This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/888d0b6e-b2ed-49c8-a498-8fd299afb701/0/C1669103D870A390C56C8DFD3C1BFE23E48B0540.mft
File:                     C1669103D870A390C56C8DFD3C1BFE23E48B0540.mft (raw, json)
Hash identifier:          UMncuBBj826+0f00xKD0pYmSiShhw85kxQ6a1ImY05M=
Subject key identifier:   00:B3:77:3D:FF:84:79:DC:E5:76:25:1D:30:95:FA:15:6A:AB:D1:C2
Authority key identifier: C1:66:91:03:D8:70:A3:90:C5:6C:8D:FD:3C:1B:FE:23:E4:8B:05:40
Certificate issuer:       /CN=C1669103D870A390C56C8DFD3C1BFE23E48B0540
Certificate serial:       133978E7A89E14C2ADC889DB7D654BBFF9597D64
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C1669103D870A390C56C8DFD3C1BFE23E48B0540.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/888d0b6e-b2ed-49c8-a498-8fd299afb701/0/C1669103D870A390C56C8DFD3C1BFE23E48B0540.mft
Manifest number:          010C
Signing time:             Sun 25 Jan 2026 16:11:29 +0000
Manifest this update:     Sun 25 Jan 2026 16:06:29 +0000
Manifest next update:     Wed 28 Jan 2026 23:02:29 +0000
Files and hashes:         1: C1669103D870A390C56C8DFD3C1BFE23E48B0540.crl (hash: fQfk5xycGFiz0Ux9pp72Iv13Ryk3ysUfm55rMRa2Qxg=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/888d0b6e-b2ed-49c8-a498-8fd299afb701/0/C1669103D870A390C56C8DFD3C1BFE23E48B0540.crl
                          rsync://repo-rpki.idnic.net/repo/888d0b6e-b2ed-49c8-a498-8fd299afb701/0/C1669103D870A390C56C8DFD3C1BFE23E48B0540.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C1669103D870A390C56C8DFD3C1BFE23E48B0540.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 28 Jan 2026 14:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:39:78:e7:a8:9e:14:c2:ad:c8:89:db:7d:65:4b:bf:f9:59:7d:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C1669103D870A390C56C8DFD3C1BFE23E48B0540
        Validity
            Not Before: Jan 25 16:06:29 2026 GMT
            Not After : Jan 28 23:02:29 2026 GMT
        Subject: CN=00B3773DFF8479DCE576251D3095FA156AABD1C2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:4a:54:ba:9e:b8:0b:f2:d0:31:68:c5:43:26:
                    7d:db:86:84:07:53:5c:f6:1f:49:dd:14:80:34:f9:
                    0a:c8:4e:be:64:ca:4f:28:31:c0:d9:5f:8e:04:55:
                    7d:bd:f3:24:3c:90:13:86:42:c0:f0:d5:d8:1f:d1:
                    50:8f:d8:ff:5f:43:e6:4c:46:69:7f:8d:10:d0:3b:
                    1d:85:24:34:74:6e:cc:b3:d8:65:11:52:da:77:05:
                    5b:ad:be:a2:7d:ac:5b:ce:42:2c:3b:aa:be:ce:8e:
                    69:29:e3:17:39:00:2e:d1:6b:bf:25:e3:89:6a:23:
                    eb:bc:50:96:3e:15:9e:81:61:9b:e4:5c:88:8d:9b:
                    5c:8c:61:bc:a4:b9:9c:4f:09:41:16:5b:ca:9d:fc:
                    e5:9f:bb:6e:2e:18:58:6b:68:f0:38:d8:47:7f:60:
                    d6:f1:ae:dc:99:52:9e:63:8a:66:a7:ed:62:04:97:
                    f4:41:22:f9:a3:2e:8f:bc:cd:67:d0:ea:f6:88:2f:
                    29:be:84:0f:36:4c:fd:cf:22:7d:8a:91:83:7b:e3:
                    39:b7:a2:f2:ef:16:74:16:ef:7b:50:92:5c:46:da:
                    ab:b9:7f:3e:7c:c4:59:65:87:01:a6:d0:41:72:e6:
                    c8:55:43:10:3e:49:44:04:dc:50:38:12:6d:6d:5f:
                    be:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:B3:77:3D:FF:84:79:DC:E5:76:25:1D:30:95:FA:15:6A:AB:D1:C2
            X509v3 Authority Key Identifier:
                keyid:C1:66:91:03:D8:70:A3:90:C5:6C:8D:FD:3C:1B:FE:23:E4:8B:05:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/888d0b6e-b2ed-49c8-a498-8fd299afb701/0/C1669103D870A390C56C8DFD3C1BFE23E48B0540.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C1669103D870A390C56C8DFD3C1BFE23E48B0540.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/888d0b6e-b2ed-49c8-a498-8fd299afb701/0/C1669103D870A390C56C8DFD3C1BFE23E48B0540.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:04:83:07:09:2a:f2:23:56:71:df:b7:30:11:5e:d6:a1:84:
         53:92:6a:45:c4:64:1a:01:1e:63:65:07:dd:0f:5e:1a:19:5e:
         4f:ef:5d:d7:6f:f3:ec:f6:88:f6:ee:dd:b9:a6:10:d1:e7:50:
         e0:67:00:2e:16:1e:7d:63:c5:3c:8b:70:39:60:6a:b4:f8:6a:
         5c:d0:6c:34:2f:e9:eb:08:9e:c4:7a:45:d1:c0:da:d5:75:cf:
         b4:17:16:0c:ab:25:e2:3a:db:5e:e0:21:a4:77:93:72:0d:6e:
         c7:60:43:e5:41:cc:31:e9:27:54:01:6a:6f:b8:c5:71:6c:1b:
         30:a1:3b:2f:6e:6f:19:20:31:df:b5:ac:32:a0:e9:2f:f6:c7:
         20:8f:8e:59:b2:25:57:43:b5:b8:71:4a:fc:35:8c:20:b1:2f:
         d9:50:c6:4e:e7:0b:65:9c:04:a0:70:8d:db:60:ea:ae:39:5a:
         35:80:81:d7:27:ab:55:b8:c9:df:6f:c5:cd:f4:74:2e:4c:0e:
         2c:39:81:dc:a8:88:22:85:8e:60:0c:90:b4:b7:2b:43:3e:3e:
         74:29:f4:9e:90:de:e3:f4:38:cb:7b:6b:af:e3:5c:17:22:12:
         4e:e3:0e:db:dc:cf:4d:88:71:44:58:e4:97:34:0e:b3:33:93:
         46:03:a8:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 05:38:46 2026 by rpki-client