This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/5a519aeb-5c56-4cb3-94a0-0f400ea6a375/0/3D64FD900E2E64CB159D0067167853AAFC8A7E97.mft
File:                     3D64FD900E2E64CB159D0067167853AAFC8A7E97.mft (raw, json)
Hash identifier:          T4OflxH86kGKcCIBYJ7hMd6JysWuLNVjB6rziYZw4E0=
Subject key identifier:   7C:1B:2D:CE:25:8A:6B:F7:10:D0:76:FE:71:38:68:39:A9:3B:90:92
Authority key identifier: 3D:64:FD:90:0E:2E:64:CB:15:9D:00:67:16:78:53:AA:FC:8A:7E:97
Certificate issuer:       /CN=3D64FD900E2E64CB159D0067167853AAFC8A7E97
Certificate serial:       24BA640DC4200E9D0CAE76CE9F769CD34DF51213
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D64FD900E2E64CB159D0067167853AAFC8A7E97.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/5a519aeb-5c56-4cb3-94a0-0f400ea6a375/0/3D64FD900E2E64CB159D0067167853AAFC8A7E97.mft
Manifest number:          026E
Signing time:             Fri 23 Jan 2026 22:52:14 +0000
Manifest this update:     Fri 23 Jan 2026 22:47:14 +0000
Manifest next update:     Tue 27 Jan 2026 06:29:14 +0000
Files and hashes:         1: 323430343a666563303a323a3a2f34382d3438203d3e20313338383636.roa (hash: oP5w04R+DVBIXz7VN32/pUudJby5Bdnn9OzpJHzqMrY=)
                          2: 323430343a666563303a373037313a3a2f34382d3438203d3e20313338383636.roa (hash: wr6UHliebQd7p9YyHhYQ444oA44R+pMzEhtNFNELTlg=)
                          3: 323430343a666563303a333a3a2f34382d3438203d3e20313338383636.roa (hash: KM8HCAE941ny+NeclcPdlUg9VIqsSih6MjHoa5IqXb8=)
                          4: 3130332e3134302e3133312e302f32342d3234203d3e20313338383636.roa (hash: FWaIS2C5y+tF+eXrrfhUKvMiaO2hbKHJ6PXu+XjlFjU=)
                          5: 3130332e3134302e3133302e302f32332d3234203d3e20313338383636.roa (hash: cJFNfS5UPmik4Tu/P1Y8olkkeC16bO4wOvGv71A6WXE=)
                          6: 3D64FD900E2E64CB159D0067167853AAFC8A7E97.crl (hash: 76gSHrMHRcZYL9xojbvZad/1exibLimBda9xwAC1hNM=)
                          7: 323430343a666563303a353a3a2f34382d3438203d3e20313338383636.roa (hash: QBM9H9rd8+lS4gn1TV/zjjSpwBwL7sSfYx4yVL1I50s=)
                          8: 323430343a666563303a343a3a2f34382d3438203d3e20313338383636.roa (hash: C6l6zdsNHMzfA4VroXv38wYjaYdlZyMXfkyZpHinjgQ=)
                          9: 323430343a666563303a313a3a2f34382d3438203d3e20313338383636.roa (hash: /v/t0LVvwP8ItAgvAEV4d3ird2OFydIuyNvk7Hjv9rU=)
                          10: 323430343a666563303a3235303a3a2f34382d3438203d3e20313338383636.roa (hash: sYsKqli8EUEzTvSQXavM3oM1AVTdmnNeXY5Ib9nTkXk=)
                          11: 3130332e3134302e3133302e302f32342d3234203d3e20313338383636.roa (hash: naME29BjJNXWcG5xS5OYZKvtjsmmITu0eSf0OkwWWqI=)
                          12: 323430343a666563303a3a2f33322d3332203d3e20313338383636.roa (hash: 7h+0gopoSFJ2M48QEyz8CL99eJtVxfcZjzTpUAYVTZo=)
