This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/5a990125-609a-48c8-ac86-1c3bc315bad6/0/0CE6A79D53D829F2A55623676E8D2A9A569F836F.mft
File:                     0CE6A79D53D829F2A55623676E8D2A9A569F836F.mft (raw, json)
Hash identifier:          VxOVu+U1kPIY1Rob/jNykUNCv/1L9a3G1qcLR3Mn7Uk=
Subject key identifier:   C8:1E:D3:CB:B9:40:80:B3:16:3A:71:FF:9D:DD:8D:A7:B7:EF:D1:8A
Authority key identifier: 0C:E6:A7:9D:53:D8:29:F2:A5:56:23:67:6E:8D:2A:9A:56:9F:83:6F
Certificate issuer:       /CN=0CE6A79D53D829F2A55623676E8D2A9A569F836F
Certificate serial:       6ECC9747620DFC9260674488210A6D0EF0478EF3
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0CE6A79D53D829F2A55623676E8D2A9A569F836F.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/5a990125-609a-48c8-ac86-1c3bc315bad6/0/0CE6A79D53D829F2A55623676E8D2A9A569F836F.mft
Manifest number:          027B
Signing time:             Fri 23 Jan 2026 22:11:26 +0000
Manifest this update:     Fri 23 Jan 2026 22:06:26 +0000
Manifest next update:     Tue 27 Jan 2026 09:17:26 +0000
Files and hashes:         1: 323430343a613634303a3133393a3a2f34382d3438203d3e20313333383237.roa (hash: DRnLhFvj0XZm0VXEZ42TGDJPOpd0ZTUBf7MwJZ8bqOE=)
                          2: 323430343a613634303a3935363a3a2f34382d3438203d3e20313333383237.roa (hash: TdPV1Ae9NsfX/q2I6yHzDhMS8SBCOPuv6qM2EykOC0U=)
                          3: 323430343a613634303a3a2f33322d3332203d3e20313333383237.roa (hash: O51+yh/myhmzBLnFSKrmxNaOkN9zLMNSiLH+jGUuyWg=)
                          4: 3130332e39352e362e302f32332d3233203d3e20313333383237.roa (hash: uU+RiPAP5rA80po/0W6dMPifTVUm5kY6ALP/Ca/ACi0=)
                          5: 323430343a613634303a36363a3a2f34382d3438203d3e20313333383237.roa (hash: 2VTD3WI/p1+3+37bAKEOPoRJrNamvZNDqASz/hNbToE=)
                          6: 0CE6A79D53D829F2A55623676E8D2A9A569F836F.crl (hash: eRpkS8riJWb9uRvsOLle9KKYVuipDe04dZB8XqCcreQ=)
                          7: 3130332e39352e362e302f32342d3234203d3e20313333383237.roa (hash: vwui1qpHSvDVofVRy/Tt5fu+EupEaZj/9/a37EvMSjI=)
                          8: 323430343a613634303a3935373a3a2f34382d3438203d3e20313333383237.roa (hash: FJlkjy7Zh6RrMJcyoFN5uq7ubbcgdbOVveGSZgScDgQ=)
                          9: 3130332e39352e372e302f32342d3234203d3e20313333383237.roa (hash: I9GyAIe3s6r5o1IVue8LyW9A/cEmB+1nHgZeZ+VKm1g=)
                          10: 3130332e3232302e3131332e302f32342d3234203d3e20313333383237.roa (hash: KZ/MfJDGlUF+5FRxy7S8cNkPyicIqb4wdkx7H0nRfJc=)
                          11: 3130332e35352e3133392e302f32342d3234203d3e20313333383237.roa (hash: NRTKisssuBxZObjpfMlPvnnfb3JZpeBG9KHtEvhVsJY=)
                          12: 323430343a613634303a3131333a3a2f34382d3438203d3e20313333383237.roa (hash: k78QygJvZC5uoGv2K0v+mQ5YwQ0X8MznZdn5hmtLPD8=)
                          13: 323430343a613634303a36323a3a2f34382d3438203d3e20313333383237.roa (hash: AAfAK41bYgm/zJnOAM99b/7VZxCthhr1nADRxL8QtvA=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/5a990125-609a-48c8-ac86-1c3bc315bad6/0/0CE6A79D53D829F2A55623676E8D2A9A569F836F.crl
