This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/7d0f99c3-e567-41ae-aa00-26cb9781fbe9/0/6DA2B28F4391C01434B7229FD4D68E661BF13061.mft
File:                     6DA2B28F4391C01434B7229FD4D68E661BF13061.mft (raw, json)
Hash identifier:          XYXMAFS5QnFh+mIWi9odD6K7PNnBB84YqUIZewJBCaQ=
Subject key identifier:   3B:FD:41:67:9D:60:0A:52:9E:B9:DA:C6:75:38:41:A8:B7:4A:79:31
Authority key identifier: 6D:A2:B2:8F:43:91:C0:14:34:B7:22:9F:D4:D6:8E:66:1B:F1:30:61
Certificate issuer:       /CN=6DA2B28F4391C01434B7229FD4D68E661BF13061
Certificate serial:       2D97E6C6AC47C8ACA3DBB0C217839C73D07B6665
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6DA2B28F4391C01434B7229FD4D68E661BF13061.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/7d0f99c3-e567-41ae-aa00-26cb9781fbe9/0/6DA2B28F4391C01434B7229FD4D68E661BF13061.mft
Manifest number:          02B5
Signing time:             Sun 25 Jan 2026 11:31:33 +0000
Manifest this update:     Sun 25 Jan 2026 11:26:33 +0000
Manifest next update:     Wed 28 Jan 2026 19:47:33 +0000
Files and hashes:         1: 34392e3233362e3232302e302f32342d3234203d3e203535363638.roa (hash: 7skPXD0GcBP0y8K0CJN6k0vAhi8+IRcH6Kcm8uU8vVs=)
                          2: 34392e3233362e3232332e302f32342d3234203d3e203535363638.roa (hash: fJ4g0K772WVp53tZH6Cr6nPqsZvGnVS3VfLvicif+Ms=)
                          3: 34392e3233362e3231362e302f32342d3234203d3e203535363638.roa (hash: PpAfKuTLC2LZflDGFc6yX8hZy8hNL9DWJF0ArhdPsJs=)
                          4: 34392e3233362e3231372e302f32342d3234203d3e203535363638.roa (hash: +1/NKTo1zjk1P1ZAkPLDaaCsjoolxhbaib5j0otnVl8=)
                          5: 34392e3233362e3232312e302f32342d3234203d3e203535363638.roa (hash: M2pyi/IMF/9bDLHyO64naWXcT6UxKr+6hMI7b6iDcRY=)
                          6: 34392e3233362e3231392e302f32342d3234203d3e203535363638.roa (hash: WONaTaogHxZR78zw31IvprtisGRNqNJsbh6kYGrgZG4=)
                          7: 34392e3233362e3231382e302f32342d3234203d3e203535363638.roa (hash: IuWeKhHtePe16+Mo0GNe9sNi8Di/hp1hWH17ol9RuOY=)
                          8: 34392e3233362e3232322e302f32342d3234203d3e203535363638.roa (hash: kIaQGWL5YUwAplbYF3rxqdRNmuWMqoQK88/zSxpS0Qk=)
                          9: 6DA2B28F4391C01434B7229FD4D68E661BF13061.crl (hash: MKmP1WGU8rltAb24A+UlFzT+1bAuT7xplkAKcUEXg7w=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/7d0f99c3-e567-41ae-aa00-26cb9781fbe9/0/6DA2B28F4391C01434B7229FD4D68E661BF13061.crl
                          rsync://repo-rpki.idnic.net/repo/7d0f99c3-e567-41ae-aa00-26cb9781fbe9/0/6DA2B28F4391C01434B7229FD4D68E661BF13061.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6DA2B28F4391C01434B7229FD4D68E661BF13061.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 28 Jan 2026 14:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:97:e6:c6:ac:47:c8:ac:a3:db:b0:c2:17:83:9c:73:d0:7b:66:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6DA2B28F4391C01434B7229FD4D68E661BF13061
        Validity
