This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/28a79755-238a-46d2-b052-30587bf9eff7/0/7932E1C92B451A2FD7A5E85B541135E25AD074D5.mft
File:                     7932E1C92B451A2FD7A5E85B541135E25AD074D5.mft (raw, json)
Hash identifier:          kKY0HfhjejtjbUMXC9Ls5T/ZOAtPfPw8q5W6kXgelG8=
Subject key identifier:   4F:87:40:36:07:6D:D4:A8:F6:2D:98:7B:A4:D3:29:2B:74:0D:31:6F
Authority key identifier: 79:32:E1:C9:2B:45:1A:2F:D7:A5:E8:5B:54:11:35:E2:5A:D0:74:D5
Certificate issuer:       /CN=7932E1C92B451A2FD7A5E85B541135E25AD074D5
Certificate serial:       13AF3D6B447ECB93C3DAAB2864036F45B089FBDB
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7932E1C92B451A2FD7A5E85B541135E25AD074D5.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/28a79755-238a-46d2-b052-30587bf9eff7/0/7932E1C92B451A2FD7A5E85B541135E25AD074D5.mft
Manifest number:          1C
Signing time:             Fri 23 Jan 2026 15:32:02 +0000
Manifest this update:     Fri 23 Jan 2026 15:27:02 +0000
Manifest next update:     Tue 27 Jan 2026 00:07:02 +0000
Files and hashes:         1: 34352e3234392e3232332e302f32342d3234203d3e203535363634.roa (hash: JpmEn7WaRdkeEFa5ZGloCMsN5J170hstOwttgz6U1Z0=)
                          2: 3130332e3233362e3135312e302f32342d3234203d3e203535363634.roa (hash: vN+gGGeaJ1gj8tThDKmMiECC35znNoNYchE+0HwB4qo=)
                          3: 3130332e3233362e3135302e302f32342d3234203d3e203535363634.roa (hash: 2gNt0b6scD0Vr6P6DjjlOCkxUmLu97iptlipFu8yVHU=)
                          4: 7932E1C92B451A2FD7A5E85B541135E25AD074D5.crl (hash: UIxcZtWM/lpSW0g7NWx/aFr4qTfbhYSFtuAROE+M5Wo=)
                          5: 3130332e3233362e3134382e302f32342d3234203d3e203535363634.roa (hash: Vp8nm0q1fVdfpoUq1ph6iBsHdLxuIgv5gZec72xD2Lk=)
                          6: 34352e3234392e3232302e302f32342d3234203d3e203535363634.roa (hash: UnBNpg7Ki5yb8nLJihGU6CQzLaBHjw3/oRDo43eNzRA=)
                          7: 34352e3234392e3232322e302f32342d3234203d3e203535363634.roa (hash: IjL8U7j0DmBIXMsuGkW1RQCn11k2vE+wQV790Ok5z/U=)
                          8: 34352e3234392e3232312e302f32342d3234203d3e203535363634.roa (hash: QaVL8FZIkXQEPUlKXDz1K7gc9JnXnHYzpgLLHSEIXzo=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/28a79755-238a-46d2-b052-30587bf9eff7/0/7932E1C92B451A2FD7A5E85B541135E25AD074D5.crl
                          rsync://repo-rpki.idnic.net/repo/28a79755-238a-46d2-b052-30587bf9eff7/0/7932E1C92B451A2FD7A5E85B541135E25AD074D5.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7932E1C92B451A2FD7A5E85B541135E25AD074D5.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 27 Jan 2026 00:07:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:af:3d:6b:44:7e:cb:93:c3:da:ab:28:64:03:6f:45:b0:89:fb:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7932E1C92B451A2FD7A5E85B541135E25AD074D5
        Validity
            Not Before: Jan 23 15:27:02 2026 GMT
            Not After : Jan 27 00:07:02 2026 GMT
        Subject: CN=4F874036076DD4A8F62D987BA4D3292B740D316F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:ca:5a:ff:68:09:a2:41:f0:37:3c:11:b0:64:
                    ea:55:0c:16:fe:61:e0:1c:a4:36:75:cb:04:24:31:
                    5d:45:60:15:f0:3c:49:36:36:32:87:36:4a:cd:e2:
                    33:1c:55:09:31:6e:16:21:90:74:c4:11:ae:5e:9d:
                    7a:5a:89:80:ab:c5:30:d9:7e:e5:25:77:df:0a:53:
                    1e:e2:d4:9c:4a:ec:05:67:9f:df:7c:8a:f4:c4:0f:
                    9b:6b:1f:a6:84:4f:bf:65:e2:4d:7e:66:67:d4:1a:
                    74:22:f7:24:00:3c:d5:ab:ae:3d:70:1c:64:22:33:
                    e8:ff:5c:95:ba:3d:28:52:de:e2:c8:1e:cb:04:4c:
                    49:c9:6e:1a:a7:3c:31:c7:10:cb:69:d6:8b:52:9c:
                    ff:43:46:d6:57:22:63:c7:df:d9:82:5d:89:de:69:
