This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/239ead81-ac12-4479-b2fb-998e01854551/0/A53CE1A1762318BA9130A47CFA16027E8D1EBAC8.mft
File:                     A53CE1A1762318BA9130A47CFA16027E8D1EBAC8.mft (raw, json)
Hash identifier:          NZcLQP2F21zHhM1hX420ozPHzunFdzIOfyyX1Ft0aAg=
Subject key identifier:   C2:06:A7:B2:E6:97:B6:EB:B3:AE:2A:B6:05:B9:4F:EF:AF:34:B2:69
Authority key identifier: A5:3C:E1:A1:76:23:18:BA:91:30:A4:7C:FA:16:02:7E:8D:1E:BA:C8
Certificate issuer:       /CN=A53CE1A1762318BA9130A47CFA16027E8D1EBAC8
Certificate serial:       1D8504B6D5B87994B66E2F6C5D9D82461660C702
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A53CE1A1762318BA9130A47CFA16027E8D1EBAC8.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/239ead81-ac12-4479-b2fb-998e01854551/0/A53CE1A1762318BA9130A47CFA16027E8D1EBAC8.mft
Manifest number:          023A
Signing time:             Sat 24 Jan 2026 20:01:33 +0000
Manifest this update:     Sat 24 Jan 2026 19:56:33 +0000
Manifest next update:     Wed 28 Jan 2026 07:36:33 +0000
Files and hashes:         1: A53CE1A1762318BA9130A47CFA16027E8D1EBAC8.crl (hash: 2Do5YuibpfPsjtoJ2tXgkq0Mmh1mlW35fGiMsNPMLkc=)
                          2: 3130332e35342e3231362e302f32322d3234203d3e20313331313131.roa (hash: zE8cXMxW8vFIwxCNk8JxKaXrpgeYvceF9mZckUGnv8M=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/239ead81-ac12-4479-b2fb-998e01854551/0/A53CE1A1762318BA9130A47CFA16027E8D1EBAC8.crl
                          rsync://repo-rpki.idnic.net/repo/239ead81-ac12-4479-b2fb-998e01854551/0/A53CE1A1762318BA9130A47CFA16027E8D1EBAC8.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A53CE1A1762318BA9130A47CFA16027E8D1EBAC8.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 28 Jan 2026 07:36:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:85:04:b6:d5:b8:79:94:b6:6e:2f:6c:5d:9d:82:46:16:60:c7:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A53CE1A1762318BA9130A47CFA16027E8D1EBAC8
        Validity
            Not Before: Jan 24 19:56:33 2026 GMT
            Not After : Jan 28 07:36:33 2026 GMT
        Subject: CN=C206A7B2E697B6EBB3AE2AB605B94FEFAF34B269
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:08:de:47:ad:19:c4:f6:8a:9b:c7:82:ab:8b:
                    a3:7d:eb:d4:c9:bf:43:87:ad:43:72:b9:62:8f:14:
                    4b:e0:54:27:d6:ec:38:a1:3e:fa:8a:a6:87:03:96:
                    f8:67:61:7d:05:2a:c8:35:b6:51:62:17:e2:45:d4:
                    b1:a3:52:b6:29:89:b5:7e:a1:6b:f1:f4:21:34:1b:
                    e8:63:44:4d:1a:00:cb:04:38:33:87:e1:57:b9:08:
                    db:70:99:e2:f4:30:a8:cc:2f:e5:39:6c:17:f9:91:
                    3a:c3:f4:f8:7b:bd:79:95:33:d8:8e:5b:3f:11:a5:
                    62:00:b6:71:de:30:57:88:ea:cd:17:24:90:cf:1a:
                    5e:b6:0f:ff:29:7c:c0:1d:fc:74:93:7a:19:b6:de:
                    ab:a4:2e:5f:63:ba:92:fb:b5:a1:e8:f5:37:51:82:
                    2a:0c:3f:f0:31:ed:37:5e:7d:20:57:17:37:a0:6c:
                    a7:e4:29:cd:80:55:d0:94:35:b8:2f:29:ec:61:0c:
                    73:01:bc:5b:08:62:f9:67:a0:1d:b3:74:8e:28:68:
                    33:51:9c:02:5b:bc:a3:6c:28:7d:98:dd:a4:30:d3:
                    0f:3a:0e:07:13:37:c1:c9:d9:11:f5:37:fd:ce:92:
                    ff:02:8b:75:7d:df:ef:80:c7:47:b1:58:a0:bf:c9:
                    81:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:06:A7:B2:E6:97:B6:EB:B3:AE:2A:B6:05:B9:4F:EF:AF:34:B2:69
            X509v3 Authority Key Identifier:
                keyid:A5:3C:E1:A1:76:23:18:BA:91:30:A4:7C:FA:16:02:7E:8D:1E:BA:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/239ead81-ac12-4479-b2fb-998e01854551/0/A53CE1A1762318BA9130A47CFA16027E8D1EBAC8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A53CE1A1762318BA9130A47CFA16027E8D1EBAC8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/239ead81-ac12-4479-b2fb-998e01854551/0/A53CE1A1762318BA9130A47CFA16027E8D1EBAC8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:1b:f4:0c:e6:1c:7d:92:cb:70:90:13:70:ea:86:5f:1b:f6:
         ce:37:86:bf:b5:0f:49:26:11:b5:63:e3:a4:8e:49:51:99:12:
         93:fc:ec:2b:5e:7d:2b:f6:d3:b2:7f:6a:31:8a:fd:9f:80:d4:
         df:f9:4d:55:4f:54:98:b0:c6:58:9d:3d:cb:08:88:1b:6f:d6:
         29:aa:eb:7c:ac:ab:af:61:27:3e:8a:e1:98:70:da:a9:64:52:
         c8:22:aa:58:1e:da:36:ae:b6:e3:b0:09:1a:40:9a:97:02:72:
         95:59:d3:6d:d8:18:3f:4e:dd:d1:27:e6:8d:49:a1:19:f9:25:
         c8:8d:28:1a:ad:13:f5:b0:44:5f:c7:25:3a:94:f3:02:b1:6a:
         3f:c3:d3:be:6d:3c:d7:c9:c7:1c:80:c8:fd:91:83:d1:9a:5a:
         46:b7:ed:86:21:34:89:d9:02:eb:fe:be:da:13:67:4d:7a:69:
         7e:3d:f0:fa:76:be:1e:a9:e9:69:5f:12:5d:29:40:1e:06:21:
         cf:9b:fa:9e:60:95:da:ab:07:59:42:5a:79:20:7d:c2:7b:b2:
         c0:c8:6d:6e:2d:0b:b7:5e:71:6b:ef:ae:27:eb:ce:15:43:40:
         7f:bd:dc:cb:1c:36:fa:a4:9c:49:22:24:78:d8:79:d7:31:b3:
         4d:71:5c:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 23:22:09 2026 by rpki-client