This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/86b20515-8d7c-445c-bff7-babd5265780f/0/A0B51BC5AC7C95737A24BD6A28D8249E7A80CF4B.mft
File:                     A0B51BC5AC7C95737A24BD6A28D8249E7A80CF4B.mft (raw, json)
Hash identifier:          ydNv3fU3r6/pstFYwF0Ui+osYyI5pe/i15q4gLoysig=
Subject key identifier:   ED:0B:25:00:1B:F1:62:34:F2:F2:3A:F7:74:FC:17:CF:87:13:C0:FC
Authority key identifier: A0:B5:1B:C5:AC:7C:95:73:7A:24:BD:6A:28:D8:24:9E:7A:80:CF:4B
Certificate issuer:       /CN=A0B51BC5AC7C95737A24BD6A28D8249E7A80CF4B
Certificate serial:       5B0965D700C36E387DEBCB8D6606A6F29E8677C6
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A0B51BC5AC7C95737A24BD6A28D8249E7A80CF4B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/86b20515-8d7c-445c-bff7-babd5265780f/0/A0B51BC5AC7C95737A24BD6A28D8249E7A80CF4B.mft
Manifest number:          026B
Signing time:             Sat 24 Jan 2026 10:30:50 +0000
Manifest this update:     Sat 24 Jan 2026 10:25:50 +0000
Manifest next update:     Tue 27 Jan 2026 14:00:50 +0000
Files and hashes:         1: 3130332e3137342e3132302e302f32342d3234203d3e20313437303937.roa (hash: kR7f+QbSDQGljWadtB58fQP67/nBgODo/KtERDIkT4I=)
                          2: A0B51BC5AC7C95737A24BD6A28D8249E7A80CF4B.crl (hash: FvnxpzOes9zt17V28vjl/lujg5qQHUS8n4A+Hgj9/jM=)
                          3: 3130332e3137342e3132312e302f32342d3234203d3e20313437303937.roa (hash: 28RcdR62e/0q0exyVrMmIGMIyDeFlL8Q29Mx92Z7M14=)
                          4: 3130332e3137342e3132302e302f32332d3234203d3e20313437303937.roa (hash: bOWlKzk6RopDMtmA3RBA1BFwLCsnVG+rkva/NTG1vjQ=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/86b20515-8d7c-445c-bff7-babd5265780f/0/A0B51BC5AC7C95737A24BD6A28D8249E7A80CF4B.crl
                          rsync://repo-rpki.idnic.net/repo/86b20515-8d7c-445c-bff7-babd5265780f/0/A0B51BC5AC7C95737A24BD6A28D8249E7A80CF4B.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A0B51BC5AC7C95737A24BD6A28D8249E7A80CF4B.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 27 Jan 2026 14:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:09:65:d7:00:c3:6e:38:7d:eb:cb:8d:66:06:a6:f2:9e:86:77:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A0B51BC5AC7C95737A24BD6A28D8249E7A80CF4B
        Validity
            Not Before: Jan 24 10:25:50 2026 GMT
            Not After : Jan 27 14:00:50 2026 GMT
        Subject: CN=ED0B25001BF16234F2F23AF774FC17CF8713C0FC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:0f:b2:06:6d:27:02:05:c3:5f:a0:18:7a:26:
                    d9:ea:f7:3c:83:ca:09:a0:74:9c:65:e2:90:be:52:
                    7c:8e:6c:3c:bc:d5:a9:91:82:ab:b1:6c:a1:3a:27:
                    fe:44:cf:15:dc:36:2b:15:9c:f0:fc:81:f9:80:39:
                    7a:51:cf:c7:b5:a3:9d:13:55:76:af:1b:6c:b6:e5:
                    00:5c:9f:35:28:35:9c:48:4b:d3:49:2b:c8:17:25:
                    f3:a4:ba:eb:68:1a:0f:d7:37:35:77:f2:86:0d:e2:
                    00:51:78:6f:71:16:11:4d:14:26:5c:f9:00:a1:32:
                    09:7b:14:ce:9c:e5:09:05:02:3b:ae:f8:06:cf:41:
                    26:25:49:c4:7e:a2:9b:56:44:98:f9:0e:32:58:55:
                    21:ef:fb:e9:3a:26:e4:38:6d:79:db:88:0e:ef:aa:
                    7c:ac:a4:3a:fa:9b:ae:50:d2:15:14:36:98:d5:08:
                    16:4b:81:ab:40:be:10:0c:08:0f:c3:15:05:c9:02:
                    9e:4c:52:56:5b:e2:22:36:9f:07:70:e5:d1:b6:1b:
                    b6:23:7a:16:26:69:58:4f:2a:5b:a7:7b:7c:0d:d5:
                    9e:90:9b:11:cc:bb:17:9e:a1:4a:24:fd:38:46:b2:
                    5b:e8:fe:14:2a:9b:18:49:50:5b:1b:c7:24:3f:77:
                    ca:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:0B:25:00:1B:F1:62:34:F2:F2:3A:F7:74:FC:17:CF:87:13:C0:FC
            X509v3 Authority Key Identifier:
                keyid:A0:B5:1B:C5:AC:7C:95:73:7A:24:BD:6A:28:D8:24:9E:7A:80:CF:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/86b20515-8d7c-445c-bff7-babd5265780f/0/A0B51BC5AC7C95737A24BD6A28D8249E7A80CF4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A0B51BC5AC7C95737A24BD6A28D8249E7A80CF4B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/86b20515-8d7c-445c-bff7-babd5265780f/0/A0B51BC5AC7C95737A24BD6A28D8249E7A80CF4B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:b6:54:ea:6e:d6:63:10:90:c1:8e:da:b0:76:95:c9:58:ab:
         c6:8f:2b:36:7a:02:1b:9f:6b:18:f2:c9:d8:23:d7:13:55:c4:
         8e:97:9f:87:fd:e6:82:c5:46:ff:3b:1a:98:94:13:b5:31:43:
         cc:cf:0d:b7:65:c9:1c:e9:91:1f:ad:ce:59:fa:22:7b:87:ec:
         54:8c:80:6f:e5:25:4e:36:dd:a6:3c:91:5e:fd:d2:97:1d:67:
         e2:a2:e5:ea:02:87:d4:77:39:e6:3f:5c:18:41:9b:70:35:b8:
         d2:72:15:39:6c:02:75:40:2f:bd:73:e1:31:b7:e1:35:15:82:
         72:e9:4d:9b:0c:0d:35:00:94:69:11:64:56:93:10:02:42:57:
         ec:a3:f8:c9:38:e6:85:c6:bd:4e:d3:94:3d:1e:77:03:31:ce:
         59:84:71:da:43:22:da:ff:9e:fc:89:24:df:89:21:7e:9c:c8:
         be:65:7f:f7:7e:c5:1f:db:1c:1d:80:6a:32:1a:5c:4c:40:8c:
         60:74:8c:1c:9e:45:42:76:95:71:13:6b:86:69:38:62:94:1f:
         c2:19:41:cf:ee:5f:15:76:d1:29:cf:63:13:6b:c4:0d:a0:45:
         d2:8c:d0:59:1f:e4:d1:a2:49:4f:52:c4:0d:84:1a:c0:89:83:
         fb:d0:dc:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 05:38:12 2026 by rpki-client