                    51:6d:87:36:98:2b:34:c2:ec:98:5e:c4:57:c2:c2:
                    12:c2:9e:13:dd:47:b1:6b:8a:df:3a:36:80:5f:59:
                    f9:81:e1:f4:93:82:1d:42:e9:be:80:d5:28:81:56:
                    ea:48:0b:e1:e5:a3:cf:f3:99:39:69:ce:21:56:bd:
                    88:5a:40:35:2b:e6:c8:9e:f3:d1:ad:c1:3d:48:23:
                    f4:fb:e2:76:37:e6:3b:21:09:fc:af:c6:49:a1:24:
                    28:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:87:40:36:07:6D:D4:A8:F6:2D:98:7B:A4:D3:29:2B:74:0D:31:6F
            X509v3 Authority Key Identifier:
                keyid:79:32:E1:C9:2B:45:1A:2F:D7:A5:E8:5B:54:11:35:E2:5A:D0:74:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/28a79755-238a-46d2-b052-30587bf9eff7/0/7932E1C92B451A2FD7A5E85B541135E25AD074D5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7932E1C92B451A2FD7A5E85B541135E25AD074D5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/28a79755-238a-46d2-b052-30587bf9eff7/0/7932E1C92B451A2FD7A5E85B541135E25AD074D5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:c2:8d:16:0d:a5:e6:46:9b:1b:70:0f:f3:67:40:a5:e3:40:
         f3:f7:ba:8e:15:cb:df:2b:ec:e3:4c:ff:ce:36:db:bc:97:8e:
         bb:f1:dc:bd:c9:f7:7e:61:1e:e9:53:28:03:24:c9:e8:8d:7a:
         d6:b6:6f:ae:89:35:e5:cc:3c:67:f8:c2:e5:a7:13:90:96:2b:
         e9:c3:8f:5d:3d:e7:52:3c:86:f9:5d:6a:54:c9:6a:ea:82:d3:
         a6:3c:0f:b4:82:6e:d8:f3:d8:78:c7:5e:33:ab:28:26:a1:d7:
         be:ec:f7:a7:8c:c5:e6:d3:80:b4:f6:97:49:8f:f1:f7:f2:f8:
         91:e2:05:0d:d1:fb:92:07:54:03:b4:87:79:9a:67:fa:3b:81:
         96:ee:55:69:76:5c:9c:46:b6:ee:6d:18:26:76:a6:c0:d1:6c:
         a2:2b:46:06:10:6c:21:94:a2:b3:80:03:5a:b6:ca:40:3d:cd:
         45:06:a1:68:bd:3d:bf:5e:ce:2d:81:9d:f8:85:90:48:7b:19:
         cb:55:e2:da:74:b5:8e:47:35:e0:b7:b1:64:34:06:a6:1c:42:
         3d:63:f8:b7:54:33:9a:11:d1:4c:51:ed:b9:c2:6a:a4:d8:f9:
         2c:d3:dd:19:ce:e3:b7:54:0f:8b:dc:49:59:2c:a2:0c:13:16:
         5f:27:e4:5d
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUE689a0R+y5PD2qsoZANvRbCJ+9swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzkzMkUxQzkyQjQ1MUEyRkQ3QTVFODVCNTQxMTM1RTI1
QUQwNzRENTAeFw0yNjAxMjMxNTI3MDJaFw0yNjAxMjcwMDA3MDJaMDMxMTAvBgNV
BAMTKDRGODc0MDM2MDc2REQ0QThGNjJEOTg3QkE0RDMyOTJCNzQwRDMxNkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrylr/aAmiQfA3PBGwZOpVDBb+
YeAcpDZ1ywQkMV1FYBXwPEk2NjKHNkrN4jMcVQkxbhYhkHTEEa5enXpaiYCrxTDZ
fuUld98KUx7i1JxK7AVnn998ivTED5trH6aET79l4k1+ZmfUGnQi9yQAPNWrrj1w
HGQiM+j/XJW6PShS3uLIHssETEnJbhqnPDHHEMtp1otSnP9DRtZXImPH39mCXYne
aVFthzaYKzTC7JhexFfCwhLCnhPdR7Frit86NoBfWfmB4fSTgh1C6b6A1SiBVupI
C+Hlo8/zmTlpziFWvYhaQDUr5sie89GtwT1II/T74nY35jshCfyvxkmhJCjxAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUT4dANgdt1Kj2LZh7pNMpK3QNMW8wHwYDVR0j
BBgwFoAUeTLhyStFGi/XpehbVBE14lrQdNUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y
OGE3OTc1NS0yMzhhLTQ2ZDItYjA1Mi0zMDU4N2JmOWVmZjcvMC83OTMyRTFDOTJC
NDUxQTJGRDdBNUU4NUI1NDExMzVFMjVBRDA3NEQ1LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNzkzMkUxQzkyQjQ1MUEyRkQ3QTVFODVCNTQxMTM1RTI1QUQw
NzRENS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjhhNzk3NTUtMjM4YS00NmQyLWIw
NTItMzA1ODdiZjllZmY3LzAvNzkzMkUxQzkyQjQ1MUEyRkQ3QTVFODVCNTQxMTM1
RTI1QUQwNzRENS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBADnCjRYNpeZGmxtwD/NnQKXjQPP3uo4Vy98r
7ONM/84227yXjrvx3L3J935hHulTKAMkyeiNeta2b66JNeXMPGf4wuWnE5CWK+nD
j10951I8hvldalTJauqC06Y8D7SCbtjz2HjHXjOrKCah177s96eMxebTgLT2l0mP
8ffy+JHiBQ3R+5IHVAO0h3maZ/o7gZbuVWl2XJxGtu5tGCZ2psDRbKIrRgYQbCGU
orOAA1q2ykA9zUUGoWi9Pb9ezi2BnfiFkEh7GctV4tp0tY5HNeC3sWQ0BqYcQj1j
+LdUM5oR0UxR7bnCaqTY+SzT3RnO47dUD4vcSVksogwTFl8n5F0=
-----END CERTIFICATE-----
Generated at Sun Jan 25 21:28:41 2026 by rpki-client