This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/8e4baa72-654f-4b80-8fc7-f3f27bcdd340/0/510BADD365AB1A82795AF2361991094E4847999C.mft
File:                     510BADD365AB1A82795AF2361991094E4847999C.mft (raw, json)
Hash identifier:          xY3v1ZfsrVyDNRo3V1Q7Trz345DH7t9MVXK33PiJrI4=
Subject key identifier:   B4:9A:12:9C:E5:EA:B6:03:51:E3:5B:9D:31:1B:5F:35:B6:34:2F:1A
Authority key identifier: 51:0B:AD:D3:65:AB:1A:82:79:5A:F2:36:19:91:09:4E:48:47:99:9C
Certificate issuer:       /CN=510BADD365AB1A82795AF2361991094E4847999C
Certificate serial:       51E836FA91B035E6B10ACDFAFA56DFC3918EACF1
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/510BADD365AB1A82795AF2361991094E4847999C.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/8e4baa72-654f-4b80-8fc7-f3f27bcdd340/0/510BADD365AB1A82795AF2361991094E4847999C.mft
Manifest number:          033C
Signing time:             Fri 23 Jan 2026 22:31:06 +0000
Manifest this update:     Fri 23 Jan 2026 22:26:06 +0000
Manifest next update:     Tue 27 Jan 2026 03:25:06 +0000
Files and hashes:         1: 510BADD365AB1A82795AF2361991094E4847999C.crl (hash: Kkfnfr3lUXgX3qL3CY7ES+6QFhmnChlBRryTIbGafQY=)
                          2: 3130332e3232352e3230392e302f32342d3234203d3e20313333333337.roa (hash: eQQaS2GcAKMZzr99CGlwXp93+osvzucp3Pb6cXhQDAo=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/8e4baa72-654f-4b80-8fc7-f3f27bcdd340/0/510BADD365AB1A82795AF2361991094E4847999C.crl
                          rsync://repo-rpki.idnic.net/repo/8e4baa72-654f-4b80-8fc7-f3f27bcdd340/0/510BADD365AB1A82795AF2361991094E4847999C.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/510BADD365AB1A82795AF2361991094E4847999C.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 27 Jan 2026 03:25:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:e8:36:fa:91:b0:35:e6:b1:0a:cd:fa:fa:56:df:c3:91:8e:ac:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=510BADD365AB1A82795AF2361991094E4847999C
        Validity
            Not Before: Jan 23 22:26:06 2026 GMT
            Not After : Jan 27 03:25:06 2026 GMT
        Subject: CN=B49A129CE5EAB60351E35B9D311B5F35B6342F1A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:3c:37:f3:3f:7f:e4:90:a1:cf:89:c4:bc:b3:
                    5e:46:b5:c7:63:ea:93:f6:af:0a:e6:58:42:83:1e:
                    7d:75:7e:30:ab:1b:3d:53:a1:41:4b:43:ba:39:ff:
                    b4:ec:51:4b:4b:a0:b1:36:13:d9:48:05:59:a2:64:
                    40:90:a6:89:bc:5b:07:23:33:51:ee:4a:34:c1:df:
                    af:46:9f:df:aa:c0:a5:4e:5d:ac:68:56:68:f2:91:
                    12:9e:8f:89:98:22:ae:39:0d:b5:d8:eb:5a:7a:6a:
                    79:93:85:d8:55:2e:24:d2:e9:d7:20:ea:b1:69:e0:
                    a4:09:84:79:84:85:1c:f7:14:cb:0c:81:9e:f7:d0:
                    92:d4:61:3c:b3:dc:49:81:a2:5b:78:aa:ea:47:e7:
                    f9:ec:c2:9d:ca:45:f5:64:74:02:31:b9:9f:13:d9:
                    ca:a9:e0:fd:a2:1e:8a:6d:69:be:b0:9e:90:34:2e:
                    5e:f1:5b:24:bc:00:ac:a1:13:ea:6f:ba:5a:5c:35:
                    4a:6d:d4:89:4a:e9:ae:d2:f1:ed:49:2d:56:93:22:
                    d7:5f:3e:9d:87:23:58:e7:52:69:82:6b:2c:bf:ba:
                    95:69:8f:36:60:77:df:b8:6d:e7:b2:be:2a:a3:d4:
                    a1:02:dd:da:4d:76:23:4e:2d:e2:01:8a:46:ea:b7:
                    19:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:9A:12:9C:E5:EA:B6:03:51:E3:5B:9D:31:1B:5F:35:B6:34:2F:1A
            X509v3 Authority Key Identifier:
                keyid:51:0B:AD:D3:65:AB:1A:82:79:5A:F2:36:19:91:09:4E:48:47:99:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/8e4baa72-654f-4b80-8fc7-f3f27bcdd340/0/510BADD365AB1A82795AF2361991094E4847999C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/510BADD365AB1A82795AF2361991094E4847999C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8e4baa72-654f-4b80-8fc7-f3f27bcdd340/0/510BADD365AB1A82795AF2361991094E4847999C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:ee:36:ce:38:43:76:e0:e9:b8:bb:bf:f9:da:79:87:34:cb:
         38:3e:b9:f7:b7:64:17:b7:a4:4f:e9:61:f0:46:ca:83:4d:4d:
         32:0f:04:d9:fa:91:82:f1:97:f5:9a:95:ad:99:96:d8:dd:b4:
         9b:6c:41:53:98:4a:61:f1:2e:a3:10:3a:3e:74:f5:be:21:67:
         c5:ab:13:c1:e5:13:ff:cb:2d:79:59:8d:ae:df:ba:24:8a:87:
         fe:11:40:3a:59:3f:55:92:9f:ea:af:6a:8a:e1:e5:6a:b1:0c:
         a1:ad:e6:b4:ab:2c:8a:21:4c:58:0e:a9:c8:4a:e2:fa:d3:6a:
         bd:58:17:bc:6a:78:92:ac:ff:a4:16:bb:5f:5b:ae:4a:2e:47:
         c1:78:d4:35:62:15:f2:fb:57:23:89:ae:a0:99:f4:7d:c9:b6:
         29:6d:2d:19:f1:06:60:9f:54:cc:d7:7a:94:02:44:3d:c3:21:
         3c:3d:5b:43:c2:1f:10:d2:be:35:49:fc:f6:a8:a4:27:1d:52:
         22:b5:62:19:d1:cf:ca:a7:87:f1:47:f1:ee:fa:de:7a:fa:0a:
         1f:d0:bd:ca:b1:bc:ff:4e:97:c7:56:61:ac:3a:21:5a:15:c7:
         f2:ce:08:d8:9b:8d:70:a2:9a:86:e6:75:76:8f:41:26:5f:30:
         fb:b8:02:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 22:24:11 2026 by rpki-client