This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/79fbe088-0d84-4789-b405-25c2e76937f6/0/D681DB990E904642A480AE9546646329FF5D0162.mft
File:                     D681DB990E904642A480AE9546646329FF5D0162.mft (raw, json)
Hash identifier:          LZgQUT1o+QvxMOidRWeIHh0Ud0MDlKOsuCwvAoIJxAE=
Subject key identifier:   00:FB:17:F3:09:C3:0F:88:60:10:6D:12:95:A0:90:A2:1B:AD:96:CD
Authority key identifier: D6:81:DB:99:0E:90:46:42:A4:80:AE:95:46:64:63:29:FF:5D:01:62
Certificate issuer:       /CN=D681DB990E904642A480AE9546646329FF5D0162
Certificate serial:       17877F28694E369A613129318A32D50C536F6F1D
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D681DB990E904642A480AE9546646329FF5D0162.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/79fbe088-0d84-4789-b405-25c2e76937f6/0/D681DB990E904642A480AE9546646329FF5D0162.mft
Manifest number:          027E
Signing time:             Sat 24 Jan 2026 19:41:56 +0000
Manifest this update:     Sat 24 Jan 2026 19:36:56 +0000
Manifest next update:     Wed 28 Jan 2026 02:51:56 +0000
Files and hashes:         1: 323430353a373763303a313030303a3a2f34382d3438203d3e20313339343439.roa (hash: XofjNzw1yGxwAcIlCRr0IcxzWXlCmMFb8avZjS5oKkg=)
                          2: D681DB990E904642A480AE9546646329FF5D0162.crl (hash: 6Ctw7IdQq+xiWGLfK9IR9+rC+xFW2cmoxVKmZ6mDbRg=)
                          3: 3130332e3134352e33342e302f32342d3234203d3e20313339343439.roa (hash: DosOLQ5CphwuAVjKNWs/TAbY57B9SEJF3bUwLYNSPv8=)
                          4: 3130332e3134352e33352e302f32342d3234203d3e20313339343439.roa (hash: LGFyuwFKevfReVHS/7A/KXwX6tZA3SLgHPvvyNbAtnI=)
                          5: 3130332e3134352e33342e302f32332d3234203d3e20313339343439.roa (hash: 0zeOMcJLti5PO9rOACuwXhf403LkxSHV9NKFjogohdU=)
                          6: 323430353a373763303a3a2f33322d3438203d3e20313339343439.roa (hash: tgk3NoI7Yl9Wh8OuLguFYhMn+bQWgfMhzVajW1+V2GA=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/79fbe088-0d84-4789-b405-25c2e76937f6/0/D681DB990E904642A480AE9546646329FF5D0162.crl
                          rsync://repo-rpki.idnic.net/repo/79fbe088-0d84-4789-b405-25c2e76937f6/0/D681DB990E904642A480AE9546646329FF5D0162.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D681DB990E904642A480AE9546646329FF5D0162.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 28 Jan 2026 02:51:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:87:7f:28:69:4e:36:9a:61:31:29:31:8a:32:d5:0c:53:6f:6f:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D681DB990E904642A480AE9546646329FF5D0162
        Validity
            Not Before: Jan 24 19:36:56 2026 GMT
            Not After : Jan 28 02:51:56 2026 GMT
        Subject: CN=00FB17F309C30F8860106D1295A090A21BAD96CD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:96:89:ac:83:0b:b9:18:c6:92:00:89:28:63:
                    a2:c9:37:46:ad:e8:ab:f7:e1:d4:ca:e4:2a:20:b5:
                    bb:f2:3e:20:04:cb:11:ab:9f:0d:65:85:13:91:cf:
                    a4:db:3e:e5:82:2b:11:6f:74:30:d7:81:25:70:85:
                    07:65:6d:12:cb:f3:e9:af:32:cd:d9:46:6a:0c:b2:
                    94:0b:38:80:0d:b8:35:82:fe:79:cc:32:59:c2:a0:
                    5c:b9:74:31:7d:e8:ba:e3:16:bb:c3:b6:28:92:78:
                    f4:bc:8d:f8:bb:56:d5:45:5e:ac:ca:3a:43:88:a3:
                    80:bb:43:b1:0f:43:32:1e:6a:42:65:41:bb:f5:6d:
                    47:57:d7:77:3a:4a:fb:9d:3d:e7:d6:40:e9:df:1c:
                    22:55:45:5d:b8:98:02:55:45:37:b4:c2:2a:c0:6e:
                    51:19:76:c4:ce:da:eb:f3:43:14:2a:aa:67:bb:b2:
                    e7:ba:fe:cc:0d:13:62:b4:19:09:f9:47:8a:7b:ca:
