This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/4f5d364a-da0b-4540-9349-5930bd725ce3/0/735D87BA86773AC70137CF53116358A1F3B19766.mft
File:                     735D87BA86773AC70137CF53116358A1F3B19766.mft (raw, json)
Hash identifier:          b3S6+QvDMqTXOQFN6FDu012LQzwfLhEUDa7xim0xYOg=
Subject key identifier:   2D:3D:64:04:CF:88:7A:A4:27:63:75:73:05:A9:17:FC:59:CF:21:F4
Authority key identifier: 73:5D:87:BA:86:77:3A:C7:01:37:CF:53:11:63:58:A1:F3:B1:97:66
Certificate issuer:       /CN=735D87BA86773AC70137CF53116358A1F3B19766
Certificate serial:       7CC357B9AC6956D30E6BC95085F6B6F931DEEBC9
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/735D87BA86773AC70137CF53116358A1F3B19766.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/4f5d364a-da0b-4540-9349-5930bd725ce3/0/735D87BA86773AC70137CF53116358A1F3B19766.mft
Manifest number:          0275
Signing time:             Sat 24 Jan 2026 11:21:09 +0000
Manifest this update:     Sat 24 Jan 2026 11:16:09 +0000
Manifest next update:     Tue 27 Jan 2026 11:44:09 +0000
Files and hashes:         1: 3131342e37392e302e302f31382d3234203d3e203138303034.roa (hash: hML4QQ0UsZ/MNuzlhXm7ZxAfBsEoo8p/TG6zTdeHPYA=)
                          2: 3130332e332e3230382e302f32322d3234203d3e203138303034.roa (hash: ixUeVPdiiujjqdz2cxBs4b9W1yytwj3hYRmTEjubFdc=)
                          3: 3131352e3137382e3136302e302f31392d3234203d3e203138303034.roa (hash: cA/F4dRQqVseyocCpcE2agAw/XVimr3HwwnooMdskYo=)
                          4: 3131352e3137382e3232342e302f31392d3234203d3e203138303034.roa (hash: cuW15q9SnbE27U2Jg8nnNYvxOwHbFyEv1g42R3Sx4E0=)
                          5: 735D87BA86773AC70137CF53116358A1F3B19766.crl (hash: n/jnfwXIBqJJLnLwW7Wzh7U4NPLaaDOp2kPzahWJJKc=)
                          6: 3131352e3137382e3139322e302f31392d3234203d3e203138303034.roa (hash: bNf7w52cmLw3GYp+mMaw3papmg1ZcgmFTgd1v4VSUIU=)
                          7: 3230322e37332e3232342e302f32312d3234203d3e203138303034.roa (hash: MYkgPF54ZFrZUvgyAUVZduFZA6VqGujX+c3smzb0mEg=)
                          8: 3130332e3233342e3132302e302f32322d3234203d3e203138303034.roa (hash: MNca57frzbraXQ+A5sffHCuXC7kbkp16cgNgxDCrZrE=)
                          9: 323430373a613630303a3a2f33322d3338203d3e203138303034.roa (hash: SoFui+6+9U4okutKDEEDEO8cNoDM72pJozwIgVHrak0=)
                          10: 3230322e37302e34382e302f32302d3234203d3e203138303034.roa (hash: Vj9b7eOBgij03V9LOKkEMCElDrFIB3RU0Drnp1lzskU=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/4f5d364a-da0b-4540-9349-5930bd725ce3/0/735D87BA86773AC70137CF53116358A1F3B19766.crl
                          rsync://repo-rpki.idnic.net/repo/4f5d364a-da0b-4540-9349-5930bd725ce3/0/735D87BA86773AC70137CF53116358A1F3B19766.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/735D87BA86773AC70137CF53116358A1F3B19766.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 27 Jan 2026 11:44:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:c3:57:b9:ac:69:56:d3:0e:6b:c9:50:85:f6:b6:f9:31:de:eb:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=735D87BA86773AC70137CF53116358A1F3B19766
