This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/2a9302ce-17e9-4039-b3f9-995e78671c24/0/DC509E8257EC53E1695B56ABC3E469E56E0E9D19.mft
File:                     DC509E8257EC53E1695B56ABC3E469E56E0E9D19.mft (raw, json)
Hash identifier:          LcHW6LJbvxt+URasT5bSUF4OmyXieWwICuIcacZ/v/c=
Subject key identifier:   F8:9C:F5:07:EF:CB:B3:C4:B0:47:73:87:6B:3D:F9:E5:84:D9:9B:96
Authority key identifier: DC:50:9E:82:57:EC:53:E1:69:5B:56:AB:C3:E4:69:E5:6E:0E:9D:19
Certificate issuer:       /CN=DC509E8257EC53E1695B56ABC3E469E56E0E9D19
Certificate serial:       6772D8C72313F401F449D5962DC9B70334B9A94A
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC509E8257EC53E1695B56ABC3E469E56E0E9D19.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/2a9302ce-17e9-4039-b3f9-995e78671c24/0/DC509E8257EC53E1695B56ABC3E469E56E0E9D19.mft
Manifest number:          01F6
Signing time:             Fri 23 Jan 2026 23:20:46 +0000
Manifest this update:     Fri 23 Jan 2026 23:15:46 +0000
Manifest next update:     Tue 27 Jan 2026 06:40:46 +0000
Files and hashes:         1: DC509E8257EC53E1695B56ABC3E469E56E0E9D19.crl (hash: l0XwrgC5hEYpspQQ3ecRT8lXX1BMss3/tLweVGhzLlk=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/2a9302ce-17e9-4039-b3f9-995e78671c24/0/DC509E8257EC53E1695B56ABC3E469E56E0E9D19.crl
                          rsync://repo-rpki.idnic.net/repo/2a9302ce-17e9-4039-b3f9-995e78671c24/0/DC509E8257EC53E1695B56ABC3E469E56E0E9D19.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC509E8257EC53E1695B56ABC3E469E56E0E9D19.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 27 Jan 2026 06:40:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:72:d8:c7:23:13:f4:01:f4:49:d5:96:2d:c9:b7:03:34:b9:a9:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DC509E8257EC53E1695B56ABC3E469E56E0E9D19
        Validity
            Not Before: Jan 23 23:15:46 2026 GMT
            Not After : Jan 27 06:40:46 2026 GMT
        Subject: CN=F89CF507EFCBB3C4B04773876B3DF9E584D99B96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:e5:88:75:56:68:00:fe:8e:1e:a3:63:37:e4:
                    dd:ef:1b:a6:bf:9e:e3:a3:ff:89:8b:01:4a:fc:5d:
                    9a:dd:6a:0b:6f:eb:fa:cb:44:0e:47:51:0a:15:41:
                    9c:0b:13:2e:f3:58:55:8f:16:c8:49:33:a1:ed:9c:
                    d2:eb:0f:0a:c1:73:c0:98:8d:69:ee:8c:c0:8a:bb:
                    06:23:cb:e3:4e:04:62:32:e5:39:3e:59:a0:d7:cb:
                    d7:3c:0e:fa:d0:c1:1b:3f:a6:fe:f5:ec:3b:0f:e8:
                    b5:5b:eb:78:d8:48:18:b8:bc:89:17:8e:73:5c:3e:
                    57:bc:25:c7:ff:58:fd:10:2b:93:fa:89:f4:66:95:
                    9a:17:ae:d9:a5:91:9b:68:40:f2:bd:15:d1:9b:4b:
                    b7:45:97:68:c3:24:6b:69:7b:b7:01:a4:e0:5a:95:
                    09:b2:79:9c:37:99:ce:cd:d3:a8:0d:c4:5b:48:b0:
                    50:f3:48:b6:81:55:9f:26:7d:d1:f8:63:c3:12:fc:
                    21:3b:ff:5a:b9:95:7e:69:eb:4e:2d:ea:da:62:a6:
                    98:cc:c4:05:33:26:59:10:47:0d:e7:fa:a9:de:2d:
                    c9:36:99:dc:22:da:ab:5b:67:53:2b:d3:e0:12:e9:
                    90:0d:fc:2d:ec:e7:c5:41:95:17:9f:1a:27:f4:1b:
                    55:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:9C:F5:07:EF:CB:B3:C4:B0:47:73:87:6B:3D:F9:E5:84:D9:9B:96
            X509v3 Authority Key Identifier:
                keyid:DC:50:9E:82:57:EC:53:E1:69:5B:56:AB:C3:E4:69:E5:6E:0E:9D:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/2a9302ce-17e9-4039-b3f9-995e78671c24/0/DC509E8257EC53E1695B56ABC3E469E56E0E9D19.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC509E8257EC53E1695B56ABC3E469E56E0E9D19.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2a9302ce-17e9-4039-b3f9-995e78671c24/0/DC509E8257EC53E1695B56ABC3E469E56E0E9D19.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d8:57:d5:10:64:52:0f:4f:3c:7a:fc:5d:b6:e9:0e:b2:fa:70:
         f1:45:b2:85:16:88:ca:b6:19:54:11:e2:3c:09:c6:f1:5f:9f:
         fa:63:28:54:72:14:54:ac:e8:57:e1:fe:76:21:3d:df:30:e5:
         f7:5e:f3:08:47:ff:28:89:57:f8:28:f6:aa:0e:07:34:75:30:
         a3:c7:ab:1d:a6:07:fe:58:39:5c:60:cd:da:b0:c4:42:90:4d:
         68:6c:85:05:4e:a4:7d:31:23:21:44:49:c0:60:f9:72:3d:dd:
         78:e5:cf:be:48:0e:a5:ae:c0:7d:76:29:da:72:91:0e:cc:01:
         e0:10:a4:27:32:af:8a:e2:a2:b2:6b:9e:47:a5:2c:52:ee:ca:
         2a:3b:0f:9a:39:bc:d1:e0:a9:6d:34:78:75:83:e3:d5:c8:78:
         72:dd:7b:19:ce:81:6e:d6:dc:28:f5:ea:19:9a:46:40:14:da:
         22:9e:a0:31:67:dc:6a:49:8f:b8:d6:91:c6:80:55:88:57:05:
         cd:1a:66:ee:83:81:26:3f:69:3d:e5:7f:8f:da:12:ed:77:ae:
         87:ea:e6:c1:82:e7:a6:54:76:da:17:1c:25:06:a5:54:a8:fb:
         fc:30:23:2c:28:9f:25:25:95:02:db:d4:a9:9d:91:e8:28:57:
         89:c6:79:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 21:52:18 2026 by rpki-client