This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/8cd08eb3-937d-4304-9167-463d7c58d5e4/0/094D556CA0B55AF4A636873A1B1E7032B2C9813C.mft
File:                     094D556CA0B55AF4A636873A1B1E7032B2C9813C.mft (raw, json)
Hash identifier:          GHQ/o4A16mYpDjyAHRrjfcrm4LcNAXnhXHfkjXMsBR4=
Subject key identifier:   41:99:43:54:49:11:86:3C:5B:8C:E9:09:30:AA:A2:23:D2:D8:9B:D8
Authority key identifier: 09:4D:55:6C:A0:B5:5A:F4:A6:36:87:3A:1B:1E:70:32:B2:C9:81:3C
Certificate issuer:       /CN=094D556CA0B55AF4A636873A1B1E7032B2C9813C
Certificate serial:       3AA6BCD95CC1FA26401333463CB623829FEDD4B1
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/094D556CA0B55AF4A636873A1B1E7032B2C9813C.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/8cd08eb3-937d-4304-9167-463d7c58d5e4/0/094D556CA0B55AF4A636873A1B1E7032B2C9813C.mft
Manifest number:          01FB
Signing time:             Fri 23 Jan 2026 19:51:33 +0000
Manifest this update:     Fri 23 Jan 2026 19:46:33 +0000
Manifest next update:     Tue 27 Jan 2026 03:44:33 +0000
Files and hashes:         1: 3130332e3131322e3134342e302f32332d3233203d3e20323135373237.roa (hash: 8zDZZBY6bA2jEqKH0/3A7Q4sZMdLlbxldDEJxB2ILt4=)
                          2: 3130332e3131322e3134352e302f32342d3234203d3e20313534343130.roa (hash: UHlPWjPTTA+QwgHjs3cvH+m1L+/DxhR1Bi9LnfxOolI=)
                          3: 3130332e3131322e3134352e302f32342d3234203d3e20323135373237.roa (hash: 47jeZDZVGJz340J8dcsKd8JOrcaXh6l0x1iSQEe4P38=)
                          4: 094D556CA0B55AF4A636873A1B1E7032B2C9813C.crl (hash: /phhGNl6L3YsE8wAqHI18vqGyjhT+CZNZXGdXGU38Gw=)
                          5: 3130332e3131322e3134342e302f32342d3234203d3e20323135373237.roa (hash: gknzJmwMhuMcq+HlLpGDVUWG9agAsyWXJWE8G4S01cU=)
                          6: 3130332e3131322e3134342e302f32332d3233203d3e20313534343130.roa (hash: 15d3srR41IwQ/STvILY0HITwCXTTisRoDIWtT+eTod8=)
                          7: 3130332e3131322e3134342e302f32342d3234203d3e20313534343130.roa (hash: 2L8dIdFnu3el0R5ZJrBbgHyyhcGR7++TSiT4qb543Dw=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/8cd08eb3-937d-4304-9167-463d7c58d5e4/0/094D556CA0B55AF4A636873A1B1E7032B2C9813C.crl
                          rsync://repo-rpki.idnic.net/repo/8cd08eb3-937d-4304-9167-463d7c58d5e4/0/094D556CA0B55AF4A636873A1B1E7032B2C9813C.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/094D556CA0B55AF4A636873A1B1E7032B2C9813C.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 27 Jan 2026 03:44:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:a6:bc:d9:5c:c1:fa:26:40:13:33:46:3c:b6:23:82:9f:ed:d4:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=094D556CA0B55AF4A636873A1B1E7032B2C9813C
        Validity
            Not Before: Jan 23 19:46:33 2026 GMT
            Not After : Jan 27 03:44:33 2026 GMT
