This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/55ba47ce-3992-431c-abf1-681a4cc8ec48/0/07D6388316655597AEA703AEBFDD2869F80A8984.mft
File:                     07D6388316655597AEA703AEBFDD2869F80A8984.mft (raw, json)
Hash identifier:          ji3tRhrEvE1ikZl30GDts7RDhu68mP1LTZHDejbPbuo=
Subject key identifier:   12:83:A9:7D:2C:72:4B:6A:B4:36:0C:4E:1E:B7:45:B2:BB:A6:32:33
Authority key identifier: 07:D6:38:83:16:65:55:97:AE:A7:03:AE:BF:DD:28:69:F8:0A:89:84
Certificate issuer:       /CN=07D6388316655597AEA703AEBFDD2869F80A8984
Certificate serial:       68F19ACC9D3C4EACD79C50A0AC320886D64F1CA9
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/07D6388316655597AEA703AEBFDD2869F80A8984.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/55ba47ce-3992-431c-abf1-681a4cc8ec48/0/07D6388316655597AEA703AEBFDD2869F80A8984.mft
Manifest number:          032C
Signing time:             Sat 24 Jan 2026 03:42:00 +0000
Manifest this update:     Sat 24 Jan 2026 03:37:00 +0000
Manifest next update:     Tue 27 Jan 2026 10:09:00 +0000
Files and hashes:         1: 3130332e3134372e3233362e302f32332d3234203d3e20313339393731.roa (hash: Dk+kadZF8jy8Jr2gvM5PjhVeLC3W+zlB4SeDi9Hh4BA=)
                          2: 07D6388316655597AEA703AEBFDD2869F80A8984.crl (hash: w7bDigNx0C8h47beA7/RXLs1+h+AFMxhwPwE4klsdvk=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/55ba47ce-3992-431c-abf1-681a4cc8ec48/0/07D6388316655597AEA703AEBFDD2869F80A8984.crl
                          rsync://repo-rpki.idnic.net/repo/55ba47ce-3992-431c-abf1-681a4cc8ec48/0/07D6388316655597AEA703AEBFDD2869F80A8984.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/07D6388316655597AEA703AEBFDD2869F80A8984.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 27 Jan 2026 10:09:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:f1:9a:cc:9d:3c:4e:ac:d7:9c:50:a0:ac:32:08:86:d6:4f:1c:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07D6388316655597AEA703AEBFDD2869F80A8984
        Validity
            Not Before: Jan 24 03:37:00 2026 GMT
            Not After : Jan 27 10:09:00 2026 GMT
        Subject: CN=1283A97D2C724B6AB4360C4E1EB745B2BBA63233
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:e4:5f:59:ab:b3:16:4d:2f:6f:29:bc:52:4c:
                    78:d5:c4:e2:d5:ee:8d:ef:d5:a9:02:87:d7:13:f0:
                    7b:03:8a:bb:65:fd:54:bc:d7:c2:24:44:b1:d0:28:
                    f7:1c:a0:41:68:05:a6:5d:18:b7:bd:09:60:9c:68:
                    21:9d:72:a0:b0:54:ae:c4:29:d2:03:1d:29:00:7f:
                    fb:8c:01:f4:33:3a:74:50:c1:34:4a:a1:39:e3:ac:
                    e6:78:13:e5:7d:bd:19:fb:76:66:b2:56:b1:41:75:
                    7d:80:92:f5:fc:bd:23:ed:ab:3e:cf:c4:44:49:ae:
                    ed:04:a3:05:b0:ab:42:01:11:c2:42:82:76:9a:d3:
                    5b:1b:5b:37:6f:7b:44:73:e1:0b:e8:23:53:a2:25:
                    01:81:34:c0:7e:e0:38:0a:57:52:3d:23:e8:83:66:
                    d0:c2:c7:70:02:0e:a5:3c:b9:ee:85:c0:bd:ab:84:
                    e2:22:09:e8:77:10:e1:7a:14:ac:00:39:c2:6b:46:
                    06:e5:de:d2:32:08:38:83:9f:02:11:81:40:b9:cb:
                    13:92:84:1c:97:be:e8:3f:67:5b:6d:5a:fb:92:69:
                    a5:3b:c1:e9:37:96:a5:0b:e9:54:bf:42:fe:06:30:
                    50:54:c8:de:4d:19:72:d3:68:77:1b:82:8c:20:0a:
                    5c:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:83:A9:7D:2C:72:4B:6A:B4:36:0C:4E:1E:B7:45:B2:BB:A6:32:33
            X509v3 Authority Key Identifier:
                keyid:07:D6:38:83:16:65:55:97:AE:A7:03:AE:BF:DD:28:69:F8:0A:89:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/55ba47ce-3992-431c-abf1-681a4cc8ec48/0/07D6388316655597AEA703AEBFDD2869F80A8984.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/07D6388316655597AEA703AEBFDD2869F80A8984.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/55ba47ce-3992-431c-abf1-681a4cc8ec48/0/07D6388316655597AEA703AEBFDD2869F80A8984.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:dc:a5:26:5d:b4:4b:d5:97:52:ff:23:85:66:ab:64:96:81:
         51:e1:99:2b:69:de:37:87:be:59:ef:d4:3c:52:dd:71:4e:2f:
         94:61:8f:e5:2b:e8:09:bc:96:4d:0f:63:f4:74:34:9f:7c:9e:
         d1:93:8e:5a:da:61:b1:42:14:9c:24:cc:ba:b4:64:2c:de:b1:
         9b:af:88:58:96:64:69:e5:b2:97:96:7e:d6:c0:57:fd:73:a0:
         2f:72:40:28:fd:30:0f:09:8b:53:02:86:08:2d:11:f3:43:30:
         d0:1f:86:e7:a0:1b:c4:b8:25:29:c4:6e:61:0f:de:e6:26:b2:
         27:76:7e:05:de:fe:17:61:c0:17:7d:e7:9d:2d:7a:91:18:d2:
         98:a3:a7:ab:f4:47:54:9a:0b:08:38:91:e1:4e:bc:fa:99:e8:
         07:96:f1:a7:f7:10:36:bd:44:01:87:20:af:d9:c5:5f:79:09:
         4d:0a:fe:f4:2f:ae:12:a2:43:1b:39:8c:22:61:a2:7a:6c:15:
         0e:08:53:66:a8:68:35:6d:f7:80:c2:c7:f3:e0:1f:b4:61:ee:
         fb:17:e5:0d:b4:ec:7d:e5:ce:6f:7f:22:be:d1:0f:3c:92:35:
         9f:c6:7e:fb:d1:a4:3b:f2:41:9f:51:8c:a8:74:40:27:6a:9c:
         d6:22:43:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 01:06:08 2026 by rpki-client