT
            Not After : Jan 27 12:28:19 2026 GMT
        Subject: CN=3B017C30842F00A016ED0921D863BA6FD7B26B24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:07:92:78:6a:d4:ba:fb:29:e8:8a:12:e4:7d:
                    dd:72:bf:ee:ed:fb:7b:66:9e:57:b2:47:df:f1:de:
                    46:5e:8c:f1:d3:64:4d:45:59:d8:2a:63:8c:da:cd:
                    c5:1f:5f:5a:27:5b:f8:ee:c8:2f:8e:ba:56:71:58:
                    66:f6:d0:63:09:96:12:83:bf:39:39:29:e3:a2:03:
                    d8:44:54:bf:68:c7:bd:21:e6:c9:05:f1:52:4e:9c:
                    1b:6e:82:b5:81:eb:96:22:d1:6e:1e:07:be:2f:0e:
                    06:6a:2d:f1:c6:fc:fb:14:9a:05:81:23:f3:94:d1:
                    bc:c0:14:c3:79:f7:87:37:4e:51:e3:59:bd:39:fb:
                    01:75:13:af:84:c3:c7:70:31:71:15:3f:6a:80:09:
                    ee:b8:ce:e0:fd:6a:43:6d:59:33:f4:ec:79:ba:31:
                    3c:fd:ef:7b:d3:91:03:b8:f8:45:86:6d:ad:a5:da:
                    24:81:70:d2:0d:44:49:6c:e7:79:ec:a2:f7:cc:28:
                    d9:6a:b7:09:fa:4d:fa:9f:30:14:d5:61:12:26:0e:
                    c3:99:7a:2c:ce:6a:6e:0b:43:87:9c:f6:52:52:d1:
                    62:46:75:2d:ae:bb:97:a8:d2:23:78:9b:95:1f:64:
                    55:f1:bd:b2:df:49:7b:3b:37:e3:eb:0c:45:dc:7e:
                    a8:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:01:7C:30:84:2F:00:A0:16:ED:09:21:D8:63:BA:6F:D7:B2:6B:24
            X509v3 Authority Key Identifier:
                keyid:E3:92:86:23:40:9C:1C:10:E2:92:F8:38:F8:30:8E:11:63:6E:6C:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/236561d4-23c8-4c9b-890e-4f2632e52c97/1/E3928623409C1C10E292F838F8308E11636E6C03.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E3928623409C1C10E292F838F8308E11636E6C03.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/236561d4-23c8-4c9b-890e-4f2632e52c97/1/E3928623409C1C10E292F838F8308E11636E6C03.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:55:3c:53:54:bd:04:f3:a7:bc:8e:6f:d5:8b:2d:e9:1c:e2:
         da:91:e6:20:7c:77:42:6f:f4:ac:5a:d7:fa:28:87:dc:21:ee:
         4b:89:b6:bb:cd:7a:53:5a:b2:71:67:20:3f:45:8c:ea:e0:7c:
         e2:65:b1:85:fd:9d:3c:9e:4a:8b:cb:34:f3:67:66:97:7f:f8:
         f0:e1:9f:2f:57:2d:1a:c8:ff:59:4b:ec:bb:1f:59:df:50:3f:
         1c:64:56:8a:f0:f0:ab:d0:63:6d:07:0f:47:2a:6c:62:15:1a:
         b2:12:54:67:b9:c5:21:15:43:3e:5e:ff:9a:59:07:e7:13:1d:
         d6:5b:98:b8:89:fb:a4:e8:3d:0d:01:d1:b4:82:06:17:37:1f:
         11:59:29:5b:57:5d:7f:af:95:49:1c:7b:6c:fb:25:f1:fe:31:
         fe:ca:71:01:a8:3a:4c:ed:eb:89:45:4f:6a:2e:fe:55:45:ed:
         a8:0b:3d:14:1f:b4:39:63:78:e3:ba:a7:d7:46:be:f1:4d:37:
         d2:c0:31:2b:62:ca:97:08:a5:ed:3b:50:d3:22:46:73:5d:71:
         3f:f5:eb:63:2a:1c:e8:34:63:b0:22:a6:e7:2e:ac:1a:df:eb:
         97:3f:24:b2:18:ac:18:fb:b0:bf:d2:c1:7f:9d:05:4b:83:b9:
         f2:76:af:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 21:52:18 2026 by rpki-client