                    b0:97:05:01:f4:89:53:09:33:b3:7f:7a:71:56:dc:
                    3b:d9:97:7c:a5:a2:0b:2b:e0:6f:69:5e:b7:5a:35:
                    74:3e:43:bf:56:d9:0b:bf:14:19:8b:a7:b8:47:ff:
                    cb:8d:91:68:85:49:69:8e:a4:29:a9:9a:dc:03:7e:
                    50:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:FB:17:F3:09:C3:0F:88:60:10:6D:12:95:A0:90:A2:1B:AD:96:CD
            X509v3 Authority Key Identifier:
                keyid:D6:81:DB:99:0E:90:46:42:A4:80:AE:95:46:64:63:29:FF:5D:01:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/79fbe088-0d84-4789-b405-25c2e76937f6/0/D681DB990E904642A480AE9546646329FF5D0162.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D681DB990E904642A480AE9546646329FF5D0162.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/79fbe088-0d84-4789-b405-25c2e76937f6/0/D681DB990E904642A480AE9546646329FF5D0162.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:83:6f:ff:44:25:fb:29:d0:15:0f:99:48:9b:0d:e4:42:84:
         3b:45:09:c1:51:da:a2:dc:3c:57:b3:63:36:c9:71:35:4d:72:
         ce:f3:cc:7c:ba:84:da:8c:36:83:eb:13:07:05:8b:1a:7f:86:
         1b:4d:7f:2c:4e:2d:45:53:38:48:55:2c:a8:15:48:d2:9a:51:
         d1:4f:ee:5d:7f:47:0b:a1:a5:58:ef:86:46:bf:2b:1e:d6:06:
         84:ec:d3:bb:52:37:be:b0:be:a4:30:58:95:54:db:a5:61:54:
         a7:db:f0:25:42:69:5b:47:09:22:11:f7:49:bd:21:d9:0a:62:
         d6:4f:5c:99:ae:1b:61:e6:5c:61:b2:a6:a3:f5:3b:08:f9:d5:
         c6:b4:0e:55:b4:90:7e:cd:af:c9:59:d3:55:20:91:78:60:06:
         66:19:92:a9:f1:aa:b5:3c:90:e0:41:43:47:cd:ea:78:e9:c5:
         a2:2d:8e:f2:fa:ac:ae:db:70:4e:22:0c:b5:3d:60:4d:23:31:
         22:d1:45:ca:cc:6f:56:b6:44:05:c9:6e:42:b9:ba:e8:67:e9:
         96:1e:3e:bf:90:eb:be:c1:95:be:34:17:d9:f7:76:db:ae:75:
         34:21:4c:ef:25:07:ea:cb:62:7d:ac:32:62:1a:c2:cc:e9:aa:
         62:6b:fa:4b
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUF4d/KGlONpphMSkxijLVDFNvbx0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDY4MURCOTkwRTkwNDY0MkE0ODBBRTk1NDY2NDYzMjlG
RjVEMDE2MjAeFw0yNjAxMjQxOTM2NTZaFw0yNjAxMjgwMjUxNTZaMDMxMTAvBgNV
BAMTKDAwRkIxN0YzMDlDMzBGODg2MDEwNkQxMjk1QTA5MEEyMUJBRDk2Q0QwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhlomsgwu5GMaSAIkoY6LJN0at
6Kv34dTK5CogtbvyPiAEyxGrnw1lhRORz6TbPuWCKxFvdDDXgSVwhQdlbRLL8+mv
Ms3ZRmoMspQLOIANuDWC/nnMMlnCoFy5dDF96LrjFrvDtiiSePS8jfi7VtVFXqzK
OkOIo4C7Q7EPQzIeakJlQbv1bUdX13c6SvudPefWQOnfHCJVRV24mAJVRTe0wirA
blEZdsTO2uvzQxQqqme7sue6/swNE2K0GQn5R4p7yrCXBQH0iVMJM7N/enFW3DvZ
l3ylogsr4G9pXrdaNXQ+Q79W2Qu/FBmLp7hH/8uNkWiFSWmOpCmpmtwDflADAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUAPsX8wnDD4hgEG0SlaCQohutls0wHwYDVR0j
BBgwFoAU1oHbmQ6QRkKkgK6VRmRjKf9dAWIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83
OWZiZTA4OC0wZDg0LTQ3ODktYjQwNS0yNWMyZTc2OTM3ZjYvMC9ENjgxREI5OTBF
OTA0NjQyQTQ4MEFFOTU0NjY0NjMyOUZGNUQwMTYyLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvRDY4MURCOTkwRTkwNDY0MkE0ODBBRTk1NDY2NDYzMjlGRjVE
MDE2Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzlmYmUwODgtMGQ4NC00Nzg5LWI0
MDUtMjVjMmU3NjkzN2Y2LzAvRDY4MURCOTkwRTkwNDY0MkE0ODBBRTk1NDY2NDYz
MjlGRjVEMDE2Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAAiDb/9EJfsp0BUPmUibDeRChDtFCcFR2qLc
PFezYzbJcTVNcs7zzHy6hNqMNoPrEwcFixp/hhtNfyxOLUVTOEhVLKgVSNKaUdFP
7l1/RwuhpVjvhka/Kx7WBoTs07tSN76wvqQwWJVU26VhVKfb8CVCaVtHCSIR90m9
IdkKYtZPXJmuG2HmXGGypqP1Owj51ca0DlW0kH7Nr8lZ01UgkXhgBmYZkqnxqrU8
kOBBQ0fN6njpxaItjvL6rK7bcE4iDLU9YE0jMSLRRcrMb1a2RAXJbkK5uuhn6ZYe
Pr+Q677Blb40F9n3dtuudTQhTO8lB+rLYn2sMmIawszpqmJr+ks=
-----END CERTIFICATE-----
Generated at Mon Jan 26 04:27:47 2026 by rpki-client