This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/2d3ec84e-60ef-44d4-9f43-85b6f96b26cf/0/114C9E7EA91F6387C2CBF1D16EA824580CD68587.mft
File:                     114C9E7EA91F6387C2CBF1D16EA824580CD68587.mft (raw, json)
Hash identifier:          DnF32cTauMRR3CdmzAjF458ewruvvm4xXuVTDIVMpps=
Subject key identifier:   18:11:16:AE:02:B1:57:79:51:2E:5C:57:F5:C9:B2:E3:82:55:82:65
Authority key identifier: 11:4C:9E:7E:A9:1F:63:87:C2:CB:F1:D1:6E:A8:24:58:0C:D6:85:87
Certificate issuer:       /CN=114C9E7EA91F6387C2CBF1D16EA824580CD68587
Certificate serial:       79BA15A9A56BCFE60084D6779CE8A64BD4CFF090
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/114C9E7EA91F6387C2CBF1D16EA824580CD68587.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/2d3ec84e-60ef-44d4-9f43-85b6f96b26cf/0/114C9E7EA91F6387C2CBF1D16EA824580CD68587.mft
Manifest number:          0541
Signing time:             Sun 25 Jan 2026 06:02:09 +0000
Manifest this update:     Sun 25 Jan 2026 05:57:09 +0000
Manifest next update:     Wed 28 Jan 2026 07:26:09 +0000
Files and hashes:         1: 114C9E7EA91F6387C2CBF1D16EA824580CD68587.crl (hash: ZovSrKh42DE9FJMHVdA434OQOGOC1My7ZJUp54t4eVY=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/2d3ec84e-60ef-44d4-9f43-85b6f96b26cf/0/114C9E7EA91F6387C2CBF1D16EA824580CD68587.crl
                          rsync://repo-rpki.idnic.net/repo/2d3ec84e-60ef-44d4-9f43-85b6f96b26cf/0/114C9E7EA91F6387C2CBF1D16EA824580CD68587.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/114C9E7EA91F6387C2CBF1D16EA824580CD68587.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 28 Jan 2026 07:26:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:ba:15:a9:a5:6b:cf:e6:00:84:d6:77:9c:e8:a6:4b:d4:cf:f0:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=114C9E7EA91F6387C2CBF1D16EA824580CD68587
        Validity
            Not Before: Jan 25 05:57:09 2026 GMT
            Not After : Jan 28 07:26:09 2026 GMT
        Subject: CN=181116AE02B15779512E5C57F5C9B2E382558265
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:1d:e7:86:f9:ad:27:b3:aa:e4:a8:03:88:41:
                    ff:00:de:7c:4f:fa:3f:c8:88:df:cf:8a:45:6c:34:
                    64:64:26:43:bb:57:bd:bd:ea:b2:75:c9:f6:b4:88:
                    44:1a:ed:42:7a:00:f5:18:74:7b:80:ed:d2:5b:4b:
                    65:85:17:11:c9:1d:0c:51:c8:32:44:4d:91:48:4d:
                    76:0b:4d:eb:24:2b:f7:d5:11:6d:12:65:36:b1:81:
                    72:ad:43:5e:79:14:a6:31:36:62:2e:b7:bd:15:40:
                    c8:c1:3f:99:6f:53:bb:6d:ac:da:41:0f:74:48:22:
                    2e:bc:b7:9e:1e:16:48:8a:83:ab:fc:9d:2e:53:be:
                    91:66:11:44:3d:2e:23:13:22:b5:cb:ef:de:c0:6d:
                    d1:b5:16:7e:97:c1:17:56:da:92:4f:bf:33:a8:4c:
                    6b:48:28:3e:72:53:6f:8b:1c:3f:f0:fc:7d:97:01:
                    ed:8a:89:a3:d0:69:99:05:42:20:1f:4b:95:07:de:
                    8e:40:b2:3c:f3:55:48:18:ee:5d:99:ad:72:20:36:
                    ac:1d:73:fb:ad:29:c8:80:c4:6e:6b:15:e5:d0:5e:
                    d0:f1:1a:42:ab:75:5c:17:6d:65:39:7c:93:46:fd:
                    d1:1f:a6:aa:d1:22:75:aa:df:89:47:df:4e:fa:b4:
                    2a:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:11:16:AE:02:B1:57:79:51:2E:5C:57:F5:C9:B2:E3:82:55:82:65
            X509v3 Authority Key Identifier:
                keyid:11:4C:9E:7E:A9:1F:63:87:C2:CB:F1:D1:6E:A8:24:58:0C:D6:85:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/2d3ec84e-60ef-44d4-9f43-85b6f96b26cf/0/114C9E7EA91F6387C2CBF1D16EA824580CD68587.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/114C9E7EA91F6387C2CBF1D16EA824580CD68587.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2d3ec84e-60ef-44d4-9f43-85b6f96b26cf/0/114C9E7EA91F6387C2CBF1D16EA824580CD68587.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:2f:c9:45:5d:d5:bb:57:d7:b3:e7:4d:d9:37:24:f1:c3:20:
         2a:1c:90:d8:3d:a7:d1:21:1c:ad:60:b3:f5:fa:6e:b3:99:fa:
         d8:b9:ca:5d:4b:8f:7d:0d:de:8a:4a:e2:27:d0:52:38:fe:12:
         1c:0d:42:a3:33:73:a6:a8:c0:0a:bf:94:e3:23:f1:88:be:c0:
         73:74:4f:f3:c7:dc:2a:df:61:f6:a9:f1:f0:74:08:da:5f:09:
         f0:62:3b:cb:23:91:d9:a5:2f:42:7b:15:df:c5:51:a2:2c:90:
         4e:0f:78:e5:96:3e:58:87:32:0f:e8:23:c7:44:41:c8:45:3d:
         9b:ae:9a:1b:86:c6:27:30:51:bb:76:7f:af:f0:bb:18:da:29:
         9d:e8:38:42:e2:0e:c3:4d:5b:10:16:7b:06:58:32:43:b4:b2:
         3e:6c:7a:52:43:dc:72:cf:78:8a:8a:76:d1:59:2f:df:4b:97:
         d8:45:b2:ca:89:7e:d2:34:af:0b:21:c2:35:cb:b4:1b:75:6a:
         30:56:b6:e2:0f:50:d9:84:a9:ae:12:26:7f:1d:0e:fa:e5:53:
         8a:c5:4e:b9:f1:5c:49:02:80:a4:8c:db:d6:79:af:df:20:0f:
         86:0b:59:a6:b0:b5:59:ad:68:10:ef:34:82:ea:00:57:96:40:
         46:10:86:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 23:16:20 2026 by rpki-client