This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/5591b59b-1ca5-4464-9982-bf6f6d8a1c94/0/715DC6DEA80FE5D89FDC682C19C7B30F5C77E2C1.mft
File:                     715DC6DEA80FE5D89FDC682C19C7B30F5C77E2C1.mft (raw, json)
Hash identifier:          dEgy/YcqCcS7wsawE1tTIE4QGbKj1hEfi0vajULovrA=
Subject key identifier:   94:EA:CB:BD:87:4C:26:D5:0D:10:45:31:3D:3F:85:CA:06:17:85:D5
Authority key identifier: 71:5D:C6:DE:A8:0F:E5:D8:9F:DC:68:2C:19:C7:B3:0F:5C:77:E2:C1
Certificate issuer:       /CN=715DC6DEA80FE5D89FDC682C19C7B30F5C77E2C1
Certificate serial:       41AFC9A103F27D90C2866C01ABBFCD53F20DCAD1
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/715DC6DEA80FE5D89FDC682C19C7B30F5C77E2C1.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/5591b59b-1ca5-4464-9982-bf6f6d8a1c94/0/715DC6DEA80FE5D89FDC682C19C7B30F5C77E2C1.mft
Manifest number:          0486
Signing time:             Sun 25 Jan 2026 00:20:41 +0000
Manifest this update:     Sun 25 Jan 2026 00:15:41 +0000
Manifest next update:     Wed 28 Jan 2026 01:21:41 +0000
Files and hashes:         1: 3130332e3136312e3139302e302f32332d3233203d3e20313333383233.roa (hash: ghtilaMZ6RJAQvHOL9rJ7eLcuLTYk5ZeH+7mykIlzjM=)
                          2: 3130332e3136312e3139312e302f32342d3234203d3e20313333383233.roa (hash: KGskRiaq/+lRAEP6f41FobsVw96uMstK/fLzsAVB4eg=)
                          3: 3130332e3136312e3139302e302f32342d3234203d3e20313333383233.roa (hash: inNvDvxX4hbCC8+Dho69jFxrO3UdsZFxdsWq+NYPKcc=)
                          4: 715DC6DEA80FE5D89FDC682C19C7B30F5C77E2C1.crl (hash: Yui/c3dK5G3X4NLFMO68JcBX1CKiRuH9WKBSIOXEZ4I=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/5591b59b-1ca5-4464-9982-bf6f6d8a1c94/0/715DC6DEA80FE5D89FDC682C19C7B30F5C77E2C1.crl
                          rsync://repo-rpki.idnic.net/repo/5591b59b-1ca5-4464-9982-bf6f6d8a1c94/0/715DC6DEA80FE5D89FDC682C19C7B30F5C77E2C1.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/715DC6DEA80FE5D89FDC682C19C7B30F5C77E2C1.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 27 Jan 2026 15:32:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:af:c9:a1:03:f2:7d:90:c2:86:6c:01:ab:bf:cd:53:f2:0d:ca:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=715DC6DEA80FE5D89FDC682C19C7B30F5C77E2C1
        Validity
            Not Before: Jan 25 00:15:41 2026 GMT
            Not After : Jan 28 01:21:41 2026 GMT
        Subject: CN=94EACBBD874C26D50D1045313D3F85CA061785D5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:a3:0c:c1:c6:0a:2a:f8:00:1e:2e:db:89:db:
                    65:bd:51:83:b1:b3:c1:ef:b5:46:8c:13:3d:b2:fd:
                    4e:64:34:c9:b3:ed:82:f0:95:ac:25:eb:b4:f1:fa:
                    12:0d:87:15:3f:98:d5:8f:dd:a7:da:06:7b:0a:2d:
                    0e:59:94:0d:ff:8b:e8:e3:1c:15:52:f4:d8:2b:0d:
                    a7:52:96:24:be:86:23:42:d8:2e:b1:fb:b9:d2:46:
                    d8:6e:ad:85:86:00:aa:4b:ea:37:79:2f:5d:74:a3:
                    0b:e3:72:3c:b0:cb:18:00:e4:9a:0c:4e:40:28:b3:
                    34:65:da:be:9d:95:b8:52:92:78:0d:d1:87:57:8e:
                    8e:40:e2:f8:82:c0:f3:e0:80:5d:bd:a0:fd:bd:f3:
                    6f:2a:2b:46:59:dd:5b:e6:62:09:4d:78:b0:76:0b:
                    64:ab:14:d4:3b:cc:34:57:2a:b5:60:cc:a5:0b:19:
                    fe:69:84:61:1c:a7:59:62:dc:63:36:a8:46:ee:5a:
                    06:f3:58:10:f4:17:0b:ec:c0:ef:2d:31:3a:f4:a5:
                    32:a4:31:17:3d:65:24:b1:2d:8e:12:7e:9d:b2:0f:
                    2b:7b:db:dd:6d:54:e0:02:68:79:2b:0d:8d:ac:be:
                    f6:a1:20:e7:13:1b:ee:15:d7:0c:13:d1:fb:54:f5:
                    af:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:EA:CB:BD:87:4C:26:D5:0D:10:45:31:3D:3F:85:CA:06:17:85:D5
            X509v3 Authority Key Identifier:
                keyid:71:5D:C6:DE:A8:0F:E5:D8:9F:DC:68:2C:19:C7:B3:0F:5C:77:E2:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/5591b59b-1ca5-4464-9982-bf6f6d8a1c94/0/715DC6DEA80FE5D89FDC682C19C7B30F5C77E2C1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/715DC6DEA80FE5D89FDC682C19C7B30F5C77E2C1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5591b59b-1ca5-4464-9982-bf6f6d8a1c94/0/715DC6DEA80FE5D89FDC682C19C7B30F5C77E2C1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:df:c8:35:e8:ed:c3:2e:b1:e4:19:6e:e0:e1:49:57:d0:9a:
         aa:ac:02:45:ca:b6:77:98:81:bb:32:8d:e8:83:59:cc:e7:d7:
         08:b2:88:a2:8d:be:81:be:41:7d:e5:fe:57:8a:7e:dd:58:90:
         34:3c:c1:67:ad:12:2d:96:08:35:05:ba:6c:cd:d5:89:d2:32:
         15:1a:12:b7:2a:87:3d:0c:b1:c6:10:66:ad:39:47:55:7f:f0:
         6c:bd:53:1f:11:d4:23:b3:e9:2f:d8:25:a8:1d:b8:09:90:55:
         4b:94:96:aa:c4:b8:b1:f4:2c:28:51:cc:ea:2b:42:ae:3c:ab:
         a8:65:1a:a6:f0:65:9c:e7:a7:e5:57:96:4e:6c:57:f0:b7:59:
         e1:0f:cd:61:74:39:ea:b0:3d:6f:f4:72:50:db:d3:8b:47:56:
         da:5a:87:50:2b:b5:73:65:00:05:71:4c:c9:db:53:0b:79:b5:
         95:b8:7d:33:95:2a:ee:54:a0:9d:88:51:fe:34:a6:4f:0e:5b:
         f0:3c:01:a3:be:1f:9e:2a:6d:19:62:26:be:f4:b6:94:70:fc:
         38:3b:6b:eb:cf:2f:97:8a:80:97:eb:76:87:e7:2e:d1:93:10:
         30:f5:5e:56:dc:bc:b0:e9:c2:d0:1d:dd:c2:9e:fc:55:5b:e2:
         de:49:33:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 14:22:24 2026 by rpki-client