This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/8116fbc9-b31c-4225-a697-4fedbc234db6/0/C0C8E7243E4E8DECD7A8EA1D61FD424108E8D3D5.mft
File:                     C0C8E7243E4E8DECD7A8EA1D61FD424108E8D3D5.mft (raw, json)
Hash identifier:          NVO0ik06hdbN9NrJfwhzOE9aMffJYJ8lywnP4DOcfXw=
Subject key identifier:   93:06:46:FA:4F:1A:67:E4:AD:86:4F:EC:45:18:28:86:02:70:72:A7
Authority key identifier: C0:C8:E7:24:3E:4E:8D:EC:D7:A8:EA:1D:61:FD:42:41:08:E8:D3:D5
Certificate issuer:       /CN=C0C8E7243E4E8DECD7A8EA1D61FD424108E8D3D5
Certificate serial:       760B432EEC81EB3A9B95F61138727337B1A38F88
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C0C8E7243E4E8DECD7A8EA1D61FD424108E8D3D5.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/8116fbc9-b31c-4225-a697-4fedbc234db6/0/C0C8E7243E4E8DECD7A8EA1D61FD424108E8D3D5.mft
Manifest number:          DF
Signing time:             Sun 25 Jan 2026 10:11:32 +0000
Manifest this update:     Sun 25 Jan 2026 10:06:32 +0000
Manifest next update:     Wed 28 Jan 2026 10:48:32 +0000
Files and hashes:         1: C0C8E7243E4E8DECD7A8EA1D61FD424108E8D3D5.crl (hash: ALvGwJ2mQf7J9do0R30sGUVyXDgdNQXrje2NXR3WvNs=)
                          2: 3130332e37352e3233372e302f32342d3234203d3e203634333130.roa (hash: WLCShlxfdsF203Qx2wOYYjy6P8cT8pTLxL//5fp4yiA=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/8116fbc9-b31c-4225-a697-4fedbc234db6/0/C0C8E7243E4E8DECD7A8EA1D61FD424108E8D3D5.crl
                          rsync://repo-rpki.idnic.net/repo/8116fbc9-b31c-4225-a697-4fedbc234db6/0/C0C8E7243E4E8DECD7A8EA1D61FD424108E8D3D5.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C0C8E7243E4E8DECD7A8EA1D61FD424108E8D3D5.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 28 Jan 2026 10:48:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:0b:43:2e:ec:81:eb:3a:9b:95:f6:11:38:72:73:37:b1:a3:8f:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C0C8E7243E4E8DECD7A8EA1D61FD424108E8D3D5
        Validity
            Not Before: Jan 25 10:06:32 2026 GMT
            Not After : Jan 28 10:48:32 2026 GMT
        Subject: CN=930646FA4F1A67E4AD864FEC45182886027072A7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:2a:49:1c:bf:3d:20:9b:39:e0:36:b0:3e:45:
                    59:c9:ae:aa:2c:75:e5:7c:01:50:b1:fa:81:aa:5d:
                    1a:1d:2e:f9:cd:ec:a7:6a:45:8c:92:bd:27:68:41:
                    2d:46:32:a7:44:3c:b1:1b:d1:51:61:38:af:a4:ff:
                    8d:5f:a7:8a:59:5d:b7:e8:e8:98:e3:fc:be:e0:af:
                    49:ea:b0:f4:5a:a6:ac:85:8d:6e:fe:87:08:48:4e:
                    5d:3c:10:8c:88:6c:13:30:62:51:4f:7d:74:9e:96:
                    9a:8d:79:77:53:48:e7:32:cd:b5:4c:b1:68:7e:4e:
                    cb:dc:cd:17:47:02:20:eb:af:a8:eb:f0:a4:1f:bb:
                    1c:3c:b8:93:db:04:c0:49:0a:d9:e9:a3:94:f3:68:
                    98:0c:74:cb:25:33:af:eb:3d:cb:5e:f5:ff:94:cf:
                    8c:8f:e6:99:f1:7a:94:76:fa:60:49:5b:04:8e:30:
                    de:b9:71:be:04:b5:8e:78:1c:6c:a4:60:d6:68:e5:
                    a8:d5:f7:b8:8f:d2:ff:35:c8:7b:3b:cc:f1:73:01:
                    36:43:a0:01:34:64:65:6a:5d:f2:8f:7d:87:95:d7:
                    40:85:37:c7:70:f2:2e:aa:1b:e0:b5:d1:11:2a:f8:
                    d9:d5:b5:95:d6:a5:d1:bd:34:fb:fb:a0:e8:a5:b2:
                    63:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:06:46:FA:4F:1A:67:E4:AD:86:4F:EC:45:18:28:86:02:70:72:A7
            X509v3 Authority Key Identifier:
                keyid:C0:C8:E7:24:3E:4E:8D:EC:D7:A8:EA:1D:61:FD:42:41:08:E8:D3:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/8116fbc9-b31c-4225-a697-4fedbc234db6/0/C0C8E7243E4E8DECD7A8EA1D61FD424108E8D3D5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C0C8E7243E4E8DECD7A8EA1D61FD424108E8D3D5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8116fbc9-b31c-4225-a697-4fedbc234db6/0/C0C8E7243E4E8DECD7A8EA1D61FD424108E8D3D5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:5a:90:de:a7:55:ef:3e:74:ce:2a:08:83:d2:6b:5d:2d:54:
         d5:82:95:49:5c:ad:61:13:b3:ef:aa:30:8f:c6:22:b8:8d:a4:
         d3:fe:73:37:ee:30:bb:59:ba:97:a1:7a:13:38:4d:f7:8a:7e:
         0e:50:63:40:c6:b7:2d:1d:48:6b:9b:0d:76:fa:1b:39:a3:c4:
         6b:ba:e5:70:79:2c:00:b7:a1:7d:9d:91:ca:1c:3a:2d:5b:e0:
         7d:17:35:b7:a1:d5:30:bc:65:aa:2d:77:8c:60:2f:e6:e8:97:
         a5:49:50:f0:94:92:db:e7:7c:96:50:f4:84:3a:c5:44:71:bf:
         8b:82:b3:26:ae:60:13:3c:82:d1:9b:84:97:e9:ac:4c:9b:c6:
         66:62:a5:e3:1e:c5:16:33:91:d2:f8:b3:5d:53:5b:b8:8a:3a:
         97:75:40:ca:34:5d:df:ef:73:41:fe:63:27:5c:cd:93:ec:ee:
         2c:6c:fc:86:c8:5a:21:45:52:48:46:a3:5b:82:2c:82:1a:46:
         6e:ed:b7:d3:bc:c8:a1:68:97:be:ed:18:e4:50:5c:44:6b:82:
         0e:75:db:33:17:aa:49:89:19:01:e8:0e:fe:85:ef:59:ff:f6:
         c0:bc:20:cd:f8:16:ff:45:d8:cb:8c:d1:f4:d5:b6:f2:e6:78:
         c5:b0:18:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:36:40 2026 by rpki-client