This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/53b858f6-de20-4121-bcea-9076edccc097/0/90317E269FFE9F713F20CFBACE642A6F60F78FCA.mft
File:                     90317E269FFE9F713F20CFBACE642A6F60F78FCA.mft (raw, json)
Hash identifier:          qBCvyhJHoMBE+bLKY2hb2b1EFfZAx26nNf/OPd+CYfM=
Subject key identifier:   68:53:E8:47:FE:10:4B:52:86:2A:64:52:B5:24:C0:BF:39:3D:F2:42
Authority key identifier: 90:31:7E:26:9F:FE:9F:71:3F:20:CF:BA:CE:64:2A:6F:60:F7:8F:CA
Certificate issuer:       /CN=90317E269FFE9F713F20CFBACE642A6F60F78FCA
Certificate serial:       02A78D6B506908F8CFE993571B8ABCDF04EF6C1F
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/90317E269FFE9F713F20CFBACE642A6F60F78FCA.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/53b858f6-de20-4121-bcea-9076edccc097/0/90317E269FFE9F713F20CFBACE642A6F60F78FCA.mft
Manifest number:          ED
Signing time:             Sat 24 Jan 2026 03:50:05 +0000
Manifest this update:     Sat 24 Jan 2026 03:45:05 +0000
Manifest next update:     Tue 27 Jan 2026 06:16:05 +0000
Files and hashes:         1: 90317E269FFE9F713F20CFBACE642A6F60F78FCA.crl (hash: XdsEMpPD6yUEkd3NCFrV9V45nS4jaEY5m1Xxy6Cn2Yc=)
                          2: 3130332e33362e3235302e302f32342d3234203d3e20313431303538.roa (hash: 1HxtFIC2mDpdIVeFSCE5SBjVAm1XOnzukjpVGUq9Opw=)
                          3: 3130332e3135352e3131332e302f32342d3234203d3e20313431303538.roa (hash: eDVLkqfk43S08o9qz9LRiZEdW7qlzbDriZ0upji6wSE=)
                          4: 323430313a633432303a3a2f33322d3438203d3e20313431303538.roa (hash: Ys/Ac2N5+uLGmk3R0LquRKwlaYjjmhHi3Oz1JgWuapk=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/53b858f6-de20-4121-bcea-9076edccc097/0/90317E269FFE9F713F20CFBACE642A6F60F78FCA.crl
                          rsync://repo-rpki.idnic.net/repo/53b858f6-de20-4121-bcea-9076edccc097/0/90317E269FFE9F713F20CFBACE642A6F60F78FCA.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/90317E269FFE9F713F20CFBACE642A6F60F78FCA.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 27 Jan 2026 06:16:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:a7:8d:6b:50:69:08:f8:cf:e9:93:57:1b:8a:bc:df:04:ef:6c:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90317E269FFE9F713F20CFBACE642A6F60F78FCA
        Validity
            Not Before: Jan 24 03:45:05 2026 GMT
            Not After : Jan 27 06:16:05 2026 GMT
        Subject: CN=6853E847FE104B52862A6452B524C0BF393DF242
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:52:aa:4f:e5:83:71:42:66:df:70:88:62:31:
                    a1:ce:6f:50:87:88:eb:10:57:d2:b8:01:25:ca:f2:
                    dc:01:a2:c2:1c:c1:b5:7d:dd:c3:c0:cd:32:cc:b0:
                    71:bd:a0:9e:39:5f:5a:b7:00:84:ce:89:b2:ce:d9:
                    be:e1:ff:4f:10:3c:31:52:e8:7c:04:2b:b0:0a:27:
                    af:73:e9:42:4b:42:f4:1f:67:13:65:b7:49:ca:49:
                    04:53:13:c4:62:65:55:a2:ff:62:c6:51:a0:fb:0a:
                    e7:63:31:0d:20:04:1a:6f:30:53:6d:3c:c2:fe:92:
                    ad:36:ac:4a:8e:e7:95:30:f3:89:15:e0:e4:1b:6d:
                    15:9a:33:ed:33:f3:2e:e4:98:7c:4f:42:f3:3e:a9:
                    11:aa:84:62:c3:7b:04:5d:1d:3e:72:9e:94:67:3f:
                    e7:0a:f3:89:77:f5:32:99:2a:c7:96:40:5a:5e:af:
                    dd:49:71:85:8a:80:4b:be:6e:5c:31:cc:b2:13:aa:
                    68:97:0b:5f:c5:55:70:41:19:77:65:69:fc:53:96:
                    9e:4a:ac:de:10:38:a4:4d:46:5c:86:19:ec:87:a0:
                    30:ed:95:68:7b:17:34:41:f6:b2:b6:18:99:e1:97:
                    2a:8c:2d:7d:1a:99:16:db:b1:8e:33:7e:72:5c:2e:
                    6a:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:53:E8:47:FE:10:4B:52:86:2A:64:52:B5:24:C0:BF:39:3D:F2:42
            X509v3 Authority Key Identifier:
                keyid:90:31:7E:26:9F:FE:9F:71:3F:20:CF:BA:CE:64:2A:6F:60:F7:8F:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/53b858f6-de20-4121-bcea-9076edccc097/0/90317E269FFE9F713F20CFBACE642A6F60F78FCA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/90317E269FFE9F713F20CFBACE642A6F60F78FCA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/53b858f6-de20-4121-bcea-9076edccc097/0/90317E269FFE9F713F20CFBACE642A6F60F78FCA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:23:3f:46:50:72:6a:72:72:77:75:51:84:5c:e9:11:35:c0:
         54:26:ac:da:41:be:1d:36:d6:ac:57:c3:e1:5b:4c:66:02:95:
         a8:b1:bf:92:0d:d9:74:89:e3:2f:3d:64:70:67:51:e0:59:d5:
         45:a3:da:a7:4c:75:81:1e:37:6b:9c:e1:21:17:12:40:b0:f2:
         83:be:ab:37:bb:98:59:c6:22:69:da:1f:a2:bf:9d:9d:a1:dc:
         5b:ff:42:f2:2c:2e:96:bd:bc:55:e1:5b:33:d1:75:37:6b:93:
         f5:a9:fe:28:94:3d:0f:39:97:96:8a:96:b8:2e:fd:36:ea:38:
         08:88:48:f7:cb:e3:fa:be:6b:17:e3:29:76:11:d7:46:65:b5:
         75:26:a0:50:13:92:f6:f1:12:0d:b0:43:d2:e2:56:0b:e4:8e:
         4a:c4:07:64:1a:02:35:7e:7b:37:7c:4f:23:21:5a:49:12:8c:
         5f:ec:84:49:e4:d0:bc:85:25:6e:33:d7:3c:72:fe:5f:8b:1a:
         d2:17:1a:3c:3c:fb:64:07:22:b6:d2:7e:a5:6e:d1:46:44:93:
         ab:35:2e:5a:a2:1e:92:27:94:97:53:7a:79:bc:61:13:7f:2b:
         de:89:48:7b:02:8b:a7:f5:d9:e2:fe:9c:e3:d3:fe:c9:ae:34:
         44:a3:4a:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:58:34 2026 by rpki-client