This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/957996f5-a934-4b44-8547-19ec37cf7c14/0/30C39359651C33B59AC32BC46831980108960568.mft
File:                     30C39359651C33B59AC32BC46831980108960568.mft (raw, json)
Hash identifier:          zbn799laEf/stuLSKZiOfBEcFUN75ISrAx+iPzZewtA=
Subject key identifier:   19:F1:48:26:0D:E6:1D:0F:D5:A0:B6:35:B4:BF:C1:C7:8D:92:25:62
Authority key identifier: 30:C3:93:59:65:1C:33:B5:9A:C3:2B:C4:68:31:98:01:08:96:05:68
Certificate issuer:       /CN=30C39359651C33B59AC32BC46831980108960568
Certificate serial:       5B9BB24AC778DA88D1E5946A1FED438240301CD9
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/30C39359651C33B59AC32BC46831980108960568.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/957996f5-a934-4b44-8547-19ec37cf7c14/0/30C39359651C33B59AC32BC46831980108960568.mft
Manifest number:          0540
Signing time:             Sat 24 Jan 2026 16:22:23 +0000
Manifest this update:     Sat 24 Jan 2026 16:17:23 +0000
Manifest next update:     Tue 27 Jan 2026 17:54:23 +0000
Files and hashes:         1: 323030313a6466333a643730303a3a2f34382d3438203d3e20313337323937.roa (hash: dFQhxxhIxqRHu+YRpdoF0va5NYJwS4I6YJDx/CCdh1g=)
                          2: 30C39359651C33B59AC32BC46831980108960568.crl (hash: c5YOw3SiA7MGSCwn9BLivdPpAp9EzQLarvjgwS1IoFI=)
                          3: 3130332e3130372e3134302e302f32342d3234203d3e20313337323937.roa (hash: BHlKkUg0NjANH6Mliit3f4KGxxDlGbzPwZhqnWpcPcU=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/957996f5-a934-4b44-8547-19ec37cf7c14/0/30C39359651C33B59AC32BC46831980108960568.crl
                          rsync://repo-rpki.idnic.net/repo/957996f5-a934-4b44-8547-19ec37cf7c14/0/30C39359651C33B59AC32BC46831980108960568.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/30C39359651C33B59AC32BC46831980108960568.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 27 Jan 2026 17:54:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:9b:b2:4a:c7:78:da:88:d1:e5:94:6a:1f:ed:43:82:40:30:1c:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30C39359651C33B59AC32BC46831980108960568
        Validity
            Not Before: Jan 24 16:17:23 2026 GMT
            Not After : Jan 27 17:54:23 2026 GMT
        Subject: CN=19F148260DE61D0FD5A0B635B4BFC1C78D922562
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:2a:d5:4b:99:ba:cc:d1:b1:a6:3c:b2:60:1f:
                    c6:1a:6f:87:a2:24:1b:d8:1b:ea:9c:56:05:ce:c1:
                    6a:ac:23:0e:b1:c4:fa:04:b2:06:d8:7d:1e:e3:81:
                    46:b1:ee:db:4d:9a:ec:1e:fb:0d:20:85:f6:3d:13:
                    03:d2:21:89:34:0e:4b:ba:0c:35:6a:18:08:69:b0:
                    36:93:0b:bc:dd:73:36:29:71:36:6c:ca:6e:45:f5:
                    e1:87:e6:a8:20:25:80:04:e2:40:12:e0:19:dc:21:
                    26:f4:cc:f9:d2:a7:ba:49:aa:43:57:a3:fa:14:13:
                    7e:06:23:0d:df:93:1b:e3:88:8f:59:47:e5:53:67:
                    79:6f:ef:1a:a8:91:8b:ce:91:3e:8a:fa:96:06:24:
                    55:ad:42:9a:f3:5e:a2:3e:25:d5:2f:bd:0e:44:35:
                    a6:c7:82:ee:33:7e:4e:6d:30:53:e5:62:65:40:14:
                    a8:54:ae:0e:26:7b:0a:54:7e:d5:16:0e:63:d3:ac:
                    07:32:ca:5f:03:21:21:51:db:b0:54:bd:88:f2:38:
                    d3:a5:36:ce:35:f0:10:98:19:13:5b:76:79:82:1b:
                    7d:b2:ae:73:84:e6:1f:a0:29:16:0e:a4:fc:df:dd:
                    42:2a:71:6a:33:75:87:1c:85:56:60:ec:cd:e3:26:
                    42:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:F1:48:26:0D:E6:1D:0F:D5:A0:B6:35:B4:BF:C1:C7:8D:92:25:62
            X509v3 Authority Key Identifier:
                keyid:30:C3:93:59:65:1C:33:B5:9A:C3:2B:C4:68:31:98:01:08:96:05:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/957996f5-a934-4b44-8547-19ec37cf7c14/0/30C39359651C33B59AC32BC46831980108960568.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/30C39359651C33B59AC32BC46831980108960568.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/957996f5-a934-4b44-8547-19ec37cf7c14/0/30C39359651C33B59AC32BC46831980108960568.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:89:10:1f:3b:2c:17:1f:67:29:d6:0b:87:93:3a:a0:cb:4d:
         d8:70:c9:0d:f8:a1:74:44:cf:01:ac:22:2b:be:58:c4:82:61:
         0f:fa:8b:04:0a:c9:18:8a:b4:9a:de:9e:cf:5e:15:30:fb:4c:
         f4:d4:e5:14:62:fa:75:97:af:b7:6d:c9:cb:4c:f2:d9:0f:ea:
         09:f9:60:d2:7b:09:f7:f2:8d:b0:7b:1c:58:2c:18:6f:b9:6d:
         04:9c:35:95:5f:4c:18:5f:d3:42:64:3a:3e:92:b6:ba:4b:24:
         94:5a:a9:a5:bd:1b:f0:6c:c6:f0:d4:f1:57:1c:4f:5c:3e:d1:
         12:62:b8:f0:3e:ab:9c:c7:18:7b:b1:61:50:30:30:6f:8c:47:
         13:b2:26:f1:17:bf:06:50:b1:02:44:35:d6:70:a5:d6:4d:5c:
         f2:16:c8:e1:02:e1:03:b0:e5:6a:5c:0c:ae:ba:a0:20:4f:db:
         27:34:08:9e:52:d3:5a:8d:3a:0b:18:d3:86:c4:f1:12:8a:17:
         a9:d4:d9:cb:5a:8c:b9:99:04:bc:7c:08:27:bc:da:e6:fe:5d:
         e6:a0:00:aa:8b:c3:8f:11:6c:e5:5c:cd:00:15:70:e0:8a:25:
         8b:c2:e6:9e:e2:ac:15:db:86:69:f2:8d:51:56:d7:1e:40:cd:
         c5:e1:3c:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 23:22:15 2026 by rpki-client