This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/358c8f9f-4213-4a2a-85c3-b24b0d0b5107/0/030BE557286D3A4FE6E9AA70636EC79D178ACE1F.mft
File:                     030BE557286D3A4FE6E9AA70636EC79D178ACE1F.mft (raw, json)
Hash identifier:          O16bH6Smaa27y8octIqLAaxtJmzKl0bMpbQXREVuFro=
Subject key identifier:   77:85:68:44:A4:8F:C5:C4:79:F9:00:B8:4B:06:14:5B:65:9B:F9:6C
Authority key identifier: 03:0B:E5:57:28:6D:3A:4F:E6:E9:AA:70:63:6E:C7:9D:17:8A:CE:1F
Certificate issuer:       /CN=030BE557286D3A4FE6E9AA70636EC79D178ACE1F
Certificate serial:       3165EF2A6CA86BF70E64323AB169C40124C68F86
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/030BE557286D3A4FE6E9AA70636EC79D178ACE1F.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/358c8f9f-4213-4a2a-85c3-b24b0d0b5107/0/030BE557286D3A4FE6E9AA70636EC79D178ACE1F.mft
Manifest number:          026A
Signing time:             Sat 24 Jan 2026 02:20:58 +0000
Manifest this update:     Sat 24 Jan 2026 02:15:58 +0000
Manifest next update:     Tue 27 Jan 2026 02:26:58 +0000
Files and hashes:         1: 030BE557286D3A4FE6E9AA70636EC79D178ACE1F.crl (hash: qEcOVvS7aB5UDq6RrjwWLILanTEzOvZHEZmv3VkjFE0=)
                          2: 3130332e3136322e3232312e302f32342d3234203d3e20313339393532.roa (hash: JP4Zum4iV9kK+sjwkFZOVqNzSo/R4flchawr+ijKpxA=)
                          3: 3130332e3136322e3232302e302f32342d3234203d3e20313339393532.roa (hash: iSdhQ66zYnSDoW2oYiFhzo66rGvZpv/6O91EPJd3VUo=)
                          4: 3130332e3136322e3232302e302f32332d3233203d3e20313339393532.roa (hash: UmBaN4f8daXm7YcJHiYwqui5FgHxOYUATLUGSQyoA5A=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/358c8f9f-4213-4a2a-85c3-b24b0d0b5107/0/030BE557286D3A4FE6E9AA70636EC79D178ACE1F.crl
                          rsync://repo-rpki.idnic.net/repo/358c8f9f-4213-4a2a-85c3-b24b0d0b5107/0/030BE557286D3A4FE6E9AA70636EC79D178ACE1F.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/030BE557286D3A4FE6E9AA70636EC79D178ACE1F.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 27 Jan 2026 02:26:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:65:ef:2a:6c:a8:6b:f7:0e:64:32:3a:b1:69:c4:01:24:c6:8f:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=030BE557286D3A4FE6E9AA70636EC79D178ACE1F
        Validity
            Not Before: Jan 24 02:15:58 2026 GMT
            Not After : Jan 27 02:26:58 2026 GMT
        Subject: CN=77856844A48FC5C479F900B84B06145B659BF96C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:36:b6:1f:59:3f:20:92:c7:e2:1f:26:aa:f4:
                    e0:b6:85:a6:42:a3:d9:da:6a:d1:7f:4f:37:a3:26:
                    e6:f2:26:82:4f:c5:d9:be:05:7c:27:0a:36:77:7a:
                    96:6e:a9:27:98:a0:23:23:29:ba:94:ba:08:d3:fe:
                    18:ae:65:f4:48:05:f1:f1:ea:79:81:fa:ea:5d:64:
                    ae:3e:25:ef:ca:a6:f6:b7:5b:ba:94:b3:28:c0:70:
                    66:c9:e0:f1:22:da:35:05:23:54:8c:0a:e8:fb:e4:
                    19:1c:57:07:d4:e3:11:a0:ef:88:9c:e0:f1:e4:51:
                    ef:39:e5:4a:11:fa:f0:6b:d7:49:b7:bd:c7:53:83:
                    ba:93:22:14:f4:54:bb:f9:64:0c:e4:89:45:b3:e9:
                    0e:c4:9f:65:a3:ea:66:ea:64:d8:8e:5a:98:1e:fb:
                    7a:9f:88:ae:49:f5:36:e6:03:b3:0e:90:73:3b:c0:
                    d1:b4:2e:b7:43:6d:a0:76:82:40:06:99:6c:f5:f5:
                    dc:04:5e:51:7e:d0:66:a9:03:27:e1:aa:de:35:9a:
                    9e:dc:e5:28:6f:18:6e:e4:be:bb:6f:32:c9:a2:86:
