This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/7d738314-a975-4fd1-9bc9-52138f83b56e/0/A62202F88CE61D6BD47195FB36103CDD061D7D27.mft
File:                     A62202F88CE61D6BD47195FB36103CDD061D7D27.mft (raw, json)
Hash identifier:          795ONqowwaB+hIMTY3PsefXZZN6ey+EX/7JKN3HOnpM=
Subject key identifier:   73:CA:77:BE:C5:0E:3D:7E:E8:1F:E6:54:C7:50:23:5B:3C:14:B0:74
Authority key identifier: A6:22:02:F8:8C:E6:1D:6B:D4:71:95:FB:36:10:3C:DD:06:1D:7D:27
Certificate issuer:       /CN=A62202F88CE61D6BD47195FB36103CDD061D7D27
Certificate serial:       79695D1DA78C462E294FEC10B93B25C1BC9A24FB
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A62202F88CE61D6BD47195FB36103CDD061D7D27.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/7d738314-a975-4fd1-9bc9-52138f83b56e/0/A62202F88CE61D6BD47195FB36103CDD061D7D27.mft
Manifest number:          0200
Signing time:             Sun 25 Jan 2026 12:12:16 +0000
Manifest this update:     Sun 25 Jan 2026 12:07:16 +0000
Manifest next update:     Wed 28 Jan 2026 23:43:16 +0000
Files and hashes:         1: 3130332e3137382e38362e302f32342d3234203d3e20313439333230.roa (hash: 1bNdVmfT+djOhZ89RO79L01jzFp6ENRtflXpl+KJhHY=)
                          2: A62202F88CE61D6BD47195FB36103CDD061D7D27.crl (hash: c5q0sv+R7rQkPj5DQWlBts38EQHewxR+C/Rkt+MRvfg=)
                          3: 3130332e3137382e38372e302f32342d3234203d3e20313439333230.roa (hash: ocoZWOXebE29PM9wf4GH+eYs09gSTcPRxglrbyGrg6Y=)
                          4: 3130332e3137382e38362e302f32332d3233203d3e20313439333230.roa (hash: kHcDvJb/DgVTvuuABJZolA65opC22Ih0u8COwgg0FLM=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/7d738314-a975-4fd1-9bc9-52138f83b56e/0/A62202F88CE61D6BD47195FB36103CDD061D7D27.crl
                          rsync://repo-rpki.idnic.net/repo/7d738314-a975-4fd1-9bc9-52138f83b56e/0/A62202F88CE61D6BD47195FB36103CDD061D7D27.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A62202F88CE61D6BD47195FB36103CDD061D7D27.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 28 Jan 2026 14:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:69:5d:1d:a7:8c:46:2e:29:4f:ec:10:b9:3b:25:c1:bc:9a:24:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A62202F88CE61D6BD47195FB36103CDD061D7D27
        Validity
            Not Before: Jan 25 12:07:16 2026 GMT
            Not After : Jan 28 23:43:16 2026 GMT
        Subject: CN=73CA77BEC50E3D7EE81FE654C750235B3C14B074
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:55:9f:0f:a3:68:2c:65:d8:64:76:ef:fd:e5:
                    be:52:df:02:92:94:4c:e1:ec:aa:49:62:27:4b:d7:
                    20:b4:d1:8c:50:25:09:c8:b2:f9:d1:1d:a9:3c:e5:
                    09:3b:61:fc:c7:98:72:a7:57:d2:85:70:db:6a:42:
                    bb:a8:be:d6:a0:73:4d:73:16:89:bf:23:88:84:a5:
                    90:5b:d6:37:2a:bc:f2:46:ec:cb:ef:52:06:19:99:
                    88:c5:9b:b0:64:17:4e:fa:a3:a6:91:69:68:cb:07:
                    10:33:98:74:50:62:7a:98:c9:89:dc:79:97:ad:3e:
                    cf:90:0b:6c:26:94:83:f0:24:ee:97:5e:c0:6b:28:
                    06:a5:0c:2e:14:34:8e:bb:d7:82:22:e8:fb:fe:a1:
                    7f:dd:bf:1a:f6:a5:7b:19:79:1b:f5:74:3f:3c:a6:
                    9c:f0:5c:7e:0b:aa:d0:a4:64:fb:db:81:df:ad:01:
                    a5:f9:cc:e8:a7:67:39:cd:7c:ae:90:3e:b9:b3:80:
                    66:a9:aa:01:01:c3:b7:35:51:e5:fc:1d:8e:56:18:
                    d9:a0:ee:d1:6c:fe:7d:ec:cf:35:1b:c5:9d:66:fb:
                    f0:ca:9e:7a:a7:97:88:45:a0:1e:8f:7d:cb:79:9a:
                    75:f7:2a:fe:38:8d:da:1a:2a:c7:c1:d2:e4:bd:34:
                    53:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:CA:77:BE:C5:0E:3D:7E:E8:1F:E6:54:C7:50:23:5B:3C:14:B0:74
            X509v3 Authority Key Identifier:
                keyid:A6:22:02:F8:8C:E6:1D:6B:D4:71:95:FB:36:10:3C:DD:06:1D:7D:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/7d738314-a975-4fd1-9bc9-52138f83b56e/0/A62202F88CE61D6BD47195FB36103CDD061D7D27.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A62202F88CE61D6BD47195FB36103CDD061D7D27.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7d738314-a975-4fd1-9bc9-52138f83b56e/0/A62202F88CE61D6BD47195FB36103CDD061D7D27.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:e5:b1:ac:aa:11:9b:dc:34:5e:9e:ba:c7:79:cd:3e:86:ea:
         36:4b:d5:60:95:e8:7d:93:ad:81:91:ab:04:9e:e2:e7:7e:89:
         c3:63:0b:5b:d7:88:01:48:86:46:32:99:57:6d:6e:5f:c9:be:
         f0:fd:9d:fc:c0:4d:1b:47:61:72:73:ba:d4:61:0c:77:8e:d3:
         8d:4d:01:03:60:c5:28:84:56:eb:fe:5a:ca:69:6d:da:88:51:
         a2:f7:af:ad:37:79:c3:7c:57:2c:53:b9:f0:98:e0:3c:58:3b:
         b6:6f:60:c1:9e:86:37:6c:54:0b:64:20:69:e4:98:24:c1:a4:
         b6:7a:c4:9e:e7:ea:39:d0:c0:90:10:7d:47:9e:ee:06:24:54:
         84:18:7d:43:47:c5:0e:3c:90:3a:73:36:5d:77:58:30:80:d7:
         5c:43:61:23:bf:5e:1e:55:9c:f9:4e:fa:34:a3:2f:49:5b:73:
         0e:25:34:36:19:47:ab:22:66:b1:14:63:19:4f:23:d2:42:5b:
         5e:c2:eb:60:9e:15:04:0e:be:9a:36:55:c1:f8:00:90:46:17:
         16:77:36:82:f2:db:36:88:e9:e6:41:e3:41:31:36:80:e4:42:
         39:ee:78:15:59:cb:ce:6c:f3:55:70:d3:73:1c:03:cb:ee:41:
         ff:3d:92:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:36:59 2026 by rpki-client