This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/76db4cb8-faea-4530-b29e-0b7a4affc316/0/3053FFA7A0123B032FC9458281063C89F007FA98.mft
File:                     3053FFA7A0123B032FC9458281063C89F007FA98.mft (raw, json)
Hash identifier:          h+CI8iDQ1prLu18wN9LJgXJAImdID0H3cTxwIkdR9k4=
Subject key identifier:   9A:31:47:0E:16:E6:0F:C1:DF:7C:FF:0C:07:2F:93:7F:7B:01:63:42
Authority key identifier: 30:53:FF:A7:A0:12:3B:03:2F:C9:45:82:81:06:3C:89:F0:07:FA:98
Certificate issuer:       /CN=3053FFA7A0123B032FC9458281063C89F007FA98
Certificate serial:       1AC6833DA570F8153198D0DB91D9C95054682357
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3053FFA7A0123B032FC9458281063C89F007FA98.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/76db4cb8-faea-4530-b29e-0b7a4affc316/0/3053FFA7A0123B032FC9458281063C89F007FA98.mft
Manifest number:          03C0
Signing time:             Sat 24 Jan 2026 23:11:31 +0000
Manifest this update:     Sat 24 Jan 2026 23:06:31 +0000
Manifest next update:     Wed 28 Jan 2026 06:20:31 +0000
Files and hashes:         1: 3130332e3136382e3138382e302f32332d3234203d3e203137393935.roa (hash: X8fSVyl/ekaFc0qdxtX72tyLH/RXxnJtVkW2HtewxfI=)
                          2: 3053FFA7A0123B032FC9458281063C89F007FA98.crl (hash: NHEMqGwnIndouq2VSOFhcb/bXXhC+Sjx4gZLD0N+Evo=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/76db4cb8-faea-4530-b29e-0b7a4affc316/0/3053FFA7A0123B032FC9458281063C89F007FA98.crl
                          rsync://repo-rpki.idnic.net/repo/76db4cb8-faea-4530-b29e-0b7a4affc316/0/3053FFA7A0123B032FC9458281063C89F007FA98.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3053FFA7A0123B032FC9458281063C89F007FA98.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 28 Jan 2026 06:20:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:c6:83:3d:a5:70:f8:15:31:98:d0:db:91:d9:c9:50:54:68:23:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3053FFA7A0123B032FC9458281063C89F007FA98
        Validity
            Not Before: Jan 24 23:06:31 2026 GMT
            Not After : Jan 28 06:20:31 2026 GMT
        Subject: CN=9A31470E16E60FC1DF7CFF0C072F937F7B016342
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:58:3b:eb:f9:2a:d3:4e:02:b9:9a:64:55:77:
                    e3:ae:d7:35:8e:ad:46:0f:96:16:b4:a2:68:c5:c9:
                    8c:3a:be:b6:5e:d2:79:21:4f:64:d7:61:3c:12:8b:
                    7d:b4:2b:4d:3f:e7:cc:5d:4c:3e:e1:52:e4:cc:02:
                    4c:26:09:38:b7:01:92:42:44:15:9f:19:18:d7:0c:
                    04:f3:27:d6:45:75:fc:d4:50:11:01:68:b7:ca:6b:
                    01:d9:d1:1a:3b:92:09:9a:10:c1:a6:d1:a7:46:db:
                    0a:88:a6:d5:59:61:49:f9:36:9c:99:da:4c:48:27:
                    b9:1b:a2:88:a2:e5:f8:51:ae:4e:79:3b:ad:60:f0:
                    45:85:06:7f:f3:cb:d1:81:ed:36:36:f0:6a:44:b9:
                    54:58:92:75:5e:e9:8a:56:63:39:28:38:64:0e:ac:
                    d0:5d:20:88:ac:aa:cc:aa:98:1e:29:65:4e:71:b7:
                    6d:6b:40:a4:cc:3d:04:88:f2:0d:ff:d2:4d:9d:cc:
                    28:18:2b:57:44:e7:7c:0c:8e:cb:94:6a:94:f9:e1:
                    d2:c8:4d:f3:1c:09:cf:b2:6f:9e:f8:76:6f:d6:de:
                    fd:ed:ef:64:f0:a8:05:06:9a:ff:26:b7:ba:3f:23:
                    d4:01:9c:2d:c4:5e:e3:68:0a:9c:09:ff:2f:47:81:
                    fb:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:31:47:0E:16:E6:0F:C1:DF:7C:FF:0C:07:2F:93:7F:7B:01:63:42
            X509v3 Authority Key Identifier:
                keyid:30:53:FF:A7:A0:12:3B:03:2F:C9:45:82:81:06:3C:89:F0:07:FA:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/76db4cb8-faea-4530-b29e-0b7a4affc316/0/3053FFA7A0123B032FC9458281063C89F007FA98.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3053FFA7A0123B032FC9458281063C89F007FA98.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/76db4cb8-faea-4530-b29e-0b7a4affc316/0/3053FFA7A0123B032FC9458281063C89F007FA98.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:58:04:15:6b:31:d3:61:da:5c:50:a2:1e:9d:6b:3e:03:d4:
         3a:d7:34:1f:58:54:48:00:66:6f:05:ef:dc:9d:c6:93:82:78:
         84:e7:f9:6e:cc:ce:fa:17:1c:4c:e2:7c:7f:bb:4e:bf:56:1c:
         1d:ea:1e:35:14:9f:3f:ae:26:79:df:95:79:2b:5b:c0:e3:12:
         9a:47:83:e8:2c:c9:b1:5f:5e:34:26:2d:bf:c2:68:52:10:f5:
         1b:a0:36:04:a4:b6:14:7d:68:10:4a:a5:f5:25:b2:ac:19:08:
         d6:78:62:a4:d2:6a:df:b1:96:f7:87:0a:84:aa:75:a0:9a:a5:
         a7:d1:c1:25:28:9d:f1:46:fe:09:ea:80:26:d7:4c:6b:63:ce:
         38:87:87:a7:c6:7d:c2:c0:2e:c0:24:1d:16:a8:b1:e8:99:1c:
         4f:97:24:f3:2f:d5:9c:d3:b3:93:0d:b7:24:81:9e:6a:51:7e:
         f7:37:f6:42:f7:79:30:69:82:a6:8f:5c:04:d7:9e:23:da:b4:
         87:66:76:bd:27:f9:2e:69:7b:c8:3a:ee:df:06:de:48:22:d7:
         4c:0d:71:c3:05:77:97:0f:7c:76:d8:27:a0:42:07:2a:dc:bc:
         b9:3c:e1:58:2d:31:0e:a7:c4:8c:80:00:ed:d6:ba:b3:60:87:
         27:c3:c2:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 23:35:54 2026 by rpki-client