This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/912a3f28-8273-4dd5-87fc-1ef00acac9b6/0/E17A5EB94156DE23FCDC8F29B210FCDEDCF08F52.mft
File:                     E17A5EB94156DE23FCDC8F29B210FCDEDCF08F52.mft (raw, json)
Hash identifier:          5hvwhAnmZDN6g7bf9Bnhwh0Hxzqu91o02v0YFpakwGI=
Subject key identifier:   A7:FB:6F:79:1E:5A:22:82:3E:EF:D7:FE:3E:69:66:CF:B1:BF:6E:10
Authority key identifier: E1:7A:5E:B9:41:56:DE:23:FC:DC:8F:29:B2:10:FC:DE:DC:F0:8F:52
Certificate issuer:       /CN=E17A5EB94156DE23FCDC8F29B210FCDEDCF08F52
Certificate serial:       6B6AF34AC288D7501490ECEB22971C0CD43F8286
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E17A5EB94156DE23FCDC8F29B210FCDEDCF08F52.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/912a3f28-8273-4dd5-87fc-1ef00acac9b6/0/E17A5EB94156DE23FCDC8F29B210FCDEDCF08F52.mft
Manifest number:          0541
Signing time:             Sat 24 Jan 2026 09:52:14 +0000
Manifest this update:     Sat 24 Jan 2026 09:47:14 +0000
Manifest next update:     Tue 27 Jan 2026 09:55:14 +0000
Files and hashes:         1: E17A5EB94156DE23FCDC8F29B210FCDEDCF08F52.crl (hash: YkyBkZUHR5cYmjB8yQ2TwhxA0Zikh2MX6FxuuI7Gulo=)
                          2: 3130332e3133302e36322e302f32342d3234203d3e20313338303739.roa (hash: gA/G4KU0S654m0JbYV6SpYNvybqVwcWtbGvUC8YnGdc=)
                          3: 3130332e3133302e36332e302f32342d3234203d3e20313338303739.roa (hash: BTJyyClQJ2ooNN9EN9agUZZ+ml+xViKf+qFHMjyGIK0=)
                          4: 3130332e3133302e36302e302f32332d3233203d3e20313338303739.roa (hash: t1GlQPTqCX0tSN2oGwnozLwYbWtyVQRe58xqkUEfAuQ=)
                          5: 3130332e3133302e36302e302f32322d3232203d3e20313338303739.roa (hash: dr1CQsFDr+grBIANLd3KqKBw7/lJxKh8r7O2jOMsoyE=)
                          6: 3130332e3133302e36302e302f32342d3234203d3e20313338303739.roa (hash: 8GAdTJuNR1Zetl+ziDhBJwBFLCcefBc1zOZpq/utdAc=)
                          7: 3130332e3133302e36312e302f32342d3234203d3e20313338303739.roa (hash: VmKn4H92OZlUtnRAAPlH3DAWvPgKEL7aXZz1kY1YrQ0=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/912a3f28-8273-4dd5-87fc-1ef00acac9b6/0/E17A5EB94156DE23FCDC8F29B210FCDEDCF08F52.crl
                          rsync://repo-rpki.idnic.net/repo/912a3f28-8273-4dd5-87fc-1ef00acac9b6/0/E17A5EB94156DE23FCDC8F29B210FCDEDCF08F52.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E17A5EB94156DE23FCDC8F29B210FCDEDCF08F52.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 27 Jan 2026 09:55:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:6a:f3:4a:c2:88:d7:50:14:90:ec:eb:22:97:1c:0c:d4:3f:82:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E17A5EB94156DE23FCDC8F29B210FCDEDCF08F52
        Validity
            Not Before: Jan 24 09:47:14 2026 GMT
            Not After : Jan 27 09:55:14 2026 GMT
