This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/957b0d7e-eade-4318-ab20-8c7f2d5be69f/0/7D64B8F4CFB687141137D10F9E73FFD0BAB93F67.mft
File:                     7D64B8F4CFB687141137D10F9E73FFD0BAB93F67.mft (raw, json)
Hash identifier:          mOs9wOQ2wpTbN0ZPujxeK3ZzyKQ7T1CmCx9KlGJfCA8=
Subject key identifier:   CC:5C:DC:8E:8F:B0:E7:9A:68:90:34:1E:88:39:3F:79:2D:58:46:AE
Authority key identifier: 7D:64:B8:F4:CF:B6:87:14:11:37:D1:0F:9E:73:FF:D0:BA:B9:3F:67
Certificate issuer:       /CN=7D64B8F4CFB687141137D10F9E73FFD0BAB93F67
Certificate serial:       2A45399C0EFA4504B507D0DEBACFDD018518CCDC
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D64B8F4CFB687141137D10F9E73FFD0BAB93F67.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/957b0d7e-eade-4318-ab20-8c7f2d5be69f/0/7D64B8F4CFB687141137D10F9E73FFD0BAB93F67.mft
Manifest number:          0302
Signing time:             Sun 25 Jan 2026 04:02:19 +0000
Manifest this update:     Sun 25 Jan 2026 03:57:19 +0000
Manifest next update:     Wed 28 Jan 2026 13:49:19 +0000
Files and hashes:         1: 323430313a383434303a3a2f33322d3332203d3e20313336313331.roa (hash: J/TKA4DxZMeIQk5lGShBOGO9FvcMo90L9nK349bvEzs=)
                          2: 3130332e39372e37392e302f32342d3234203d3e20313336313331.roa (hash: eRLttmDRe4S/HXjiFUVifbleZv0UdgB6j9QBQFrEFVw=)
                          3: 3130332e39372e37362e302f32342d3234203d3e20313336313331.roa (hash: b5FyLXJvwHGEGWwekDTqeQDenx7rZLagZD5M467u+1w=)
                          4: 3130332e39372e37382e302f32342d3234203d3e20313336313331.roa (hash: gTWqsHLXGzmwOn5oUbLdKwsFxUOTG6JntDETCN1uoJg=)
                          5: 7D64B8F4CFB687141137D10F9E73FFD0BAB93F67.crl (hash: 4NOUJLrnxQb75/jxjKpy+ve/+Yw1XP30UCbZMg0Qdsc=)
                          6: 323430313a383434303a3233313a3a2f34382d3438203d3e20313336313331.roa (hash: 9q0QjNfZ8ZidXQKSI35eyNIOpPTa4MZHY+H9XcdTGqQ=)
                          7: 3130332e39372e37372e302f32342d3234203d3e20313336313331.roa (hash: audNLou8WkSNI41O6Bj42zTe5yNLL3IkDF/evFV7jOs=)
                          8: 323430313a383434303a3331313a3a2f34382d3438203d3e20313336313331.roa (hash: uNKV4J4iyB42iT7YiJbc/obq8TacFQRWwVPHqjYHdt4=)
                          9: 323430313a383434303a3133313a3a2f34382d3438203d3e20313336313331.roa (hash: 7XF+7tNQBQV2Wy0AsX8lBCySJ+ATYXgli7NY4z4VmfM=)
                          10: 323430313a383434303a33313a3a2f34382d3438203d3e20313336313331.roa (hash: imoDv7fNxiS0ABFe1mnjo4w6QxU9zgowGM6VjXLrifM=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/957b0d7e-eade-4318-ab20-8c7f2d5be69f/0/7D64B8F4CFB687141137D10F9E73FFD0BAB93F67.crl
