This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/3037b63c-e498-4e47-b97e-67aba458781c/0/1A4CE5469A9DABD277C7F1A6C2E00DB113697AD8.mft
File:                     1A4CE5469A9DABD277C7F1A6C2E00DB113697AD8.mft (raw, json)
Hash identifier:          6JiFA20KPrv3CXdTyy/lwKQjVzPGbdjt5KSivELz7bI=
Subject key identifier:   76:16:EA:C1:F4:C5:02:E3:C0:8E:3F:07:02:A9:4C:44:D9:B1:A8:40
Authority key identifier: 1A:4C:E5:46:9A:9D:AB:D2:77:C7:F1:A6:C2:E0:0D:B1:13:69:7A:D8
Certificate issuer:       /CN=1A4CE5469A9DABD277C7F1A6C2E00DB113697AD8
Certificate serial:       7C5FBE7FC2F638622517442252A3F1ECA777B2DC
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1A4CE5469A9DABD277C7F1A6C2E00DB113697AD8.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3037b63c-e498-4e47-b97e-67aba458781c/0/1A4CE5469A9DABD277C7F1A6C2E00DB113697AD8.mft
Manifest number:          0112
Signing time:             Sat 24 Jan 2026 20:50:04 +0000
Manifest this update:     Sat 24 Jan 2026 20:45:04 +0000
Manifest next update:     Tue 27 Jan 2026 20:50:04 +0000
Files and hashes:         1: 1A4CE5469A9DABD277C7F1A6C2E00DB113697AD8.crl (hash: oCHpvuerBVSZSuKRB5hyLHFDXr9J59TJ44jDgTCg0q0=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/3037b63c-e498-4e47-b97e-67aba458781c/0/1A4CE5469A9DABD277C7F1A6C2E00DB113697AD8.crl
                          rsync://repo-rpki.idnic.net/repo/3037b63c-e498-4e47-b97e-67aba458781c/0/1A4CE5469A9DABD277C7F1A6C2E00DB113697AD8.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1A4CE5469A9DABD277C7F1A6C2E00DB113697AD8.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 27 Jan 2026 20:50:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:5f:be:7f:c2:f6:38:62:25:17:44:22:52:a3:f1:ec:a7:77:b2:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1A4CE5469A9DABD277C7F1A6C2E00DB113697AD8
        Validity
            Not Before: Jan 24 20:45:04 2026 GMT
            Not After : Jan 27 20:50:04 2026 GMT
        Subject: CN=7616EAC1F4C502E3C08E3F0702A94C44D9B1A840
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:22:8b:00:02:21:5f:a6:b6:2d:e9:5f:08:3d:
                    fd:fc:fe:d7:65:65:05:6b:f3:73:49:1d:a3:03:d6:
                    76:9e:7e:1b:b6:a3:77:b2:65:c4:4a:99:26:14:e8:
                    53:d8:8d:4d:81:3b:fc:51:3b:f8:c2:e1:37:41:23:
                    f7:39:ac:37:c8:98:da:92:84:ac:85:95:c8:90:a2:
                    a0:93:45:7e:00:30:86:10:12:d5:28:68:bc:af:2f:
                    75:84:ee:c2:9b:1b:0f:fd:c9:26:18:8b:bd:1b:0a:
                    2a:fe:1e:69:85:ab:91:57:ef:f0:9c:28:08:8d:ee:
                    cb:db:fc:76:6d:1e:88:37:b3:1d:7b:85:c9:b5:17:
                    bc:59:5a:91:7f:91:f6:95:21:18:6e:36:e0:bb:73:
                    00:ae:ec:c9:a7:d7:43:01:43:e8:8d:20:4a:22:d1:
                    e1:34:b8:fb:51:97:28:ea:dc:4a:e9:e1:e0:69:48:
                    95:b3:e3:1f:2b:f6:09:1b:3e:2a:35:b0:13:fe:42:
                    14:69:4d:cc:40:6e:0d:ec:b3:25:56:41:6f:60:7f:
                    29:b1:a3:9d:18:9f:be:48:5c:5b:cb:e0:8e:65:5e:
                    7c:91:1d:f7:a8:53:10:9a:cf:b9:f0:d1:19:d9:94:
                    b9:57:c4:01:bb:cc:74:f9:00:17:8d:a9:fa:19:b2:
                    09:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:16:EA:C1:F4:C5:02:E3:C0:8E:3F:07:02:A9:4C:44:D9:B1:A8:40
            X509v3 Authority Key Identifier:
                keyid:1A:4C:E5:46:9A:9D:AB:D2:77:C7:F1:A6:C2:E0:0D:B1:13:69:7A:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3037b63c-e498-4e47-b97e-67aba458781c/0/1A4CE5469A9DABD277C7F1A6C2E00DB113697AD8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1A4CE5469A9DABD277C7F1A6C2E00DB113697AD8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3037b63c-e498-4e47-b97e-67aba458781c/0/1A4CE5469A9DABD277C7F1A6C2E00DB113697AD8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:e9:84:08:3c:8b:84:e4:89:dc:83:c7:63:19:4d:ae:dd:1c:
         61:0d:55:f5:a6:ab:d0:7d:ab:99:54:79:8a:60:34:8a:80:66:
         2d:65:79:48:bc:12:6e:e0:a6:d4:04:28:f6:52:8c:8e:35:79:
         56:7b:78:09:29:9c:dc:ed:bd:06:9b:c1:e7:d1:15:04:92:42:
         aa:13:57:6f:0f:57:45:c6:dd:92:d6:1f:ae:aa:d2:fb:b8:bf:
         3a:d7:20:26:4d:db:87:77:4e:a4:d7:a8:e4:c9:23:c9:0d:82:
         f9:1e:d8:bc:b7:56:6e:56:06:df:9e:1c:e0:80:c7:43:17:79:
         4c:da:be:60:75:7b:32:58:eb:11:95:d5:18:8e:1d:94:fd:fb:
         e8:64:66:39:e2:a1:14:96:49:2e:c6:50:ab:f4:43:e3:01:ba:
         f7:e7:53:e6:35:00:c9:f9:51:d6:c0:d8:50:19:9e:1a:0e:af:
         39:8a:e9:eb:4e:b0:31:b5:50:95:cb:6e:43:c5:59:aa:4d:3c:
         3c:7c:02:2a:7f:1d:1c:5e:0d:e8:97:c4:11:90:11:7b:d2:74:
         3f:7d:34:b3:ef:86:39:be:3c:43:9c:49:b6:09:8a:67:69:52:
         70:94:32:93:25:8d:a5:6c:30:26:da:e3:6b:ef:b5:ac:94:48:
         42:0b:26:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:52:40 2026 by rpki-client