                          13: 323430343a666563303a3a2f33322d3438203d3e20313338383636.roa (hash: znbfpwqo/RqJTtKokVQJprWVfIE6ZeyWhe8h0U97wlw=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/5a519aeb-5c56-4cb3-94a0-0f400ea6a375/0/3D64FD900E2E64CB159D0067167853AAFC8A7E97.crl
                          rsync://repo-rpki.idnic.net/repo/5a519aeb-5c56-4cb3-94a0-0f400ea6a375/0/3D64FD900E2E64CB159D0067167853AAFC8A7E97.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D64FD900E2E64CB159D0067167853AAFC8A7E97.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 27 Jan 2026 06:29:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:ba:64:0d:c4:20:0e:9d:0c:ae:76:ce:9f:76:9c:d3:4d:f5:12:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3D64FD900E2E64CB159D0067167853AAFC8A7E97
        Validity
            Not Before: Jan 23 22:47:14 2026 GMT
            Not After : Jan 27 06:29:14 2026 GMT
        Subject: CN=7C1B2DCE258A6BF710D076FE71386839A93B9092
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:dc:9e:cb:6d:7e:66:3e:06:90:31:8f:cf:83:
                    c6:75:f3:f6:e0:75:0e:fd:17:e7:d8:4f:e8:2d:b6:
                    ee:f8:be:bd:b8:1a:00:8e:31:42:58:21:78:4a:62:
                    10:9f:11:cc:0f:0f:06:d8:17:93:ed:a9:02:17:32:
                    b3:39:36:b3:59:e1:62:5f:3e:8e:e3:84:51:f0:1b:
                    33:9f:7c:23:5e:8d:62:48:bd:21:ff:17:fc:0d:8b:
                    82:c9:62:92:e7:64:19:49:14:c6:30:a3:fe:c8:ad:
                    be:62:9a:fc:0a:1d:83:b5:b8:20:b9:d4:44:75:ab:
                    1a:7c:28:0f:e5:c4:6b:76:ce:b4:53:ab:a2:2c:c7:
                    9e:0d:4a:48:ef:43:f4:65:bc:8b:26:e5:99:f6:ee:
                    7d:8b:50:be:f4:1c:0f:0b:f4:35:77:4d:c4:9c:e2:
                    43:ae:0a:e1:e2:ab:43:f5:48:23:e5:3a:b1:76:50:
                    1f:d9:33:3c:69:9f:86:d6:aa:9e:57:18:25:40:b7:
                    9b:af:15:9c:7a:05:25:4d:da:3f:e6:74:d7:15:7d:
                    aa:c0:c0:0f:59:09:3a:0a:0c:3e:5d:5b:22:cb:84:
                    f9:15:58:dd:a7:ec:c3:f0:d4:2e:39:08:cf:68:58:
                    21:39:ae:64:aa:19:f6:63:4d:fc:cc:fe:3f:f4:bc:
                    4f:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:1B:2D:CE:25:8A:6B:F7:10:D0:76:FE:71:38:68:39:A9:3B:90:92
            X509v3 Authority Key Identifier:
                keyid:3D:64:FD:90:0E:2E:64:CB:15:9D:00:67:16:78:53:AA:FC:8A:7E:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/5a519aeb-5c56-4cb3-94a0-0f400ea6a375/0/3D64FD900E2E64CB159D0067167853AAFC8A7E97.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D64FD900E2E64CB159D0067167853AAFC8A7E97.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5a519aeb-5c56-4cb3-94a0-0f400ea6a375/0/3D64FD900E2E64CB159D0067167853AAFC8A7E97.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:ab:51:19:49:8a:25:bf:b0:9d:20:be:32:38:56:19:c6:1e:
