This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/859c7c96-7abb-45ac-a0cb-d7ffd09c1876/0/E0EC18AE1077112F303C479717B7E1EAA868E35F.mft
File:                     E0EC18AE1077112F303C479717B7E1EAA868E35F.mft (raw, json)
Hash identifier:          DrxLIPOHtr7YxQlJb3XScd/+bQ7DJIB565PJOQS8AMU=
Subject key identifier:   4A:BC:3D:51:99:DD:53:E8:FB:33:7B:B1:FC:4F:F6:0C:C6:DA:B9:3D
Authority key identifier: E0:EC:18:AE:10:77:11:2F:30:3C:47:97:17:B7:E1:EA:A8:68:E3:5F
Certificate issuer:       /CN=E0EC18AE1077112F303C479717B7E1EAA868E35F
Certificate serial:       1D2464D739C2A03070F8AC305260F3D64C197AD0
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E0EC18AE1077112F303C479717B7E1EAA868E35F.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/859c7c96-7abb-45ac-a0cb-d7ffd09c1876/0/E0EC18AE1077112F303C479717B7E1EAA868E35F.mft
Manifest number:          0167
Signing time:             Sun 25 Jan 2026 10:02:05 +0000
Manifest this update:     Sun 25 Jan 2026 09:57:05 +0000
Manifest next update:     Wed 28 Jan 2026 21:25:05 +0000
Files and hashes:         1: 3130332e3138362e33342e302f32342d3234203d3e20313439363837.roa (hash: iFIOjwBtj1k6jrBAXZlZrv1rFkh0HszvE5iJysrcroI=)
                          2: E0EC18AE1077112F303C479717B7E1EAA868E35F.crl (hash: 8urmMAuoVS6NoR+LmQCg3dLBP5p1YC0Ze+P9EVFL5Co=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/859c7c96-7abb-45ac-a0cb-d7ffd09c1876/0/E0EC18AE1077112F303C479717B7E1EAA868E35F.crl
                          rsync://repo-rpki.idnic.net/repo/859c7c96-7abb-45ac-a0cb-d7ffd09c1876/0/E0EC18AE1077112F303C479717B7E1EAA868E35F.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E0EC18AE1077112F303C479717B7E1EAA868E35F.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 28 Jan 2026 14:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:24:64:d7:39:c2:a0:30:70:f8:ac:30:52:60:f3:d6:4c:19:7a:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E0EC18AE1077112F303C479717B7E1EAA868E35F
        Validity
            Not Before: Jan 25 09:57:05 2026 GMT
            Not After : Jan 28 21:25:05 2026 GMT
        Subject: CN=4ABC3D5199DD53E8FB337BB1FC4FF60CC6DAB93D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:f3:59:d6:36:b1:c7:09:d0:48:fc:04:ff:97:
                    dc:1b:df:1c:78:61:8d:a0:49:c0:f7:44:d5:0c:67:
                    34:a4:1f:ac:40:e4:0d:03:56:6d:d1:89:32:9d:11:
                    e3:b5:25:6e:0a:54:b1:46:38:f0:8d:0d:99:f1:04:
                    7d:8e:0f:4e:1d:e4:b2:50:5c:1c:40:ed:91:cc:74:
                    eb:37:ae:97:81:97:68:6a:19:37:45:73:3a:dc:79:
                    8c:03:18:b7:d6:88:9e:42:eb:d5:df:c9:71:6c:b9:
                    da:16:e9:79:8f:b2:52:51:40:eb:13:5e:da:13:49:
                    95:fd:8d:67:99:8a:ed:cf:b0:78:67:d0:e9:17:a4:
                    db:27:24:96:f0:dc:74:28:f9:74:56:8b:a6:34:9f:
                    db:43:fc:ba:fb:1b:86:ba:0c:8c:6b:44:8c:96:d6:
                    e2:28:a0:fd:a8:6a:06:19:7b:78:aa:7a:f3:2b:56:
                    12:7d:66:79:f1:3b:85:86:b1:d7:a3:2f:c1:54:5f:
                    69:0b:64:11:2a:0a:56:05:e5:7e:9f:bf:6d:e7:33:
                    7e:b3:3d:d4:04:28:80:27:89:25:52:62:82:5f:f1:
                    f5:50:8d:68:64:89:c6:7d:a8:9c:ee:6c:9b:7c:46:
                    00:18:46:86:9a:02:b1:9f:0c:e2:6c:a5:6f:be:e9:
                    2d:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:BC:3D:51:99:DD:53:E8:FB:33:7B:B1:FC:4F:F6:0C:C6:DA:B9:3D
            X509v3 Authority Key Identifier:
                keyid:E0:EC:18:AE:10:77:11:2F:30:3C:47:97:17:B7:E1:EA:A8:68:E3:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/859c7c96-7abb-45ac-a0cb-d7ffd09c1876/0/E0EC18AE1077112F303C479717B7E1EAA868E35F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E0EC18AE1077112F303C479717B7E1EAA868E35F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/859c7c96-7abb-45ac-a0cb-d7ffd09c1876/0/E0EC18AE1077112F303C479717B7E1EAA868E35F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:0a:27:4a:cd:34:63:f0:41:5c:17:28:10:b7:ef:93:5c:95:
         a7:c0:58:46:05:1d:ef:c6:31:e4:a6:72:43:34:34:e9:73:e1:
         9b:93:11:6c:0b:a8:59:7c:ce:9f:ff:d5:36:aa:a2:85:40:47:
         48:eb:71:ba:db:76:47:6b:9d:e4:32:03:9e:8c:c4:35:d9:d1:
         97:ba:a5:91:b1:a4:15:b3:1f:35:87:f1:e1:67:a0:bb:58:6d:
         47:fd:56:77:f0:85:97:8d:ec:b7:fe:15:90:ff:01:d2:83:61:
         9c:18:46:91:dd:61:5b:30:5e:e9:10:c8:ba:70:b3:58:aa:fa:
         28:2a:50:12:24:66:c1:f0:fc:d0:0d:f4:40:ac:54:80:35:b7:
         3a:1a:c5:82:f1:ab:ff:bd:81:85:41:2d:9c:29:48:75:94:34:
         75:6a:7b:bf:d3:5a:1c:13:d9:6d:38:19:5a:18:8a:ba:92:20:
         2d:a9:6a:64:c0:d6:af:53:a0:93:f4:d5:3c:0f:b6:08:08:7e:
         0b:5f:8f:35:ad:7e:28:b3:8a:81:e2:93:1e:ae:dc:cf:48:d3:
         7b:e0:6a:31:08:48:de:ea:5d:a9:e9:5e:30:84:7a:e9:16:66:
         99:57:23:78:be:fa:f0:92:de:eb:8f:00:f1:e1:2d:6b:bc:ee:
         cc:e8:68:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 23:16:57 2026 by rpki-client