This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/573b959e-ff52-4028-b534-1d605fa3a80b/0/09461F85D577EF79DE072EECCA1E12135A3715C0.mft
File:                     09461F85D577EF79DE072EECCA1E12135A3715C0.mft (raw, json)
Hash identifier:          6XQ0BYCnKa/wP8HrnUY9xb85AKsv3LavwAS0/N5svOs=
Subject key identifier:   BE:D8:3F:48:9B:AA:12:AE:25:99:32:99:A8:42:69:F8:95:BC:99:BC
Authority key identifier: 09:46:1F:85:D5:77:EF:79:DE:07:2E:EC:CA:1E:12:13:5A:37:15:C0
Certificate issuer:       /CN=09461F85D577EF79DE072EECCA1E12135A3715C0
Certificate serial:       55D5B7DE2451D5D8421B2E0C75CDD112A0FD215B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/09461F85D577EF79DE072EECCA1E12135A3715C0.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/573b959e-ff52-4028-b534-1d605fa3a80b/0/09461F85D577EF79DE072EECCA1E12135A3715C0.mft
Manifest number:          0204
Signing time:             Sun 25 Jan 2026 05:32:17 +0000
Manifest this update:     Sun 25 Jan 2026 05:27:17 +0000
Manifest next update:     Wed 28 Jan 2026 12:36:17 +0000
Files and hashes:         1: 3130332e3134372e3134362e302f32332d3234203d3e203137373639.roa (hash: h3TV+XhpTe6M1r47P8xg6LJKc7ssK2BZBj+55BbrRCw=)
                          2: 09461F85D577EF79DE072EECCA1E12135A3715C0.crl (hash: YLxbVPGhKAw6e6IulIdU70YFBXeTf2o5QsURxwZb0qk=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/573b959e-ff52-4028-b534-1d605fa3a80b/0/09461F85D577EF79DE072EECCA1E12135A3715C0.crl
                          rsync://repo-rpki.idnic.net/repo/573b959e-ff52-4028-b534-1d605fa3a80b/0/09461F85D577EF79DE072EECCA1E12135A3715C0.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/09461F85D577EF79DE072EECCA1E12135A3715C0.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 28 Jan 2026 12:36:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:d5:b7:de:24:51:d5:d8:42:1b:2e:0c:75:cd:d1:12:a0:fd:21:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09461F85D577EF79DE072EECCA1E12135A3715C0
        Validity
            Not Before: Jan 25 05:27:17 2026 GMT
            Not After : Jan 28 12:36:17 2026 GMT
        Subject: CN=BED83F489BAA12AE25993299A84269F895BC99BC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:25:98:08:68:5d:f3:d5:7c:52:c8:9f:37:e3:
                    c0:54:bb:64:a5:ae:4b:d1:f9:42:e8:a6:0c:a1:fd:
                    b4:10:28:55:27:c3:09:80:5e:44:56:72:11:d9:c6:
                    eb:1f:6e:96:d8:71:73:62:f2:92:3f:08:8a:87:bc:
                    50:11:cd:a9:b4:fe:48:3e:bd:c0:4a:a4:56:53:5d:
                    d6:ca:e0:2b:32:a9:45:51:07:f3:9f:ab:69:2c:bb:
                    77:54:5f:24:9c:8e:f2:4c:d6:40:61:a7:75:14:2d:
                    f6:92:3d:ee:1c:83:6a:16:d6:48:36:38:9f:96:6c:
                    cf:da:96:de:b0:a9:dc:6f:a4:3b:24:80:fb:ee:04:
                    8e:c4:f0:42:c5:aa:8d:19:f1:78:99:6c:8d:02:a2:
                    64:7a:da:dd:56:c2:db:96:f8:83:8c:97:0b:ff:ab:
                    98:65:3e:e7:84:3a:63:f4:22:a6:00:fd:1a:5b:61:
                    04:92:1a:3e:a7:7b:84:97:cd:14:9f:58:e9:49:b0:
                    ca:97:90:f3:06:ca:33:a9:09:24:d2:44:6b:1c:6a:
                    44:63:ce:e1:ac:cd:0b:50:a3:06:25:5e:82:75:44:
                    ea:ee:1f:65:7d:98:6d:53:33:6d:d4:67:d4:35:8d:
                    6c:d5:36:c8:a7:ca:ac:ef:a0:f0:53:62:39:d9:2c:
