This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/6bac619b-21e6-41d6-8e94-5804538c543e/0/4E1C7D0BF891C183458C47AB1134215E797C4165.mft
File:                     4E1C7D0BF891C183458C47AB1134215E797C4165.mft (raw, json)
Hash identifier:          OoiFi1Eh3h1rU52koTRqGafRKLFPratBHdU2TZN8U5Y=
Subject key identifier:   7F:1A:8C:D2:CA:8B:13:BC:BA:45:49:BD:71:9C:3D:02:35:8C:2D:1B
Authority key identifier: 4E:1C:7D:0B:F8:91:C1:83:45:8C:47:AB:11:34:21:5E:79:7C:41:65
Certificate issuer:       /CN=4E1C7D0BF891C183458C47AB1134215E797C4165
Certificate serial:       4473A3B37F0488A1CEF19DCFCF1488E0D40DE88C
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4E1C7D0BF891C183458C47AB1134215E797C4165.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/6bac619b-21e6-41d6-8e94-5804538c543e/0/4E1C7D0BF891C183458C47AB1134215E797C4165.mft
Manifest number:          0220
Signing time:             Sat 24 Jan 2026 16:01:25 +0000
Manifest this update:     Sat 24 Jan 2026 15:56:25 +0000
Manifest next update:     Tue 27 Jan 2026 19:42:25 +0000
Files and hashes:         1: 4E1C7D0BF891C183458C47AB1134215E797C4165.crl (hash: nJj0jmaF7Zi3N6LfxU42oOgPpuuT8hzNVUVNk5+0f4w=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/6bac619b-21e6-41d6-8e94-5804538c543e/0/4E1C7D0BF891C183458C47AB1134215E797C4165.crl
                          rsync://repo-rpki.idnic.net/repo/6bac619b-21e6-41d6-8e94-5804538c543e/0/4E1C7D0BF891C183458C47AB1134215E797C4165.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4E1C7D0BF891C183458C47AB1134215E797C4165.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 27 Jan 2026 19:42:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:73:a3:b3:7f:04:88:a1:ce:f1:9d:cf:cf:14:88:e0:d4:0d:e8:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4E1C7D0BF891C183458C47AB1134215E797C4165
        Validity
            Not Before: Jan 24 15:56:25 2026 GMT
            Not After : Jan 27 19:42:25 2026 GMT
        Subject: CN=7F1A8CD2CA8B13BCBA4549BD719C3D02358C2D1B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:5b:d0:0e:82:f3:21:31:a7:18:c0:3d:be:32:
                    ff:97:9d:31:72:cc:3c:50:24:d4:f6:6b:65:12:5d:
                    6d:ae:80:df:b0:09:dd:71:81:db:fb:b2:38:ce:9e:
                    f0:48:d8:84:8c:52:29:f6:ab:04:dc:ac:6c:24:c8:
                    69:b8:d0:1d:25:89:02:5e:ad:ce:61:0d:fe:b8:c7:
                    db:60:fe:26:47:8b:b3:bb:fb:07:de:40:b8:6f:c6:
                    3f:87:01:bd:84:32:3a:d4:bb:e8:8a:7e:c4:34:e7:
                    8a:d1:33:5a:25:e6:65:c0:71:bf:97:4f:39:e4:d5:
                    54:3f:ef:be:73:5e:55:9f:23:bf:c4:32:41:5e:b1:
                    16:2a:b6:b7:05:8e:1d:8c:36:e0:38:45:91:07:56:
                    a8:8a:64:99:83:3b:4a:0a:99:ce:dd:61:aa:2c:b0:
                    bc:c8:b4:86:59:5b:af:67:49:e6:b9:91:fb:62:d3:
                    17:24:9a:a2:e2:d0:e6:a9:bd:67:65:c4:33:c9:72:
                    72:c6:a2:eb:df:90:58:d2:f9:a7:14:a8:8c:e1:5e:
                    e1:95:3e:74:c4:81:82:33:dc:2c:d2:92:58:f7:7f:
                    a3:b8:93:24:7e:b5:bd:96:cf:5a:23:4a:d8:16:d7:
                    0f:50:6e:3d:67:83:16:c0:40:2c:d5:d6:b1:66:51:
                    01:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:1A:8C:D2:CA:8B:13:BC:BA:45:49:BD:71:9C:3D:02:35:8C:2D:1B
            X509v3 Authority Key Identifier:
                keyid:4E:1C:7D:0B:F8:91:C1:83:45:8C:47:AB:11:34:21:5E:79:7C:41:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/6bac619b-21e6-41d6-8e94-5804538c543e/0/4E1C7D0BF891C183458C47AB1134215E797C4165.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4E1C7D0BF891C183458C47AB1134215E797C4165.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6bac619b-21e6-41d6-8e94-5804538c543e/0/4E1C7D0BF891C183458C47AB1134215E797C4165.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:7d:21:5d:ba:fc:b5:b0:75:1c:64:24:be:75:4c:f9:14:89:
         0c:0f:0b:c9:1a:14:73:1e:2c:77:86:06:6c:78:60:22:3c:07:
         1d:0b:a8:0e:60:1d:0e:8b:7b:5f:8b:7f:02:2a:74:ef:bb:c1:
         aa:ad:27:48:24:df:04:d8:2a:a5:ea:4a:8b:1d:30:3d:45:72:
         df:ca:50:40:03:ca:62:3c:34:77:23:35:fa:6b:a6:1d:b1:8e:
         20:7c:4e:58:1e:0d:0b:44:3e:e1:eb:c8:b6:e7:1c:21:68:0d:
         a8:7c:27:c4:df:c4:10:27:67:ea:58:2f:02:a9:1e:1d:c9:83:
         47:17:5e:d4:7c:d7:fa:6c:74:77:63:59:0f:c6:9c:df:37:55:
         1e:8f:34:51:4b:c2:5d:dd:77:de:df:1d:45:fc:f7:6a:86:d9:
         bf:ca:a7:ab:39:83:2d:bb:5c:0a:b6:36:ac:15:04:1c:0b:05:
         d3:97:d0:6f:1e:ec:18:70:f2:12:fc:b2:d6:61:b3:53:0d:30:
         b4:4c:40:1d:93:3c:a9:df:07:ba:11:74:e3:76:df:d9:25:09:
         50:08:32:f1:39:79:3d:fc:cf:e4:ed:a9:d2:e1:80:ce:b0:8e:
         ec:3c:74:b6:2d:f6:59:34:4c:1b:5e:23:99:6d:42:01:7d:33:
         db:f6:9a:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 01:06:01 2026 by rpki-client