This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/31b433a5-72b1-4653-99d3-9469c8b8b762/0/EAD173629E4F955F44EC781A3739775E738ACCFD.mft
File:                     EAD173629E4F955F44EC781A3739775E738ACCFD.mft (raw, json)
Hash identifier:          MaFLmUeJ+/9KBATDXK3L8u4QcoXsBKhsngj11Giug+4=
Subject key identifier:   31:FD:FB:C3:B2:A4:E2:A9:96:81:CB:CB:13:90:67:33:EA:2B:4C:69
Authority key identifier: EA:D1:73:62:9E:4F:95:5F:44:EC:78:1A:37:39:77:5E:73:8A:CC:FD
Certificate issuer:       /CN=EAD173629E4F955F44EC781A3739775E738ACCFD
Certificate serial:       5142B866EBF2310D430D500A577B2D1FB4EDEC1E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/EAD173629E4F955F44EC781A3739775E738ACCFD.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/31b433a5-72b1-4653-99d3-9469c8b8b762/0/EAD173629E4F955F44EC781A3739775E738ACCFD.mft
Manifest number:          0116
Signing time:             Sun 25 Jan 2026 10:40:47 +0000
Manifest this update:     Sun 25 Jan 2026 10:35:47 +0000
Manifest next update:     Wed 28 Jan 2026 19:49:47 +0000
Files and hashes:         1: EAD173629E4F955F44EC781A3739775E738ACCFD.crl (hash: /vTt/CcwY0WcFsJam8trG+JY7qvSlUundmTwArDpJ40=)
                          2: 3135372e36362e32392e302f32342d3234203d3e203539323831.roa (hash: zTHLGAwQAsHOZagfs3+O24ipzV4m2EM9CneqRLVHTaQ=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/31b433a5-72b1-4653-99d3-9469c8b8b762/0/EAD173629E4F955F44EC781A3739775E738ACCFD.crl
                          rsync://repo-rpki.idnic.net/repo/31b433a5-72b1-4653-99d3-9469c8b8b762/0/EAD173629E4F955F44EC781A3739775E738ACCFD.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/EAD173629E4F955F44EC781A3739775E738ACCFD.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 28 Jan 2026 19:49:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:42:b8:66:eb:f2:31:0d:43:0d:50:0a:57:7b:2d:1f:b4:ed:ec:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EAD173629E4F955F44EC781A3739775E738ACCFD
        Validity
            Not Before: Jan 25 10:35:47 2026 GMT
            Not After : Jan 28 19:49:47 2026 GMT
        Subject: CN=31FDFBC3B2A4E2A99681CBCB13906733EA2B4C69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:2d:3f:c7:0a:1b:3f:f9:68:3d:e5:8e:c3:b4:
                    5b:ec:3f:99:37:03:5a:8d:4c:83:ea:0e:b7:2f:db:
                    7c:1e:e8:71:e6:5f:bf:21:01:71:aa:ee:52:8c:9c:
                    97:4d:9f:61:9a:09:1b:fa:ad:cc:1f:51:db:81:21:
                    ae:10:83:16:c5:d0:8d:fd:2e:72:eb:30:41:40:2c:
                    b0:a4:db:b3:ca:56:ce:a5:58:7f:5a:a4:fe:a7:43:
                    2f:41:8d:10:09:9d:fa:db:80:36:3e:04:71:14:79:
                    ad:d1:55:a1:d1:89:86:6e:d9:f8:da:98:76:4b:d8:
                    2e:3a:5e:ba:7c:74:91:4d:a0:ec:35:e7:11:1d:63:
                    51:2b:01:08:e2:4e:d4:af:4c:ba:ce:c4:89:b2:38:
                    b9:53:d9:22:a6:16:8d:09:f3:cc:29:4a:7c:a9:5a:
                    6a:e4:ba:97:7c:30:64:cf:fb:de:78:ec:5a:22:27:
                    2c:2f:72:d9:a8:9e:0b:7a:06:75:85:d0:00:b9:2e:
                    bf:21:b2:e9:18:d7:96:ce:e4:0b:a7:91:31:1b:12:
                    a4:e8:29:33:3e:4e:56:92:13:39:d5:c8:5a:8a:f2:
                    92:09:f2:92:46:b9:dc:89:43:4f:a1:9c:67:6c:6e:
                    6d:65:ac:90:2f:79:1d:3e:03:5e:48:0a:12:2a:ef:
                    1f:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:FD:FB:C3:B2:A4:E2:A9:96:81:CB:CB:13:90:67:33:EA:2B:4C:69
            X509v3 Authority Key Identifier:
                keyid:EA:D1:73:62:9E:4F:95:5F:44:EC:78:1A:37:39:77:5E:73:8A:CC:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/31b433a5-72b1-4653-99d3-9469c8b8b762/0/EAD173629E4F955F44EC781A3739775E738ACCFD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/EAD173629E4F955F44EC781A3739775E738ACCFD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/31b433a5-72b1-4653-99d3-9469c8b8b762/0/EAD173629E4F955F44EC781A3739775E738ACCFD.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:ee:2c:05:f2:e6:4f:ff:a8:e0:2b:47:f1:db:60:71:20:ce:
         b4:56:68:7e:5a:e1:1f:9b:a2:7b:55:81:f5:3c:3c:d5:a9:27:
         04:a5:66:dd:01:f1:d3:08:61:28:d1:1f:b9:c9:e3:7c:92:c9:
         44:3e:73:dc:f0:93:82:c2:29:de:c4:51:85:85:c5:26:98:38:
         c1:5c:0d:1a:f3:7e:7d:ee:47:29:bd:dd:16:b0:a6:6a:0d:3e:
         90:94:56:e4:5b:10:e0:a2:d4:ef:05:6a:75:6a:e9:b1:81:05:
         b8:35:46:42:a1:34:cd:5e:d7:ab:aa:8a:06:e8:f1:15:73:0c:
         23:7d:14:79:61:40:32:ef:57:96:6e:b6:90:7e:ca:d7:db:b3:
         76:ba:80:fa:61:d0:6a:92:ab:a9:14:4f:22:e2:ba:da:ca:43:
         96:26:8e:26:91:ee:48:53:75:dc:9c:f2:26:fc:3a:75:d5:48:
         45:d6:06:1c:e6:af:69:a0:e0:8f:40:8f:2d:6b:e8:96:a9:45:
         36:7c:ca:54:fe:58:bc:0f:76:75:a7:eb:91:99:fa:93:59:3d:
         e6:21:7f:ea:e5:eb:35:dc:3f:bf:74:78:53:5c:a6:18:3e:17:
         94:cf:fa:ed:3d:5b:1e:5a:3a:f4:90:d1:0e:2c:d8:c0:18:ea:
         ca:87:cb:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 06:07:01 2026 by rpki-client