This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/829e7064-b352-43b6-9f09-514d68a2739e/0/AD5EA76D7ABBD8617C323F06E24EF5190568F494.mft
File:                     AD5EA76D7ABBD8617C323F06E24EF5190568F494.mft (raw, json)
Hash identifier:          W3o92FAqMkfAsT60qtTI/YgB6qgvBewrKNB3T/UpjMg=
Subject key identifier:   C5:35:58:A2:A4:D0:74:7D:F8:F9:3F:9D:3D:E0:5D:60:5F:BD:00:1A
Authority key identifier: AD:5E:A7:6D:7A:BB:D8:61:7C:32:3F:06:E2:4E:F5:19:05:68:F4:94
Certificate issuer:       /CN=AD5EA76D7ABBD8617C323F06E24EF5190568F494
Certificate serial:       43565CEB0BA79D2091CB94397E2B424F948D6856
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AD5EA76D7ABBD8617C323F06E24EF5190568F494.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/829e7064-b352-43b6-9f09-514d68a2739e/0/AD5EA76D7ABBD8617C323F06E24EF5190568F494.mft
Manifest number:          01FC
Signing time:             Fri 23 Jan 2026 18:41:53 +0000
Manifest this update:     Fri 23 Jan 2026 18:36:53 +0000
Manifest next update:     Mon 26 Jan 2026 19:45:53 +0000
Files and hashes:         1: 323430363a6263303a3a2f33322d3332203d3e20313430343032.roa (hash: gwBlMBrSpLgsa+ACTv/ospejLYlB+0aLA704l83TjHw=)
                          2: 3130332e3135302e3232362e302f32332d3234203d3e20313333383030.roa (hash: QWfnQB0qvC1JfFFIpfKBeaSWuT6akGE7VeRHdRdprIk=)
                          3: AD5EA76D7ABBD8617C323F06E24EF5190568F494.crl (hash: xN5nRO5bYsY1o3QlKu/CpnKFsdOKowxx04LapqM2FqQ=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/829e7064-b352-43b6-9f09-514d68a2739e/0/AD5EA76D7ABBD8617C323F06E24EF5190568F494.crl
                          rsync://repo-rpki.idnic.net/repo/829e7064-b352-43b6-9f09-514d68a2739e/0/AD5EA76D7ABBD8617C323F06E24EF5190568F494.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AD5EA76D7ABBD8617C323F06E24EF5190568F494.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 26 Jan 2026 19:45:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:56:5c:eb:0b:a7:9d:20:91:cb:94:39:7e:2b:42:4f:94:8d:68:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AD5EA76D7ABBD8617C323F06E24EF5190568F494
        Validity
            Not Before: Jan 23 18:36:53 2026 GMT
            Not After : Jan 26 19:45:53 2026 GMT
        Subject: CN=C53558A2A4D0747DF8F93F9D3DE05D605FBD001A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:c6:b8:8a:bb:b8:68:05:0a:ae:21:50:84:4f:
                    c2:6f:e3:64:0a:e7:8d:ba:96:17:5a:f3:fa:a8:76:
                    04:02:e8:ad:87:12:aa:f0:6f:48:63:78:64:d7:fe:
                    78:8b:cd:de:f9:a1:e6:4b:5b:b2:d2:d8:9d:9a:da:
                    69:c8:6d:f7:d0:6b:c7:e8:0d:91:7d:f6:a9:cc:09:
                    fe:85:2d:71:dd:78:ae:74:52:ee:93:f8:83:65:c4:
                    d8:fb:14:bd:e7:77:e2:b1:61:58:d9:aa:74:f2:b1:
                    9f:7e:b6:97:b5:ad:7a:80:f4:e5:42:62:51:84:54:
                    e6:e9:7f:94:84:c7:03:d9:48:3d:83:a6:a3:a6:c0:
                    cb:64:44:81:e3:74:35:2d:d1:6e:35:9e:02:b4:13:
                    70:04:2e:10:58:6f:e6:b3:a6:90:6f:c3:4c:44:17:
                    0f:ec:95:15:32:6b:31:0a:00:8b:45:d6:8f:56:8d:
                    e5:fa:6b:a8:7b:d3:72:97:c0:11:58:1e:28:1f:17:
                    d0:23:6a:c7:ff:a9:c4:27:fa:8b:4c:ea:c7:71:61:
                    34:bb:c8:43:2b:30:ba:81:ec:a5:0c:5b:55:d0:61:
                    d5:1c:45:03:3d:ce:93:17:15:31:37:68:38:46:b1:
