This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/42713a32-fada-484e-a68d-0cac0fffa33c/0/B0FA6C3ED4780E032B0A3F161E018A7C8FA82B45.mft
File:                     B0FA6C3ED4780E032B0A3F161E018A7C8FA82B45.mft (raw, json)
Hash identifier:          9zOShUCFOKlxBsabrUuin4e65GhmXwWPFEgkTfsnlRE=
Subject key identifier:   DD:56:4D:56:52:C7:B7:23:2D:68:08:7F:29:94:08:B2:19:41:A1:74
Authority key identifier: B0:FA:6C:3E:D4:78:0E:03:2B:0A:3F:16:1E:01:8A:7C:8F:A8:2B:45
Certificate issuer:       /CN=B0FA6C3ED4780E032B0A3F161E018A7C8FA82B45
Certificate serial:       02BAB6F8563FD9C721119651AF4D5A86CF177854
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B0FA6C3ED4780E032B0A3F161E018A7C8FA82B45.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/42713a32-fada-484e-a68d-0cac0fffa33c/0/B0FA6C3ED4780E032B0A3F161E018A7C8FA82B45.mft
Manifest number:          0260
Signing time:             Sun 25 Jan 2026 10:52:20 +0000
Manifest this update:     Sun 25 Jan 2026 10:47:20 +0000
Manifest next update:     Wed 28 Jan 2026 12:24:20 +0000
Files and hashes:         1: B0FA6C3ED4780E032B0A3F161E018A7C8FA82B45.crl (hash: /ZQXGt+SAfCWCTOOrRX1QruXYhhmpZpJ44sfC4Rvcb8=)
                          2: 3130332e3138362e3136382e302f32332d3233203d3e20313439333135.roa (hash: LDlceKPYxiyplmRd0QE331p3kgAPFSC+KzNWGTmFZx4=)
                          3: 3130332e3138362e3136392e302f32342d3234203d3e20313439333135.roa (hash: VuqhCvHg0aRp2P2az+FjtyS65zQrJLw9rZ63VjIOBJg=)
                          4: 3130332e3138362e3136382e302f32342d3234203d3e20313439333135.roa (hash: JX/WTanaPPANV2NOnS6PsBG+3UNzOLY9wluWvGLMzvc=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/42713a32-fada-484e-a68d-0cac0fffa33c/0/B0FA6C3ED4780E032B0A3F161E018A7C8FA82B45.crl
                          rsync://repo-rpki.idnic.net/repo/42713a32-fada-484e-a68d-0cac0fffa33c/0/B0FA6C3ED4780E032B0A3F161E018A7C8FA82B45.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B0FA6C3ED4780E032B0A3F161E018A7C8FA82B45.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 28 Jan 2026 12:24:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:ba:b6:f8:56:3f:d9:c7:21:11:96:51:af:4d:5a:86:cf:17:78:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B0FA6C3ED4780E032B0A3F161E018A7C8FA82B45
        Validity
            Not Before: Jan 25 10:47:20 2026 GMT
            Not After : Jan 28 12:24:20 2026 GMT
        Subject: CN=DD564D5652C7B7232D68087F299408B21941A174
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:02:cb:b8:72:41:e4:52:5d:bd:8c:de:30:cd:
                    46:90:ec:df:1b:d5:8b:3e:18:e7:af:4b:dd:ab:97:
                    e6:7d:d2:6e:ba:27:47:33:f2:79:4c:ca:62:50:ce:
                    94:b5:fa:5b:20:0d:7d:1c:b4:4c:4c:54:a3:79:f1:
                    a1:73:29:66:6c:2d:87:d4:92:17:5a:bb:ee:0d:7a:
                    0c:54:3d:61:78:9c:89:0d:21:e3:a2:32:e9:af:07:
                    33:e1:e5:00:ff:96:5c:6e:b8:4b:06:e8:ea:16:42:
                    fb:55:e8:75:41:cd:c8:d8:cb:08:11:3b:6e:95:67:
                    39:d8:d8:3e:65:0a:02:d1:46:66:98:b9:77:e0:3a:
                    ba:99:12:c7:a0:c4:cc:72:ca:0f:33:29:2d:de:4c:
                    3c:09:be:1e:85:fd:b8:d8:11:69:f1:cf:94:23:02:
                    6d:20:c4:a7:b9:58:0a:83:77:64:ec:d7:5a:4d:d8:
                    ad:0b:56:78:01:02:78:bd:45:86:ed:19:97:e1:f3:
                    96:11:96:9c:6e:83:74:33:c7:9d:bb:4b:91:55:5e:
                    17:ed:38:ec:5b:92:a9:c4:15:fd:6f:59:93:c0:3a:
                    f2:87:56:3e:21:ed:81:e0:a5:b5:b5:5f:05:12:1a:
                    13:8b:49:68:d0:e6:0f:be:47:75:53:f9:93:14:19:
                    7f:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:56:4D:56:52:C7:B7:23:2D:68:08:7F:29:94:08:B2:19:41:A1:74
            X509v3 Authority Key Identifier:
                keyid:B0:FA:6C:3E:D4:78:0E:03:2B:0A:3F:16:1E:01:8A:7C:8F:A8:2B:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/42713a32-fada-484e-a68d-0cac0fffa33c/0/B0FA6C3ED4780E032B0A3F161E018A7C8FA82B45.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B0FA6C3ED4780E032B0A3F161E018A7C8FA82B45.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/42713a32-fada-484e-a68d-0cac0fffa33c/0/B0FA6C3ED4780E032B0A3F161E018A7C8FA82B45.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:7d:6b:3f:70:c0:bf:81:ef:49:d6:a8:2c:12:00:b4:a6:28:
         3a:89:50:1f:b5:c8:d7:83:d5:f2:4d:59:65:18:bd:d6:64:0c:
         92:6e:a8:a2:9f:7e:ed:b0:6b:7d:b7:ce:03:64:df:07:a6:66:
         f0:d5:41:ff:cc:c6:2d:98:4c:a6:15:3b:3b:ce:ad:b2:d5:86:
         98:f3:49:9f:3b:e2:36:7f:65:9d:9b:55:f2:9e:1b:b4:4e:d3:
         20:cd:91:6c:bb:a0:2d:ec:2e:67:a3:a3:e4:e8:c7:eb:a2:75:
         a2:30:6e:27:c4:03:30:65:9f:51:9c:19:86:4d:43:58:e0:25:
         a2:ad:e8:7b:d0:2c:08:46:09:18:d1:c1:5f:53:1e:98:53:38:
         23:e8:91:d5:96:91:05:41:5f:8d:44:6e:a3:44:b8:45:c8:e3:
         be:c0:0b:91:ea:4a:11:a2:fd:c1:93:d8:2a:d4:b4:17:5d:72:
         9b:1c:40:c5:9e:ef:4d:b1:02:ec:e4:80:f0:f3:69:dd:a1:27:
         50:2a:fb:c2:aa:24:e9:c1:c1:c2:36:57:d9:59:5e:94:09:57:
         2a:2f:15:72:08:36:65:b9:73:b9:72:80:68:13:95:5f:74:f5:
         89:86:6b:5d:eb:15:be:7f:69:9f:d8:c0:5d:57:5e:7c:91:67:
         a4:2f:91:00
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUArq2+FY/2cchEZZRr01ahs8XeFQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjBGQTZDM0VENDc4MEUwMzJCMEEzRjE2MUUwMThBN0M4
RkE4MkI0NTAeFw0yNjAxMjUxMDQ3MjBaFw0yNjAxMjgxMjI0MjBaMDMxMTAvBgNV
BAMTKERENTY0RDU2NTJDN0I3MjMyRDY4MDg3RjI5OTQwOEIyMTk0MUExNzQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzAsu4ckHkUl29jN4wzUaQ7N8b
1Ys+GOevS92rl+Z90m66J0cz8nlMymJQzpS1+lsgDX0ctExMVKN58aFzKWZsLYfU
khdau+4NegxUPWF4nIkNIeOiMumvBzPh5QD/llxuuEsG6OoWQvtV6HVBzcjYywgR
O26VZznY2D5lCgLRRmaYuXfgOrqZEsegxMxyyg8zKS3eTDwJvh6F/bjYEWnxz5Qj
Am0gxKe5WAqDd2Ts11pN2K0LVngBAni9RYbtGZfh85YRlpxug3Qzx527S5FVXhft
OOxbkqnEFf1vWZPAOvKHVj4h7YHgpbW1XwUSGhOLSWjQ5g++R3VT+ZMUGX+JAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQU3VZNVlLHtyMtaAh/KZQIshlBoXQwHwYDVR0j
BBgwFoAUsPpsPtR4DgMrCj8WHgGKfI+oK0UwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80
MjcxM2EzMi1mYWRhLTQ4NGUtYTY4ZC0wY2FjMGZmZmEzM2MvMC9CMEZBNkMzRUQ0
NzgwRTAzMkIwQTNGMTYxRTAxOEE3QzhGQTgyQjQ1LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQjBGQTZDM0VENDc4MEUwMzJCMEEzRjE2MUUwMThBN0M4RkE4
MkI0NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDI3MTNhMzItZmFkYS00ODRlLWE2
OGQtMGNhYzBmZmZhMzNjLzAvQjBGQTZDM0VENDc4MEUwMzJCMEEzRjE2MUUwMThB
N0M4RkE4MkI0NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBADp9az9wwL+B70nWqCwSALSmKDqJUB+1yNeD
1fJNWWUYvdZkDJJuqKKffu2wa323zgNk3wemZvDVQf/Mxi2YTKYVOzvOrbLVhpjz
SZ874jZ/ZZ2bVfKeG7RO0yDNkWy7oC3sLmejo+Tox+uidaIwbifEAzBln1GcGYZN
Q1jgJaKt6HvQLAhGCRjRwV9THphTOCPokdWWkQVBX41EbqNEuEXI477AC5HqShGi
/cGT2CrUtBddcpscQMWe702xAuzkgPDzad2hJ1Aq+8KqJOnBwcI2V9lZXpQJVyov
FXIINmW5c7lygGgTlV909YmGa13rFb5/aZ/YwF1XXnyRZ6QvkQA=
-----END CERTIFICATE-----
Generated at Sun Jan 25 18:58:44 2026 by rpki-client