This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/4bc6aa03-1b4d-438e-a9f3-efeaae6b0921/0/10CA1776EFA8AF35292E76AE2B09C23427C191A6.mft
File:                     10CA1776EFA8AF35292E76AE2B09C23427C191A6.mft (raw, json)
Hash identifier:          z8wAI2IcJdT9UJSGSOMaGXZTc+jfEoYKOQSGku2CEaU=
Subject key identifier:   36:72:94:BA:A0:18:C4:7B:AD:A9:43:6E:30:C5:65:8C:93:4C:61:2A
Authority key identifier: 10:CA:17:76:EF:A8:AF:35:29:2E:76:AE:2B:09:C2:34:27:C1:91:A6
Certificate issuer:       /CN=10CA1776EFA8AF35292E76AE2B09C23427C191A6
Certificate serial:       2FAC425269F681BE057F08880EDEBCB958547596
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10CA1776EFA8AF35292E76AE2B09C23427C191A6.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/4bc6aa03-1b4d-438e-a9f3-efeaae6b0921/0/10CA1776EFA8AF35292E76AE2B09C23427C191A6.mft
Manifest number:          0540
Signing time:             Sat 24 Jan 2026 14:21:03 +0000
Manifest this update:     Sat 24 Jan 2026 14:16:03 +0000
Manifest next update:     Tue 27 Jan 2026 22:08:03 +0000
Files and hashes:         1: 34352e36342e39362e302f32342d3234203d3e203538343737.roa (hash: 0DSPPC3eIjICQ1QgbLgmjGB64GhEc/FiJxgxZMMi2rw=)
                          2: 34352e36342e39372e302f32342d3234203d3e20313335333630.roa (hash: i8E531bAACF/do6q7C690HP7ycKInzio0QMeynldjVQ=)
                          3: 3130332e32382e3134382e302f32342d3234203d3e203538343737.roa (hash: YHgchxUowX4afg18dRitbsm1i2Jr1bcDLdOROkNe9ds=)
                          4: 34352e36342e39382e302f32342d3234203d3e203538343737.roa (hash: vyo5RypkFQEnVHU24LrFw7oPwATfGzPKn/kBk5If2Fc=)
                          5: 10CA1776EFA8AF35292E76AE2B09C23427C191A6.crl (hash: 0Jr72CEVLLAPUk+HyGidiFaTT9kpl/zySTTqGi9xfDo=)
                          6: 3130332e33312e3235312e302f32342d3234203d3e203538343737.roa (hash: LSvRzZKZqA3NwdEC9iho4W4LPDyE6x1z3v9TKwhHRg0=)
                          7: 3130332e33312e3235302e302f32342d3234203d3e203538343737.roa (hash: dHAXVvHNWN3lX3SmokQ/UCj86xJ8/z2lq2nv43vYPc0=)
                          8: 3130332e32382e3134392e302f32342d3234203d3e203538343737.roa (hash: wHpTffZ2nuWlAhlZXWgWT5vAarjhnzHKQ1BNdqdBZLA=)
                          9: 34352e36342e39392e302f32342d3234203d3e203538343737.roa (hash: tAs35Xh9PvYdZJSIW4FLCQe0rvv+Ua53CMSGfgCNFT4=)
                          10: 323030313a6466303a3237333a3a2f34382d3438203d3e203538343737.roa (hash: jGoXC4NtMGtzcx+R9/Q81p54SI3SY8CoW+n8Kb2SzRU=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/4bc6aa03-1b4d-438e-a9f3-efeaae6b0921/0/10CA1776EFA8AF35292E76AE2B09C23427C191A6.crl