                    0d:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:D8:3F:48:9B:AA:12:AE:25:99:32:99:A8:42:69:F8:95:BC:99:BC
            X509v3 Authority Key Identifier:
                keyid:09:46:1F:85:D5:77:EF:79:DE:07:2E:EC:CA:1E:12:13:5A:37:15:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/573b959e-ff52-4028-b534-1d605fa3a80b/0/09461F85D577EF79DE072EECCA1E12135A3715C0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/09461F85D577EF79DE072EECCA1E12135A3715C0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/573b959e-ff52-4028-b534-1d605fa3a80b/0/09461F85D577EF79DE072EECCA1E12135A3715C0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:4a:67:20:a5:1f:95:e0:7d:a4:02:3f:92:5d:fb:c8:82:c3:
         46:af:7a:09:a6:68:a6:06:99:6a:a3:78:3f:12:41:ca:98:53:
         f5:a1:94:e8:d8:b0:ba:13:3e:0d:7b:6d:03:57:76:d9:eb:be:
         6f:90:2a:dd:3f:c8:a9:01:0f:5c:05:2d:76:d4:1a:0a:ba:c4:
         28:05:5a:33:f4:03:6f:79:85:c1:08:73:0b:6f:20:82:10:35:
         c5:30:6c:8f:6f:f0:8a:61:08:8c:f0:8c:9a:14:bb:1d:db:a9:
         d4:4a:68:cd:80:43:31:dd:73:62:e3:65:4c:e9:dc:77:ed:b1:
         3d:ea:eb:b7:c1:93:2c:4a:b4:cf:2e:3c:85:11:8e:72:58:3d:
         1d:9f:89:03:e4:91:52:58:9c:3d:89:e4:ea:26:31:d7:73:d4:
         bf:93:f5:6d:64:4a:e5:37:e7:da:2b:a4:92:4f:3b:ad:ec:43:
         60:28:7e:79:c6:d7:f1:c2:07:95:78:f5:7f:28:07:18:02:9d:
         bc:79:40:2f:fa:1e:cc:8e:9d:c4:bd:83:56:b6:89:51:84:74:
         fb:3e:34:37:4f:cf:fc:d5:b3:f4:3a:f3:28:9e:8b:48:e8:69:
         90:bd:ee:b6:9f:f2:3b:b6:6d:43:e4:38:42:27:cb:62:9f:6c:
         b6:7b:eb:58
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUVdW33iRR1dhCGy4Mdc3REqD9IVswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDk0NjFGODVENTc3RUY3OURFMDcyRUVDQ0ExRTEyMTM1
QTM3MTVDMDAeFw0yNjAxMjUwNTI3MTdaFw0yNjAxMjgxMjM2MTdaMDMxMTAvBgNV
BAMTKEJFRDgzRjQ4OUJBQTEyQUUyNTk5MzI5OUE4NDI2OUY4OTVCQzk5QkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXJZgIaF3z1XxSyJ8348BUu2Sl
rkvR+ULopgyh/bQQKFUnwwmAXkRWchHZxusfbpbYcXNi8pI/CIqHvFARzam0/kg+
vcBKpFZTXdbK4CsyqUVRB/Ofq2ksu3dUXyScjvJM1kBhp3UULfaSPe4cg2oW1kg2
OJ+WbM/alt6wqdxvpDskgPvuBI7E8ELFqo0Z8XiZbI0ComR62t1WwtuW+IOMlwv/
q5hlPueEOmP0IqYA/RpbYQSSGj6ne4SXzRSfWOlJsMqXkPMGyjOpCSTSRGscakRj
zuGszQtQowYlXoJ1ROruH2V9mG1TM23UZ9Q1jWzVNsinyqzvoPBTYjnZLA2PAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUvtg/SJuqEq4lmTKZqEJp+JW8mbwwHwYDVR0j
BBgwFoAUCUYfhdV373neBy7syh4SE1o3FcAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81
NzNiOTU5ZS1mZjUyLTQwMjgtYjUzNC0xZDYwNWZhM2E4MGIvMC8wOTQ2MUY4NUQ1
NzdFRjc5REUwNzJFRUNDQTFFMTIxMzVBMzcxNUMwLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMDk0NjFGODVENTc3RUY3OURFMDcyRUVDQ0ExRTEyMTM1QTM3
MTVDMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTczYjk1OWUtZmY1Mi00MDI4LWI1
MzQtMWQ2MDVmYTNhODBiLzAvMDk0NjFGODVENTc3RUY3OURFMDcyRUVDQ0ExRTEy
MTM1QTM3MTVDMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBADBKZyClH5XgfaQCP5Jd+8iCw0avegmmaKYG
mWqjeD8SQcqYU/WhlOjYsLoTPg17bQNXdtnrvm+QKt0/yKkBD1wFLXbUGgq6xCgF
WjP0A295hcEIcwtvIIIQNcUwbI9v8IphCIzwjJoUux3bqdRKaM2AQzHdc2LjZUzp
3HftsT3q67fBkyxKtM8uPIURjnJYPR2fiQPkkVJYnD2J5OomMddz1L+T9W1kSuU3
59orpJJPO63sQ2AofnnG1/HCB5V49X8oBxgCnbx5QC/6HsyOncS9g1a2iVGEdPs+
NDdPz/zVs/Q68yiei0joaZC97raf8ju2bUPkOEIny2KfbLZ761g=
-----END CERTIFICATE-----
Generated at Sun Jan 25 18:48:09 2026 by rpki-client