        Validity
            Not Before: Jan 24 11:16:09 2026 GMT
            Not After : Jan 27 11:44:09 2026 GMT
        Subject: CN=2D3D6404CF887AA42763757305A917FC59CF21F4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:33:d4:ef:11:57:dc:5c:26:a9:d8:77:4e:73:
                    e9:2c:36:0c:7d:fd:27:ee:5c:cd:35:9a:90:f1:69:
                    19:a3:57:af:e3:05:9e:f2:65:ce:4e:60:18:c1:71:
                    d9:bb:23:cd:d5:23:12:cb:d0:b8:46:7c:67:3d:cd:
                    2d:3a:4d:b5:3f:e6:6c:73:5c:64:e1:2c:a3:fe:5a:
                    59:2e:78:ff:b2:15:5f:6f:97:b7:35:ce:8f:70:9e:
                    c3:47:0c:e8:8b:86:b1:05:17:c9:b8:3a:88:f2:a1:
                    d0:67:69:f2:92:63:58:44:c7:46:83:a7:52:77:79:
                    4f:16:53:05:bc:3d:b1:8f:31:18:f4:d5:c5:a1:18:
                    c3:e7:69:d2:47:44:59:13:c7:ff:fc:53:10:b9:85:
                    e7:9d:cd:0b:e2:9e:3f:c4:67:8f:8d:07:2e:23:23:
                    7b:e7:08:55:58:64:13:b4:d9:c2:98:84:57:f4:fc:
                    67:fb:ec:45:61:d8:4a:c7:63:73:dc:97:e2:d4:e9:
                    d3:c2:bc:07:6f:82:3d:8b:a3:3a:2b:9f:a4:8a:4e:
                    a8:a2:ef:f2:52:85:d6:36:1e:78:96:8d:ad:33:88:
                    dc:e9:ea:29:5d:eb:f8:04:e8:09:ea:21:d7:6a:7b:
                    d5:e9:5a:1d:33:10:bc:ed:b3:0f:45:72:6e:93:95:
                    6d:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:3D:64:04:CF:88:7A:A4:27:63:75:73:05:A9:17:FC:59:CF:21:F4
            X509v3 Authority Key Identifier:
                keyid:73:5D:87:BA:86:77:3A:C7:01:37:CF:53:11:63:58:A1:F3:B1:97:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/4f5d364a-da0b-4540-9349-5930bd725ce3/0/735D87BA86773AC70137CF53116358A1F3B19766.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/735D87BA86773AC70137CF53116358A1F3B19766.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4f5d364a-da0b-4540-9349-5930bd725ce3/0/735D87BA86773AC70137CF53116358A1F3B19766.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:91:1f:40:f4:5c:e1:ae:57:ed:63:c6:12:77:b7:c9:6c:f6:
         d9:de:8c:89:4e:f7:d8:e2:10:d6:18:bb:8d:88:b5:b4:9a:3e:
         84:20:bb:4e:1f:06:c8:4d:9d:9b:70:dc:f9:7c:27:b5:03:c4:
         6b:24:a8:85:60:ea:01:4f:6c:dc:e9:f1:bc:2c:95:70:e7:d9:
         9f:cd:73:b2:e8:e8:73:44:0d:d5:52:93:a6:e2:ea:98:54:ff:
         c1:f7:21:fb:f2:78:1e:2b:5f:ff:b0:dc:60:80:af:9e:c3:8e:
         ff:00:34:fb:6a:7b:8b:9a:0f:c8:c9:59:28:52:ed:28:7f:41:
         f5:0f:a4:63:ff:00:11:24:a4:63:b7:af:29:d3:ae:88:42:05:
         24:79:4a:da:e1:15:dd:28:31:1f:fd:71:8e:42:83:82:fb:cf:
         a9:32:14:72:9f:9f:84:40:55:a5:09:7b:65:88:7f:de:24:22:
         2c:89:96:70:35:7b:84:8e:24:41:77:d8:58:af:bc:cc:42:25:
         38:99:9b:bd:ad:a2:ed:fa:e9:76:08:f6:fb:f5:b7:4f:b3:e4:
         1a:7a:34:52:24:35:39:76:01:77:fc:85:21:8d:44:67:86:db:
         ac:1d:bf:86:d3:b5:79:d8:51:14:8a:f8:b5:11:04:df:b8:7a:
         86:0c:31:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 21:52:31 2026 by rpki-client