This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/5cde8ece-97a2-4b0d-a064-17cea61f45cc/0/3EDDCA40C3F0CF912B003BB19F9C03E48B43F727.mft
File:                     3EDDCA40C3F0CF912B003BB19F9C03E48B43F727.mft (raw, json)
Hash identifier:          uHzFgh2nQ3MNWDnhJdjUtv5hhlcuybGw+zLvg1dopL4=
Subject key identifier:   63:60:BD:75:02:4C:04:61:18:DF:EF:98:15:1C:E3:4A:09:56:CE:85
Authority key identifier: 3E:DD:CA:40:C3:F0:CF:91:2B:00:3B:B1:9F:9C:03:E4:8B:43:F7:27
Certificate issuer:       /CN=3EDDCA40C3F0CF912B003BB19F9C03E48B43F727
Certificate serial:       77FD99DF5EF1059A37BF35E45911FF0B1BFAB0D5
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3EDDCA40C3F0CF912B003BB19F9C03E48B43F727.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/5cde8ece-97a2-4b0d-a064-17cea61f45cc/0/3EDDCA40C3F0CF912B003BB19F9C03E48B43F727.mft
Manifest number:          0215
Signing time:             Sun 25 Jan 2026 06:00:05 +0000
Manifest this update:     Sun 25 Jan 2026 05:55:05 +0000
Manifest next update:     Wed 28 Jan 2026 07:53:05 +0000
Files and hashes:         1: 3EDDCA40C3F0CF912B003BB19F9C03E48B43F727.crl (hash: C0tR/xnF43KQtGKviY0bpY6p28h17fqcZyDARDgDDPM=)
                          2: 3130332e31392e3135382e302f32332d3234203d3e20313530323339.roa (hash: 2pmnEjpV6xKfD9pUClZgIAGRZy9Yz1iTckvB+l+9+U4=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/5cde8ece-97a2-4b0d-a064-17cea61f45cc/0/3EDDCA40C3F0CF912B003BB19F9C03E48B43F727.crl
                          rsync://repo-rpki.idnic.net/repo/5cde8ece-97a2-4b0d-a064-17cea61f45cc/0/3EDDCA40C3F0CF912B003BB19F9C03E48B43F727.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3EDDCA40C3F0CF912B003BB19F9C03E48B43F727.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 28 Jan 2026 07:53:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:fd:99:df:5e:f1:05:9a:37:bf:35:e4:59:11:ff:0b:1b:fa:b0:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3EDDCA40C3F0CF912B003BB19F9C03E48B43F727
        Validity
            Not Before: Jan 25 05:55:05 2026 GMT
            Not After : Jan 28 07:53:05 2026 GMT
        Subject: CN=6360BD75024C046118DFEF98151CE34A0956CE85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:71:e1:44:ec:e1:f7:79:40:8f:10:78:eb:63:
                    3d:4e:a9:65:1e:34:47:9f:f9:d7:b9:bb:33:21:91:
                    a4:fe:23:a7:e5:6a:94:23:0b:d0:43:29:fc:2d:a6:
                    6d:53:7a:f6:5f:eb:c7:e7:f7:49:ec:7c:0a:b1:6b:
                    66:78:65:25:77:ab:9e:61:25:e0:87:15:d2:d9:fd:
                    98:88:07:29:f0:cb:61:97:1a:38:d6:26:23:ab:bd:
                    d9:7b:0c:c9:b6:8e:c9:a6:07:6c:78:d5:74:1b:69:
                    c2:2f:a7:34:b0:3c:22:6f:10:dc:c6:ba:0c:a2:91:
                    ca:96:8a:0c:11:83:6c:4f:70:c1:fc:10:a4:c9:3a:
                    3c:a6:eb:7d:e3:63:75:cb:0f:86:df:34:03:b3:61:
                    2f:5e:37:34:ab:d3:08:18:dd:a6:4d:88:25:4f:fc:
                    06:55:a5:c1:d3:8a:eb:d6:0f:27:06:e3:44:a7:70:
                    61:74:26:38:14:e4:a4:0e:65:4a:2f:3a:b7:c5:ee:
                    cd:30:ca:a6:f4:c4:c5:8b:b6:a1:38:96:92:84:71:
                    7c:6d:db:c6:72:75:0d:1c:fd:51:36:50:70:a4:24:
                    00:54:4d:22:7f:3f:d7:08:f8:48:9e:6c:c9:7f:99:
                    03:8c:79:d8:e0:85:94:5f:7e:02:89:80:91:f4:22:
