This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/654607f0-1701-49b1-91ff-b1bed5cbded1/0/755B61748263D4DD472C69CA7F1847254B03EBBC.mft
File:                     755B61748263D4DD472C69CA7F1847254B03EBBC.mft (raw, json)
Hash identifier:          otJUCzYligadCRep4czL0wPRWnbywBU5t+GxZblkqGo=
Subject key identifier:   1D:45:09:1C:E9:8C:71:A0:65:64:76:DC:F6:4F:5C:6F:77:42:58:71
Authority key identifier: 75:5B:61:74:82:63:D4:DD:47:2C:69:CA:7F:18:47:25:4B:03:EB:BC
Certificate issuer:       /CN=755B61748263D4DD472C69CA7F1847254B03EBBC
Certificate serial:       6361FB8BF431C512BA706E9D59A92AC467E197B5
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/755B61748263D4DD472C69CA7F1847254B03EBBC.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/654607f0-1701-49b1-91ff-b1bed5cbded1/0/755B61748263D4DD472C69CA7F1847254B03EBBC.mft
Manifest number:          020C
Signing time:             Sat 24 Jan 2026 21:11:19 +0000
Manifest this update:     Sat 24 Jan 2026 21:06:19 +0000
Manifest next update:     Wed 28 Jan 2026 09:02:19 +0000
Files and hashes:         1: 3130332e32322e3231362e302f32342d3234203d3e20313530323631.roa (hash: O/zlYAvAs7v4wgG3NM581/meU2MKG9Ug+TtqOP46WoM=)
                          2: 3130332e32322e3231362e302f32332d3233203d3e20313530323631.roa (hash: NW99gB8qCJlT/OObHXKO0PNmXnjOgR9bEy3lZQmrUX8=)
                          3: 755B61748263D4DD472C69CA7F1847254B03EBBC.crl (hash: QF3M9m0OZcMqzly0bn+30SVT1m7DcFW7j3GYLdpuL/w=)
                          4: 3130332e32322e3231372e302f32342d3234203d3e20313530323631.roa (hash: 0YXLtWcrQqo3QF47I+KQwYusKJlUjyP7HqEp9u0fOCY=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/654607f0-1701-49b1-91ff-b1bed5cbded1/0/755B61748263D4DD472C69CA7F1847254B03EBBC.crl
                          rsync://repo-rpki.idnic.net/repo/654607f0-1701-49b1-91ff-b1bed5cbded1/0/755B61748263D4DD472C69CA7F1847254B03EBBC.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/755B61748263D4DD472C69CA7F1847254B03EBBC.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 28 Jan 2026 09:02:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:61:fb:8b:f4:31:c5:12:ba:70:6e:9d:59:a9:2a:c4:67:e1:97:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=755B61748263D4DD472C69CA7F1847254B03EBBC
        Validity
            Not Before: Jan 24 21:06:19 2026 GMT
            Not After : Jan 28 09:02:19 2026 GMT
        Subject: CN=1D45091CE98C71A0656476DCF64F5C6F77425871
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:ca:8e:8c:50:2c:a0:43:ea:94:60:3a:42:a7:
                    2a:74:bc:aa:d3:d6:97:5d:b3:90:fc:c4:a7:f3:f1:
                    7d:a2:cc:c0:dc:7f:c2:aa:36:a1:c0:a4:3e:78:8f:
                    92:97:d6:c4:89:cf:c3:a7:5e:97:2a:d4:7f:5c:0d:
                    4d:7c:bf:8f:a9:54:ee:17:61:2b:b8:c6:02:86:80:
                    23:8b:b8:b4:91:8b:75:99:41:42:4c:ec:5b:00:2d:
                    f2:a0:50:a6:ac:71:bf:55:cf:bd:de:3e:ee:16:ad:
                    39:12:4c:ff:08:9d:b9:99:62:10:e2:e1:01:5a:c9:
                    61:d1:24:53:90:da:77:54:b2:a8:af:fc:28:c1:e7:
                    a5:7a:a3:f2:4f:28:df:81:1e:26:d5:1e:7b:49:4e:
                    9c:f0:3e:6d:8b:54:47:2c:6c:2f:f9:46:0c:8e:b7:
                    28:5b:1c:cd:65:fa:fb:91:4c:f5:dd:b5:38:38:4a:
                    eb:8a:e0:8f:da:bf:ec:0c:20:49:6d:cb:3b:0b:2f:
                    d5:1c:97:3c:9a:fe:37:5d:fd:9e:f3:2e:b7:ef:28:
                    e8:0f:08:ad:b5:1e:ef:39:38:76:20:ce:0b:c2:87:
                    44:13:01:b7:d3:9f:7c:81:12:91:6a:c8:3a:32:ba:
                    ba:7c:28:c7:83:5f:5f:d9:7c:f3:b9:7d:bd:2d:45:
                    e2:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:45:09:1C:E9:8C:71:A0:65:64:76:DC:F6:4F:5C:6F:77:42:58:71
            X509v3 Authority Key Identifier:
                keyid:75:5B:61:74:82:63:D4:DD:47:2C:69:CA:7F:18:47:25:4B:03:EB:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/654607f0-1701-49b1-91ff-b1bed5cbded1/0/755B61748263D4DD472C69CA7F1847254B03EBBC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/755B61748263D4DD472C69CA7F1847254B03EBBC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/654607f0-1701-49b1-91ff-b1bed5cbded1/0/755B61748263D4DD472C69CA7F1847254B03EBBC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c4:9e:c5:26:f3:16:43:17:f8:3f:4b:50:ab:8c:e6:99:c8:7b:
         d2:a8:61:68:c5:1e:26:8f:2c:02:f9:5e:c3:9c:49:0a:b6:9a:
         b4:b5:40:2c:89:4e:62:c5:91:12:1c:d8:f8:62:19:b3:da:e1:
         5f:d5:c5:69:2c:92:38:66:2c:ec:78:89:ea:b0:a9:b8:45:30:
         02:4b:0f:94:a6:c7:8e:91:c2:c2:1f:91:4a:38:87:f4:72:cf:
         e2:cc:36:3f:57:a4:76:19:13:04:92:05:c8:fa:6a:c9:3a:30:
         98:42:70:92:d7:2a:53:be:d8:1a:1b:11:3d:f5:28:df:bd:86:
         c6:5a:63:06:c4:5a:d6:fd:ac:12:ee:d2:2b:4c:aa:d7:22:84:
         80:2e:47:7a:48:86:0f:53:66:33:fa:c0:5b:79:6e:ef:79:8b:
         b2:06:57:64:80:09:bb:e8:5b:11:94:de:2b:d2:1f:b0:77:22:
         88:14:e1:d0:26:86:9a:37:13:b6:a8:8d:9c:fa:bb:01:57:d6:
         db:3d:cb:49:74:4a:3d:87:2e:30:27:84:ba:c2:7e:b6:01:bf:
         62:c6:26:14:82:a8:7b:ca:73:d6:c4:84:f5:57:63:d4:36:44:
         d7:b8:7d:7a:5a:98:78:96:3a:89:fb:5f:82:e6:67:9b:c3:94:
         eb:5d:04:14
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUY2H7i/QxxRK6cG6dWakqxGfhl7UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzU1QjYxNzQ4MjYzRDRERDQ3MkM2OUNBN0YxODQ3MjU0
QjAzRUJCQzAeFw0yNjAxMjQyMTA2MTlaFw0yNjAxMjgwOTAyMTlaMDMxMTAvBgNV
BAMTKDFENDUwOTFDRTk4QzcxQTA2NTY0NzZEQ0Y2NEY1QzZGNzc0MjU4NzEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyyo6MUCygQ+qUYDpCpyp0vKrT
1pdds5D8xKfz8X2izMDcf8KqNqHApD54j5KX1sSJz8OnXpcq1H9cDU18v4+pVO4X
YSu4xgKGgCOLuLSRi3WZQUJM7FsALfKgUKascb9Vz73ePu4WrTkSTP8InbmZYhDi
4QFayWHRJFOQ2ndUsqiv/CjB56V6o/JPKN+BHibVHntJTpzwPm2LVEcsbC/5RgyO
tyhbHM1l+vuRTPXdtTg4SuuK4I/av+wMIEltyzsLL9Uclzya/jdd/Z7zLrfvKOgP
CK21Hu85OHYgzgvCh0QTAbfTn3yBEpFqyDoyurp8KMeDX1/ZfPO5fb0tReJlAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUHUUJHOmMcaBlZHbc9k9cb3dCWHEwHwYDVR0j
BBgwFoAUdVthdIJj1N1HLGnKfxhHJUsD67wwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82
NTQ2MDdmMC0xNzAxLTQ5YjEtOTFmZi1iMWJlZDVjYmRlZDEvMC83NTVCNjE3NDgy
NjNENERENDcyQzY5Q0E3RjE4NDcyNTRCMDNFQkJDLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNzU1QjYxNzQ4MjYzRDRERDQ3MkM2OUNBN0YxODQ3MjU0QjAz
RUJCQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjU0NjA3ZjAtMTcwMS00OWIxLTkx
ZmYtYjFiZWQ1Y2JkZWQxLzAvNzU1QjYxNzQ4MjYzRDRERDQ3MkM2OUNBN0YxODQ3
MjU0QjAzRUJCQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAMSexSbzFkMX+D9LUKuM5pnIe9KoYWjFHiaP
LAL5XsOcSQq2mrS1QCyJTmLFkRIc2PhiGbPa4V/VxWkskjhmLOx4ieqwqbhFMAJL
D5Smx46RwsIfkUo4h/Ryz+LMNj9XpHYZEwSSBcj6ask6MJhCcJLXKlO+2BobET31
KN+9hsZaYwbEWtb9rBLu0itMqtcihIAuR3pIhg9TZjP6wFt5bu95i7IGV2SACbvo
WxGU3ivSH7B3IogU4dAmhpo3E7aojZz6uwFX1ts9y0l0Sj2HLjAnhLrCfrYBv2LG
JhSCqHvKc9bEhPVXY9Q2RNe4fXpamHiWOon7X4LmZ5vDlOtdBBQ=
-----END CERTIFICATE-----
Generated at Sun Jan 25 18:59:51 2026 by rpki-client