        Subject: CN=419943544911863C5B8CE90930AAA223D2D89BD8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:a0:46:93:4f:f7:20:a5:a0:a2:b5:23:5d:7f:
                    eb:fd:79:b8:2d:71:2f:27:76:1a:17:7f:14:8e:ee:
                    1b:67:f3:85:6e:36:6e:d6:33:55:1d:a8:b2:b4:93:
                    95:39:81:71:99:d5:53:85:f4:ff:ab:59:ae:23:db:
                    89:a3:f9:3e:d3:35:0d:f0:06:55:65:9d:57:33:16:
                    95:fe:f1:ef:d5:bb:b3:8f:fc:bb:2a:08:69:80:01:
                    e5:b5:9e:0d:2d:f5:20:8c:39:8d:a9:52:a0:90:20:
                    91:a2:09:5b:b8:08:d8:96:bf:a0:82:83:ad:bd:9f:
                    32:3c:2a:96:a9:51:de:09:44:a6:c9:ec:f2:86:59:
                    b1:5e:b9:8b:da:42:15:52:85:26:6c:1f:57:be:a4:
                    08:f6:3e:f6:2a:33:8f:8f:4b:f4:c8:32:52:f7:38:
                    e1:25:16:80:ac:ee:7e:c6:b5:85:7f:cc:5f:f6:6c:
                    a2:3e:08:80:f2:59:6d:9c:6b:fe:19:78:6a:be:ae:
                    dd:c5:54:8f:13:3d:1d:99:49:33:b7:89:55:b8:fb:
                    b6:52:8a:df:13:ca:c1:75:89:02:64:72:db:5a:80:
                    b3:54:da:73:40:61:d4:14:d6:cd:ba:eb:c8:2f:90:
                    a4:ed:c6:fe:59:96:78:53:0c:7b:3d:6d:46:b4:b5:
                    ad:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:99:43:54:49:11:86:3C:5B:8C:E9:09:30:AA:A2:23:D2:D8:9B:D8
            X509v3 Authority Key Identifier:
                keyid:09:4D:55:6C:A0:B5:5A:F4:A6:36:87:3A:1B:1E:70:32:B2:C9:81:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/8cd08eb3-937d-4304-9167-463d7c58d5e4/0/094D556CA0B55AF4A636873A1B1E7032B2C9813C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/094D556CA0B55AF4A636873A1B1E7032B2C9813C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8cd08eb3-937d-4304-9167-463d7c58d5e4/0/094D556CA0B55AF4A636873A1B1E7032B2C9813C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:6d:cf:79:eb:ea:3c:ee:4f:d9:7d:18:2a:23:23:37:aa:9d:
         61:2f:7d:26:95:93:5d:59:c2:79:32:6f:5b:ce:30:ea:f7:a6:
         0b:bf:e5:ca:9d:57:67:d8:d5:38:1f:2d:cc:65:40:b3:d3:9f:
         b2:8f:15:49:d7:e3:fa:0e:29:6f:d3:c9:2d:ee:43:94:21:6b:
         f4:de:27:b4:df:4f:24:2e:49:93:65:b4:00:91:fe:df:e5:23:
         53:09:b8:12:66:57:31:d6:d6:e5:9f:9d:45:0b:49:77:9e:20:
         24:ec:e1:f9:46:e2:04:1d:d9:22:f1:44:b2:3a:ee:06:cc:49:
         ba:93:64:4e:f3:70:33:70:3f:33:c6:56:2a:c4:b6:bb:0c:c2:
         24:bb:13:f5:9d:81:8a:41:c2:12:cf:22:24:d5:a9:11:8d:0f:
         61:3f:af:77:c1:35:24:d1:5c:90:f1:3d:e5:2a:57:4f:2d:01:
         04:f9:41:8e:21:ce:f9:e4:b6:f4:85:c7:c5:4e:4f:d3:83:3a:
         e4:44:3c:80:7c:37:ba:97:71:00:f0:2b:55:19:55:71:3e:98:
         5f:84:d0:ad:e3:c1:85:23:4b:4a:25:61:03:a8:57:9f:49:e8:
         d7:e6:ab:af:60:de:0b:5b:8c:e2:64:a1:3b:ae:fd:61:54:99:
         96:70:8f:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 22:10:29 2026 by rpki-client