This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/6ef0013b-59a6-4733-89f8-28fa3d88579f/0/E0AC9F73542C4FA1E52F9E565EED952D4528ABD5.mft
File:                     E0AC9F73542C4FA1E52F9E565EED952D4528ABD5.mft (raw, json)
Hash identifier:          rVb3ShuzcK1bSjavDdpKsZFuANIDZvIfrfEIAqcK8PY=
Subject key identifier:   BE:29:CA:77:6A:9D:AC:DF:EF:E4:5C:87:8A:1D:89:4A:FE:BC:5B:BE
Authority key identifier: E0:AC:9F:73:54:2C:4F:A1:E5:2F:9E:56:5E:ED:95:2D:45:28:AB:D5
Certificate issuer:       /CN=E0AC9F73542C4FA1E52F9E565EED952D4528ABD5
Certificate serial:       1ECAC4EE77A6552E17368F5D9040234BAB412A7C
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E0AC9F73542C4FA1E52F9E565EED952D4528ABD5.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/6ef0013b-59a6-4733-89f8-28fa3d88579f/0/E0AC9F73542C4FA1E52F9E565EED952D4528ABD5.mft
Manifest number:          01D4
Signing time:             Fri 23 Jan 2026 07:52:00 +0000
Manifest this update:     Fri 23 Jan 2026 07:47:00 +0000
Manifest next update:     Mon 26 Jan 2026 16:40:00 +0000
Files and hashes:         1: 3130332e3130312e3231382e302f32332d3234203d3e20313432333437.roa (hash: 2zfFRFwk/C19Fo4LWjVGEDAydcqPi8NpYbWAmcFYAik=)
                          2: E0AC9F73542C4FA1E52F9E565EED952D4528ABD5.crl (hash: kRLWk4/S7UU9et8lJtHseh+c3spTAx4ZG13y9G2MjVE=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/6ef0013b-59a6-4733-89f8-28fa3d88579f/0/E0AC9F73542C4FA1E52F9E565EED952D4528ABD5.crl
                          rsync://repo-rpki.idnic.net/repo/6ef0013b-59a6-4733-89f8-28fa3d88579f/0/E0AC9F73542C4FA1E52F9E565EED952D4528ABD5.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E0AC9F73542C4FA1E52F9E565EED952D4528ABD5.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 26 Jan 2026 16:40:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:ca:c4:ee:77:a6:55:2e:17:36:8f:5d:90:40:23:4b:ab:41:2a:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E0AC9F73542C4FA1E52F9E565EED952D4528ABD5
        Validity
            Not Before: Jan 23 07:47:00 2026 GMT
            Not After : Jan 26 16:40:00 2026 GMT
        Subject: CN=BE29CA776A9DACDFEFE45C878A1D894AFEBC5BBE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:c9:57:ca:4f:09:ba:23:be:de:37:c3:7a:35:
                    55:ac:7c:64:2c:82:66:39:cd:ce:e2:86:6d:30:ba:
                    4a:fb:b0:0a:e0:7f:bc:b6:d2:e0:94:f3:e8:8c:24:
                    3f:9a:26:ed:91:69:c8:43:81:3f:f9:57:9e:62:66:
                    a8:2d:31:66:e9:05:4c:c4:1a:cf:89:94:6f:16:97:
                    fd:da:59:0f:2e:23:33:29:3f:48:58:fa:49:c2:ba:
                    78:d4:54:5f:9e:73:e5:d4:1b:9e:1c:ab:56:2b:b5:
                    b7:6c:6c:06:49:a1:b0:7b:ed:10:68:00:21:0c:07:
                    60:50:54:43:a8:a5:7c:92:c3:e3:dd:25:7d:16:d7:
                    fb:ed:11:e2:f9:1b:f7:4c:63:db:03:97:29:bd:d9:
                    82:1e:8d:7d:53:f1:3e:69:99:95:60:f9:b2:dc:d1:
                    ab:be:8e:05:6a:a0:fd:f6:d6:8e:01:24:a1:0a:c6:
                    8e:4b:ee:ab:e8:62:52:9b:d6:78:d2:fb:1b:ab:c7:
                    54:4a:a9:9a:dd:44:c1:28:e3:d5:61:2f:94:74:16:
                    24:ea:71:58:7c:54:0c:d0:46:09:37:fe:7b:9e:4d:
                    04:96:01:dd:a3:d5:cc:93:dd:33:7f:8d:32:da:91:
                    93:47:39:ac:b9:73:e6:21:27:72:28:81:a2:36:83:
                    69:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:29:CA:77:6A:9D:AC:DF:EF:E4:5C:87:8A:1D:89:4A:FE:BC:5B:BE
            X509v3 Authority Key Identifier:
                keyid:E0:AC:9F:73:54:2C:4F:A1:E5:2F:9E:56:5E:ED:95:2D:45:28:AB:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/6ef0013b-59a6-4733-89f8-28fa3d88579f/0/E0AC9F73542C4FA1E52F9E565EED952D4528ABD5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E0AC9F73542C4FA1E52F9E565EED952D4528ABD5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6ef0013b-59a6-4733-89f8-28fa3d88579f/0/E0AC9F73542C4FA1E52F9E565EED952D4528ABD5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:78:40:4a:38:e9:51:c9:50:9c:42:78:22:10:19:5d:ad:66:
         f8:70:c7:c9:25:f8:40:82:0f:b7:7e:e5:df:eb:d3:e1:95:e3:
         2d:ad:59:ec:57:c0:73:3a:e1:4e:58:67:6d:a7:04:64:86:bd:
         6a:9c:ce:58:8c:e2:8f:91:33:2a:81:57:32:5c:8c:6c:2f:4e:
         b2:6a:f5:a4:eb:2f:67:77:13:90:82:f7:05:c5:19:8a:a1:93:
         ed:2d:05:e0:db:91:69:55:a0:6a:c9:0d:99:c1:a1:d0:24:cb:
         cf:c5:3b:63:ce:68:2a:ad:9e:15:4f:41:79:d4:3a:dd:a1:4b:
         0e:66:33:c7:54:8d:0a:3c:ee:12:f4:00:4a:94:d7:55:ed:82:
         8f:a5:ba:9f:40:f0:1e:f5:51:b7:7b:e2:45:52:cd:b4:bb:53:
         56:cf:01:a8:6c:13:a6:2a:78:eb:d8:9b:9d:27:9e:60:77:78:
         c0:8e:1a:43:36:33:3e:5a:ef:1c:25:75:ef:a7:39:d9:f6:af:
         61:5b:7f:56:89:f2:0c:b2:a2:a1:0d:a6:39:05:3e:39:ea:73:
         2c:97:86:f8:04:04:9c:a6:de:c6:ca:b4:0c:07:a0:53:8b:8f:
         d3:a0:ea:d0:00:f3:65:50:66:54:bd:eb:d9:7c:d1:60:ff:85:
         00:2e:47:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:46:37 2026 by rpki-client