                    19:a2:ef:75:78:51:b2:52:07:e2:39:e0:d6:4a:da:
                    f2:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:35:58:A2:A4:D0:74:7D:F8:F9:3F:9D:3D:E0:5D:60:5F:BD:00:1A
            X509v3 Authority Key Identifier:
                keyid:AD:5E:A7:6D:7A:BB:D8:61:7C:32:3F:06:E2:4E:F5:19:05:68:F4:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/829e7064-b352-43b6-9f09-514d68a2739e/0/AD5EA76D7ABBD8617C323F06E24EF5190568F494.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AD5EA76D7ABBD8617C323F06E24EF5190568F494.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/829e7064-b352-43b6-9f09-514d68a2739e/0/AD5EA76D7ABBD8617C323F06E24EF5190568F494.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:9d:55:2b:70:37:23:53:5f:0e:7c:71:a6:d0:29:50:88:86:
         7a:ed:19:01:90:2f:07:3d:d5:44:7a:0c:66:75:83:e9:3e:ec:
         6a:f5:9a:07:14:4c:85:07:ef:62:03:87:43:41:5b:fb:51:4f:
         70:3c:1f:79:b4:e1:86:40:6f:a5:3e:f3:45:20:25:1e:29:52:
         81:43:69:37:af:a2:09:8d:42:af:e6:46:d4:e7:b0:b5:be:4d:
         fe:5d:b3:d8:dc:b4:90:3b:36:38:0b:8c:b1:a7:cf:72:cd:3b:
         c3:99:9c:9c:2b:ef:04:2d:85:6d:f9:01:42:3c:e7:a8:e6:76:
         0b:60:02:14:d6:e1:4e:55:68:df:59:03:19:66:6a:2d:4b:2f:
         4f:60:54:20:a4:b4:bf:de:20:fc:7e:6b:72:79:33:de:5b:3e:
         13:b7:b3:2f:33:a4:14:47:a5:32:de:df:68:56:0f:e3:9d:bb:
         2b:c5:d1:8d:18:fd:8c:0c:6c:b0:3f:cf:ad:66:7c:0c:a8:35:
         53:db:92:19:be:16:b7:46:e5:55:f9:8d:33:59:f3:cf:21:14:
         7c:ed:0d:92:58:33:ed:8e:8d:fc:51:da:42:1c:0d:4f:8d:d1:
         bf:5e:dc:34:c0:dd:9f:71:3c:a2:7c:b2:b1:45:92:6a:84:e9:
         34:3a:b3:48
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUQ1Zc6wunnSCRy5Q5fitCT5SNaFYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUQ1RUE3NkQ3QUJCRDg2MTdDMzIzRjA2RTI0RUY1MTkw
NTY4RjQ5NDAeFw0yNjAxMjMxODM2NTNaFw0yNjAxMjYxOTQ1NTNaMDMxMTAvBgNV
BAMTKEM1MzU1OEEyQTREMDc0N0RGOEY5M0Y5RDNERTA1RDYwNUZCRDAwMUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIxriKu7hoBQquIVCET8Jv42QK
5426lhda8/qodgQC6K2HEqrwb0hjeGTX/niLzd75oeZLW7LS2J2a2mnIbffQa8fo
DZF99qnMCf6FLXHdeK50Uu6T+INlxNj7FL3nd+KxYVjZqnTysZ9+tpe1rXqA9OVC
YlGEVObpf5SExwPZSD2DpqOmwMtkRIHjdDUt0W41ngK0E3AELhBYb+azppBvw0xE
Fw/slRUyazEKAItF1o9WjeX6a6h703KXwBFYHigfF9Ajasf/qcQn+otM6sdxYTS7
yEMrMLqB7KUMW1XQYdUcRQM9zpMXFTE3aDhGsRmi73V4UbJSB+I54NZK2vKnAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUxTVYoqTQdH34+T+dPeBdYF+9ABowHwYDVR0j
BBgwFoAUrV6nbXq72GF8Mj8G4k71GQVo9JQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84
MjllNzA2NC1iMzUyLTQzYjYtOWYwOS01MTRkNjhhMjczOWUvMC9BRDVFQTc2RDdB
QkJEODYxN0MzMjNGMDZFMjRFRjUxOTA1NjhGNDk0LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQUQ1RUE3NkQ3QUJCRDg2MTdDMzIzRjA2RTI0RUY1MTkwNTY4
RjQ5NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODI5ZTcwNjQtYjM1Mi00M2I2LTlm
MDktNTE0ZDY4YTI3MzllLzAvQUQ1RUE3NkQ3QUJCRDg2MTdDMzIzRjA2RTI0RUY1
MTkwNTY4RjQ5NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBADGdVStwNyNTXw58cabQKVCIhnrtGQGQLwc9
1UR6DGZ1g+k+7Gr1mgcUTIUH72IDh0NBW/tRT3A8H3m04YZAb6U+80UgJR4pUoFD
aTevogmNQq/mRtTnsLW+Tf5ds9jctJA7NjgLjLGnz3LNO8OZnJwr7wQthW35AUI8
56jmdgtgAhTW4U5VaN9ZAxlmai1LL09gVCCktL/eIPx+a3J5M95bPhO3sy8zpBRH
pTLe32hWD+OduyvF0Y0Y/YwMbLA/z61mfAyoNVPbkhm+FrdG5VX5jTNZ888hFHzt
DZJYM+2OjfxR2kIcDU+N0b9e3DTA3Z9xPKJ8srFFkmqE6TQ6s0g=
-----END CERTIFICATE-----
Generated at Sun Jan 25 21:52:18 2026 by rpki-client