                          rsync://repo-rpki.idnic.net/repo/957b0d7e-eade-4318-ab20-8c7f2d5be69f/0/7D64B8F4CFB687141137D10F9E73FFD0BAB93F67.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D64B8F4CFB687141137D10F9E73FFD0BAB93F67.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 28 Jan 2026 13:49:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:45:39:9c:0e:fa:45:04:b5:07:d0:de:ba:cf:dd:01:85:18:cc:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7D64B8F4CFB687141137D10F9E73FFD0BAB93F67
        Validity
            Not Before: Jan 25 03:57:19 2026 GMT
            Not After : Jan 28 13:49:19 2026 GMT
        Subject: CN=CC5CDC8E8FB0E79A6890341E88393F792D5846AE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:3a:02:80:b5:37:5e:de:81:16:d2:84:d2:a7:
                    1c:b1:2a:52:a3:10:7a:84:2e:46:21:00:9e:61:b6:
                    34:63:07:1a:26:a8:ad:a0:06:4f:3d:dd:d1:7b:20:
                    02:ca:dc:68:ec:d4:3d:32:43:7c:89:34:f2:fd:4c:
                    57:23:99:98:fc:82:36:94:d2:5a:9a:ac:c6:4d:84:
                    6f:f3:8a:ef:24:8c:6f:a3:5e:62:d1:06:40:46:4b:
                    51:7f:33:da:31:99:48:32:65:cd:3c:04:82:01:5d:
                    2d:15:c9:46:9c:15:61:cc:a6:04:13:4c:42:87:69:
                    b8:7b:97:9c:81:f2:3a:1b:2d:96:e5:60:9e:63:63:
                    1c:73:b8:76:8c:2e:30:77:d2:ef:9c:b4:08:86:7b:
                    21:23:8f:01:8b:38:b8:5d:e6:1c:c6:94:e0:05:f1:
                    55:1e:78:78:54:1d:f8:a5:8b:b8:da:94:e4:97:00:
                    4f:1f:21:94:1f:ae:e7:ef:99:ef:d3:21:66:7e:0c:
                    3a:a6:42:dc:54:8a:36:2a:51:c3:a4:58:e8:99:67:
                    09:49:ef:b9:8d:10:97:9e:77:2a:75:8d:db:98:ba:
                    02:9c:7d:f4:a4:7e:6d:d1:9d:16:cc:b7:cc:4c:af:
                    0b:10:72:3f:11:8c:6f:9b:a8:55:11:9f:c5:11:75:
                    fb:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:5C:DC:8E:8F:B0:E7:9A:68:90:34:1E:88:39:3F:79:2D:58:46:AE
            X509v3 Authority Key Identifier:
                keyid:7D:64:B8:F4:CF:B6:87:14:11:37:D1:0F:9E:73:FF:D0:BA:B9:3F:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/957b0d7e-eade-4318-ab20-8c7f2d5be69f/0/7D64B8F4CFB687141137D10F9E73FFD0BAB93F67.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D64B8F4CFB687141137D10F9E73FFD0BAB93F67.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/957b0d7e-eade-4318-ab20-8c7f2d5be69f/0/7D64B8F4CFB687141137D10F9E73FFD0BAB93F67.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:a6:ea:43:3c:2e:cc:3a:33:04:5c:f5:de:42:dd:92:3a:fe:
