This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/7488d4c0-dc92-4aa8-b169-52cab2a61ba1/0/247D705AC2F14A763F3EB87E2E41158A251F3D76.mft
File:                     247D705AC2F14A763F3EB87E2E41158A251F3D76.mft (raw, json)
Hash identifier:          gNmsOINNwjp8G89OThLPkiMAR7N86BMQU2AOMfuewoI=
Subject key identifier:   86:F1:A3:48:B8:FB:17:7A:B2:EB:80:78:9F:99:50:8A:4E:0C:01:AB
Authority key identifier: 24:7D:70:5A:C2:F1:4A:76:3F:3E:B8:7E:2E:41:15:8A:25:1F:3D:76
Certificate issuer:       /CN=247D705AC2F14A763F3EB87E2E41158A251F3D76
Certificate serial:       141D3CD3796F3A94DC33391899D515B106AAA33B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/247D705AC2F14A763F3EB87E2E41158A251F3D76.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/7488d4c0-dc92-4aa8-b169-52cab2a61ba1/0/247D705AC2F14A763F3EB87E2E41158A251F3D76.mft
Manifest number:          0333
Signing time:             Sat 24 Jan 2026 03:11:14 +0000
Manifest this update:     Sat 24 Jan 2026 03:06:14 +0000
Manifest next update:     Tue 27 Jan 2026 14:01:14 +0000
Files and hashes:         1: 247D705AC2F14A763F3EB87E2E41158A251F3D76.crl (hash: suermDPw3kQuEH021DgGFsvR7qftaS1gJ4Wnri6RjQ8=)
                          2: 323430343a653930303a343030303a3a2f33342d3334203d3e203436303632.roa (hash: KX+TcfWMtFMWBw+/wMS/PSYWDCnYN7O3lGExEaabLIU=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/7488d4c0-dc92-4aa8-b169-52cab2a61ba1/0/247D705AC2F14A763F3EB87E2E41158A251F3D76.crl
                          rsync://repo-rpki.idnic.net/repo/7488d4c0-dc92-4aa8-b169-52cab2a61ba1/0/247D705AC2F14A763F3EB87E2E41158A251F3D76.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/247D705AC2F14A763F3EB87E2E41158A251F3D76.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 27 Jan 2026 14:01:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:1d:3c:d3:79:6f:3a:94:dc:33:39:18:99:d5:15:b1:06:aa:a3:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=247D705AC2F14A763F3EB87E2E41158A251F3D76
        Validity
            Not Before: Jan 24 03:06:14 2026 GMT
            Not After : Jan 27 14:01:14 2026 GMT
        Subject: CN=86F1A348B8FB177AB2EB80789F99508A4E0C01AB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:37:b6:3d:0b:fb:ca:f2:9b:c4:4d:85:96:29:
                    b9:ff:2a:7b:a6:a6:36:33:4d:23:d9:ac:6c:60:46:
                    79:53:f4:e7:10:6e:39:23:0b:84:39:0d:45:a6:55:
                    08:fe:3f:35:3d:1c:2e:8e:ab:e9:2c:fd:42:69:1d:
                    c5:0b:d1:66:a3:92:7d:c6:37:14:f2:c2:fb:f8:0a:
                    ad:f8:49:9e:80:67:58:bb:0d:1d:36:ff:fe:af:b2:
                    4b:fd:13:eb:38:1e:2c:4d:38:c2:36:fe:51:28:df:
                    fa:28:5f:e8:96:13:78:4f:cf:01:69:24:3c:96:aa:
                    d2:df:d9:85:7c:ac:b1:7e:4b:ab:40:36:f5:85:1d:
                    6c:1e:d1:83:a5:c9:4b:49:19:08:6e:16:04:15:06:
                    a5:1b:20:1c:ff:4e:9f:f2:49:27:5b:fd:00:a7:f2:
                    9b:94:d1:bd:ee:18:4b:b3:6c:ea:22:d8:c8:f1:21:
                    ce:94:dc:0b:9e:07:1f:37:d0:92:22:7d:7c:81:61:
                    20:02:b3:10:da:48:5e:1e:91:48:21:42:96:f1:e7:
                    03:8c:3c:3d:03:cc:62:b1:07:84:ef:99:7d:63:3d:
                    4f:4f:cc:51:10:6a:88:90:f5:2a:4b:78:cd:9e:9c:
                    ab:37:d9:c3:56:c6:3b:d2:c2:5b:e6:4c:11:9f:92:
                    a3:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:F1:A3:48:B8:FB:17:7A:B2:EB:80:78:9F:99:50:8A:4E:0C:01:AB
            X509v3 Authority Key Identifier:
                keyid:24:7D:70:5A:C2:F1:4A:76:3F:3E:B8:7E:2E:41:15:8A:25:1F:3D:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/7488d4c0-dc92-4aa8-b169-52cab2a61ba1/0/247D705AC2F14A763F3EB87E2E41158A251F3D76.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/247D705AC2F14A763F3EB87E2E41158A251F3D76.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7488d4c0-dc92-4aa8-b169-52cab2a61ba1/0/247D705AC2F14A763F3EB87E2E41158A251F3D76.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:04:fe:72:24:6a:81:d5:f2:86:02:8d:86:59:31:52:10:11:
         a0:df:f7:47:bd:4c:30:bd:80:eb:2b:13:4b:3c:cf:b5:4b:38:
         0f:46:00:0f:4e:85:d6:2b:cb:10:d1:8d:7f:70:2f:79:66:18:
         18:9f:4d:c0:8b:ea:3a:d3:0b:a5:1d:f3:f7:bd:80:b3:71:3f:
         44:20:62:9f:de:2e:a2:18:a3:fc:5b:c4:b6:02:40:a2:1f:32:
         55:04:8d:e8:46:b7:39:9d:d8:6d:bc:aa:36:63:4c:9d:b6:8e:
         84:f8:aa:87:a4:71:8f:d4:73:17:00:a9:8b:45:3e:63:35:01:
         08:ad:01:9a:1d:60:f9:93:56:34:fb:c8:2d:41:62:2e:39:8b:
         f7:22:14:96:ce:55:97:21:11:cc:72:59:3e:0b:fa:ff:47:7c:
         e4:88:f1:b5:9a:6b:80:a5:06:09:3e:64:93:8e:20:a6:50:8e:
         cf:5a:23:01:99:6a:6d:a8:70:7d:ed:5f:b1:ea:73:c0:a6:53:
         f1:3c:6e:b4:cc:11:11:27:aa:d6:e0:28:5d:e4:c5:76:b9:01:
         04:6f:e1:4e:71:28:a9:d0:a0:9b:6b:25:68:48:ea:c1:06:96:
         26:74:36:97:c3:43:fb:cd:61:51:54:01:9d:85:5d:e8:40:c8:
         4e:3b:83:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:53:45 2026 by rpki-client