This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/524a9105-8d2a-4b38-a6ae-05ead69719a3/0/28351380A86044778274FC7CEC0F116CF3B3CA39.mft
File:                     28351380A86044778274FC7CEC0F116CF3B3CA39.mft (raw, json)
Hash identifier:          K6HDXHGVW4D2Xpucc1lZRp1ZfZcrmmxrZE6UNT3FcFg=
Subject key identifier:   67:49:29:34:11:42:08:27:6E:9F:15:1D:20:82:72:3D:65:4B:43:13
Authority key identifier: 28:35:13:80:A8:60:44:77:82:74:FC:7C:EC:0F:11:6C:F3:B3:CA:39
Certificate issuer:       /CN=28351380A86044778274FC7CEC0F116CF3B3CA39
Certificate serial:       6614595972B72E59F769D9CC2858FB76C0ABAB34
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28351380A86044778274FC7CEC0F116CF3B3CA39.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/524a9105-8d2a-4b38-a6ae-05ead69719a3/0/28351380A86044778274FC7CEC0F116CF3B3CA39.mft
Manifest number:          0544
Signing time:             Sat 24 Jan 2026 03:40:49 +0000
Manifest this update:     Sat 24 Jan 2026 03:35:49 +0000
Manifest next update:     Tue 27 Jan 2026 06:58:49 +0000
Files and hashes:         1: 3230332e38302e31302e302f32342d3234203d3e203234323034.roa (hash: GDVJSN1CaQCPhQqR3FRWg5swzCjmjmNit8vMHebzfag=)
                          2: 3230332e38302e392e302f32342d3234203d3e203234323034.roa (hash: D4SmgWinw2uDnNDHY1kT9jgep4MItUVn6E6KY3uTDIU=)
                          3: 323430353a386530303a3a2f33322d3332203d3e203234323034.roa (hash: qKSq3uz3mAbrZSzfHP44tJYlF6gqnOloWG4wyUGOKH8=)
                          4: 3230332e38302e382e302f32342d3234203d3e203234323034.roa (hash: WygMqvrzr917+KMa/vGo8fQyT0ctkaWPjHAmxb/T5Js=)
                          5: 28351380A86044778274FC7CEC0F116CF3B3CA39.crl (hash: RTqHpHShxxAFGXUsPypYqg3Vah2BDZ1ClruXw8NwVMk=)
                          6: 3230332e38302e31322e302f32342d3234203d3e203234323034.roa (hash: iP5DwSyfUL5exxyNjMDQ+1fcb6ngK3/LzByJJLI9xyw=)
                          7: 3230332e38302e31352e302f32342d3234203d3e203234323034.roa (hash: +tRBG8B/+C8vTbXJTWqe0liAiPTh4alenhwEBf60dxs=)
                          8: 3230332e38302e31342e302f32342d3234203d3e203234323034.roa (hash: meqQFV3Ai00Xi6pHJ24Fpc5SOLYd2Ucdi8hBuOG/mOI=)
                          9: 3230332e38302e31312e302f32342d3234203d3e203234323034.roa (hash: wP5JcTumZVhD5RKTIHW84jMQLqPiyj2qPNYzd9k1ZOs=)
                          10: 3230332e38302e31332e302f32342d3234203d3e203234323034.roa (hash: OqfsOYg/HuhRheOY7XtpBvVh7Zqp58h+Rj/M/YaFZNI=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/524a9105-8d2a-4b38-a6ae-05ead69719a3/0/28351380A86044778274FC7CEC0F116CF3B3CA39.crl
                          rsync://repo-rpki.idnic.net/repo/524a9105-8d2a-4b38-a6ae-05ead69719a3/0/28351380A86044778274FC7CEC0F116CF3B3CA39.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28351380A86044778274FC7CEC0F116CF3B3CA39.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 27 Jan 2026 06:58:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:14:59:59:72:b7:2e:59:f7:69:d9:cc:28:58:fb:76:c0:ab:ab:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28351380A86044778274FC7CEC0F116CF3B3CA39
