This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/355a1a44-337d-4db4-90d7-5bd4f37214b8/0/1BC497D0AD0ADA80683A4AD17C60B87B6039448F.mft
File:                     1BC497D0AD0ADA80683A4AD17C60B87B6039448F.mft (raw, json)
Hash identifier:          MX74oTMAM8nkLgIhxF+UO4ItE2GW/rnd43qfy0fwtm4=
Subject key identifier:   0F:BA:63:7C:8E:AC:7B:C9:EE:EB:17:11:81:E8:11:2A:C8:7A:97:D4
Authority key identifier: 1B:C4:97:D0:AD:0A:DA:80:68:3A:4A:D1:7C:60:B8:7B:60:39:44:8F
Certificate issuer:       /CN=1BC497D0AD0ADA80683A4AD17C60B87B6039448F
Certificate serial:       3C6B88F001F2F46D92C5CDC5DB49EFF54385A614
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BC497D0AD0ADA80683A4AD17C60B87B6039448F.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/355a1a44-337d-4db4-90d7-5bd4f37214b8/0/1BC497D0AD0ADA80683A4AD17C60B87B6039448F.mft
Manifest number:          01BA
Signing time:             Sat 24 Jan 2026 17:41:09 +0000
Manifest this update:     Sat 24 Jan 2026 17:36:09 +0000
Manifest next update:     Wed 28 Jan 2026 00:05:09 +0000
Files and hashes:         1: 3131372e37342e3131382e302f32342d3234203d3e203338353233.roa (hash: 4fKehzLVKMt4BtIz5yX0ZNeUtM2OU5RTZbzjb0CfeGg=)
                          2: 3131372e37342e3131322e302f32342d3234203d3e203338353233.roa (hash: r7mX7DIOfxP1tvfX/0nO3uk5UJScpK1uxXF4s8uBd2k=)
                          3: 323430313a326334303a3a2f34382d3438203d3e203338353233.roa (hash: ibJZHZEEwuIaueWUBS974XsPSfaJnljHAhKebn2nItk=)
                          4: 3131372e37342e3131332e302f32342d3234203d3e203338353233.roa (hash: SrvCxxwtOAUSUTutTIMfTF6gsLrsVsYaxkHmFerjnWI=)
                          5: 3131372e37342e3131352e302f32342d3234203d3e203338353233.roa (hash: IzPZz6vu3cjWO+ZYwd6eSMpiSKGTjsqFFoCVeTSJVZ8=)
                          6: 323430313a326334303a323a3a2f34382d3438203d3e203338353233.roa (hash: hqbmI1+UoUPoz5aHKEefU2aqzgzzxdPZgTYT+n6aATQ=)
                          7: 323430313a326334303a313a3a2f34382d3438203d3e203338353233.roa (hash: OfppjjTpXFLmh5Aj/BiOiyknKtfPtzPHg2/eqJ5W1oI=)
                          8: 3131372e37342e3131342e302f32342d3234203d3e203338353233.roa (hash: wmUZdQN9smMnqKDgMvZP3VM5NikSry3YiZ+HF4rDvwk=)
                          9: 323430313a326334303a333a3a2f34382d3438203d3e203338353233.roa (hash: n2kJmjfaGbSRfn1pQASrz7hUspqtdNSxVZot/XzEk0w=)
                          10: 3131372e37342e3131372e302f32342d3234203d3e203338353233.roa (hash: V8HVQOfgmh/cc0nhLeaxvvDoxZedeMVRv4rqy3Nfh7U=)
                          11: 323430313a326334303a343a3a2f34382d3438203d3e203338353233.roa (hash: x8GA7f+9To0zJWTPLU22XKkbJl3cpNPeZ955m1OcAKM=)
                          12: 323430313a326334303a353a3a2f34382d3438203d3e203338353233.roa (hash: B1+mJ2NWxCErJO3eSkTT+IRh+1v8gS/UXtodN0rllAY=)
                          13: 3131372e37342e3131362e302f32342d3234203d3e203338353233.roa (hash: 4k9C18S/gej3vBFzU0qeNrYGkLmZVXuYXMm+WSQ8DFw=)
                          14: 1BC497D0AD0ADA80683A4AD17C60B87B6039448F.crl (hash: iqtw5Ke9DCtEGmX+ndq7+1N7dGyG6s5lENuLIgU6gwE=)
                          15: 3131372e37342e3131392e302f32342d3234203d3e203338353233.roa (hash: xNJ7kcT79xuTCgJoNY2LlV0p8gctQ3BS6QaupCIi9OQ=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/355a1a44-337d-4db4-90d7-5bd4f37214b8/0/1BC497D0AD0ADA80683A4AD17C60B87B6039448F.crl