                          rsync://repo-rpki.idnic.net/repo/5a990125-609a-48c8-ac86-1c3bc315bad6/0/0CE6A79D53D829F2A55623676E8D2A9A569F836F.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0CE6A79D53D829F2A55623676E8D2A9A569F836F.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 27 Jan 2026 09:17:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:cc:97:47:62:0d:fc:92:60:67:44:88:21:0a:6d:0e:f0:47:8e:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0CE6A79D53D829F2A55623676E8D2A9A569F836F
        Validity
            Not Before: Jan 23 22:06:26 2026 GMT
            Not After : Jan 27 09:17:26 2026 GMT
        Subject: CN=C81ED3CBB94080B3163A71FF9DDD8DA7B7EFD18A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:c4:70:85:ff:af:40:b0:7a:e4:c3:9c:a8:a4:
                    29:b6:98:5f:6b:33:d2:c3:4d:b0:e7:e5:d8:44:d5:
                    77:a2:0f:ae:51:2d:ff:92:7c:c9:64:43:06:ae:34:
                    96:0f:bd:76:56:74:bf:29:2b:8d:92:45:c8:f7:99:
                    2f:4c:bb:cb:03:b9:86:dc:4c:45:27:ce:16:1d:36:
                    7d:e5:0e:53:ac:c6:76:92:50:ec:9a:de:71:9a:6e:
                    92:58:86:4d:48:12:de:cc:96:df:e9:a3:34:54:7e:
                    cb:3b:b2:ed:31:8b:e2:0c:ff:34:4d:09:d9:35:90:
                    e1:68:d1:09:c1:70:2b:20:82:3c:73:54:1c:90:e9:
                    b0:82:a2:a3:06:b8:6f:a8:b1:3d:33:dc:4a:e7:6d:
                    0c:b2:2a:e4:27:44:ca:9e:b4:f3:c9:77:1b:a5:54:
                    0e:15:e4:c5:45:cb:7f:73:e2:d6:d6:1d:18:29:d5:
                    6d:e2:a8:89:f1:00:a0:d0:9d:b3:d9:51:eb:d0:cf:
                    fc:5d:a5:9d:11:d3:3b:86:fd:69:b2:68:3e:21:37:
                    33:43:50:5d:31:40:23:0c:6f:63:94:c1:39:e6:ea:
                    e3:a7:66:ba:8f:18:d8:bd:69:23:c9:e7:f3:ed:b2:
                    4e:d1:f6:82:71:47:6d:1c:3a:71:78:b9:4c:c4:e0:
                    6c:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:1E:D3:CB:B9:40:80:B3:16:3A:71:FF:9D:DD:8D:A7:B7:EF:D1:8A
            X509v3 Authority Key Identifier:
                keyid:0C:E6:A7:9D:53:D8:29:F2:A5:56:23:67:6E:8D:2A:9A:56:9F:83:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/5a990125-609a-48c8-ac86-1c3bc315bad6/0/0CE6A79D53D829F2A55623676E8D2A9A569F836F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0CE6A79D53D829F2A55623676E8D2A9A569F836F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5a990125-609a-48c8-ac86-1c3bc315bad6/0/0CE6A79D53D829F2A55623676E8D2A9A569F836F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:ae:d8:48:9a:c6:e6:b9:78:f7:c8:8d:fa:b9:68:19:54:0e:
         3b:bf:df:ac:82:e7:61:06:92:b6:e2:78:dd:31:5f:04:c5:ff:
         6c:81:c8:29:59:42:7b:cf:1c:92:23:77:7b:44:23:b9:84:b6:
         4e:4c:00:c4:90:2e:06:eb:3d:6c:a5:08:83:35:91:43:dc:c4:
         16:e4:3f:36:28:61:4c:97:3d:35:a2:8d:77:10:57:9b:f9:f8:
         ed:f7:53:1f:28:4d:98:a1:9e:57:04:38:f3:35:ad:3b:68:fd:
         aa:4c:91:bd:cd:48:99:54:d2:fe:8a:48:bd:f0:6f:2b:46:a7:
         5e:3a:84:10:ee:c6:34:03:ca:2c:ca:20:c6:73:e5:87:f7:4e:
         9f:86:ad:3d:4d:22:eb:c6:53:0f:4b:32:81:b9:c9:7f:69:02:
         84:f8:92:15:f7:06:b2:fe:6f:cc:04:ff:2d:0e:f1:d0:6c:cf:
         b8:35:95:bd:cf:fd:80:18:e1:8c:2f:bf:98:ff:02:cb:c1:ec:
         a0:15:52:bb:5c:18:a6:97:3d:16:65:73:34:61:3a:e3:6b:c1:
         db:5d:07:b4:6e:f1:f8:0d:7a:32:85:54:0a:dc:08:18:9f:1d:
         6e:9f:bc:33:59:77:00:86:82:d0:a9:99:fb:c9:e5:be:68:23:
         5a:7b:f3:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 15:49:15 2026 by rpki-client