This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/8b36e88d-d573-4cbb-b460-a0b969aa84d5/0/B3263D687D5BDFB2FB4E802AB3B003FCFD266B5C.mft
File:                     B3263D687D5BDFB2FB4E802AB3B003FCFD266B5C.mft (raw, json)
Hash identifier:          /I9DeK0Tj86GLjrWi9Dp3uNqsGI+523TOQigYbsONv4=
Subject key identifier:   9E:55:D0:D5:AB:35:B7:37:7F:FE:41:01:91:B4:8C:6E:EB:EE:45:C0
Authority key identifier: B3:26:3D:68:7D:5B:DF:B2:FB:4E:80:2A:B3:B0:03:FC:FD:26:6B:5C
Certificate issuer:       /CN=B3263D687D5BDFB2FB4E802AB3B003FCFD266B5C
Certificate serial:       21451B9C186F8D775D8BDAFDE9379E0E88726A9E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B3263D687D5BDFB2FB4E802AB3B003FCFD266B5C.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/8b36e88d-d573-4cbb-b460-a0b969aa84d5/0/B3263D687D5BDFB2FB4E802AB3B003FCFD266B5C.mft
Manifest number:          0551
Signing time:             Sun 25 Jan 2026 16:51:03 +0000
Manifest this update:     Sun 25 Jan 2026 16:46:03 +0000
Manifest next update:     Thu 29 Jan 2026 03:59:03 +0000
Files and hashes:         1: 3130332e3133342e3232322e302f32342d3234203d3e20313338383130.roa (hash: 3PZFIN0jiG1liVNOYS5bc8JkLCWSH93e9B5ZRAydDG8=)
                          2: B3263D687D5BDFB2FB4E802AB3B003FCFD266B5C.crl (hash: da+WvymjWjIl0w2/IrqrlxtEntgt0Wrpi83dujv0PSI=)
                          3: 3130332e3133342e3232302e302f32322d3234203d3e20313338383130.roa (hash: XcqISTFOM7Q9TbfcoALleQWh8kdaQumXVURloov1uL4=)
                          4: 3130332e3133342e3232302e302f32342d3234203d3e20313338383130.roa (hash: B9YgdbWic7qXvAvHz1n/3UtrpjolL03glGipzRrFEzY=)
                          5: 323430343a366434303a3a2f33322d3438203d3e20313338383130.roa (hash: f1EdJawAFE33t1rxrdKPcs3d9VEItcNJb2cJ7vIPk2M=)
                          6: 3130332e3133342e3232312e302f32342d3234203d3e20313338383130.roa (hash: cmv59nNsRTRKeMV0c4HuiujTHOVfbugS8maMc0aBwq0=)
                          7: 3130332e3133342e3232332e302f32342d3234203d3e203435333035.roa (hash: dZSB/gSxOY7UKqB6f6AoUZuRdwpTE/RXX5o4gj8yNrA=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/8b36e88d-d573-4cbb-b460-a0b969aa84d5/0/B3263D687D5BDFB2FB4E802AB3B003FCFD266B5C.crl
                          rsync://repo-rpki.idnic.net/repo/8b36e88d-d573-4cbb-b460-a0b969aa84d5/0/B3263D687D5BDFB2FB4E802AB3B003FCFD266B5C.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B3263D687D5BDFB2FB4E802AB3B003FCFD266B5C.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 28 Jan 2026 14:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:45:1b:9c:18:6f:8d:77:5d:8b:da:fd:e9:37:9e:0e:88:72:6a:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B3263D687D5BDFB2FB4E802AB3B003FCFD266B5C
        Validity
            Not Before: Jan 25 16:46:03 2026 GMT
            Not After : Jan 29 03:59:03 2026 GMT