                          rsync://repo-rpki.idnic.net/repo/355a1a44-337d-4db4-90d7-5bd4f37214b8/0/1BC497D0AD0ADA80683A4AD17C60B87B6039448F.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BC497D0AD0ADA80683A4AD17C60B87B6039448F.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 28 Jan 2026 00:05:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:6b:88:f0:01:f2:f4:6d:92:c5:cd:c5:db:49:ef:f5:43:85:a6:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1BC497D0AD0ADA80683A4AD17C60B87B6039448F
        Validity
            Not Before: Jan 24 17:36:09 2026 GMT
            Not After : Jan 28 00:05:09 2026 GMT
        Subject: CN=0FBA637C8EAC7BC9EEEB171181E8112AC87A97D4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:e0:14:11:18:d3:58:d4:4c:a5:1b:d1:4a:96:
                    dd:2d:36:d8:0e:00:ba:2f:44:26:73:7f:ea:a1:aa:
                    5e:60:cb:37:37:52:31:1b:8c:ad:e0:d5:2f:7f:32:
                    3a:34:c8:dd:8f:91:b0:d0:45:8d:64:98:17:c9:4b:
                    ee:4b:52:34:2f:1c:2d:27:07:06:62:a4:43:99:e7:
                    8a:e3:39:f8:65:60:eb:89:8f:b7:56:ef:d0:43:77:
                    ba:7c:13:08:c8:c9:99:e1:9c:d1:48:ee:7b:99:ec:
                    06:21:81:be:26:a6:d4:25:35:dc:50:78:97:6b:d6:
                    15:11:f4:bf:75:29:dd:5b:c6:72:c1:a6:a7:9e:0e:
                    ab:0a:a5:ad:08:aa:63:aa:16:e5:e7:c5:a8:28:e4:
                    b0:61:21:0a:4c:d9:c1:75:81:a8:d7:b2:78:00:56:
                    7c:9f:fc:d4:79:0d:53:90:1d:5f:d3:ff:1f:5a:4c:
                    ee:00:34:3a:6d:04:6a:9e:f3:e8:2b:86:64:db:f9:
                    ee:9f:dc:13:42:ef:0d:ac:67:41:85:91:3a:1f:a0:
                    0d:e7:ba:8d:9d:f9:82:fe:e4:e0:56:50:4a:33:fd:
                    9f:98:b1:0c:70:b4:48:2c:87:9e:80:44:80:17:dd:
                    e1:94:0e:91:bf:d9:f3:ad:d8:85:32:c4:1a:29:33:
                    67:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:BA:63:7C:8E:AC:7B:C9:EE:EB:17:11:81:E8:11:2A:C8:7A:97:D4
            X509v3 Authority Key Identifier:
                keyid:1B:C4:97:D0:AD:0A:DA:80:68:3A:4A:D1:7C:60:B8:7B:60:39:44:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/355a1a44-337d-4db4-90d7-5bd4f37214b8/0/1BC497D0AD0ADA80683A4AD17C60B87B6039448F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BC497D0AD0ADA80683A4AD17C60B87B6039448F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/355a1a44-337d-4db4-90d7-5bd4f37214b8/0/1BC497D0AD0ADA80683A4AD17C60B87B6039448F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:49:3a:51:05:71:c2:78:0c:41:2c:6c:e6:35:ff:e8:14:7d:
         7d:b9:1e:5f:5e:2c:c3:7a:f6:24:60:2b:f8:50:d6:24:47:cd:
         48:cc:11:d1:26:8c:dd:9f:7d:20:5d:1d:75:05:ec:1d:48:73:
         45:7d:e5:93:6c:1f:fe:78:d1:8e:ca:f9:42:fb:32:f1:9d:07:
         10:18:09:7a:d3:04:9c:7f:b0:96:f0:1a:f8:5b:92:d1:79:ee:
         58:b0:8f:1c:eb:83:d0:7c:98:12:ed:ec:a7:ef:89:ca:c7:3b:
         18:4b:ac:6b:74:09:d5:01:b2:2d:01:37:a2:04:9e:2d:d1:57:
         ab:7e:af:ac:15:8b:2a:b9:86:4d:2b:fe:a5:ff:75:27:6d:23:
         5e:7d:3f:27:a8:d6:2b:be:7e:2c:2c:03:a9:88:d6:0a:1c:54:
         7e:99:4f:8e:f8:ca:bf:cf:25:51:5f:dd:a7:4b:fd:1a:0a:1f:
         27:83:c5:26:96:66:d9:bb:1c:3c:07:8a:92:f1:49:3a:7c:b8:
         15:28:1b:43:92:f2:cb:8d:fc:3b:9b:5b:8d:09:1f:c8:3e:42:
         5a:95:f4:01:e0:b3:d9:36:cf:83:b7:ab:23:94:8d:00:6a:32:
         a5:58:03:42:3c:4a:72:71:3d:d0:36:10:b0:ee:27:21:0a:eb:
         09:40:31:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 01:13:16 2026 by rpki-client