This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/773d2b60-12c8-413e-b941-393e00fdd653/0/ADB9C197352F8128F6DAA47A227D3869A4C238F4.mft
File:                     ADB9C197352F8128F6DAA47A227D3869A4C238F4.mft (raw, json)
Hash identifier:          E4LjvuF1OY6uci3vfIfT8xFpGrKnlo4eV3wV3QJK/wI=
Subject key identifier:   31:21:E4:46:91:C1:47:72:C8:8D:46:28:01:3D:A8:B4:8C:99:4E:2A
Authority key identifier: AD:B9:C1:97:35:2F:81:28:F6:DA:A4:7A:22:7D:38:69:A4:C2:38:F4
Certificate issuer:       /CN=ADB9C197352F8128F6DAA47A227D3869A4C238F4
Certificate serial:       58654B7D5DFDFF56DF55F6B9DCAD9232BE4FE511
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ADB9C197352F8128F6DAA47A227D3869A4C238F4.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/773d2b60-12c8-413e-b941-393e00fdd653/0/ADB9C197352F8128F6DAA47A227D3869A4C238F4.mft
Manifest number:          026E
Signing time:             Sat 24 Jan 2026 18:20:49 +0000
Manifest this update:     Sat 24 Jan 2026 18:15:49 +0000
Manifest next update:     Tue 27 Jan 2026 21:21:49 +0000
Files and hashes:         1: 3130332e3137372e3231342e302f32342d3234203d3e20313437313633.roa (hash: BQDZ7beKpSG5YJTRW/gbj7YmxhbuMugwzWVLa45Kdxg=)
                          2: ADB9C197352F8128F6DAA47A227D3869A4C238F4.crl (hash: iUBrCMKKp7Ju3CXTa2YXxjpjh9oGOHM12HT1tjHTSro=)
                          3: 3130332e3137372e3231352e302f32342d3234203d3e20313437313633.roa (hash: dUSjnFJULsQt0ZMfSuCJpifmDF9rtnb0yNIzE9XIOWo=)
                          4: 3130332e3137372e3231342e302f32332d3233203d3e20313437313633.roa (hash: 87iDHKDOT61940UCNUXAHSvFwBkKLRCDPPSdxU2koYI=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/773d2b60-12c8-413e-b941-393e00fdd653/0/ADB9C197352F8128F6DAA47A227D3869A4C238F4.crl
                          rsync://repo-rpki.idnic.net/repo/773d2b60-12c8-413e-b941-393e00fdd653/0/ADB9C197352F8128F6DAA47A227D3869A4C238F4.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ADB9C197352F8128F6DAA47A227D3869A4C238F4.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 27 Jan 2026 21:21:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:65:4b:7d:5d:fd:ff:56:df:55:f6:b9:dc:ad:92:32:be:4f:e5:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ADB9C197352F8128F6DAA47A227D3869A4C238F4
        Validity
            Not Before: Jan 24 18:15:49 2026 GMT
            Not After : Jan 27 21:21:49 2026 GMT
        Subject: CN=3121E44691C14772C88D4628013DA8B48C994E2A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:52:24:1a:e7:40:c9:3e:af:7a:03:20:6f:f4:
                    2d:9c:46:41:ee:ee:ff:f3:a2:f2:c7:0f:3c:91:12:
                    0c:c0:3f:57:3f:13:3a:95:f9:c1:a7:89:0a:19:d9:
                    dd:3b:63:ff:73:74:c8:2c:ae:d3:b8:20:8a:65:f3:
                    ce:1f:fd:91:10:68:05:1b:0d:82:83:fa:df:9b:56:
                    98:02:f1:01:77:41:79:f1:f6:3d:da:62:64:ab:bf:
                    bc:41:31:fc:6e:0e:1b:63:72:10:ca:99:d0:bf:e9:
                    ec:ab:90:74:12:e7:14:98:0d:08:37:9b:e6:7e:a0:
                    78:c8:d8:8d:6c:5b:e5:cf:dd:cf:47:0d:a9:f4:04:
                    07:04:50:26:e4:f0:d5:a9:d0:b8:7e:24:fe:87:22:
                    85:12:a6:14:33:13:df:b3:6d:ed:a8:6e:37:92:aa:
                    ea:51:cb:d5:38:28:2d:e5:95:0c:15:b3:be:eb:9b:
                    f5:45:00:85:86:7c:cf:cb:3c:b8:17:74:f8:4f:e3:
                    fd:a9:a8:08:7c:09:b3:54:ac:08:2a:c9:73:2b:94:
                    a8:8c:82:29:65:99:44:fd:d7:66:45:ec:22:a4:50:
                    b3:ac:50:f7:da:19:68:97:d0:b0:98:50:5f:80:ca:
                    a2:35:94:c3:ac:b3:1d:06:de:ac:d8:96:b2:6a:20:
                    f9:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:21:E4:46:91:C1:47:72:C8:8D:46:28:01:3D:A8:B4:8C:99:4E:2A
            X509v3 Authority Key Identifier:
                keyid:AD:B9:C1:97:35:2F:81:28:F6:DA:A4:7A:22:7D:38:69:A4:C2:38:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/773d2b60-12c8-413e-b941-393e00fdd653/0/ADB9C197352F8128F6DAA47A227D3869A4C238F4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ADB9C197352F8128F6DAA47A227D3869A4C238F4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/773d2b60-12c8-413e-b941-393e00fdd653/0/ADB9C197352F8128F6DAA47A227D3869A4C238F4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:63:92:1f:c3:ea:19:05:7a:be:1e:f1:99:0c:46:c7:69:22:
         9e:ee:27:4c:a8:6b:c0:2a:a0:2b:98:d8:b0:18:0c:99:75:a2:
         e8:4e:f6:21:e1:7e:0f:2d:af:06:03:78:92:3b:d1:b3:de:41:
         d7:25:55:37:45:97:48:55:6b:f4:92:f1:ec:73:08:d5:c7:db:
         3d:65:e5:2d:b3:46:bc:d1:3f:92:5b:df:5c:36:41:03:4c:b8:
         00:10:d5:07:76:56:5c:2d:84:59:84:69:f2:04:c5:48:09:7d:
         fd:88:b4:f8:c0:33:5d:16:c3:79:21:31:3a:52:b7:77:7f:ac:
         c9:82:7f:5d:20:30:ea:ad:0e:db:eb:26:0a:1d:d2:68:3d:ef:
         3c:e8:43:e9:2c:65:c1:71:e3:ff:2f:ac:12:56:42:c9:d7:ed:
         1c:3e:16:3d:4a:8d:a4:cb:a6:79:9e:cc:52:a3:9a:78:2e:ee:
         2c:4e:be:50:10:ac:64:36:a2:3d:5e:fb:6b:29:bc:5c:88:37:
         ff:e0:14:6e:f7:91:99:0a:d4:6d:45:8f:08:22:09:a4:4c:5b:
         41:09:20:71:71:f2:16:28:0a:09:31:49:25:c0:fd:df:61:64:
         1d:fc:85:1a:94:5c:9d:61:f9:be:db:3d:6e:9b:c1:27:fd:4a:
         46:35:13:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 20:32:58 2026 by rpki-client