This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/86450032-5492-4a5a-943f-bdb473341233/0/1635F5E419798341BDC615D4E1C6AE340C34BEED.mft
File:                     1635F5E419798341BDC615D4E1C6AE340C34BEED.mft (raw, json)
Hash identifier:          jnyRhqWfwpYh4EhiFnRzgwxxCiXCSuIwtyAlX/GhydM=
Subject key identifier:   A8:1C:CF:4A:46:52:57:4D:40:F1:70:D3:C1:79:57:CF:69:9A:2E:15
Authority key identifier: 16:35:F5:E4:19:79:83:41:BD:C6:15:D4:E1:C6:AE:34:0C:34:BE:ED
Certificate issuer:       /CN=1635F5E419798341BDC615D4E1C6AE340C34BEED
Certificate serial:       688C25223C50F3FD94593723410C1905BE68B359
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1635F5E419798341BDC615D4E1C6AE340C34BEED.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/86450032-5492-4a5a-943f-bdb473341233/0/1635F5E419798341BDC615D4E1C6AE340C34BEED.mft
Manifest number:          0549
Signing time:             Sat 24 Jan 2026 17:11:36 +0000
Manifest this update:     Sat 24 Jan 2026 17:06:36 +0000
Manifest next update:     Wed 28 Jan 2026 04:14:36 +0000
Files and hashes:         1: 3231302e37392e3230382e302f32302d3230203d3e203137393130.roa (hash: 1kbjcVz7NV7SFqtMY1gTY7M0GuY6igkJGp6NsdTqDPc=)
                          2: 3230322e3132372e39392e302f32342d3234203d3e203137393130.roa (hash: kTRg5VWzA/woXO+nc54YqUj1OHro7jOG0YTwaTc42Oo=)
                          3: 3230322e3132372e39362e302f32302d3234203d3e203137393130.roa (hash: IM2twiGIKQqETGmIWQI3vAIIytZPeeD5wgctglA7Hpc=)
                          4: 3230322e3132372e3130302e302f32342d3234203d3e203137393130.roa (hash: vN2suRuDQ8/GCQHEEEyC7GJFF4AF2Ux2vUSPEF0UgN4=)
                          5: 3230322e3132372e39372e302f32342d3234203d3e203137393130.roa (hash: dVPU6JD2A84NVYrSKQ9v6ag+q7nJt0d3GPOdYg/vAzs=)
                          6: 3230322e3132372e39382e302f32342d3234203d3e203137393130.roa (hash: lS1RAb31GjYc1m7ta2BgMoEsUFuw8zYDY4GO22I3IUc=)
                          7: 3230322e3132372e39362e302f32342d3234203d3e203137393130.roa (hash: SoYj2/CQvnngSSgeQ/2h6CjbPD0PX7O3f0MfyUEw7yQ=)
                          8: 1635F5E419798341BDC615D4E1C6AE340C34BEED.crl (hash: o+pQab3cRY96Xe9gCAzHrPBUkx9TSeCFd1N6QO9MPKM=)
                          9: 3230322e3132372e39362e302f32302d3230203d3e203137393130.roa (hash: jd6LmOWTW9h+pZpEVT+8YFnE7+vOf7HUJDd4WCtQWm0=)
                          10: 3231302e37392e3230382e302f32302d3234203d3e203137393130.roa (hash: Fow2FQnfsWM+t0AdvtL67zUS1huXa7y9vM3+TEZxD7M=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/86450032-5492-4a5a-943f-bdb473341233/0/1635F5E419798341BDC615D4E1C6AE340C34BEED.crl
                          rsync://repo-rpki.idnic.net/repo/86450032-5492-4a5a-943f-bdb473341233/0/1635F5E419798341BDC615D4E1C6AE340C34BEED.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1635F5E419798341BDC615D4E1C6AE340C34BEED.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 28 Jan 2026 04:14:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:8c:25:22:3c:50:f3:fd:94:59:37:23:41:0c:19:05:be:68:b3:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1635F5E419798341BDC615D4E1C6AE340C34BEED
        Validity
            Not Before: Jan 24 17:06:36 2026 GMT
            Not After : Jan 28 04:14:36 2026 GMT
        Subject: CN=A81CCF4A4652574D40F170D3C17957CF699A2E15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:98:87:9f:18:61:b1:1d:ec:bc:07:5c:61:03:
                    e6:47:2e:c8:9f:2f:85:64:2d:0b:c4:7a:fc:1b:87:
                    56:37:53:d8:97:97:30:2c:a2:60:b1:cc:52:ae:0a:
                    23:46:97:a4:40:a9:b2:b1:6f:60:d2:13:39:5a:8d:
                    aa:bc:ba:c1:69:54:30:af:0f:ca:c0:c6:09:0b:f1:
                    73:0f:94:26:f2:76:a6:74:2f:46:3e:85:63:07:c0:
                    bd:df:8d:7c:d8:6e:18:31:b7:5c:b9:8b:71:8f:45:
                    d3:b3:36:a5:62:b7:e1:42:10:6b:6f:be:a3:89:38:
                    43:56:46:8a:0e:98:b6:82:32:7f:b6:c5:1d:0b:91:
