This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/89f26fb8-72c4-49d9-9cbe-8226397271a2/0/368369D096CE0982CCF1F111001F2A2E8A3BB6D4.mft
File:                     368369D096CE0982CCF1F111001F2A2E8A3BB6D4.mft (raw, json)
Hash identifier:          4fvIglvan1H5S+w2Eua2zb2vJ3kdFNjYGjFqfcspeng=
Subject key identifier:   39:ED:90:3C:4E:74:42:59:79:03:F7:2B:72:20:42:FE:01:3D:18:28
Authority key identifier: 36:83:69:D0:96:CE:09:82:CC:F1:F1:11:00:1F:2A:2E:8A:3B:B6:D4
Certificate issuer:       /CN=368369D096CE0982CCF1F111001F2A2E8A3BB6D4
Certificate serial:       09CCAB2727D7C2CCDBA154EB2BB6E84CC03FE01D
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/368369D096CE0982CCF1F111001F2A2E8A3BB6D4.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/89f26fb8-72c4-49d9-9cbe-8226397271a2/0/368369D096CE0982CCF1F111001F2A2E8A3BB6D4.mft
Manifest number:          0544
Signing time:             Sun 25 Jan 2026 11:31:44 +0000
Manifest this update:     Sun 25 Jan 2026 11:26:44 +0000
Manifest next update:     Wed 28 Jan 2026 13:09:44 +0000
Files and hashes:         1: 3130332e3134382e34342e302f32332d3234203d3e20313339393832.roa (hash: HfUy1Uhb3h99FOMvLMDprgyPmVmWuM8DW9xncpfi5EY=)
                          2: 368369D096CE0982CCF1F111001F2A2E8A3BB6D4.crl (hash: 1V8PJJSTA6u4rvuvZM+b35FRQ5jhiFrTnS/2Qodd+SQ=)
                          3: 3130332e3134382e34352e302f32342d3234203d3e20313339393832.roa (hash: NIprOafL/FkfE+7MXVPnJMsMOXtIi5Oz7VSZiSJ3HkA=)
                          4: 3130332e3134382e34342e302f32342d3234203d3e20313339393832.roa (hash: V9ZamZCw6D4mYhUfCXfPGFZw7f/kJlQ2HuBrz1q+Cyg=)
                          5: 323430353a636163303a3a2f33322d3332203d3e20313339393832.roa (hash: 8XDzxw0TaLUeJDSAqwkpcBgLpYWoQ6KOKlrexsJYJlI=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/89f26fb8-72c4-49d9-9cbe-8226397271a2/0/368369D096CE0982CCF1F111001F2A2E8A3BB6D4.crl
                          rsync://repo-rpki.idnic.net/repo/89f26fb8-72c4-49d9-9cbe-8226397271a2/0/368369D096CE0982CCF1F111001F2A2E8A3BB6D4.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/368369D096CE0982CCF1F111001F2A2E8A3BB6D4.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 28 Jan 2026 13:09:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:cc:ab:27:27:d7:c2:cc:db:a1:54:eb:2b:b6:e8:4c:c0:3f:e0:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=368369D096CE0982CCF1F111001F2A2E8A3BB6D4
        Validity
            Not Before: Jan 25 11:26:44 2026 GMT
            Not After : Jan 28 13:09:44 2026 GMT
        Subject: CN=39ED903C4E7442597903F72B722042FE013D1828
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:65:be:f5:aa:47:d3:27:b0:29:91:34:6e:47:
                    9a:35:61:39:11:eb:8e:8a:79:46:c3:80:7a:31:1c:
                    c6:88:35:e3:c5:eb:6f:9b:d8:2d:1b:76:28:d6:59:
                    f7:3c:9a:c3:27:4a:56:cf:0e:9e:00:8c:42:dd:70:
                    ff:04:c2:81:c2:2d:f6:5a:4b:31:2f:7f:d8:18:d9:
                    50:7d:35:a5:82:3a:2c:15:4c:47:cb:5d:7f:dd:e3:
                    9a:34:bd:dd:6a:84:1a:48:b6:5a:7c:71:00:41:eb:
                    71:9d:bc:a0:66:cc:dc:ff:45:58:b0:e7:90:87:c6:
                    fe:f9:aa:97:10:10:91:52:28:32:e0:d0:42:26:ff:
                    60:fb:69:9d:83:90:84:46:42:c5:e0:2d:4b:fb:86:
                    c1:19:0f:eb:0d:28:4e:ba:8f:5a:f6:c1:2a:54:34:
                    43:35:f3:11:ef:4e:18:d4:98:d8:98:31:60:25:0e:
                    5f:cb:0f:08:e0:34:70:dc:8a:f0:21:5a:1f:6b:3d:
                    9d:21:84:b9:b9:2b:cf:fc:74:4d:3a:87:8d:e9:6f:
                    b3:1e:93:3b:e5:7e:25:6a:84:e7:c1:38:32:1f:fa:
                    85:8a:16:2c:5e:c4:28:e9:65:e0:70:f2:dc:94:f2:
                    f0:e7:55:74:32:d9:b5:8a:f5:b6:c4:fe:b4:85:d8:
                    b4:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:ED:90:3C:4E:74:42:59:79:03:F7:2B:72:20:42:FE:01:3D:18:28
            X509v3 Authority Key Identifier:
                keyid:36:83:69:D0:96:CE:09:82:CC:F1:F1:11:00:1F:2A:2E:8A:3B:B6:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/89f26fb8-72c4-49d9-9cbe-8226397271a2/0/368369D096CE0982CCF1F111001F2A2E8A3BB6D4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/368369D096CE0982CCF1F111001F2A2E8A3BB6D4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/89f26fb8-72c4-49d9-9cbe-8226397271a2/0/368369D096CE0982CCF1F111001F2A2E8A3BB6D4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:90:a3:3e:f1:34:56:db:c1:fe:97:0c:22:72:d3:ea:72:50:
         5e:11:eb:94:49:6d:8c:96:60:00:67:02:64:1a:75:27:32:65:
         99:3f:bd:41:b7:58:34:33:65:38:36:66:eb:c2:8e:e9:e4:c7:
         7d:58:7b:b8:02:a1:9c:ef:7d:06:2c:d2:23:85:30:a2:8f:8f:
         35:35:0e:5b:d5:b5:5c:10:65:2c:7f:66:e3:b2:4c:c9:ac:67:
         a9:17:1b:36:df:ad:1f:1f:98:96:a5:27:fa:a8:36:e6:e2:81:
         2d:89:b3:e8:a2:f6:5b:66:dd:ec:da:ed:36:fc:8b:20:20:88:
         20:27:70:c4:05:86:99:54:2d:76:1f:79:65:fa:86:bb:f8:b8:
         71:00:76:ee:05:fe:ad:ff:76:e2:28:7c:f3:f5:1f:21:6a:ea:
         67:04:46:95:03:be:37:a7:36:ca:2c:47:6b:9b:cd:6a:83:a7:
         31:14:1a:01:80:2f:05:ed:8b:5a:a4:dc:88:5c:b9:73:f5:21:
         8a:90:d3:28:e5:df:eb:1d:25:0f:69:e6:1f:62:80:9e:80:b5:
         44:6d:1b:34:e3:04:9f:a8:d2:19:5c:4e:c0:79:81:17:2b:c8:
         fa:c0:aa:3f:22:58:1c:6f:e3:ab:86:fa:b3:fc:13:cc:8e:fb:
         de:1a:d9:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:36:40 2026 by rpki-client