                          rsync://repo-rpki.idnic.net/repo/4bc6aa03-1b4d-438e-a9f3-efeaae6b0921/0/10CA1776EFA8AF35292E76AE2B09C23427C191A6.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10CA1776EFA8AF35292E76AE2B09C23427C191A6.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 27 Jan 2026 22:08:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:ac:42:52:69:f6:81:be:05:7f:08:88:0e:de:bc:b9:58:54:75:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10CA1776EFA8AF35292E76AE2B09C23427C191A6
        Validity
            Not Before: Jan 24 14:16:03 2026 GMT
            Not After : Jan 27 22:08:03 2026 GMT
        Subject: CN=367294BAA018C47BADA9436E30C5658C934C612A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:21:59:8f:be:42:ea:54:5b:66:0f:31:83:14:
                    9a:a6:f1:fa:13:e6:7f:b0:ed:dd:f2:96:fc:27:3f:
                    a2:e9:5b:62:4b:4f:52:22:a0:5f:93:89:5b:8c:c3:
                    17:14:54:d2:59:7e:eb:6d:9a:4d:42:0e:49:33:77:
                    49:ef:c9:bd:03:fe:3c:0b:b2:8b:fa:3b:b5:ef:8d:
                    69:3a:ff:d2:43:69:fb:10:04:be:70:73:59:6b:90:
                    3d:94:66:f3:03:0e:4b:ff:50:92:02:b2:20:22:00:
                    42:fd:87:67:80:e7:37:8e:a8:55:65:03:64:72:fe:
                    b5:0b:1b:7c:35:5c:1d:8a:04:72:7e:6d:1d:61:bb:
                    6f:3f:8f:8e:ee:a1:34:fe:2c:5e:9c:cb:aa:05:0b:
                    e6:a7:a2:b0:4c:08:3e:46:eb:ce:4a:cb:a4:91:e2:
                    28:0e:81:5c:b9:50:f0:25:7e:fd:cb:cb:8a:b4:70:
                    d0:33:fa:9f:3e:3d:d7:60:da:b7:ce:56:21:52:45:
                    e4:81:0c:12:1d:6e:be:27:e1:9d:06:48:45:3c:cc:
                    62:d2:88:6b:82:8c:c3:a3:c7:5d:ec:31:19:0f:93:
                    f2:82:48:22:a6:36:41:aa:45:75:49:e0:51:97:7d:
                    96:2f:b3:42:af:22:27:d0:94:69:b9:9e:0b:47:9b:
                    4b:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:72:94:BA:A0:18:C4:7B:AD:A9:43:6E:30:C5:65:8C:93:4C:61:2A
            X509v3 Authority Key Identifier:
                keyid:10:CA:17:76:EF:A8:AF:35:29:2E:76:AE:2B:09:C2:34:27:C1:91:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/4bc6aa03-1b4d-438e-a9f3-efeaae6b0921/0/10CA1776EFA8AF35292E76AE2B09C23427C191A6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10CA1776EFA8AF35292E76AE2B09C23427C191A6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4bc6aa03-1b4d-438e-a9f3-efeaae6b0921/0/10CA1776EFA8AF35292E76AE2B09C23427C191A6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:09:df:4d:73:fe:8e:dd:72:2d:a7:28:af:c4:17:f9:37:54:
         86:78:4c:11:e4:fe:f8:69:fa:39:58:e5:fd:25:7a:c2:e6:4d:
         82:59:69:b7:28:d3:0c:b4:5a:7f:13:0b:b5:c5:bc:db:be:5d:
         b9:c3:fc:5f:45:a2:e5:25:bb:3d:4d:33:db:59:7c:9d:ca:59:
         fa:68:7f:86:9f:0c:92:61:26:49:d9:a8:23:ab:b7:43:91:d4:
         cc:3d:8c:6f:ee:c4:ff:ff:40:01:5a:93:f6:1e:03:ec:6d:d2:
         13:b7:b9:d7:0b:3e:99:05:4a:ae:b1:1b:83:8f:cc:be:1a:df:
         f8:34:0d:bd:fa:96:ad:c0:62:ca:0f:c9:da:24:97:1a:cd:41:
         94:53:2b:bd:89:a7:9b:20:27:82:cc:b9:1c:4c:03:02:20:85:
         93:5c:60:e4:51:05:01:f6:dd:3c:3e:97:c1:d4:b0:32:74:f2:
         9c:cc:4a:40:4f:ec:8b:24:ae:eb:b1:15:68:0c:55:ee:a3:23:
         85:62:2e:ac:9f:cf:65:b0:f9:19:d0:87:dc:ac:e4:ee:4a:c4:
         2b:64:87:53:a2:08:c2:1d:17:0d:3a:d6:92:e5:e8:e9:d2:61:
         8e:31:f0:c5:29:7a:e3:9f:b5:6a:04:b0:bf:9b:23:07:f8:b7:
         e5:43:79:df
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUL6xCUmn2gb4FfwiIDt68uVhUdZYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTBDQTE3NzZFRkE4QUYzNTI5MkU3NkFFMkIwOUMyMzQy
N0MxOTFBNjAeFw0yNjAxMjQxNDE2MDNaFw0yNjAxMjcyMjA4MDNaMDMxMTAvBgNV
BAMTKDM2NzI5NEJBQTAxOEM0N0JBREE5NDM2RTMwQzU2NThDOTM0QzYxMkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD2IVmPvkLqVFtmDzGDFJqm8foT
5n+w7d3ylvwnP6LpW2JLT1IioF+TiVuMwxcUVNJZfuttmk1CDkkzd0nvyb0D/jwL
sov6O7XvjWk6/9JDafsQBL5wc1lrkD2UZvMDDkv/UJICsiAiAEL9h2eA5zeOqFVl
A2Ry/rULG3w1XB2KBHJ+bR1hu28/j47uoTT+LF6cy6oFC+anorBMCD5G685Ky6SR
4igOgVy5UPAlfv3Ly4q0cNAz+p8+Pddg2rfOViFSReSBDBIdbr4n4Z0GSEU8zGLS
iGuCjMOjx13sMRkPk/KCSCKmNkGqRXVJ4FGXfZYvs0KvIifQlGm5ngtHm0tFAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUNnKUuqAYxHutqUNuMMVljJNMYSowHwYDVR0j
BBgwFoAUEMoXdu+orzUpLnauKwnCNCfBkaYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80
YmM2YWEwMy0xYjRkLTQzOGUtYTlmMy1lZmVhYWU2YjA5MjEvMC8xMENBMTc3NkVG
QThBRjM1MjkyRTc2QUUyQjA5QzIzNDI3QzE5MUE2LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMTBDQTE3NzZFRkE4QUYzNTI5MkU3NkFFMkIwOUMyMzQyN0Mx
OTFBNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGJjNmFhMDMtMWI0ZC00MzhlLWE5
ZjMtZWZlYWFlNmIwOTIxLzAvMTBDQTE3NzZFRkE4QUYzNTI5MkU3NkFFMkIwOUMy
MzQyN0MxOTFBNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBALAJ301z/o7dci2nKK/EF/k3VIZ4TBHk/vhp
+jlY5f0lesLmTYJZabco0wy0Wn8TC7XFvNu+XbnD/F9FouUluz1NM9tZfJ3KWfpo
f4afDJJhJknZqCOrt0OR1Mw9jG/uxP//QAFak/YeA+xt0hO3udcLPpkFSq6xG4OP
zL4a3/g0Db36lq3AYsoPydoklxrNQZRTK72Jp5sgJ4LMuRxMAwIghZNcYORRBQH2
3Tw+l8HUsDJ08pzMSkBP7IskruuxFWgMVe6jI4ViLqyfz2Ww+RnQh9ys5O5KxCtk
h1OiCMIdFw061pLl6OnSYY4x8MUpeuOftWoEsL+bIwf4t+VDed8=
-----END CERTIFICATE-----
Generated at Sun Jan 25 23:10:58 2026 by rpki-client