This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/401c4d61-dcef-4a20-bd4c-a282a37aa69e/0/26C01247693F68CFDA1F8CB6B88F7A3700D30001.mft
File:                     26C01247693F68CFDA1F8CB6B88F7A3700D30001.mft (raw, json)
Hash identifier:          vwIOmrxQDFW//EfkYdt3c7oUDQKhvVASeERt5fVurLk=
Subject key identifier:   44:EA:3C:2A:20:1E:39:C0:3B:2A:7C:96:E8:4E:8B:E8:03:03:2A:BA
Authority key identifier: 26:C0:12:47:69:3F:68:CF:DA:1F:8C:B6:B8:8F:7A:37:00:D3:00:01
Certificate issuer:       /CN=26C01247693F68CFDA1F8CB6B88F7A3700D30001
Certificate serial:       788E64BDA01FDD4A540CFC52DBC9DA1F69635170
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/26C01247693F68CFDA1F8CB6B88F7A3700D30001.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/401c4d61-dcef-4a20-bd4c-a282a37aa69e/0/26C01247693F68CFDA1F8CB6B88F7A3700D30001.mft
Manifest number:          0290
Signing time:             Thu 04 Dec 2025 23:12:18 +0000
Manifest this update:     Thu 04 Dec 2025 23:07:18 +0000
Manifest next update:     Mon 08 Dec 2025 05:44:18 +0000
Files and hashes:         1: 3130332e3136342e3135302e302f32332d3233203d3e20313431393039.roa (hash: ooHKZSV1Ovcs3Fa7Lr6Xldk2Fnw1zgyPobWB4Cwlr44=)
                          2: 26C01247693F68CFDA1F8CB6B88F7A3700D30001.crl (hash: rjd1TfUg/blyJf9WP94E6mk1B3427RJpJB+8mPf41Qs=)
                          3: 323030313a6466373a376438303a3a2f34382d3438203d3e20313431393039.roa (hash: KA7O/abuJXSSbDP15REs5MblSDnNlUUXbTrePmAZ+kE=)
                          4: 3130332e3136342e3135312e302f32342d3234203d3e20313431393039.roa (hash: pcL7z2soi9Q0FZro9wWeWvMV7DRxoXReR3myJOf1vRA=)
                          5: 3130332e3136342e3135302e302f32342d3234203d3e20313431393039.roa (hash: pmEfBdkV2X0aiNWYmtMTZTWBxEmwxyhF/kgAB9N14Tk=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/401c4d61-dcef-4a20-bd4c-a282a37aa69e/0/26C01247693F68CFDA1F8CB6B88F7A3700D30001.crl
                          rsync://repo-rpki.idnic.net/repo/401c4d61-dcef-4a20-bd4c-a282a37aa69e/0/26C01247693F68CFDA1F8CB6B88F7A3700D30001.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/26C01247693F68CFDA1F8CB6B88F7A3700D30001.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 08 Dec 2025 05:44:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:8e:64:bd:a0:1f:dd:4a:54:0c:fc:52:db:c9:da:1f:69:63:51:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26C01247693F68CFDA1F8CB6B88F7A3700D30001
        Validity
            Not Before: Dec  4 23:07:18 2025 GMT
            Not After : Dec  8 05:44:18 2025 GMT
        Subject: CN=44EA3C2A201E39C03B2A7C96E84E8BE803032ABA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:82:b8:0f:69:8c:ce:70:12:d4:fb:cb:b0:e0:
                    a0:b4:78:78:5a:cb:21:c4:ff:44:89:6c:6c:98:d1:
                    19:ac:f4:7f:14:aa:94:88:a0:d3:16:75:93:f1:ea:
                    57:76:be:e9:a1:2a:13:1b:b1:b6:45:8e:b7:fb:87:
                    52:85:fb:fd:f7:40:14:03:b8:f2:24:c8:25:47:d3:
                    a3:d2:00:bc:e9:1d:9e:6d:d8:af:25:9c:9b:8d:59:
                    bb:39:e9:94:ed:c4:88:57:5f:7c:04:e4:0c:2e:62:
                    21:23:b2:44:dd:e8:91:32:ce:af:86:39:ce:ab:92:
                    fe:64:92:48:87:09:a5:70:37:07:24:d1:c5:6a:77:
                    b3:98:a9:ad:d9:5f:39:e1:94:36:61:a6:64:bf:af:
                    a5:c1:97:f5:90:c9:9f:97:48:27:d2:0e:6c:b4:e2:
                    d4:ea:86:6b:8e:80:0a:c4:07:7d:5d:cd:d8:b6:db:
                    b7:8d:9b:b1:9b:04:a2:fe:8c:3a:c7:c6:70:b1:d0:
                    c2:38:a7:ee:e7:15:ae:6f:78:26:b9:64:84:58:c5:
                    3a:63:7b:de:da:d2:e0:48:98:1d:ea:42:c4:0a:f6:
                    2c:e4:d2:03:1b:2a:81:a7:d7:0a:13:aa:46:79:6f:
                    19:48:8e:31:24:34:09:9e:04:4c:16:28:2d:5f:1a:
                    bc:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:EA:3C:2A:20:1E:39:C0:3B:2A:7C:96:E8:4E:8B:E8:03:03:2A:BA
            X509v3 Authority Key Identifier:
                keyid:26:C0:12:47:69:3F:68:CF:DA:1F:8C:B6:B8:8F:7A:37:00:D3:00:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/401c4d61-dcef-4a20-bd4c-a282a37aa69e/0/26C01247693F68CFDA1F8CB6B88F7A3700D30001.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/26C01247693F68CFDA1F8CB6B88F7A3700D30001.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/401c4d61-dcef-4a20-bd4c-a282a37aa69e/0/26C01247693F68CFDA1F8CB6B88F7A3700D30001.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:ec:8d:2e:58:da:a3:01:49:e9:4f:ae:dc:be:70:18:67:c2:
         66:0f:cc:af:a6:db:6f:c1:b0:44:77:b5:f6:03:b5:72:cf:8d:
         1a:26:fd:db:42:15:61:71:4e:08:2d:b8:e6:ef:9e:cf:61:a4:
         09:ed:59:bc:23:40:f5:e8:66:8b:c5:1a:1a:61:a1:c1:94:7d:
         1d:2d:34:6d:86:fc:5f:12:53:14:80:91:2b:1b:78:d9:cc:77:
         96:ec:a9:1f:4f:50:8f:db:39:43:ab:f9:2a:00:b7:37:7f:a7:
         f4:b4:40:c4:f5:0f:62:ea:5d:71:63:5f:15:14:29:b4:29:fd:
         51:9d:ae:f5:9f:fa:3c:3a:b6:c7:74:a2:cf:7c:6d:a3:04:f7:
         39:4a:d7:69:ad:74:a9:dd:05:87:35:b4:b2:87:29:69:d9:14:
         da:90:85:40:69:6c:07:25:67:52:fa:f1:ea:48:fc:f9:6c:65:
         c3:63:0f:26:15:1b:bf:33:b6:36:a3:6c:fd:d8:9c:55:99:07:
         56:8d:2e:43:06:4f:15:94:3a:7f:5f:fb:1f:c0:d3:7c:0a:79:
         e1:75:85:e0:77:c9:97:b8:0f:55:b3:64:7e:77:a0:e0:26:e0:
         1b:40:c8:4b:17:d5:8f:8e:2e:8e:e2:57:fc:c4:f3:86:2f:3e:
         f5:1a:3b:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 02:07:01 2025 by rpki-client