This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/66b87feb-0fe2-418a-a37a-be3dd1f0e63c/0/E9F7A0AA6DCCA1FF7D3D61460D5534A004AB2C61.mft
File:                     E9F7A0AA6DCCA1FF7D3D61460D5534A004AB2C61.mft (raw, json)
Hash identifier:          BRTJBDoykuuNSTZrP1lGOYT0RdPWr+yFv/zODslq+ys=
Subject key identifier:   32:36:E6:6A:BA:29:91:B6:90:E9:1A:F7:1B:25:C8:94:22:D7:39:AC
Authority key identifier: E9:F7:A0:AA:6D:CC:A1:FF:7D:3D:61:46:0D:55:34:A0:04:AB:2C:61
Certificate issuer:       /CN=E9F7A0AA6DCCA1FF7D3D61460D5534A004AB2C61
Certificate serial:       3CF33C24EC976845207A1241216EE61E5B3A6B2A
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E9F7A0AA6DCCA1FF7D3D61460D5534A004AB2C61.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/66b87feb-0fe2-418a-a37a-be3dd1f0e63c/0/E9F7A0AA6DCCA1FF7D3D61460D5534A004AB2C61.mft
Manifest number:          0540
Signing time:             Fri 23 Jan 2026 23:21:46 +0000
Manifest this update:     Fri 23 Jan 2026 23:16:46 +0000
Manifest next update:     Tue 27 Jan 2026 10:01:46 +0000
Files and hashes:         1: 323430353a366334303a3a2f33322d3438203d3e203234353237.roa (hash: sdUNTLR9jp0dwpPELDIKx4SufivRxg0Tg+/QbjfBOQs=)
                          2: E9F7A0AA6DCCA1FF7D3D61460D5534A004AB2C61.crl (hash: jXQ3LduViyzduYffPyiYoIwiJz9EZlC6EC4I0wTpNNs=)
                          3: 3130332e3134382e34362e302f32332d3234203d3e203234353237.roa (hash: eQEzsyxVfpTHgHfaMJEWpEAU8ae5FhvdVXRN2kONR8w=)
                          4: 3138332e38312e3135322e302f32312d3234203d3e203234353237.roa (hash: HrGCjeL9LpaajCgOCMCFmtzXiHgvf2onAjSq9sq+a5M=)
                          5: 3230332e3136302e35362e302f32312d3234203d3e203234353237.roa (hash: P99HVIzqHVCWDBqJ4r8v17rUky9V8VmAdjN3/2RrLPI=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/66b87feb-0fe2-418a-a37a-be3dd1f0e63c/0/E9F7A0AA6DCCA1FF7D3D61460D5534A004AB2C61.crl
                          rsync://repo-rpki.idnic.net/repo/66b87feb-0fe2-418a-a37a-be3dd1f0e63c/0/E9F7A0AA6DCCA1FF7D3D61460D5534A004AB2C61.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E9F7A0AA6DCCA1FF7D3D61460D5534A004AB2C61.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 27 Jan 2026 10:01:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:f3:3c:24:ec:97:68:45:20:7a:12:41:21:6e:e6:1e:5b:3a:6b:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E9F7A0AA6DCCA1FF7D3D61460D5534A004AB2C61
        Validity
            Not Before: Jan 23 23:16:46 2026 GMT
            Not After : Jan 27 10:01:46 2026 GMT
        Subject: CN=3236E66ABA2991B690E91AF71B25C89422D739AC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:9e:96:9e:83:c3:d2:c7:2b:e6:ce:db:da:19:
                    35:c2:6e:99:b0:6e:4b:ee:fe:8a:41:0b:3f:37:02:
                    14:ef:1d:ca:9d:be:6c:3f:24:15:2a:01:5b:39:91:
                    b3:2f:38:b6:a2:94:4d:a6:83:c9:58:a5:d6:92:fe:
                    86:2c:41:04:ad:e6:72:1d:46:80:62:fe:4a:1c:a9:
                    3d:f3:24:c7:ee:a7:52:0d:79:38:9d:96:ef:9c:be:
                    9d:c8:2f:06:4a:24:b1:9a:40:a3:ee:38:36:84:3a:
                    1b:fd:a6:96:78:0a:66:ec:93:46:8f:b4:ad:7b:cd:
                    e2:61:24:fd:4f:db:d9:95:c0:d8:ec:de:d3:6d:87:
                    d5:87:b4:cc:65:aa:ad:2f:77:7e:9f:d5:6d:11:c5:
                    bd:ed:65:62:e1:03:99:be:58:94:22:14:85:37:96:
                    18:58:bd:9e:ae:cc:a2:3f:48:e6:f1:5c:7c:2c:8d:
                    28:cf:b8:ee:c0:6b:1c:ae:90:d1:11:f0:d4:56:65:
                    0c:1e:f5:f1:97:83:3c:26:5b:21:17:b2:8b:2f:72:
                    32:c5:3d:76:4c:b6:92:e0:04:68:b8:2a:28:74:5d:
                    61:50:c2:11:06:af:bd:1f:5e:17:46:e7:ce:45:ab:
                    d6:b5:4f:c0:a5:2a:48:d2:51:b8:1c:e5:bc:3e:c7:
                    62:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:36:E6:6A:BA:29:91:B6:90:E9:1A:F7:1B:25:C8:94:22:D7:39:AC
            X509v3 Authority Key Identifier:
                keyid:E9:F7:A0:AA:6D:CC:A1:FF:7D:3D:61:46:0D:55:34:A0:04:AB:2C:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/66b87feb-0fe2-418a-a37a-be3dd1f0e63c/0/E9F7A0AA6DCCA1FF7D3D61460D5534A004AB2C61.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E9F7A0AA6DCCA1FF7D3D61460D5534A004AB2C61.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/66b87feb-0fe2-418a-a37a-be3dd1f0e63c/0/E9F7A0AA6DCCA1FF7D3D61460D5534A004AB2C61.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:a2:a4:b1:ed:b9:a0:7d:89:eb:40:fd:bd:a0:3a:e7:69:4e:
         0e:96:52:d1:ac:62:a3:1e:64:27:7a:0e:04:b4:bf:6b:2e:03:
         f1:6b:0e:cf:49:c6:ad:98:e8:23:c3:45:ab:58:0d:ce:73:78:
         17:a2:18:6e:1f:81:4a:26:52:ef:72:ed:ba:bc:a6:cb:51:01:
         2d:b1:2b:1d:94:2a:79:d1:14:05:4c:04:cd:b0:f6:a9:0b:59:
         a7:fa:a7:e3:48:88:90:db:fc:0d:9b:5c:ce:a3:5b:d0:58:a4:
         4d:12:60:fb:aa:67:9c:a7:d1:21:b0:8b:c6:b9:e0:7f:41:a7:
         eb:a4:92:2d:14:62:40:a9:80:18:ad:88:d2:77:0b:81:ac:46:
         25:8c:7a:07:d2:09:36:43:ba:a9:3d:92:24:ed:e2:07:e2:e0:
         a0:4f:83:b1:60:5a:92:b9:d1:73:0b:ea:6d:21:72:9b:66:d2:
         9c:54:d8:76:35:b7:92:3e:b0:4a:38:4d:08:77:3f:8a:20:65:
         1e:97:61:f7:e8:fc:5e:81:99:37:2d:8c:3c:be:6c:c9:a8:52:
         aa:00:1a:95:1e:0f:72:42:99:ae:24:b7:47:c9:09:9d:93:83:
         3c:d7:53:52:77:2e:ca:46:c0:46:36:5f:00:ec:b2:0f:de:38:
         cc:49:cd:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 01:11:49 2026 by rpki-client