This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/78d774f4-2300-4e69-a6ca-7cf48002e2fb/0/45422D0C59556C680872F58CC42068EF3ED1BA2E.mft
File:                     45422D0C59556C680872F58CC42068EF3ED1BA2E.mft (raw, json)
Hash identifier:          0yjRZCa95TgDQ6poapm0cLH41ZIjGjB3lj0cY0Li+C0=
Subject key identifier:   27:8D:E0:BE:7F:EA:CD:A9:12:8C:1C:04:7D:37:51:58:3E:BE:C4:1A
Authority key identifier: 45:42:2D:0C:59:55:6C:68:08:72:F5:8C:C4:20:68:EF:3E:D1:BA:2E
Certificate issuer:       /CN=45422D0C59556C680872F58CC42068EF3ED1BA2E
Certificate serial:       686959323DBA55AE9183F50FA40F100D5EAA2A62
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/45422D0C59556C680872F58CC42068EF3ED1BA2E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/78d774f4-2300-4e69-a6ca-7cf48002e2fb/0/45422D0C59556C680872F58CC42068EF3ED1BA2E.mft
Manifest number:          0270
Signing time:             Sat 24 Jan 2026 06:11:06 +0000
Manifest this update:     Sat 24 Jan 2026 06:06:06 +0000
Manifest next update:     Tue 27 Jan 2026 08:02:06 +0000
Files and hashes:         1: 3130332e3137322e3132302e302f32332d3234203d3e20313432333938.roa (hash: cguq4oNr1TGal57sKoh6yP2CeznnB5jHxZL1G1cEH1E=)
                          2: 45422D0C59556C680872F58CC42068EF3ED1BA2E.crl (hash: nR0b7A6m75kXDJ88A1oqbebEfCHjl73i+kgi0HyjghQ=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/78d774f4-2300-4e69-a6ca-7cf48002e2fb/0/45422D0C59556C680872F58CC42068EF3ED1BA2E.crl
                          rsync://repo-rpki.idnic.net/repo/78d774f4-2300-4e69-a6ca-7cf48002e2fb/0/45422D0C59556C680872F58CC42068EF3ED1BA2E.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/45422D0C59556C680872F58CC42068EF3ED1BA2E.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 27 Jan 2026 08:02:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:69:59:32:3d:ba:55:ae:91:83:f5:0f:a4:0f:10:0d:5e:aa:2a:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45422D0C59556C680872F58CC42068EF3ED1BA2E
        Validity
            Not Before: Jan 24 06:06:06 2026 GMT
            Not After : Jan 27 08:02:06 2026 GMT
        Subject: CN=278DE0BE7FEACDA9128C1C047D3751583EBEC41A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:4b:29:55:90:78:e7:4b:5a:67:d9:9e:d1:e0:
                    a1:0f:15:8c:ef:05:02:03:fb:ca:db:0f:5a:26:49:
                    47:13:dc:cf:be:50:40:2d:fc:8b:22:38:bb:68:8d:
                    55:e4:29:9a:3f:29:65:02:93:3b:91:86:4d:08:b8:
                    7e:b4:ec:21:b0:1d:7a:82:91:87:8c:ed:27:13:ec:
                    2e:ef:ba:0a:56:7f:bc:89:f9:33:70:ce:be:b3:38:
                    d3:e3:7d:e7:34:56:91:a5:c3:09:c4:d0:37:f0:94:
                    9f:5f:67:b9:c2:3c:bd:a9:82:c5:04:14:e8:8c:af:
                    2c:4c:c9:bc:aa:6e:54:5f:f5:a4:97:be:82:f3:b7:
                    a4:82:a3:fc:6f:df:be:12:8f:21:dc:70:23:ae:7a:
                    a8:38:75:58:4f:6e:ae:e3:8c:c5:7b:75:fc:e3:36:
                    27:54:60:b9:e2:f6:de:94:15:8a:1f:0c:d0:7f:0d:
                    3e:55:6c:d3:d6:03:c5:ca:88:5b:b2:3f:86:4d:19:
                    c5:f9:83:ae:85:83:a9:96:2e:c5:2f:c8:d2:3f:a4:
                    33:85:31:ba:67:56:50:c7:1d:88:8d:f8:fd:86:c9:
                    fc:44:f1:79:3c:d9:fb:a5:32:9f:b9:6a:88:bc:31:
                    af:e6:e3:f4:40:01:da:5f:3e:4c:37:f3:9c:e4:e3:
                    ec:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:8D:E0:BE:7F:EA:CD:A9:12:8C:1C:04:7D:37:51:58:3E:BE:C4:1A
            X509v3 Authority Key Identifier:
                keyid:45:42:2D:0C:59:55:6C:68:08:72:F5:8C:C4:20:68:EF:3E:D1:BA:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/78d774f4-2300-4e69-a6ca-7cf48002e2fb/0/45422D0C59556C680872F58CC42068EF3ED1BA2E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/45422D0C59556C680872F58CC42068EF3ED1BA2E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/78d774f4-2300-4e69-a6ca-7cf48002e2fb/0/45422D0C59556C680872F58CC42068EF3ED1BA2E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:51:59:0e:10:da:2e:17:76:94:75:23:ae:04:cc:cb:ad:17:
         31:fd:7e:61:ef:2f:b4:bc:3e:a5:41:09:fc:4d:5e:55:cd:7f:
         bd:e2:02:fb:65:b0:ab:0f:3b:8c:62:99:f9:44:72:2a:52:e2:
         5d:f7:7a:c9:6e:31:48:f8:74:87:89:72:05:f6:2b:9d:18:ce:
         44:2d:1f:8a:b6:ec:4b:aa:ee:d0:c1:09:bb:a6:19:32:2c:6a:
         1a:24:2b:67:f2:87:bf:6f:80:b1:35:56:ef:f5:f8:3b:6d:3a:
         be:50:c8:86:de:18:c3:20:83:1a:40:86:fc:d7:ec:50:8c:a9:
         89:e0:d5:73:60:33:cb:e1:5d:86:b2:e3:2b:42:c0:17:ad:0e:
         ab:7b:60:0d:33:38:ee:cb:c4:2d:e7:9b:07:16:ef:ba:4b:cc:
         6b:a9:2a:82:7d:e1:55:7f:49:5a:6a:4a:09:c8:a2:5d:6e:76:
         65:7f:32:59:50:8b:d0:17:ad:2c:2f:47:87:b6:3b:75:9a:1a:
         f8:d3:6c:9d:dd:68:74:f7:b6:e9:85:f3:4c:ef:da:40:a6:93:
         61:f1:30:e3:8f:e3:68:8a:08:bb:7f:7a:3f:68:49:ec:22:2b:
         dc:3c:74:2a:98:23:67:bf:36:db:5d:57:47:37:e7:4e:8b:45:
         37:1e:bc:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 02:08:25 2026 by rpki-client