This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/90073164-8008-49c6-b186-3c7fe9b80a17/0/35E6B2357C98B974C14BA8A5DE46B519083666C6.mft
File:                     35E6B2357C98B974C14BA8A5DE46B519083666C6.mft (raw, json)
Hash identifier:          nSInSSlMAFxJYPJJF9790rKcS8srLl4e4O1N91a/8dg=
Subject key identifier:   3E:35:E0:60:AF:C9:94:8E:B7:5F:A8:DA:56:49:F9:F0:DD:FD:0D:A1
Authority key identifier: 35:E6:B2:35:7C:98:B9:74:C1:4B:A8:A5:DE:46:B5:19:08:36:66:C6
Certificate issuer:       /CN=35E6B2357C98B974C14BA8A5DE46B519083666C6
Certificate serial:       3930391C1B944CD5759F9771C58EC3B6F3F2A8B1
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35E6B2357C98B974C14BA8A5DE46B519083666C6.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/90073164-8008-49c6-b186-3c7fe9b80a17/0/35E6B2357C98B974C14BA8A5DE46B519083666C6.mft
Manifest number:          0203
Signing time:             Sun 25 Jan 2026 06:51:47 +0000
Manifest this update:     Sun 25 Jan 2026 06:46:47 +0000
Manifest next update:     Wed 28 Jan 2026 12:24:47 +0000
Files and hashes:         1: 3130332e3134302e37362e302f32342d3234203d3e203535363636.roa (hash: GLppbahQizSwOWwKriMc4uG3htQlLQar3GU+UJJemeo=)
                          2: 3130332e3134302e37362e302f32332d3234203d3e203535363636.roa (hash: VrC0pE6ywJ4SpMSp1FoGXZj0toTtd8RroZm7PaGXQLI=)
                          3: 3130332e3134302e37372e302f32342d3234203d3e203535363636.roa (hash: lKrNBKuDZS/ipiNlTaiA44F8MyhuWOX6AJpZ28duXRw=)
                          4: 35E6B2357C98B974C14BA8A5DE46B519083666C6.crl (hash: sE4lH264zFqWqtEwlM+lzsHWZtYdQw+95usSc7YMfKY=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/90073164-8008-49c6-b186-3c7fe9b80a17/0/35E6B2357C98B974C14BA8A5DE46B519083666C6.crl
                          rsync://repo-rpki.idnic.net/repo/90073164-8008-49c6-b186-3c7fe9b80a17/0/35E6B2357C98B974C14BA8A5DE46B519083666C6.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35E6B2357C98B974C14BA8A5DE46B519083666C6.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 28 Jan 2026 12:24:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:30:39:1c:1b:94:4c:d5:75:9f:97:71:c5:8e:c3:b6:f3:f2:a8:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35E6B2357C98B974C14BA8A5DE46B519083666C6
        Validity
            Not Before: Jan 25 06:46:47 2026 GMT
            Not After : Jan 28 12:24:47 2026 GMT
        Subject: CN=3E35E060AFC9948EB75FA8DA5649F9F0DDFD0DA1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:b7:5f:8e:ed:8a:c8:8a:d0:e1:05:af:87:ad:
                    c3:02:96:61:7e:db:00:c3:02:ff:14:f8:c8:c7:d9:
                    5f:dc:cd:2f:e8:65:66:27:d6:59:8a:c0:f6:0f:62:
                    52:1f:94:f2:8a:be:ed:f2:81:1f:52:73:f5:d9:fe:
                    c2:3b:88:20:8d:a6:84:3c:99:7b:43:34:33:34:7f:
                    19:13:d6:44:a5:77:95:a2:7f:39:fc:50:ac:58:3e:
                    87:1f:d9:d9:a6:ba:cc:de:e0:b9:9b:1f:3d:52:05:
                    05:30:bd:c2:88:82:8e:c2:16:2c:0b:75:c8:4a:83:
                    d3:04:7d:6d:b0:6a:03:df:fb:fd:41:cc:e4:90:fa:
                    df:0c:8d:7d:af:74:c8:0f:ee:79:74:97:7b:a6:1c:
                    30:af:81:49:1b:2e:99:31:b8:d3:9a:02:47:10:0b:
                    85:75:db:c2:22:cf:3b:4c:11:29:d3:60:b4:c6:59:
                    fe:5e:cb:cd:bd:85:ad:41:fb:56:4b:28:2b:49:dd:
                    59:df:12:0b:f0:ea:96:27:80:fb:b0:48:73:e2:75:
                    95:2b:e9:bc:15:30:7a:9f:90:9b:50:7c:73:87:06:
                    1d:d8:15:fa:f6:9e:ee:17:bf:7b:11:d1:1b:2b:05:
                    50:1b:b2:87:2d:19:26:9e:65:7f:66:90:9c:b2:ab:
                    95:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:35:E0:60:AF:C9:94:8E:B7:5F:A8:DA:56:49:F9:F0:DD:FD:0D:A1
            X509v3 Authority Key Identifier:
                keyid:35:E6:B2:35:7C:98:B9:74:C1:4B:A8:A5:DE:46:B5:19:08:36:66:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/90073164-8008-49c6-b186-3c7fe9b80a17/0/35E6B2357C98B974C14BA8A5DE46B519083666C6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35E6B2357C98B974C14BA8A5DE46B519083666C6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/90073164-8008-49c6-b186-3c7fe9b80a17/0/35E6B2357C98B974C14BA8A5DE46B519083666C6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         df:da:2d:92:65:50:09:04:bd:f4:1d:d2:6d:82:2a:a4:99:ec:
         b6:14:b9:89:34:4b:43:bc:77:9f:b4:0b:af:e7:8a:a3:3e:f4:
         0a:35:58:46:73:a3:07:e8:a1:fb:87:c5:5e:de:0b:d6:62:e3:
         78:19:e5:1e:5f:38:37:75:da:b2:2e:a8:02:de:7d:28:b3:28:
         e9:ea:6e:a0:3f:07:4e:ed:6b:06:db:1a:32:ac:87:f0:92:1b:
         b1:41:61:85:f0:9c:06:23:5e:cf:75:cf:de:aa:69:f8:d1:64:
         15:23:d7:3c:bb:1f:e2:ff:92:80:66:d7:3e:1b:42:a8:08:fa:
         a1:fc:e8:63:74:20:bd:e5:55:ab:d2:1e:08:c2:38:15:67:93:
         3c:25:64:b7:2d:2e:bf:46:93:40:7d:4b:41:6c:54:62:c8:9c:
         56:59:1d:92:48:ed:bb:6b:37:ff:44:ea:b6:ee:f5:e7:63:83:
         95:1b:81:f5:4f:bc:1e:e1:b5:0e:3c:5d:13:42:3d:9d:b4:38:
         92:03:30:ad:d0:a0:cd:c9:4e:45:78:0e:78:34:9d:02:fd:6d:
         ae:56:37:af:6c:21:b5:7b:5c:dc:c4:9d:8c:8e:cc:bc:9b:42:
         b7:61:56:9e:b9:ff:2e:37:df:05:be:73:2b:24:0b:d8:6b:50:
         e7:06:d5:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 19:00:24 2026 by rpki-client