This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/2955f5a6-f378-4252-804b-b0b938654fbf/0/357B7AD75E6E338A26C2FC9CE4B3A7A274FB7605.mft
File:                     357B7AD75E6E338A26C2FC9CE4B3A7A274FB7605.mft (raw, json)
Hash identifier:          zpakMgSomf7j/L6xmTjz/UPeOMnS1fsZAPVjZNrwi+s=
Subject key identifier:   98:26:29:64:60:F7:10:91:0A:B5:29:7E:91:45:BD:C3:1A:A0:73:95
Authority key identifier: 35:7B:7A:D7:5E:6E:33:8A:26:C2:FC:9C:E4:B3:A7:A2:74:FB:76:05
Certificate issuer:       /CN=357B7AD75E6E338A26C2FC9CE4B3A7A274FB7605
Certificate serial:       0D863D5A869ED83AA85199CB470C46323D25225E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/357B7AD75E6E338A26C2FC9CE4B3A7A274FB7605.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/2955f5a6-f378-4252-804b-b0b938654fbf/0/357B7AD75E6E338A26C2FC9CE4B3A7A274FB7605.mft
Manifest number:          04FD
Signing time:             Sat 24 Jan 2026 19:21:14 +0000
Manifest this update:     Sat 24 Jan 2026 19:16:14 +0000
Manifest next update:     Tue 27 Jan 2026 21:19:14 +0000
Files and hashes:         1: 357B7AD75E6E338A26C2FC9CE4B3A7A274FB7605.crl (hash: s2lWYujezkA3reqT6mjVevSXo3sl8iyNVVZ2kImbiSU=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/2955f5a6-f378-4252-804b-b0b938654fbf/0/357B7AD75E6E338A26C2FC9CE4B3A7A274FB7605.crl
                          rsync://repo-rpki.idnic.net/repo/2955f5a6-f378-4252-804b-b0b938654fbf/0/357B7AD75E6E338A26C2FC9CE4B3A7A274FB7605.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/357B7AD75E6E338A26C2FC9CE4B3A7A274FB7605.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 27 Jan 2026 21:19:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:86:3d:5a:86:9e:d8:3a:a8:51:99:cb:47:0c:46:32:3d:25:22:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=357B7AD75E6E338A26C2FC9CE4B3A7A274FB7605
        Validity
            Not Before: Jan 24 19:16:14 2026 GMT
            Not After : Jan 27 21:19:14 2026 GMT
        Subject: CN=9826296460F710910AB5297E9145BDC31AA07395
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:93:1f:8f:ba:a2:23:9b:46:ff:75:e8:44:81:
                    cd:9b:df:4a:1e:1d:e3:26:83:35:dd:91:9e:35:39:
                    eb:78:5d:aa:c9:fc:47:74:a0:68:43:f9:75:1c:9b:
                    35:c3:c4:a0:92:9d:ce:d2:d4:cc:0d:70:6d:d1:7a:
                    31:b7:fe:98:e9:2a:9a:56:19:5d:d6:cf:82:42:25:
                    23:47:d7:b2:85:67:8c:21:4e:fc:e8:73:bc:d1:d9:
                    fb:d2:46:a2:c2:8e:29:ee:79:d0:04:06:67:fd:72:
                    44:55:15:88:ff:ba:b9:9b:85:69:2d:57:3a:fb:d1:
                    56:eb:7e:52:b9:1a:24:78:54:09:a3:02:36:76:cd:
                    6b:8b:53:c2:1c:cf:ff:21:e8:53:be:c5:a3:22:d2:
                    43:d9:d9:8e:d8:b4:af:2e:89:61:2f:cc:2a:f0:d1:
                    45:4a:1b:13:cc:c7:61:b7:8c:08:ab:d2:e1:fa:d1:
                    24:c6:54:ac:28:eb:e3:f2:9a:fb:f1:61:7e:ea:84:
                    9a:3c:37:f4:fa:36:08:b5:15:4e:58:01:35:73:36:
                    6d:4b:27:bb:9c:86:07:f4:12:bc:6f:66:04:4a:bd:
                    c4:74:55:1a:5f:f6:9b:ec:bf:e6:83:68:7e:ed:1f:
                    2d:dc:bb:68:2e:70:0d:7e:75:64:67:02:c1:97:9b:
                    6d:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:26:29:64:60:F7:10:91:0A:B5:29:7E:91:45:BD:C3:1A:A0:73:95
            X509v3 Authority Key Identifier:
                keyid:35:7B:7A:D7:5E:6E:33:8A:26:C2:FC:9C:E4:B3:A7:A2:74:FB:76:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/2955f5a6-f378-4252-804b-b0b938654fbf/0/357B7AD75E6E338A26C2FC9CE4B3A7A274FB7605.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/357B7AD75E6E338A26C2FC9CE4B3A7A274FB7605.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2955f5a6-f378-4252-804b-b0b938654fbf/0/357B7AD75E6E338A26C2FC9CE4B3A7A274FB7605.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:ad:68:7d:75:a4:06:0d:93:24:20:29:2a:28:6b:d1:e0:72:
         28:16:f9:60:1d:b1:79:69:16:d2:e6:9d:7a:89:3f:b0:25:b2:
         46:1d:e1:0a:57:9f:90:36:1a:5b:a9:23:62:92:9f:9b:1a:01:
         29:e3:9e:40:44:92:05:09:03:b8:d6:d4:fa:68:ab:e6:23:1a:
         8f:34:d3:23:ed:e9:7a:5a:38:5f:52:98:18:31:b9:5f:eb:46:
         b4:cb:73:9d:72:31:64:19:59:e2:23:89:17:01:90:1c:86:f7:
         ec:1a:95:4a:e6:d1:e2:65:66:de:c3:21:5e:90:f7:c2:92:fa:
         a5:7d:e9:db:02:41:73:5c:92:4f:73:85:1e:7c:5b:0a:1b:20:
         3e:46:5e:ad:8f:1c:fc:23:94:35:df:48:05:26:99:76:a5:21:
         99:a6:b7:7c:e4:ae:d9:ff:a1:9c:c4:66:82:b5:3a:c4:2a:ee:
         14:08:9b:e5:4c:ad:f8:45:aa:8e:8b:b0:b3:23:18:2a:fb:ab:
         2f:e8:2d:5a:e8:6b:c9:35:af:7f:58:3c:0c:13:73:5e:45:88:
         1c:0b:d9:34:05:4c:09:9c:c6:21:4c:50:3e:cc:1a:57:0c:e7:
         1e:74:82:f6:78:64:0b:75:d0:15:7b:2f:77:e0:d2:1f:f7:11:
         83:3e:d8:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 19:00:31 2026 by rpki-client