This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/5d823bb3-5a01-4658-a783-f8e89fadcf45/0/77ACF18F5317E7A202E583C3C59C223234FA2D8B.mft
File:                     77ACF18F5317E7A202E583C3C59C223234FA2D8B.mft (raw, json)
Hash identifier:          ZcAc0LtNjZqytnw8g0vbUrt99io0RH0aKYHz1Q6ZYxU=
Subject key identifier:   DD:2C:0A:47:32:C2:F0:31:DE:DD:07:23:A7:FF:05:3E:29:20:CC:81
Authority key identifier: 77:AC:F1:8F:53:17:E7:A2:02:E5:83:C3:C5:9C:22:32:34:FA:2D:8B
Certificate issuer:       /CN=77ACF18F5317E7A202E583C3C59C223234FA2D8B
Certificate serial:       3739A83EA856A51D7174CEE6B6FB4DFA1EF199AF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/77ACF18F5317E7A202E583C3C59C223234FA2D8B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/5d823bb3-5a01-4658-a783-f8e89fadcf45/0/77ACF18F5317E7A202E583C3C59C223234FA2D8B.mft
Manifest number:          0127
Signing time:             Sat 24 Jan 2026 18:41:45 +0000
Manifest this update:     Sat 24 Jan 2026 18:36:45 +0000
Manifest next update:     Wed 28 Jan 2026 01:07:45 +0000
Files and hashes:         1: 77ACF18F5317E7A202E583C3C59C223234FA2D8B.crl (hash: cFNFeAUfn/7WjHxvT1FPxPDXw49g4ZHtpChlTuV+Uks=)
                          2: 3135372e32302e3230342e302f32332d3234203d3e20313532343139.roa (hash: sRqaXQTTqwZ0Sl52wT2hj8cdENXDNpu+PJ+NuR920js=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/5d823bb3-5a01-4658-a783-f8e89fadcf45/0/77ACF18F5317E7A202E583C3C59C223234FA2D8B.crl
                          rsync://repo-rpki.idnic.net/repo/5d823bb3-5a01-4658-a783-f8e89fadcf45/0/77ACF18F5317E7A202E583C3C59C223234FA2D8B.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/77ACF18F5317E7A202E583C3C59C223234FA2D8B.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 28 Jan 2026 01:07:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:39:a8:3e:a8:56:a5:1d:71:74:ce:e6:b6:fb:4d:fa:1e:f1:99:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77ACF18F5317E7A202E583C3C59C223234FA2D8B
        Validity
            Not Before: Jan 24 18:36:45 2026 GMT
            Not After : Jan 28 01:07:45 2026 GMT
        Subject: CN=DD2C0A4732C2F031DEDD0723A7FF053E2920CC81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:8f:34:41:e4:bc:87:53:9c:86:2a:75:2e:de:
                    b5:ae:98:71:e6:06:a2:7a:c7:96:a0:45:4a:ca:cc:
                    2e:d5:69:b6:8d:b8:59:5d:3f:0f:92:8c:3a:a7:91:
                    0b:b5:1b:ba:7f:03:2c:25:b9:ff:70:80:bf:3a:2a:
                    33:c5:e4:d7:0b:4a:29:eb:0f:b3:1c:3b:a3:3e:6c:
                    cf:aa:03:e9:7e:99:4b:fa:67:0d:bf:67:22:1d:cb:
                    89:c5:e7:77:a3:e7:05:48:ca:07:68:61:37:c7:42:
                    fa:19:7a:7e:78:ec:d4:4f:58:ec:46:9e:11:81:dd:
                    55:c7:a9:c3:9e:67:21:a6:ec:54:98:ce:f2:a1:f9:
                    25:18:25:c3:46:89:b1:e7:5d:de:4a:26:3b:82:b3:
                    8f:5a:29:a2:b6:24:38:e8:8e:1c:6d:2b:23:05:0c:
                    52:1d:c0:bb:77:4e:f3:e2:99:62:6b:64:17:47:eb:
                    47:75:19:82:a5:29:95:88:3f:6a:c2:5d:c5:84:a9:
                    8b:3f:92:d5:fe:06:bf:53:d6:b8:f1:ec:6e:c5:6f:
                    eb:78:ff:82:b0:92:21:8c:27:23:82:e7:4e:84:97:
                    50:40:c2:d0:00:a2:1b:24:19:8e:29:95:7c:9c:68:
                    df:aa:26:9f:cd:8d:36:ba:99:47:b6:62:0f:e9:02:
                    d5:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:2C:0A:47:32:C2:F0:31:DE:DD:07:23:A7:FF:05:3E:29:20:CC:81
            X509v3 Authority Key Identifier:
                keyid:77:AC:F1:8F:53:17:E7:A2:02:E5:83:C3:C5:9C:22:32:34:FA:2D:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/5d823bb3-5a01-4658-a783-f8e89fadcf45/0/77ACF18F5317E7A202E583C3C59C223234FA2D8B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/77ACF18F5317E7A202E583C3C59C223234FA2D8B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5d823bb3-5a01-4658-a783-f8e89fadcf45/0/77ACF18F5317E7A202E583C3C59C223234FA2D8B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:be:0d:06:b6:58:15:e5:15:a7:d9:86:ed:f3:ea:c1:5a:9c:
         bf:70:ca:d5:7e:69:84:d8:a6:ff:54:b3:65:63:c4:08:ae:12:
         df:4f:76:59:44:58:f7:5f:e3:31:97:ea:76:45:1a:5e:c9:45:
         ba:a5:ab:34:af:d1:59:80:7d:fa:fc:68:90:3a:98:7e:95:80:
         ce:61:fc:23:ac:4f:01:c7:c9:be:99:55:f6:37:d9:1b:a7:8e:
         67:91:43:b6:e4:27:05:71:51:f7:54:d6:23:82:49:b7:2f:9c:
         1c:50:8d:fa:a0:d6:75:5a:3a:3d:01:22:41:72:aa:1f:d1:26:
         9a:ec:0b:92:84:18:1a:c7:ac:7c:64:a4:c1:54:56:af:5d:62:
         c3:d2:07:e4:a6:02:7e:26:f3:bf:9a:11:26:4c:d2:6b:8d:92:
         34:43:c5:7f:6c:14:9d:15:16:04:25:8c:93:cf:80:89:01:ea:
         2f:21:4f:2e:62:cf:aa:50:fd:b4:1d:d9:28:55:ab:b1:10:ec:
         0d:44:0a:13:f2:36:3d:e2:ed:7d:e9:77:1e:2c:fe:0e:3f:5e:
         1c:1e:4f:ac:5a:c6:dc:b1:8e:f8:0d:2e:4a:54:6e:96:6b:1d:
         84:b8:28:a6:aa:89:9d:05:21:1f:fd:9a:3f:7b:30:98:63:fd:
         6c:41:cf:e2
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUNzmoPqhWpR1xdM7mtvtN+h7xma8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzdBQ0YxOEY1MzE3RTdBMjAyRTU4M0MzQzU5QzIyMzIz
NEZBMkQ4QjAeFw0yNjAxMjQxODM2NDVaFw0yNjAxMjgwMTA3NDVaMDMxMTAvBgNV
BAMTKEREMkMwQTQ3MzJDMkYwMzFERUREMDcyM0E3RkYwNTNFMjkyMENDODEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1jzRB5LyHU5yGKnUu3rWumHHm
BqJ6x5agRUrKzC7VabaNuFldPw+SjDqnkQu1G7p/Aywluf9wgL86KjPF5NcLSinr
D7McO6M+bM+qA+l+mUv6Zw2/ZyIdy4nF53ej5wVIygdoYTfHQvoZen547NRPWOxG
nhGB3VXHqcOeZyGm7FSYzvKh+SUYJcNGibHnXd5KJjuCs49aKaK2JDjojhxtKyMF
DFIdwLt3TvPimWJrZBdH60d1GYKlKZWIP2rCXcWEqYs/ktX+Br9T1rjx7G7Fb+t4
/4KwkiGMJyOC506El1BAwtAAohskGY4plXycaN+qJp/NjTa6mUe2Yg/pAtURAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQU3SwKRzLC8DHe3Qcjp/8FPikgzIEwHwYDVR0j
BBgwFoAUd6zxj1MX56IC5YPDxZwiMjT6LYswDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81
ZDgyM2JiMy01YTAxLTQ2NTgtYTc4My1mOGU4OWZhZGNmNDUvMC83N0FDRjE4RjUz
MTdFN0EyMDJFNTgzQzNDNTlDMjIzMjM0RkEyRDhCLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzEvNzdBQ0YxOEY1MzE3RTdBMjAyRTU4M0MzQzU5QzIyMzIzNEZB
MkQ4Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWQ4MjNiYjMtNWEwMS00NjU4LWE3
ODMtZjhlODlmYWRjZjQ1LzAvNzdBQ0YxOEY1MzE3RTdBMjAyRTU4M0MzQzU5QzIy
MzIzNEZBMkQ4Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAC6+DQa2WBXlFafZhu3z6sFanL9wytV+aYTY
pv9Us2VjxAiuEt9PdllEWPdf4zGX6nZFGl7JRbqlqzSv0VmAffr8aJA6mH6VgM5h
/COsTwHHyb6ZVfY32RunjmeRQ7bkJwVxUfdU1iOCSbcvnBxQjfqg1nVaOj0BIkFy
qh/RJprsC5KEGBrHrHxkpMFUVq9dYsPSB+SmAn4m87+aESZM0muNkjRDxX9sFJ0V
FgQljJPPgIkB6i8hTy5iz6pQ/bQd2ShVq7EQ7A1EChPyNj3i7X3pdx4s/g4/Xhwe
T6xaxtyxjvgNLkpUbpZrHYS4KKaqiZ0FIR/9mj97MJhj/WxBz+I=
-----END CERTIFICATE-----
Generated at Mon Jan 26 04:27:46 2026 by rpki-client