        Subject: CN=A7FB6F791E5A22823EEFD7FE3E6966CFB1BF6E10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:46:f9:81:44:ee:e8:a0:3e:23:21:2c:36:ce:
                    ce:7a:e0:b4:6a:3c:15:01:bf:83:bf:bf:b4:df:e2:
                    ca:ee:23:26:c1:18:61:f9:27:ca:b4:73:cc:d1:c1:
                    a3:44:b8:e1:bd:b8:f6:17:8b:b8:4d:db:b0:63:d6:
                    65:c6:35:65:3a:cb:1a:38:15:61:11:ab:d8:65:d5:
                    5b:10:70:0c:a2:78:53:bd:65:23:61:75:86:82:b9:
                    cf:2b:e6:5a:32:f3:3a:f0:37:95:ec:35:28:b4:cc:
                    ef:e6:1f:54:b6:61:7f:f0:02:4b:4a:3e:1b:94:98:
                    b1:0f:82:62:52:e7:08:80:26:2e:1c:79:c2:1c:bc:
                    d1:cf:4f:35:07:d1:45:28:52:06:cb:41:90:56:43:
                    cc:5a:c9:a0:5c:f7:58:7a:17:ad:32:9c:ac:4d:2f:
                    dd:bd:bd:79:5c:ff:39:b2:64:7d:6e:01:5e:d9:d6:
                    d1:33:a1:ed:21:b3:c0:64:2f:21:2f:04:8b:0f:57:
                    94:52:77:3b:f6:e1:8e:e6:d7:eb:a0:d2:6c:91:8c:
                    cb:76:6c:c8:00:14:4a:b9:1c:9d:5b:1d:07:7c:a9:
                    4f:50:f0:bc:d7:c6:59:22:0b:4b:31:99:53:ec:f0:
                    ab:44:d1:19:f8:06:34:9f:61:df:7e:c9:1d:3b:e9:
                    b0:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:FB:6F:79:1E:5A:22:82:3E:EF:D7:FE:3E:69:66:CF:B1:BF:6E:10
            X509v3 Authority Key Identifier:
                keyid:E1:7A:5E:B9:41:56:DE:23:FC:DC:8F:29:B2:10:FC:DE:DC:F0:8F:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/912a3f28-8273-4dd5-87fc-1ef00acac9b6/0/E17A5EB94156DE23FCDC8F29B210FCDEDCF08F52.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E17A5EB94156DE23FCDC8F29B210FCDEDCF08F52.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/912a3f28-8273-4dd5-87fc-1ef00acac9b6/0/E17A5EB94156DE23FCDC8F29B210FCDEDCF08F52.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c4:d8:a0:b8:b1:b8:65:1e:fb:29:80:80:24:84:47:99:4e:cf:
         cf:2a:f6:fd:c0:5e:17:85:8d:77:a3:83:36:45:a9:e5:81:ac:
         a9:11:0f:ae:24:39:1d:7c:d3:b5:86:d6:52:2f:71:ec:50:c6:
         97:64:f4:12:0d:ef:5f:59:3e:cd:2c:66:e2:7a:d1:0c:64:f5:
         b4:56:04:51:64:ad:86:53:fa:dd:96:26:ce:d4:ed:52:76:0f:
         eb:0f:74:24:81:30:e4:95:2b:9a:94:f9:98:ec:d2:a7:c5:a5:
         61:d9:b6:13:f9:91:39:f6:a3:49:93:52:ce:b2:74:2b:23:db:
         a8:0a:6e:2e:7b:45:6f:e6:2c:90:de:e0:60:1d:c8:10:02:f0:
         53:84:d7:3f:75:98:44:a0:be:ed:e8:fb:fa:9d:d8:35:ae:2a:
         1e:e7:a9:a9:a7:70:d4:6d:e8:12:f3:e0:d5:ba:c9:08:16:de:
         1b:04:7d:76:64:b2:71:f2:50:70:e0:fd:c0:aa:6d:6e:6e:f2:
         fe:4a:8d:9c:2f:8e:db:fa:0e:42:5d:bb:36:9d:33:81:82:41:
         41:c3:34:ae:60:e9:1a:c8:bd:65:58:76:93:07:0f:8a:a6:b0:
         77:52:94:f7:a5:b1:3c:42:3f:1b:8f:43:9c:48:4c:cf:94:7f:
         93:32:f4:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:57:48 2026 by rpki-client