        Validity
            Not Before: Jan 24 03:35:49 2026 GMT
            Not After : Jan 27 06:58:49 2026 GMT
        Subject: CN=67492934114208276E9F151D2082723D654B4313
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:1d:c1:4d:e0:80:98:17:81:4f:a2:a5:d2:c9:
                    88:39:61:00:19:d8:52:ad:b0:2c:96:11:cf:8f:8f:
                    58:b5:17:9c:cd:79:f5:66:40:88:f5:93:3d:aa:97:
                    fb:10:f1:ad:7b:5f:88:78:c6:bb:1e:8f:2d:e8:a4:
                    6a:46:0b:ad:4c:98:fe:c2:d9:c6:49:7f:09:9a:64:
                    91:f6:07:88:55:d6:05:20:6b:0d:98:39:ee:aa:87:
                    7b:2d:ca:c6:71:a7:d0:44:15:9d:ac:94:1b:12:b6:
                    38:37:7a:bc:18:14:95:e5:63:fd:2d:aa:39:9e:d8:
                    2a:70:cd:e3:23:25:c4:48:47:40:a3:77:f3:7d:bd:
                    22:dc:b8:34:4f:bb:f1:75:04:5d:3b:fa:37:b2:81:
                    db:c4:36:e3:d2:8d:af:a0:74:f5:2a:ec:de:9f:6e:
                    f3:21:67:3d:d6:b9:e9:4f:f4:d7:4d:bd:b5:cf:16:
                    e2:6d:0b:77:8c:57:9f:63:61:66:e9:08:13:32:17:
                    88:72:bb:10:62:02:db:18:f5:bb:ea:da:f3:e7:de:
                    30:10:14:a0:1e:05:72:59:3b:84:3d:d0:5b:8f:05:
                    71:51:72:d3:e2:82:28:df:b8:3c:e7:ac:b7:f1:21:
                    9d:f9:cd:94:a4:fe:83:8d:6a:83:6b:cb:25:09:9c:
                    c4:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:49:29:34:11:42:08:27:6E:9F:15:1D:20:82:72:3D:65:4B:43:13
            X509v3 Authority Key Identifier:
                keyid:28:35:13:80:A8:60:44:77:82:74:FC:7C:EC:0F:11:6C:F3:B3:CA:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/524a9105-8d2a-4b38-a6ae-05ead69719a3/0/28351380A86044778274FC7CEC0F116CF3B3CA39.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28351380A86044778274FC7CEC0F116CF3B3CA39.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/524a9105-8d2a-4b38-a6ae-05ead69719a3/0/28351380A86044778274FC7CEC0F116CF3B3CA39.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:32:a3:40:26:90:de:f7:05:1a:d5:43:71:5e:4c:3a:8f:c1:
         43:5c:e0:b6:ea:48:0c:2b:99:6b:61:55:aa:cf:04:03:cc:6d:
         ce:99:13:31:b9:49:e7:77:bb:a4:2e:8f:a1:35:53:1d:cd:9d:
         2a:4a:d2:89:bb:90:a4:c4:55:0a:67:96:58:0e:37:5b:d4:e5:
         b2:bf:a2:32:c4:3e:37:ed:59:38:41:20:41:97:f9:71:49:57:
         e7:30:db:ce:46:02:7f:1b:80:61:59:7b:d9:ff:a3:75:ae:0c:
         cd:30:55:7b:a1:97:4f:fa:f1:92:70:f1:ae:37:e1:96:6d:b6:
         ca:62:49:dd:14:57:35:be:94:f6:7b:13:a5:a3:40:95:2f:10:
         d2:f2:d3:3e:4f:3e:b0:36:4e:1d:17:b2:8d:e7:7e:b8:05:cd:
         89:30:2a:f9:73:98:2d:62:3d:c9:36:eb:03:6f:b4:de:35:c9:
         e8:f8:af:1b:9b:d0:db:ce:4d:82:97:95:c5:f2:90:14:bc:51:
         db:38:cd:9a:c1:98:1f:63:a4:70:f1:0f:50:49:a0:6f:f3:f4:
         42:22:f8:12:78:3f:3d:4d:37:19:93:2a:5c:b1:67:08:38:eb:
         de:02:3a:d5:10:e7:fb:58:3e:ca:2b:19:9e:16:e1:b5:8b:77:
         5e:81:48:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:55:57 2026 by rpki-client