This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/7d6ea7fa-94d2-4ddc-a8e6-5dc626c291d4/0/6967012EFCA43698E8E1B724B91DFC5EFE3E7C3E.mft
File:                     6967012EFCA43698E8E1B724B91DFC5EFE3E7C3E.mft (raw, json)
Hash identifier:          zgnQDmdouhABLglbF8aU+nAERzSOxscxigpvmtMurxs=
Subject key identifier:   82:9B:7C:90:AB:97:F1:25:8A:78:6D:E3:08:0B:F3:3C:08:58:44:DC
Authority key identifier: 69:67:01:2E:FC:A4:36:98:E8:E1:B7:24:B9:1D:FC:5E:FE:3E:7C:3E
Certificate issuer:       /CN=6967012EFCA43698E8E1B724B91DFC5EFE3E7C3E
Certificate serial:       5E023D83AC58CD267D604F8276599BE052C11AB8
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6967012EFCA43698E8E1B724B91DFC5EFE3E7C3E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/7d6ea7fa-94d2-4ddc-a8e6-5dc626c291d4/0/6967012EFCA43698E8E1B724B91DFC5EFE3E7C3E.mft
Manifest number:          0237
Signing time:             Sat 24 Jan 2026 04:00:06 +0000
Manifest this update:     Sat 24 Jan 2026 03:55:06 +0000
Manifest next update:     Tue 27 Jan 2026 14:33:06 +0000
Files and hashes:         1: 3130312e302e342e302f32322d3234203d3e203438343635.roa (hash: 0Vbzbdds4DlTIQ/frtEsWuiBQ6OCjLTHiqaNJsXbu/0=)
                          2: 323430303a666230303a3a2f33322d3438203d3e203535363730.roa (hash: FVA48wGL4/cskX5JvDPv5QyssORBEsld3N+rmhCU4Gc=)
                          3: 3130312e302e342e302f32322d3234203d3e203535363730.roa (hash: 7ECSmeZAaiWw7xemuyw220yGHio1fDg8eukqs4CuhkU=)
                          4: 3130332e31322e32382e302f32322d3234203d3e203438343635.roa (hash: hq6fcTyLZ0Befnc7SCHGWV/VgoDOfnIfMb9/pRr7Usc=)
                          5: 6967012EFCA43698E8E1B724B91DFC5EFE3E7C3E.crl (hash: ol0/DudMWPXwjuSPKrL+UeqgFyK1g5r1Ej6NWZx+I/M=)
                          6: 3130332e31322e32382e302f32322d3234203d3e203535363730.roa (hash: 56/u0yMrkC94FdPOEf+mn1+2joJi+oVC5l6/K3alTgQ=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/7d6ea7fa-94d2-4ddc-a8e6-5dc626c291d4/0/6967012EFCA43698E8E1B724B91DFC5EFE3E7C3E.crl
                          rsync://repo-rpki.idnic.net/repo/7d6ea7fa-94d2-4ddc-a8e6-5dc626c291d4/0/6967012EFCA43698E8E1B724B91DFC5EFE3E7C3E.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6967012EFCA43698E8E1B724B91DFC5EFE3E7C3E.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 27 Jan 2026 14:33:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:02:3d:83:ac:58:cd:26:7d:60:4f:82:76:59:9b:e0:52:c1:1a:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6967012EFCA43698E8E1B724B91DFC5EFE3E7C3E
        Validity
            Not Before: Jan 24 03:55:06 2026 GMT
            Not After : Jan 27 14:33:06 2026 GMT
        Subject: CN=829B7C90AB97F1258A786DE3080BF33C085844DC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:71:73:8c:1a:55:93:74:6a:b9:06:dd:68:ad:
                    16:0a:df:d4:89:0f:35:f8:15:0b:a5:f8:1c:5f:e2:
                    7a:3f:70:01:1e:7e:88:56:cf:21:4d:71:ba:3b:5b:
                    8e:78:f4:0b:ad:6a:72:30:83:07:20:68:fa:e4:77:
                    42:7a:fb:31:86:fc:2b:fd:ef:d1:fd:60:3f:75:7a:
                    04:78:4a:e1:bd:e9:cf:95:4f:aa:6d:39:ab:70:eb:
                    c1:65:6c:ca:d2:34:6f:c0:10:fd:ae:a6:8f:a5:3f:
                    94:b9:40:64:12:b6:96:2f:e1:24:7b:e6:e2:62:3d:
                    d5:7e:bb:29:d1:0c:bd:fa:e8:b8:8f:86:b1:d4:f3:
                    87:56:fa:10:42:2d:2b:e6:98:e9:64:b1:bb:bc:f1:
                    ca:f8:b9:f8:91:32:1d:03:82:ef:fc:03:62:25:a1:
                    f1:85:ce:de:e5:84:08:5d:70:3d:d6:5d:8a:8d:3c:
                    f6:5c:cd:19:ca:c7:24:c2:b2:7c:f0:e6:43:c9:d0:
