This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/700aed1d-94c9-49a6-a609-882e03cd07ba/0/919B60E4D7E1171B6624F318ADA1B74502A3A018.mft
File:                     919B60E4D7E1171B6624F318ADA1B74502A3A018.mft (raw, json)
Hash identifier:          Dl1ZyphChOseSxpmlQ/oBl6tqFy0WR6i0m3ktLE9uV0=
Subject key identifier:   E8:9A:51:51:AA:26:3A:2F:D0:D0:B4:0F:52:51:28:C3:AD:7F:78:2C
Authority key identifier: 91:9B:60:E4:D7:E1:17:1B:66:24:F3:18:AD:A1:B7:45:02:A3:A0:18
Certificate issuer:       /CN=919B60E4D7E1171B6624F318ADA1B74502A3A018
Certificate serial:       26C33ED7FCDB985B2032967064CDE0A5E29248D8
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/919B60E4D7E1171B6624F318ADA1B74502A3A018.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/700aed1d-94c9-49a6-a609-882e03cd07ba/0/919B60E4D7E1171B6624F318ADA1B74502A3A018.mft
Manifest number:          0541
Signing time:             Sat 24 Jan 2026 17:50:44 +0000
Manifest this update:     Sat 24 Jan 2026 17:45:44 +0000
Manifest next update:     Wed 28 Jan 2026 02:27:44 +0000
Files and hashes:         1: 919B60E4D7E1171B6624F318ADA1B74502A3A018.crl (hash: 2NLiHvJwZM/OtDUSCKnFaU1EfikNhDCcrwE5MrTKtE8=)
                          2: 3130332e3130362e3131362e302f32342d3234203d3e20313336383836.roa (hash: orZMBlY9QwaffF3Sj5GAYnuUKegFXWi6cel4pBtcO+Y=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/700aed1d-94c9-49a6-a609-882e03cd07ba/0/919B60E4D7E1171B6624F318ADA1B74502A3A018.crl
                          rsync://repo-rpki.idnic.net/repo/700aed1d-94c9-49a6-a609-882e03cd07ba/0/919B60E4D7E1171B6624F318ADA1B74502A3A018.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/919B60E4D7E1171B6624F318ADA1B74502A3A018.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 28 Jan 2026 02:27:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:c3:3e:d7:fc:db:98:5b:20:32:96:70:64:cd:e0:a5:e2:92:48:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=919B60E4D7E1171B6624F318ADA1B74502A3A018
        Validity
            Not Before: Jan 24 17:45:44 2026 GMT
            Not After : Jan 28 02:27:44 2026 GMT
        Subject: CN=E89A5151AA263A2FD0D0B40F525128C3AD7F782C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:98:88:5e:0a:1f:77:d2:9f:ef:a4:6e:90:e9:
                    41:67:98:86:64:04:13:54:f0:f8:a6:c3:91:81:53:
                    7a:d8:18:36:e8:23:5a:2b:e9:a5:ac:3c:e2:89:ad:
                    c5:fb:f4:9b:af:c7:d8:f1:21:8b:79:2a:b4:d0:20:
                    89:5f:df:df:03:ce:69:47:18:92:c1:46:88:74:61:
                    74:6c:7f:52:81:1d:b7:fa:c6:40:11:97:f5:95:07:
                    1e:93:d2:4d:72:5d:62:1c:b6:3a:a1:b0:90:31:f2:
                    ff:c8:86:e5:99:02:1b:28:c8:ae:c8:2e:27:83:83:
                    30:5a:84:5e:5a:cc:a2:f6:0e:ce:2a:e3:fb:7b:8b:
                    ed:de:cf:d1:05:90:f8:ad:bd:49:70:4e:22:5b:81:
                    d5:63:9f:f5:67:1a:3f:4c:6c:bd:76:43:6e:42:88:
                    56:55:75:7d:a1:1d:50:2e:d2:0e:f3:04:ff:8e:81:
                    f0:80:3a:b5:d6:c0:a0:e1:8c:83:a5:e1:2d:32:b3:
                    71:02:66:ae:a4:b9:fc:87:0e:6c:d9:1d:bf:4e:93:
                    3b:fa:47:3b:73:88:b5:da:ba:8f:f4:8f:1c:4b:04:
                    e3:9b:af:d9:54:56:71:19:92:c0:28:42:db:8d:c5:
                    21:a1:79:6d:23:b2:23:20:09:fa:4c:5d:eb:72:e1:
                    c7:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:9A:51:51:AA:26:3A:2F:D0:D0:B4:0F:52:51:28:C3:AD:7F:78:2C
            X509v3 Authority Key Identifier:
                keyid:91:9B:60:E4:D7:E1:17:1B:66:24:F3:18:AD:A1:B7:45:02:A3:A0:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/700aed1d-94c9-49a6-a609-882e03cd07ba/0/919B60E4D7E1171B6624F318ADA1B74502A3A018.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/919B60E4D7E1171B6624F318ADA1B74502A3A018.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/700aed1d-94c9-49a6-a609-882e03cd07ba/0/919B60E4D7E1171B6624F318ADA1B74502A3A018.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:76:f5:74:e1:0d:b2:61:3c:f1:21:5c:9e:bb:b6:e8:2e:94:
         64:24:f0:7e:ef:0e:26:8f:bb:1c:6f:59:6b:87:36:6a:ad:a6:
         2b:b9:1e:ea:82:f1:3b:fc:a9:69:eb:8a:c1:80:4d:b7:85:c5:
         85:61:77:30:76:13:be:54:6b:6e:c2:e7:27:0c:7a:66:4e:f1:
         ef:b1:50:47:81:0e:be:75:d4:f4:5f:16:2a:16:59:24:86:d4:
         4e:03:40:17:38:cb:09:89:fe:30:09:dc:e6:d9:ee:09:31:ce:
         05:fe:a0:4e:a8:1f:39:08:d2:35:a0:3e:bc:6b:60:41:3d:6b:
         fb:3b:39:ea:71:32:ea:19:48:7e:28:03:58:e4:f0:8a:65:b4:
         51:cb:03:58:28:97:b0:aa:17:f7:7b:69:51:d5:f3:4f:ad:75:
         a6:52:ae:7c:27:0f:a1:ac:c7:58:04:7e:97:50:4f:db:02:ab:
         71:26:dc:1c:3b:79:b7:71:64:b0:f5:fa:0e:d4:1a:e5:99:d9:
         1f:a5:86:3a:f4:6b:9c:e4:33:81:e8:7e:c7:4c:fb:4c:14:29:
         56:4a:71:14:cf:45:54:80:16:75:17:40:af:91:d5:79:cc:22:
         a5:f2:7d:30:d7:88:fc:0e:90:2a:75:5c:41:4a:02:aa:ed:6a:
         55:2a:82:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 23:16:54 2026 by rpki-client