This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/28d0fca8-5c2d-4e35-bd7d-b448aa75f2be/0/6A200D6FC5434DAD6106CEE5439CA1270DDCBC92.mft
File:                     6A200D6FC5434DAD6106CEE5439CA1270DDCBC92.mft (raw, json)
Hash identifier:          xh9cr+YJWXm02CDXQJ/LccwY1To+UPX/TrKoNlQasEE=
Subject key identifier:   78:EE:A7:A9:62:76:CF:69:40:5E:2D:F1:2F:B4:59:D0:B4:23:C4:8A
Authority key identifier: 6A:20:0D:6F:C5:43:4D:AD:61:06:CE:E5:43:9C:A1:27:0D:DC:BC:92
Certificate issuer:       /CN=6A200D6FC5434DAD6106CEE5439CA1270DDCBC92
Certificate serial:       4023F3629B5C574A41BDB34A9A74B232299EE44D
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6A200D6FC5434DAD6106CEE5439CA1270DDCBC92.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/28d0fca8-5c2d-4e35-bd7d-b448aa75f2be/0/6A200D6FC5434DAD6106CEE5439CA1270DDCBC92.mft
Manifest number:          E4
Signing time:             Fri 23 Jan 2026 15:21:13 +0000
Manifest this update:     Fri 23 Jan 2026 15:16:13 +0000
Manifest next update:     Tue 27 Jan 2026 00:30:13 +0000
Files and hashes:         1: 3130332e3130332e3138302e302f32332d3234203d3e20313336383437.roa (hash: Ub40BPe4KMOTxitaoAUpxbpNc0bfpI5fDNOKKNlDeX8=)
                          2: 6A200D6FC5434DAD6106CEE5439CA1270DDCBC92.crl (hash: KVbENL+XhR4fXUF0CHbI1KKfwSB8fGsXvql25ESglzw=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/28d0fca8-5c2d-4e35-bd7d-b448aa75f2be/0/6A200D6FC5434DAD6106CEE5439CA1270DDCBC92.crl
                          rsync://repo-rpki.idnic.net/repo/28d0fca8-5c2d-4e35-bd7d-b448aa75f2be/0/6A200D6FC5434DAD6106CEE5439CA1270DDCBC92.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6A200D6FC5434DAD6106CEE5439CA1270DDCBC92.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 27 Jan 2026 00:30:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:23:f3:62:9b:5c:57:4a:41:bd:b3:4a:9a:74:b2:32:29:9e:e4:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6A200D6FC5434DAD6106CEE5439CA1270DDCBC92
        Validity
            Not Before: Jan 23 15:16:13 2026 GMT
            Not After : Jan 27 00:30:13 2026 GMT
        Subject: CN=78EEA7A96276CF69405E2DF12FB459D0B423C48A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:a7:3f:4e:aa:ca:39:ef:76:87:61:cc:c1:41:
                    96:0c:a0:2b:77:c3:c6:c7:39:84:d9:de:05:08:08:
                    f8:c2:70:47:4d:f0:15:e2:3e:db:6c:04:2e:1b:b9:
                    e2:92:b1:34:1e:52:21:dd:75:4d:68:03:80:67:3b:
                    c8:cd:2e:7f:2d:88:e3:f1:dc:f4:3e:dc:c1:14:45:
                    d2:9b:5c:d0:38:54:85:dc:89:07:0d:56:29:69:2a:
                    a6:7f:b4:a8:72:ae:c3:31:c5:25:47:f7:c7:c3:f5:
                    12:2f:7f:4c:05:1d:18:6c:c7:25:79:b6:13:11:fa:
                    1c:cf:dd:5a:be:e0:f3:a4:d7:41:d4:37:f4:89:2c:
                    24:3e:00:0d:8a:3c:48:1b:ff:66:b5:41:a2:e2:6f:
                    07:f3:65:32:4f:60:21:e5:80:08:c6:84:b4:8a:66:
                    17:bb:cc:c2:17:67:b4:72:83:b5:c3:87:7c:0c:63:
                    95:00:31:54:97:38:13:e0:f8:4b:9c:92:a6:bc:ac:
                    41:85:be:a9:bd:55:28:9d:ff:d6:b5:06:a4:d1:44:
                    28:94:cb:b8:c1:69:8b:09:e4:50:6d:61:43:69:10:
                    25:54:1f:cf:fb:86:f5:6a:6c:fb:a9:71:1a:27:91:
                    39:00:90:28:a1:b4:1d:c9:3b:24:b0:75:d6:98:4a:
                    bd:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:EE:A7:A9:62:76:CF:69:40:5E:2D:F1:2F:B4:59:D0:B4:23:C4:8A
            X509v3 Authority Key Identifier:
                keyid:6A:20:0D:6F:C5:43:4D:AD:61:06:CE:E5:43:9C:A1:27:0D:DC:BC:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/28d0fca8-5c2d-4e35-bd7d-b448aa75f2be/0/6A200D6FC5434DAD6106CEE5439CA1270DDCBC92.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6A200D6FC5434DAD6106CEE5439CA1270DDCBC92.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/28d0fca8-5c2d-4e35-bd7d-b448aa75f2be/0/6A200D6FC5434DAD6106CEE5439CA1270DDCBC92.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:a5:81:17:6a:c4:df:be:9c:1e:7a:96:ab:8a:28:80:2f:c2:
         13:de:66:9e:79:b4:54:69:6a:18:86:e6:ad:bc:b4:6f:5e:90:
         e3:ae:89:da:0d:0c:0d:c3:23:ec:da:87:f9:ad:76:ce:22:9e:
         6b:0a:f7:97:9c:95:a6:7b:87:76:f4:1b:ff:48:ce:05:cd:9e:
         51:f6:44:1e:4c:b0:ed:da:90:cd:26:9b:b8:25:68:99:55:62:
         1d:7f:24:d7:92:82:d1:da:da:6d:34:97:c0:98:0d:6b:9e:bd:
         4d:82:e2:02:ca:8f:16:75:a6:8b:0c:b9:0a:fb:f3:63:71:b6:
         b6:71:da:23:f8:71:be:a8:99:09:15:e4:8b:50:2e:87:fb:3f:
         b5:9a:6d:39:82:d4:1d:08:b5:4a:5b:e5:68:47:cf:29:1f:ed:
         3b:75:45:93:6d:a5:4c:3e:5d:f3:f2:7f:96:79:7b:ee:c6:61:
         42:42:fd:55:3b:70:3f:7b:14:db:d9:53:91:59:70:10:2a:1c:
         18:46:ef:de:dd:5e:8c:e0:52:4c:54:2b:4b:22:c9:a7:8a:a3:
         16:03:be:cf:fa:58:1a:64:8d:c0:29:9a:c7:e2:a7:b9:f7:01:
         8a:e9:0a:9d:61:ae:bf:cd:95:83:50:76:8b:7d:07:06:db:76:
         31:5e:77:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:53:08 2026 by rpki-client