        Subject: CN=9E55D0D5AB35B7377FFE410191B48C6EEBEE45C0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:88:c9:f7:5c:f5:2b:2b:9a:de:26:7f:6e:e6:
                    dc:47:35:ce:1c:08:4d:81:bc:17:1f:32:88:39:b2:
                    5b:e6:90:9b:32:46:70:e7:b4:65:94:3a:ee:f9:49:
                    08:99:89:df:73:8c:64:8a:47:35:b6:93:b3:3c:07:
                    bf:1d:f9:86:6a:5a:27:27:64:8d:fc:bd:51:37:06:
                    f4:c4:7b:d7:95:69:bf:c2:06:d4:cc:c2:51:aa:d4:
                    08:67:db:46:0d:70:f1:53:de:c5:05:b4:9a:d4:f0:
                    be:ef:33:1b:c0:1c:51:8d:b2:c0:95:3d:61:1c:66:
                    ac:32:95:9c:2c:c3:eb:13:18:f3:70:36:44:e7:20:
                    1c:2f:38:e8:a7:d1:aa:9c:40:57:fa:bd:a0:4a:16:
                    99:02:8f:27:50:51:1c:77:ce:a3:c5:a4:05:18:1b:
                    8d:ea:76:2e:6b:d1:af:2d:38:ad:86:ce:18:70:a5:
                    95:43:1d:6f:22:6e:80:df:5f:f7:25:0d:c9:24:60:
                    38:52:ee:37:e4:5c:87:f6:18:77:5e:62:e7:b7:34:
                    ba:d6:e3:15:65:95:5c:8e:6d:c7:4b:96:fd:fe:0d:
                    7e:23:6c:0b:2a:ce:61:69:da:25:46:0d:57:ee:32:
                    9f:83:e4:e9:6e:a4:aa:05:9b:a3:55:99:e9:32:b9:
                    9f:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:55:D0:D5:AB:35:B7:37:7F:FE:41:01:91:B4:8C:6E:EB:EE:45:C0
            X509v3 Authority Key Identifier:
                keyid:B3:26:3D:68:7D:5B:DF:B2:FB:4E:80:2A:B3:B0:03:FC:FD:26:6B:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/8b36e88d-d573-4cbb-b460-a0b969aa84d5/0/B3263D687D5BDFB2FB4E802AB3B003FCFD266B5C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B3263D687D5BDFB2FB4E802AB3B003FCFD266B5C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8b36e88d-d573-4cbb-b460-a0b969aa84d5/0/B3263D687D5BDFB2FB4E802AB3B003FCFD266B5C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:12:0b:7c:f7:ea:63:2e:6f:51:a9:cd:84:46:fb:23:d7:01:
         7d:47:dd:b9:cd:e8:90:06:d2:c7:70:f4:85:c2:c4:f1:d1:7c:
         99:18:9c:dd:50:85:84:32:f9:99:5a:06:8b:18:1d:f7:5e:66:
         0a:e6:04:04:88:a0:b3:cc:10:61:1b:48:00:8f:c9:0f:1e:c9:
         a0:82:14:dd:4a:62:79:84:2f:4b:8b:fb:b8:80:58:7a:9f:ce:
         19:27:5c:b5:04:63:c3:3b:95:e7:c0:76:b2:48:a1:c8:3a:c1:
         74:63:67:24:c9:bc:23:5b:69:19:43:92:e7:d4:61:18:3f:92:
         91:d5:0e:ea:4a:a4:74:7f:1c:74:39:1f:1b:18:84:95:3d:d0:
         b3:3b:35:8f:ef:e3:82:5f:04:a7:b2:75:7c:30:c1:db:28:fe:
         46:94:e2:d2:13:0c:7d:8c:a5:74:68:43:6f:c0:ae:a6:a3:4d:
         aa:63:b1:45:50:d5:ef:31:61:89:a7:e9:1b:0d:78:c1:65:b7:
         89:96:e9:53:54:83:f1:73:04:b1:33:f8:78:d9:09:46:97:a4:
         47:c6:39:5e:75:73:2e:c8:e3:bf:9d:05:7c:79:ce:eb:5b:77:
         d7:26:8a:e6:27:80:d9:8c:33:6c:66:6d:cb:32:ce:db:9f:97:
         ea:ad:ad:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 04:25:04 2026 by rpki-client