         48:ff:e7:9e:0a:81:75:b1:4e:2f:dc:e6:2c:fc:6b:f3:a8:93:
         92:aa:85:27:92:f2:c5:61:1a:cd:53:f8:0c:54:61:96:25:dd:
         12:b4:9d:fe:7e:6b:9a:c9:dd:9c:a1:4c:1c:9b:41:a4:4f:e9:
         d6:8b:b6:88:31:c3:6a:9a:1c:80:b4:5a:49:5f:e6:1f:bc:92:
         bd:b9:77:73:35:3d:18:68:bb:0f:23:5a:ff:51:d8:24:b5:0d:
         c9:26:96:3f:0a:a9:a5:a2:0c:ee:02:c4:9c:ad:58:6a:d7:2f:
         9e:8b:5f:83:32:4f:03:ec:4d:09:09:53:3b:4a:27:54:75:fa:
         07:4f:c0:89:7a:08:90:7c:e6:6e:12:a1:e3:1e:e5:00:ae:59:
         99:d4:57:dd:0a:4c:b2:c2:00:68:29:2e:f3:43:d5:e3:f8:ca:
         fe:49:35:05:e1:0c:e0:b1:05:b3:0d:b2:63:7e:c7:4e:8e:37:
         fb:ac:c8:29:f1:61:43:51:e4:f4:e9:3b:85:6c:39:0f:85:a5:
         ae:71:9f:77:27:b1:7e:73:1b:9f:e0:1e:55:28:f7:4d:ba:4b:
         fd:8d:1d:ad:32:d0:40:ff:d9:ac:3f:83:57:f8:ef:64:96:e1:
         72:f0:ad:a5
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUJLpkDcQgDp0MrnbOn3ac0031EhMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0Q2NEZEOTAwRTJFNjRDQjE1OUQwMDY3MTY3ODUzQUFG
QzhBN0U5NzAeFw0yNjAxMjMyMjQ3MTRaFw0yNjAxMjcwNjI5MTRaMDMxMTAvBgNV
BAMTKDdDMUIyRENFMjU4QTZCRjcxMEQwNzZGRTcxMzg2ODM5QTkzQjkwOTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD53J7LbX5mPgaQMY/Pg8Z18/bg
dQ79F+fYT+gttu74vr24GgCOMUJYIXhKYhCfEcwPDwbYF5PtqQIXMrM5NrNZ4WJf
Po7jhFHwGzOffCNejWJIvSH/F/wNi4LJYpLnZBlJFMYwo/7Irb5imvwKHYO1uCC5
1ER1qxp8KA/lxGt2zrRTq6Isx54NSkjvQ/RlvIsm5Zn27n2LUL70HA8L9DV3TcSc
4kOuCuHiq0P1SCPlOrF2UB/ZMzxpn4bWqp5XGCVAt5uvFZx6BSVN2j/mdNcVfarA
wA9ZCToKDD5dWyLLhPkVWN2n7MPw1C45CM9oWCE5rmSqGfZjTfzM/j/0vE+TAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUfBstziWKa/cQ0Hb+cThoOak7kJIwHwYDVR0j
BBgwFoAUPWT9kA4uZMsVnQBnFnhTqvyKfpcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81
YTUxOWFlYi01YzU2LTRjYjMtOTRhMC0wZjQwMGVhNmEzNzUvMC8zRDY0RkQ5MDBF
MkU2NENCMTU5RDAwNjcxNjc4NTNBQUZDOEE3RTk3LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvM0Q2NEZEOTAwRTJFNjRDQjE1OUQwMDY3MTY3ODUzQUFGQzhB
N0U5Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWE1MTlhZWItNWM1Ni00Y2IzLTk0
YTAtMGY0MDBlYTZhMzc1LzAvM0Q2NEZEOTAwRTJFNjRDQjE1OUQwMDY3MTY3ODUz
QUFGQzhBN0U5Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAAKrURlJiiW/sJ0gvjI4VhnGHkj/554KgXWx
Ti/c5iz8a/Ook5KqhSeS8sVhGs1T+AxUYZYl3RK0nf5+a5rJ3ZyhTBybQaRP6daL
togxw2qaHIC0Wklf5h+8kr25d3M1PRhouw8jWv9R2CS1Dckmlj8KqaWiDO4CxJyt
WGrXL56LX4MyTwPsTQkJUztKJ1R1+gdPwIl6CJB85m4SoeMe5QCuWZnUV90KTLLC
AGgpLvND1eP4yv5JNQXhDOCxBbMNsmN+x06ON/usyCnxYUNR5PTpO4VsOQ+Fpa5x
n3cnsX5zG5/gHlUo9026S/2NHa0y0ED/2aw/g1f472SW4XLwraU=
-----END CERTIFICATE-----
Generated at Mon Jan 26 01:20:55 2026 by rpki-client