                    ee:08:43:fe:50:3f:88:1c:37:f7:19:72:7b:16:14:
                    a3:83:e3:d1:1d:39:82:46:39:71:39:2e:b1:16:9e:
                    ba:96:41:e9:f6:a6:bc:86:10:09:a4:96:fb:bd:92:
                    7d:37:8f:7a:46:03:6f:dc:19:af:ad:58:46:e3:5b:
                    18:65:e7:34:24:60:cc:8f:5f:ab:c8:90:ec:8f:c2:
                    19:49:e1:29:f0:ad:24:58:c9:51:ad:0e:57:0f:14:
                    a5:ad:42:bb:49:ac:aa:8f:d5:ac:46:1f:00:31:51:
                    ba:40:57:c8:87:97:ec:c0:76:85:ea:d9:3e:e1:6d:
                    89:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:1C:CF:4A:46:52:57:4D:40:F1:70:D3:C1:79:57:CF:69:9A:2E:15
            X509v3 Authority Key Identifier:
                keyid:16:35:F5:E4:19:79:83:41:BD:C6:15:D4:E1:C6:AE:34:0C:34:BE:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/86450032-5492-4a5a-943f-bdb473341233/0/1635F5E419798341BDC615D4E1C6AE340C34BEED.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1635F5E419798341BDC615D4E1C6AE340C34BEED.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/86450032-5492-4a5a-943f-bdb473341233/0/1635F5E419798341BDC615D4E1C6AE340C34BEED.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:b3:b7:4e:60:ec:54:a7:b9:86:ae:c3:38:96:16:a9:b0:8d:
         42:20:10:8e:cd:84:b8:31:25:32:6d:0e:8c:90:5f:45:15:83:
         06:9e:14:7d:da:98:85:00:5f:c3:5f:45:20:b9:ea:1d:a7:c4:
         1c:00:a7:9c:3d:aa:83:2e:e1:24:db:fb:83:d9:36:02:75:b1:
         93:aa:0c:59:ec:38:0c:b6:57:19:cb:db:c3:96:da:5b:54:c6:
         ff:02:62:31:47:d7:fa:38:ee:e3:e7:09:3a:58:d5:b6:22:99:
         94:21:74:85:24:5b:c8:60:c7:d6:dc:ee:b9:96:ac:1b:39:0c:
         ca:c8:4e:30:71:df:7e:d1:41:ff:76:8d:7c:fc:a4:bb:55:3a:
         f2:77:a4:2e:43:48:1e:a0:e2:c5:8b:b9:c8:d3:46:cf:15:f2:
         ca:d0:5e:25:20:8c:5c:e0:8e:3f:6a:6c:c9:37:31:c0:12:bc:
         5f:5d:2c:8d:e9:ca:bd:51:ba:0f:a7:6c:0c:3c:47:92:ba:d4:
         0b:b7:ad:fb:df:25:fc:1d:8f:89:bf:af:48:12:dc:be:09:80:
         4f:09:b5:94:58:a2:2d:58:96:c3:ac:71:89:0e:fd:45:ec:4c:
         ff:87:fb:1a:b5:b4:d2:ce:23:7f:b2:42:fb:e2:4a:cf:45:63:
         e6:02:2a:51
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUaIwlIjxQ8/2UWTcjQQwZBb5os1kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTYzNUY1RTQxOTc5ODM0MUJEQzYxNUQ0RTFDNkFFMzQw
QzM0QkVFRDAeFw0yNjAxMjQxNzA2MzZaFw0yNjAxMjgwNDE0MzZaMDMxMTAvBgNV
BAMTKEE4MUNDRjRBNDY1MjU3NEQ0MEYxNzBEM0MxNzk1N0NGNjk5QTJFMTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgmIefGGGxHey8B1xhA+ZHLsif
L4VkLQvEevwbh1Y3U9iXlzAsomCxzFKuCiNGl6RAqbKxb2DSEzlajaq8usFpVDCv
D8rAxgkL8XMPlCbydqZ0L0Y+hWMHwL3fjXzYbhgxt1y5i3GPRdOzNqVit+FCEGtv
vqOJOENWRooOmLaCMn+2xR0Lke4IQ/5QP4gcN/cZcnsWFKOD49EdOYJGOXE5LrEW
nrqWQen2pryGEAmklvu9kn03j3pGA2/cGa+tWEbjWxhl5zQkYMyPX6vIkOyPwhlJ
4SnwrSRYyVGtDlcPFKWtQrtJrKqP1axGHwAxUbpAV8iHl+zAdoXq2T7hbYkvAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUqBzPSkZSV01A8XDTwXlXz2maLhUwHwYDVR0j
BBgwFoAUFjX15Bl5g0G9xhXU4cauNAw0vu0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84
NjQ1MDAzMi01NDkyLTRhNWEtOTQzZi1iZGI0NzMzNDEyMzMvMC8xNjM1RjVFNDE5
Nzk4MzQxQkRDNjE1RDRFMUM2QUUzNDBDMzRCRUVELmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMTYzNUY1RTQxOTc5ODM0MUJEQzYxNUQ0RTFDNkFFMzQwQzM0
QkVFRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODY0NTAwMzItNTQ5Mi00YTVhLTk0
M2YtYmRiNDczMzQxMjMzLzAvMTYzNUY1RTQxOTc5ODM0MUJEQzYxNUQ0RTFDNkFF
MzQwQzM0QkVFRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAKWzt05g7FSnuYauwziWFqmwjUIgEI7NhLgx
JTJtDoyQX0UVgwaeFH3amIUAX8NfRSC56h2nxBwAp5w9qoMu4STb+4PZNgJ1sZOq
DFnsOAy2VxnL28OW2ltUxv8CYjFH1/o47uPnCTpY1bYimZQhdIUkW8hgx9bc7rmW
rBs5DMrITjBx337RQf92jXz8pLtVOvJ3pC5DSB6g4sWLucjTRs8V8srQXiUgjFzg
jj9qbMk3McASvF9dLI3pyr1Rug+nbAw8R5K61Au3rfvfJfwdj4m/r0gS3L4JgE8J
tZRYoi1YlsOscYkO/UXsTP+H+xq1tNLOI3+yQvviSs9FY+YCKlE=
-----END CERTIFICATE-----
Generated at Sun Jan 25 20:39:24 2026 by rpki-client