            Not Before: Jan 25 11:26:33 2026 GMT
            Not After : Jan 28 19:47:33 2026 GMT
        Subject: CN=3BFD41679D600A529EB9DAC6753841A8B74A7931
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:f0:c9:56:2d:6f:e3:d1:88:1f:4a:22:7b:06:
                    9d:42:4b:3c:ff:02:7f:ed:4f:ba:cb:84:a4:82:62:
                    a5:2a:32:c6:cb:67:75:51:7e:03:75:38:33:07:f9:
                    52:c0:00:87:6a:0d:c8:53:52:65:a6:fb:b5:1d:0f:
                    79:2c:9b:11:1e:14:8e:79:8b:b3:1a:44:83:a5:39:
                    70:21:45:7f:c7:2f:f3:56:1e:80:cd:76:92:04:a1:
                    43:c7:a1:0d:31:32:72:45:e5:76:fd:d6:f3:6d:ce:
                    fd:ea:6a:ca:73:87:cc:7a:17:e0:33:73:97:7e:71:
                    04:01:8a:0c:2c:c0:2f:9a:9d:3e:ce:e6:b1:1e:28:
                    63:b5:aa:a6:da:de:a2:ba:7c:a7:1a:74:bb:6e:b0:
                    d9:b0:34:40:d8:98:14:b8:3e:cc:cf:b7:7f:49:98:
                    4c:da:4a:bf:f2:c2:37:63:e8:fd:51:57:79:49:e4:
                    4f:09:1f:df:61:bd:a6:77:bc:3d:59:16:d0:fa:20:
                    4a:14:08:f2:2e:56:2d:1f:2c:95:26:48:ed:14:a1:
                    5d:ba:57:fd:05:3c:f3:b2:37:ea:16:cb:df:90:b0:
                    2b:78:3b:ae:0f:ff:ca:bb:3d:ef:36:0c:56:ac:2d:
                    d9:53:73:93:24:d0:cd:dd:df:3d:df:b8:c2:3d:4b:
                    3f:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:FD:41:67:9D:60:0A:52:9E:B9:DA:C6:75:38:41:A8:B7:4A:79:31
            X509v3 Authority Key Identifier:
                keyid:6D:A2:B2:8F:43:91:C0:14:34:B7:22:9F:D4:D6:8E:66:1B:F1:30:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/7d0f99c3-e567-41ae-aa00-26cb9781fbe9/0/6DA2B28F4391C01434B7229FD4D68E661BF13061.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6DA2B28F4391C01434B7229FD4D68E661BF13061.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7d0f99c3-e567-41ae-aa00-26cb9781fbe9/0/6DA2B28F4391C01434B7229FD4D68E661BF13061.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:35:9f:7a:66:4d:8d:d6:39:b2:22:5f:9a:4d:de:60:30:af:
         71:6e:78:16:19:5d:e2:92:52:9a:ab:8f:98:f8:e1:66:3c:57:
         f2:cf:ad:24:b9:01:71:bf:6e:be:ba:4d:cd:40:cc:08:b1:23:
         c0:ae:60:02:08:9a:f7:08:c4:71:03:7c:df:32:4d:a1:95:8e:
         6c:26:61:71:8a:b4:e6:6d:be:bd:f0:8d:bb:8c:2c:52:f9:24:
         a0:31:ea:ae:a0:2b:e3:74:04:67:45:62:56:06:de:3a:95:a8:
         ec:49:82:bc:94:92:18:b0:b4:b8:b3:c0:a2:3a:cf:9e:ed:b6:
         ee:af:17:bb:03:32:2e:48:b4:d6:61:b3:39:a8:d3:84:a7:fa:
         3c:19:10:a4:21:3b:f1:9e:a5:18:0d:07:34:ce:ec:74:75:5f:
         f4:8b:c2:88:43:e7:a0:25:5d:cf:66:6a:8b:13:28:f1:20:be:
         ac:3b:7a:7e:1a:2f:d7:30:d8:ff:fd:fe:88:0e:3d:1e:74:09:
         44:cc:9c:9e:ed:c6:fb:7a:09:d6:35:55:cd:6e:ca:72:92:48:
         77:88:62:08:c4:fd:ef:db:63:b9:13:13:65:41:9f:64:80:19:
         b5:52:b6:fb:7d:b9:2a:95:15:da:6b:2e:01:bd:44:e0:c7:63:
         29:9d:43:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 01:10:02 2026 by rpki-client