                    25:34:65:ed:34:07:0c:02:06:33:ca:cb:ef:7e:f8:
                    41:03:a0:02:52:2c:aa:0a:3e:b6:8f:a5:93:df:aa:
                    a5:2c:d7:9d:5e:24:9f:51:ab:e8:10:09:42:21:26:
                    a1:c2:96:9d:3c:02:72:19:35:e3:26:34:7f:8b:46:
                    1c:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:9B:7C:90:AB:97:F1:25:8A:78:6D:E3:08:0B:F3:3C:08:58:44:DC
            X509v3 Authority Key Identifier:
                keyid:69:67:01:2E:FC:A4:36:98:E8:E1:B7:24:B9:1D:FC:5E:FE:3E:7C:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/7d6ea7fa-94d2-4ddc-a8e6-5dc626c291d4/0/6967012EFCA43698E8E1B724B91DFC5EFE3E7C3E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6967012EFCA43698E8E1B724B91DFC5EFE3E7C3E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7d6ea7fa-94d2-4ddc-a8e6-5dc626c291d4/0/6967012EFCA43698E8E1B724B91DFC5EFE3E7C3E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:0e:3f:1c:69:43:bd:ab:2d:87:d5:c2:66:6c:8e:81:a2:e5:
         fd:77:32:70:15:01:9a:68:82:81:31:bd:ad:ff:8a:b8:76:ee:
         32:37:19:d9:3c:33:96:2c:09:a8:56:f3:3c:63:f5:4e:72:b1:
         7a:0e:dc:2c:c4:42:43:db:b6:34:8b:1a:a1:db:41:3d:6b:97:
         6e:f1:23:d6:c3:2a:f3:6f:f5:8c:f7:26:26:b0:d9:22:cf:af:
         2e:2a:d7:ef:a6:01:30:18:de:40:3a:db:58:1f:15:cf:a8:cf:
         f7:1f:2b:56:73:de:5d:c5:a0:ce:32:2b:55:ff:89:7d:97:18:
         b1:c5:b9:e3:e9:de:0b:cb:e7:94:63:9c:60:f3:33:8f:f8:c8:
         2e:b9:72:ab:6f:7b:a0:ba:71:32:d2:64:c0:70:f3:c1:ea:f3:
         96:b1:9c:09:c0:1a:19:a2:05:6e:60:b1:7f:18:bf:df:72:db:
         de:b5:39:3b:51:c9:80:e1:7b:15:23:46:53:f9:4d:6d:9d:d9:
         9e:e3:98:d6:a3:a9:7d:22:50:2a:cf:dd:c3:fd:ae:a0:11:37:
         04:77:55:bb:4a:aa:7f:b1:70:4b:01:73:b5:85:72:3a:9d:fe:
         ea:15:3b:2b:e8:47:34:23:e6:6e:d4:d8:bb:3c:b5:d4:a3:1d:
         de:8b:74:57
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUXgI9g6xYzSZ9YE+Cdlmb4FLBGrgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjk2NzAxMkVGQ0E0MzY5OEU4RTFCNzI0QjkxREZDNUVG
RTNFN0MzRTAeFw0yNjAxMjQwMzU1MDZaFw0yNjAxMjcxNDMzMDZaMDMxMTAvBgNV
BAMTKDgyOUI3QzkwQUI5N0YxMjU4QTc4NkRFMzA4MEJGMzNDMDg1ODQ0REMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEcXOMGlWTdGq5Bt1orRYK39SJ
DzX4FQul+Bxf4no/cAEefohWzyFNcbo7W4549AutanIwgwcgaPrkd0J6+zGG/Cv9
79H9YD91egR4SuG96c+VT6ptOatw68FlbMrSNG/AEP2upo+lP5S5QGQStpYv4SR7
5uJiPdV+uynRDL366LiPhrHU84dW+hBCLSvmmOlksbu88cr4ufiRMh0Dgu/8A2Il
ofGFzt7lhAhdcD3WXYqNPPZczRnKxyTCsnzw5kPJ0CU0Ze00BwwCBjPKy+9++EED
oAJSLKoKPraPpZPfqqUs151eJJ9Rq+gQCUIhJqHClp08AnIZNeMmNH+LRhyfAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUgpt8kKuX8SWKeG3jCAvzPAhYRNwwHwYDVR0j
BBgwFoAUaWcBLvykNpjo4bckuR38Xv4+fD4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83
ZDZlYTdmYS05NGQyLTRkZGMtYThlNi01ZGM2MjZjMjkxZDQvMC82OTY3MDEyRUZD
QTQzNjk4RThFMUI3MjRCOTFERkM1RUZFM0U3QzNFLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNjk2NzAxMkVGQ0E0MzY5OEU4RTFCNzI0QjkxREZDNUVGRTNF
N0MzRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2Q2ZWE3ZmEtOTRkMi00ZGRjLWE4
ZTYtNWRjNjI2YzI5MWQ0LzAvNjk2NzAxMkVGQ0E0MzY5OEU4RTFCNzI0QjkxREZD
NUVGRTNFN0MzRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAKQOPxxpQ72rLYfVwmZsjoGi5f13MnAVAZpo
goExva3/irh27jI3Gdk8M5YsCahW8zxj9U5ysXoO3CzEQkPbtjSLGqHbQT1rl27x
I9bDKvNv9Yz3Jiaw2SLPry4q1++mATAY3kA621gfFc+oz/cfK1Zz3l3FoM4yK1X/
iX2XGLHFuePp3gvL55RjnGDzM4/4yC65cqtve6C6cTLSZMBw88Hq85axnAnAGhmi
BW5gsX8Yv99y2961OTtRyYDhexUjRlP5TW2d2Z7jmNajqX0iUCrP3cP9rqARNwR3
VbtKqn+xcEsBc7WFcjqd/uoVOyvoRzQj5m7U2Ls8tdSjHd6LdFc=
-----END CERTIFICATE-----
Generated at Mon Jan 26 02:25:45 2026 by rpki-client