This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/7c635ce9-0ea5-47d8-9fcc-cad1c9f06fbe/0/7B945974A79E8C77CB02F94495BA9F87BAA0E038.mft
File:                     7B945974A79E8C77CB02F94495BA9F87BAA0E038.mft (raw, json)
Hash identifier:          fV+fRDIW0r8M9oSphgbopJR3SoXSy3+YvL8liwKjdqs=
Subject key identifier:   03:39:E0:64:8E:EF:96:10:95:E7:84:99:CF:83:D7:51:5A:24:10:EB
Authority key identifier: 7B:94:59:74:A7:9E:8C:77:CB:02:F9:44:95:BA:9F:87:BA:A0:E0:38
Certificate issuer:       /CN=7B945974A79E8C77CB02F94495BA9F87BAA0E038
Certificate serial:       6E407BD940374CEFB0BB59B351C3D28CA64FD5E2
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7B945974A79E8C77CB02F94495BA9F87BAA0E038.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/7c635ce9-0ea5-47d8-9fcc-cad1c9f06fbe/0/7B945974A79E8C77CB02F94495BA9F87BAA0E038.mft
Manifest number:          03C0
Signing time:             Fri 23 Jan 2026 18:32:08 +0000
Manifest this update:     Fri 23 Jan 2026 18:27:08 +0000
Manifest next update:     Tue 27 Jan 2026 01:19:08 +0000
Files and hashes:         1: 3130332e3136372e33302e302f32332d3234203d3e203137393935.roa (hash: jJAIyVbfrGhaQ1dlxzFUdHOYskMs8jKydFWI9VuwVq4=)
                          2: 7B945974A79E8C77CB02F94495BA9F87BAA0E038.crl (hash: RcwC1J/FGhEAMllwNl37xQ5rtGWWx0A9gx1/Lt3weEk=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/7c635ce9-0ea5-47d8-9fcc-cad1c9f06fbe/0/7B945974A79E8C77CB02F94495BA9F87BAA0E038.crl
                          rsync://repo-rpki.idnic.net/repo/7c635ce9-0ea5-47d8-9fcc-cad1c9f06fbe/0/7B945974A79E8C77CB02F94495BA9F87BAA0E038.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7B945974A79E8C77CB02F94495BA9F87BAA0E038.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 27 Jan 2026 01:19:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:40:7b:d9:40:37:4c:ef:b0:bb:59:b3:51:c3:d2:8c:a6:4f:d5:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7B945974A79E8C77CB02F94495BA9F87BAA0E038
        Validity
            Not Before: Jan 23 18:27:08 2026 GMT
            Not After : Jan 27 01:19:08 2026 GMT
        Subject: CN=0339E0648EEF961095E78499CF83D7515A2410EB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:e3:27:0b:09:ce:7b:90:6b:f2:3e:b9:b9:92:
                    ce:b9:03:60:4d:be:04:62:e2:99:9e:62:c5:af:d3:
                    f4:86:d4:35:d6:06:6f:8c:46:59:12:46:13:bd:6a:
                    f5:8f:f3:d0:06:a2:0a:1c:d4:3f:0c:a5:41:ec:a8:
                    94:80:ab:82:4f:ee:82:6c:b2:66:43:10:fa:e6:ad:
                    ee:58:28:ad:94:7f:88:55:48:4d:e4:d9:b8:51:7f:
                    ae:60:10:75:e1:d3:c6:9f:b5:a0:0a:9f:e4:d1:3c:
                    c9:f8:35:90:bc:59:3e:1c:ee:36:f6:4b:90:0b:38:
                    ec:16:9f:6a:e9:33:83:4d:22:11:2e:55:f7:67:63:
                    8f:0f:13:83:2f:47:cf:38:41:94:6a:2c:b6:6c:1f:
                    df:47:e9:9b:97:3d:83:7f:a9:83:63:f9:6b:12:e7:
                    4d:98:9f:96:96:b4:c7:39:47:23:23:cd:d7:0f:58:
                    81:d6:60:23:22:e0:53:90:7e:8e:30:75:13:af:45:
                    06:a4:f8:cf:11:f6:8d:6d:32:dc:a3:72:0a:ec:01:
                    b2:78:54:fe:87:1f:37:03:69:f0:37:43:98:9a:5c:
                    37:1a:b7:c1:ee:85:a0:bb:1b:3d:eb:9f:07:3a:c9:
                    fa:4f:f5:50:45:31:d1:f6:2c:7b:3f:1f:e3:8c:e7:
                    2a:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:39:E0:64:8E:EF:96:10:95:E7:84:99:CF:83:D7:51:5A:24:10:EB
            X509v3 Authority Key Identifier:
                keyid:7B:94:59:74:A7:9E:8C:77:CB:02:F9:44:95:BA:9F:87:BA:A0:E0:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/7c635ce9-0ea5-47d8-9fcc-cad1c9f06fbe/0/7B945974A79E8C77CB02F94495BA9F87BAA0E038.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7B945974A79E8C77CB02F94495BA9F87BAA0E038.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7c635ce9-0ea5-47d8-9fcc-cad1c9f06fbe/0/7B945974A79E8C77CB02F94495BA9F87BAA0E038.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:f2:7d:1a:0f:65:6a:54:a3:43:7b:84:cb:63:77:9e:0a:76:
         68:70:ef:5c:2f:9f:ef:81:24:62:4a:72:8d:4b:02:33:87:59:
         f1:55:2c:3c:1b:14:8b:a2:49:50:d4:4d:50:39:e0:88:85:b6:
         b4:03:ad:76:38:36:3e:91:3c:dd:4a:64:4a:6f:b0:39:d8:17:
         58:b3:27:85:d8:1a:99:60:32:03:07:60:d0:1f:ac:a1:3b:b2:
         b8:36:f1:ed:02:3a:04:70:a1:ce:91:f3:5e:46:c4:53:3f:01:
         da:88:17:25:5d:b0:c2:97:df:50:5e:a8:d5:a3:27:8d:4d:45:
         be:12:21:f0:ca:64:23:8c:65:da:88:e5:30:46:c8:5d:cd:95:
         bf:86:4f:a8:80:9b:37:11:32:a3:37:1f:92:40:37:15:72:59:
         f2:51:68:26:f7:c2:d2:6b:82:f8:94:8c:6d:01:6c:86:78:b3:
         9b:b5:f9:cc:54:18:63:4c:d4:4a:2a:85:99:39:29:7c:19:fc:
         90:b5:68:ef:f8:63:70:7e:35:69:13:0a:7d:1e:7d:80:6b:41:
         e1:d4:f3:ee:14:ae:49:16:92:42:fd:9e:d3:e7:3b:25:ce:d8:
         6a:4c:2a:c9:28:00:6f:cf:7e:a0:d8:e2:5d:48:db:db:7d:3d:
         95:c8:c9:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 11:27:11 2026 by rpki-client