                    ab:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:60:BD:75:02:4C:04:61:18:DF:EF:98:15:1C:E3:4A:09:56:CE:85
            X509v3 Authority Key Identifier:
                keyid:3E:DD:CA:40:C3:F0:CF:91:2B:00:3B:B1:9F:9C:03:E4:8B:43:F7:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/5cde8ece-97a2-4b0d-a064-17cea61f45cc/0/3EDDCA40C3F0CF912B003BB19F9C03E48B43F727.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3EDDCA40C3F0CF912B003BB19F9C03E48B43F727.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5cde8ece-97a2-4b0d-a064-17cea61f45cc/0/3EDDCA40C3F0CF912B003BB19F9C03E48B43F727.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:c0:bd:0f:c1:6d:87:e8:d8:ad:17:6a:92:a2:9b:d4:49:90:
         8c:03:68:d3:7b:33:d2:e1:bb:2b:13:1d:79:9a:12:e7:7a:5a:
         47:6a:4e:e5:b0:9b:45:6f:9c:a6:06:0c:cb:88:5e:8c:69:6e:
         94:61:d9:b0:5f:f6:f1:5e:c1:b5:d3:d0:6f:6a:2d:f7:9d:80:
         24:49:04:30:67:c6:5f:1f:0a:1c:bf:fb:33:1c:e8:fd:fa:33:
         49:89:0f:ff:c4:bf:87:79:c2:e7:13:ce:dc:03:e7:81:cd:1d:
         8e:0f:08:73:21:a5:62:98:84:c9:f2:8b:0f:e2:c5:b7:9d:d9:
         65:a0:18:9f:31:2e:e0:e0:ec:22:d3:93:47:c4:e2:26:75:cb:
         77:b3:48:d7:70:41:c3:93:bf:d4:41:2d:3b:70:99:fd:72:54:
         13:3d:c8:d1:f2:26:e0:11:cd:4a:8f:89:b9:da:8b:91:2c:d2:
         1d:b7:af:e1:7e:c6:7e:ea:a1:d1:d8:07:ae:7f:ba:18:80:ac:
         fa:81:4c:54:9e:3d:0a:6d:88:bb:fd:01:6b:72:ff:ca:18:ef:
         17:c5:b6:33:bb:03:01:d3:ca:e4:f2:33:32:c7:48:a7:e5:52:
         9b:ba:62:be:04:34:8c:5a:9e:19:f3:13:ab:ec:00:46:6c:f2:
         f2:af:2c:af
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUd/2Z317xBZo3vzXkWRH/Cxv6sNUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0VERENBNDBDM0YwQ0Y5MTJCMDAzQkIxOUY5QzAzRTQ4
QjQzRjcyNzAeFw0yNjAxMjUwNTU1MDVaFw0yNjAxMjgwNzUzMDVaMDMxMTAvBgNV
BAMTKDYzNjBCRDc1MDI0QzA0NjExOERGRUY5ODE1MUNFMzRBMDk1NkNFODUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtceFE7OH3eUCPEHjrYz1OqWUe
NEef+de5uzMhkaT+I6flapQjC9BDKfwtpm1TevZf68fn90nsfAqxa2Z4ZSV3q55h
JeCHFdLZ/ZiIBynwy2GXGjjWJiOrvdl7DMm2jsmmB2x41XQbacIvpzSwPCJvENzG
ugyikcqWigwRg2xPcMH8EKTJOjym633jY3XLD4bfNAOzYS9eNzSr0wgY3aZNiCVP
/AZVpcHTiuvWDycG40SncGF0JjgU5KQOZUovOrfF7s0wyqb0xMWLtqE4lpKEcXxt
28ZydQ0c/VE2UHCkJABUTSJ/P9cI+EiebMl/mQOMedjghZRffgKJgJH0IqtVAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUY2C9dQJMBGEY3++YFRzjSglWzoUwHwYDVR0j
BBgwFoAUPt3KQMPwz5ErADuxn5wD5ItD9ycwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81
Y2RlOGVjZS05N2EyLTRiMGQtYTA2NC0xN2NlYTYxZjQ1Y2MvMC8zRUREQ0E0MEMz
RjBDRjkxMkIwMDNCQjE5RjlDMDNFNDhCNDNGNzI3LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvM0VERENBNDBDM0YwQ0Y5MTJCMDAzQkIxOUY5QzAzRTQ4QjQz
RjcyNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWNkZThlY2UtOTdhMi00YjBkLWEw
NjQtMTdjZWE2MWY0NWNjLzAvM0VERENBNDBDM0YwQ0Y5MTJCMDAzQkIxOUY5QzAz
RTQ4QjQzRjcyNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAArAvQ/BbYfo2K0XapKim9RJkIwDaNN7M9Lh
uysTHXmaEud6WkdqTuWwm0VvnKYGDMuIXoxpbpRh2bBf9vFewbXT0G9qLfedgCRJ
BDBnxl8fChy/+zMc6P36M0mJD//Ev4d5wucTztwD54HNHY4PCHMhpWKYhMnyiw/i
xbed2WWgGJ8xLuDg7CLTk0fE4iZ1y3ezSNdwQcOTv9RBLTtwmf1yVBM9yNHyJuAR
zUqPibnai5Es0h23r+F+xn7qodHYB65/uhiArPqBTFSePQptiLv9AWty/8oY7xfF
tjO7AwHTyuTyMzLHSKflUpu6Yr4ENIxanhnzE6vsAEZs8vKvLK8=
-----END CERTIFICATE-----
Generated at Sun Jan 25 20:33:06 2026 by rpki-client