         26:00:7c:72:75:6c:90:11:65:9d:4d:35:25:a2:4d:88:5e:1b:
         ae:85:2f:67:06:52:93:e2:17:5a:b8:dc:e6:d3:52:9f:80:c7:
         a7:19:f9:fa:6b:4c:11:d2:e9:d9:54:04:7c:88:57:f0:e7:36:
         6c:39:b7:97:f3:2a:74:17:06:1e:fc:66:20:63:21:47:8b:3e:
         37:c4:40:87:e4:c8:d8:1c:f7:d5:7f:45:c6:e3:21:21:50:11:
         93:18:9d:97:d5:de:c6:45:4d:5f:5d:24:17:78:a4:88:e7:fd:
         15:50:0d:86:25:94:f0:13:1d:2c:37:c8:fb:f2:2f:db:e8:fd:
         b7:69:8f:af:2e:ca:54:9c:ea:b7:74:4d:e2:4b:b3:18:16:59:
         ff:54:a9:85:82:b5:1e:d1:94:90:23:81:32:c1:b2:8d:25:5d:
         b5:c4:ef:60:ff:2e:b7:25:7c:e1:35:4e:a5:c2:e9:86:de:37:
         30:a1:13:95:af:12:f9:2c:e3:33:ec:a8:bf:a4:27:51:b0:de:
         e0:98:6b:95:2e:9f:1b:23:af:f4:2f:57:fb:91:ad:66:84:ae:
         eb:37:86:4a:c6:98:58:a9:25:65:3a:df:1d:6d:4d:ee:4a:34:
         75:74:b0:6d
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUKkU5nA76RQS1B9Deus/dAYUYzNwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0Q2NEI4RjRDRkI2ODcxNDExMzdEMTBGOUU3M0ZGRDBC
QUI5M0Y2NzAeFw0yNjAxMjUwMzU3MTlaFw0yNjAxMjgxMzQ5MTlaMDMxMTAvBgNV
BAMTKENDNUNEQzhFOEZCMEU3OUE2ODkwMzQxRTg4MzkzRjc5MkQ1ODQ2QUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXOgKAtTde3oEW0oTSpxyxKlKj
EHqELkYhAJ5htjRjBxomqK2gBk893dF7IALK3Gjs1D0yQ3yJNPL9TFcjmZj8gjaU
0lqarMZNhG/ziu8kjG+jXmLRBkBGS1F/M9oxmUgyZc08BIIBXS0VyUacFWHMpgQT
TEKHabh7l5yB8jobLZblYJ5jYxxzuHaMLjB30u+ctAiGeyEjjwGLOLhd5hzGlOAF
8VUeeHhUHfili7jalOSXAE8fIZQfrufvme/TIWZ+DDqmQtxUijYqUcOkWOiZZwlJ
77mNEJeedyp1jduYugKcffSkfm3RnRbMt8xMrwsQcj8RjG+bqFURn8URdfsBAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUzFzcjo+w55pokDQeiDk/eS1YRq4wHwYDVR0j
BBgwFoAUfWS49M+2hxQRN9EPnnP/0Lq5P2cwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85
NTdiMGQ3ZS1lYWRlLTQzMTgtYWIyMC04YzdmMmQ1YmU2OWYvMC83RDY0QjhGNENG
QjY4NzE0MTEzN0QxMEY5RTczRkZEMEJBQjkzRjY3LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvN0Q2NEI4RjRDRkI2ODcxNDExMzdEMTBGOUU3M0ZGRDBCQUI5
M0Y2Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTU3YjBkN2UtZWFkZS00MzE4LWFi
MjAtOGM3ZjJkNWJlNjlmLzAvN0Q2NEI4RjRDRkI2ODcxNDExMzdEMTBGOUU3M0ZG
RDBCQUI5M0Y2Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBALim6kM8Lsw6MwRc9d5C3ZI6/iYAfHJ1bJAR
ZZ1NNSWiTYheG66FL2cGUpPiF1q43ObTUp+Ax6cZ+fprTBHS6dlUBHyIV/DnNmw5
t5fzKnQXBh78ZiBjIUeLPjfEQIfkyNgc99V/RcbjISFQEZMYnZfV3sZFTV9dJBd4
pIjn/RVQDYYllPATHSw3yPvyL9vo/bdpj68uylSc6rd0TeJLsxgWWf9UqYWCtR7R
lJAjgTLBso0lXbXE72D/LrclfOE1TqXC6YbeNzChE5WvEvks4zPsqL+kJ1Gw3uCY
a5Uunxsjr/QvV/uRrWaErus3hkrGmFipJWU63x1tTe5KNHV0sG0=
-----END CERTIFICATE-----
Generated at Sun Jan 25 22:00:39 2026 by rpki-client