This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/3e516e6e-c679-4e50-b7ab-1e40679125cd/0/C85C49978E8023F2D58521524D4EC616244CDC14.mft
File:                     C85C49978E8023F2D58521524D4EC616244CDC14.mft (raw, json)
Hash identifier:          /cdvx2Bx9bfIzuXvrzEky9Z041hajMRykF4GPPxtNR4=
Subject key identifier:   73:69:EB:63:AE:62:CD:6D:93:16:4A:0E:02:E7:79:DB:11:BC:9D:74
Authority key identifier: C8:5C:49:97:8E:80:23:F2:D5:85:21:52:4D:4E:C6:16:24:4C:DC:14
Certificate issuer:       /CN=C85C49978E8023F2D58521524D4EC616244CDC14
Certificate serial:       7DA82B44FD2E96BFF046213264E14DCA7F7A24D0
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C85C49978E8023F2D58521524D4EC616244CDC14.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3e516e6e-c679-4e50-b7ab-1e40679125cd/0/C85C49978E8023F2D58521524D4EC616244CDC14.mft
Manifest number:          0222
Signing time:             Sun 25 Jan 2026 12:02:21 +0000
Manifest this update:     Sun 25 Jan 2026 11:57:21 +0000
Manifest next update:     Wed 28 Jan 2026 16:43:21 +0000
Files and hashes:         1: 3130332e3233392e3231342e302f32332d3234203d3e2034383030.roa (hash: X2QeWvWwuvgIs5+TAK0HDLr7Wz+zJj0bCxQNhzyEI7g=)
                          2: C85C49978E8023F2D58521524D4EC616244CDC14.crl (hash: en446dAw8oehSyq34O4qiGAFCFpKfrpBZm6XjaJO0BA=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/3e516e6e-c679-4e50-b7ab-1e40679125cd/0/C85C49978E8023F2D58521524D4EC616244CDC14.crl
                          rsync://repo-rpki.idnic.net/repo/3e516e6e-c679-4e50-b7ab-1e40679125cd/0/C85C49978E8023F2D58521524D4EC616244CDC14.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C85C49978E8023F2D58521524D4EC616244CDC14.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 28 Jan 2026 14:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:a8:2b:44:fd:2e:96:bf:f0:46:21:32:64:e1:4d:ca:7f:7a:24:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C85C49978E8023F2D58521524D4EC616244CDC14
        Validity
            Not Before: Jan 25 11:57:21 2026 GMT
            Not After : Jan 28 16:43:21 2026 GMT
        Subject: CN=7369EB63AE62CD6D93164A0E02E779DB11BC9D74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:94:51:0d:76:24:32:6c:31:5b:6d:65:b7:05:
                    e4:6e:41:52:ef:c0:df:aa:f0:32:fa:9f:2b:5b:ad:
                    39:c4:07:4e:ff:80:97:28:c3:be:24:6c:86:f7:94:
                    e3:7a:72:b7:56:78:ef:f2:1e:24:c5:9e:35:1a:e0:
                    c5:c0:e7:02:8d:3d:3b:7d:7f:4f:dc:bb:c5:30:b0:
                    be:a5:8c:92:48:db:99:1f:ea:7e:76:6a:06:ff:bf:
                    e3:38:b2:51:4b:f5:6a:d4:df:36:e6:4d:91:75:4d:
                    73:9b:a3:e4:a7:44:6e:84:fd:55:b0:50:82:a2:26:
                    cc:f8:6e:84:62:da:81:8f:71:e6:9d:d1:36:8b:63:
                    87:4c:08:66:11:2a:0a:f7:2f:85:22:31:14:df:53:
                    3e:d2:7d:1a:40:b8:35:6d:98:98:92:68:cf:e8:af:
                    e3:13:b7:80:8a:d2:49:bf:23:e2:c8:12:79:91:41:
                    4d:67:7c:9f:24:bf:34:35:a1:43:50:a4:ae:a7:a4:
                    9b:62:ea:e0:b5:0d:dd:7c:73:ac:c9:62:43:0f:f8:
                    09:0b:2a:64:07:09:8d:1c:72:43:d6:dd:46:1e:e6:
                    2b:a1:d6:51:95:37:56:9c:ee:c4:5a:39:1c:c1:48:
                    ea:99:4d:3f:8f:25:4d:58:4c:b8:fd:cd:6b:1f:2c:
                    c3:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:69:EB:63:AE:62:CD:6D:93:16:4A:0E:02:E7:79:DB:11:BC:9D:74
            X509v3 Authority Key Identifier:
                keyid:C8:5C:49:97:8E:80:23:F2:D5:85:21:52:4D:4E:C6:16:24:4C:DC:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3e516e6e-c679-4e50-b7ab-1e40679125cd/0/C85C49978E8023F2D58521524D4EC616244CDC14.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C85C49978E8023F2D58521524D4EC616244CDC14.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3e516e6e-c679-4e50-b7ab-1e40679125cd/0/C85C49978E8023F2D58521524D4EC616244CDC14.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:69:43:e8:5f:c5:ad:cb:97:1a:ae:64:79:3a:c1:8c:7d:7a:
         75:ed:76:b0:7b:3d:46:ca:8f:20:7d:ed:97:99:be:6d:bc:1d:
         e8:ad:5b:12:d9:da:62:50:cd:4b:d2:95:88:31:63:1a:c0:73:
         94:65:79:46:b3:4d:1d:68:50:c4:de:9e:91:1a:f0:f2:55:d8:
         37:fd:1b:e7:c2:c9:ef:9e:1c:8b:b3:ae:46:a1:97:ac:26:69:
         31:ba:f7:d8:ea:b1:39:d4:6e:ab:03:93:12:5a:ca:78:dd:a4:
         31:6c:d8:d8:ca:6e:68:ea:46:c0:46:ba:83:7e:74:86:d9:88:
         5d:07:78:f4:a5:bb:f4:d5:67:78:23:b2:8c:30:9c:64:50:06:
         30:99:ac:92:27:e2:81:f7:fe:7d:5c:64:cb:4f:cf:f3:da:12:
         47:8f:79:06:72:a1:aa:58:1a:7b:40:a0:4b:78:5b:72:e8:1c:
         fd:dc:21:63:b2:ab:50:31:f6:76:71:45:e9:7e:e4:64:87:76:
         58:87:8f:61:cf:4f:27:49:b0:4c:9b:48:8e:04:2b:91:c1:f8:
         a4:64:75:32:8f:80:56:d9:ab:be:89:97:52:87:16:6f:e3:38:
         80:72:99:92:c8:a6:ee:36:b8:85:ca:0e:4f:12:81:b9:27:d5:
         c7:f6:8d:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:44:41 2026 by rpki-client