                    ba:a3:14:30:85:04:5e:90:df:3e:bc:af:4e:fd:c6:
                    d6:31:cc:59:c7:cf:74:84:77:79:08:72:5d:fa:a6:
                    c2:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:85:68:44:A4:8F:C5:C4:79:F9:00:B8:4B:06:14:5B:65:9B:F9:6C
            X509v3 Authority Key Identifier:
                keyid:03:0B:E5:57:28:6D:3A:4F:E6:E9:AA:70:63:6E:C7:9D:17:8A:CE:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/358c8f9f-4213-4a2a-85c3-b24b0d0b5107/0/030BE557286D3A4FE6E9AA70636EC79D178ACE1F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/030BE557286D3A4FE6E9AA70636EC79D178ACE1F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/358c8f9f-4213-4a2a-85c3-b24b0d0b5107/0/030BE557286D3A4FE6E9AA70636EC79D178ACE1F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:dc:53:4d:d3:26:d5:24:fd:46:1d:fb:dd:9f:d3:c3:f9:4f:
         c7:8d:97:e6:74:fc:7e:41:28:ed:59:20:fb:78:b5:7f:af:b5:
         8c:29:04:5d:3f:9e:a6:a8:60:df:69:9f:a4:f6:1c:00:6f:a1:
         51:4b:0d:cd:39:84:40:e7:af:70:41:a1:fb:3a:24:b0:97:2e:
         df:c5:30:67:7f:ad:f2:37:46:35:ec:e4:49:c9:ea:34:63:4f:
         b9:30:f1:ca:dd:43:85:b7:a1:fc:c2:c6:5e:c5:88:71:b2:61:
         80:36:bf:e4:da:a8:a0:0d:dd:69:64:e3:21:d4:c1:00:ab:38:
         6f:6d:dd:17:e7:5a:6b:38:f0:9e:c0:21:2e:27:f8:ad:0f:b5:
         22:dd:0e:2e:d3:a8:42:d2:f5:de:48:06:6d:26:4f:45:09:7c:
         be:74:60:21:74:00:63:a5:e2:71:d1:b4:11:ee:2d:20:bd:eb:
         8a:dd:c6:d8:39:b5:5a:70:25:7e:9c:b3:70:13:86:c4:29:f3:
         80:b1:35:f4:4b:c0:df:a5:3d:80:eb:13:40:76:94:60:c0:09:
         28:75:8f:af:9e:86:86:f6:89:f8:99:1e:4a:e2:e3:4d:0b:55:
         77:47:c1:e5:03:85:95:1e:eb:86:0c:82:ea:11:93:ac:83:c5:
         6a:8f:35:bf
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUMWXvKmyoa/cOZDI6sWnEASTGj4YwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDMwQkU1NTcyODZEM0E0RkU2RTlBQTcwNjM2RUM3OUQx
NzhBQ0UxRjAeFw0yNjAxMjQwMjE1NThaFw0yNjAxMjcwMjI2NThaMDMxMTAvBgNV
BAMTKDc3ODU2ODQ0QTQ4RkM1QzQ3OUY5MDBCODRCMDYxNDVCNjU5QkY5NkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD0NrYfWT8gksfiHyaq9OC2haZC
o9naatF/TzejJubyJoJPxdm+BXwnCjZ3epZuqSeYoCMjKbqUugjT/hiuZfRIBfHx
6nmB+updZK4+Je/Kpva3W7qUsyjAcGbJ4PEi2jUFI1SMCuj75BkcVwfU4xGg74ic
4PHkUe855UoR+vBr10m3vcdTg7qTIhT0VLv5ZAzkiUWz6Q7En2Wj6mbqZNiOWpge
+3qfiK5J9TbmA7MOkHM7wNG0LrdDbaB2gkAGmWz19dwEXlF+0GapAyfhqt41mp7c
5ShvGG7kvrtvMsmihrqjFDCFBF6Q3z68r079xtYxzFnHz3SEd3kIcl36psKnAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUd4VoRKSPxcR5+QC4SwYUW2Wb+WwwHwYDVR0j
BBgwFoAUAwvlVyhtOk/m6apwY27HnReKzh8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z
NThjOGY5Zi00MjEzLTRhMmEtODVjMy1iMjRiMGQwYjUxMDcvMC8wMzBCRTU1NzI4
NkQzQTRGRTZFOUFBNzA2MzZFQzc5RDE3OEFDRTFGLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMDMwQkU1NTcyODZEM0E0RkU2RTlBQTcwNjM2RUM3OUQxNzhB
Q0UxRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzU4YzhmOWYtNDIxMy00YTJhLTg1
YzMtYjI0YjBkMGI1MTA3LzAvMDMwQkU1NTcyODZEM0E0RkU2RTlBQTcwNjM2RUM3
OUQxNzhBQ0UxRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBADTcU03TJtUk/UYd+92f08P5T8eNl+Z0/H5B
KO1ZIPt4tX+vtYwpBF0/nqaoYN9pn6T2HABvoVFLDc05hEDnr3BBofs6JLCXLt/F
MGd/rfI3RjXs5EnJ6jRjT7kw8crdQ4W3ofzCxl7FiHGyYYA2v+TaqKAN3Wlk4yHU
wQCrOG9t3RfnWms48J7AIS4n+K0PtSLdDi7TqELS9d5IBm0mT0UJfL50YCF0AGOl
4nHRtBHuLSC964rdxtg5tVpwJX6cs3AThsQp84CxNfRLwN+lPYDrE0B2lGDACSh1
j6+ehob2ifiZHkri400LVXdHweUDhZUe64YMguoRk6yDxWqPNb8=
-----END CERTIFICATE-----
Generated at Mon Jan 26 01:10:23 2026 by rpki-client