This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/96bb333c-982b-4fce-ac81-bc069229e243/0/6D6BAEDBFDBBAA46BF3DA2185570771627BE7B19.mft
File:                     6D6BAEDBFDBBAA46BF3DA2185570771627BE7B19.mft (raw, json)
Hash identifier:          KumihrB7JG7q5POUh/QbgNTc/PVa+x76vfCOJBCwuOo=
Subject key identifier:   4D:A4:25:55:AA:F2:67:02:4F:DA:C4:38:51:46:00:C6:75:2E:5D:03
Authority key identifier: 6D:6B:AE:DB:FD:BB:AA:46:BF:3D:A2:18:55:70:77:16:27:BE:7B:19
Certificate issuer:       /CN=6D6BAEDBFDBBAA46BF3DA2185570771627BE7B19
Certificate serial:       30D1FC19E454FAF79127CA03EF79AE61A3DB7991
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6D6BAEDBFDBBAA46BF3DA2185570771627BE7B19.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/96bb333c-982b-4fce-ac81-bc069229e243/0/6D6BAEDBFDBBAA46BF3DA2185570771627BE7B19.mft
Manifest number:          053F
Signing time:             Sun 25 Jan 2026 18:30:42 +0000
Manifest this update:     Sun 25 Jan 2026 18:25:41 +0000
Manifest next update:     Wed 28 Jan 2026 19:30:41 +0000
Files and hashes:         1: 3130332e35322e3137302e302f32332d3233203d3e203633383732.roa (hash: brSZ0m97l9z7YCV2zCWTUJDAsUOi5NNl8YP1n7Hn+04=)
                          2: 3130332e3132372e3134342e302f32342d3234203d3e203633383732.roa (hash: dT1Ez91RELEcb3/us3FXp8X3LrIGPlHAyCw3ou4h/Pw=)
                          3: 3130332e35322e3137302e302f32342d3234203d3e203633383732.roa (hash: Z+FoVz2t/bU9Oh29fvVmEj58qbcaPFxm8OsmszzE23M=)
                          4: 3130332e3132372e3134342e302f32332d3233203d3e203633383732.roa (hash: ej36uL5q6V5lzJlk2/mVmLfbDb6eLchafID3r1d/Uc0=)
                          5: 6D6BAEDBFDBBAA46BF3DA2185570771627BE7B19.crl (hash: V5SAMFaQMdoEIh4dQOy80VeAucLxgVFPhqKEKXhRr0A=)
                          6: 3130332e3132372e3134352e302f32342d3234203d3e203633383732.roa (hash: MXaL0QCe5+IS+MABtk7XIsAr+HW38yfYtKBH23S5G78=)
                          7: 323030313a6466333a6330303a3a2f34382d3438203d3e203633383732.roa (hash: DbPoZnzVJDn8t1MnQ7X+537hTvhkD/yKBSWUNPseJA0=)
                          8: 3130332e35322e3137312e302f32342d3234203d3e203633383732.roa (hash: 8GeHpy3P984a7HFNxAJwy8wpU0ns8pabD1WKnP4tvuw=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/96bb333c-982b-4fce-ac81-bc069229e243/0/6D6BAEDBFDBBAA46BF3DA2185570771627BE7B19.crl
                          rsync://repo-rpki.idnic.net/repo/96bb333c-982b-4fce-ac81-bc069229e243/0/6D6BAEDBFDBBAA46BF3DA2185570771627BE7B19.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6D6BAEDBFDBBAA46BF3DA2185570771627BE7B19.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 28 Jan 2026 14:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:d1:fc:19:e4:54:fa:f7:91:27:ca:03:ef:79:ae:61:a3:db:79:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6D6BAEDBFDBBAA46BF3DA2185570771627BE7B19
        Validity
            Not Before: Jan 25 18:25:41 2026 GMT
            Not After : Jan 28 19:30:41 2026 GMT
        Subject: CN=4DA42555AAF267024FDAC438514600C6752E5D03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:44:f8:6b:2f:68:70:8b:b9:b7:7c:55:28:b8:
                    7d:16:ad:f7:46:c5:5d:00:1c:a2:1d:bf:53:02:53:
                    99:ee:63:e9:3c:14:2a:fc:11:66:3d:7c:ec:51:b3:
                    97:4a:0e:f5:0d:f1:f9:44:10:90:b9:b7:aa:b5:2f:
                    ca:23:69:da:97:31:65:04:67:bf:04:93:c4:b2:8f:
                    71:c0:49:87:dc:de:51:8a:a1:6b:30:ba:f2:3c:fe:
                    68:f6:08:a0:fa:95:90:2f:29:0d:0a:5b:39:3c:a3:
                    ce:df:19:fe:94:de:11:87:a6:b2:9e:cf:c8:27:9e:
                    fa:79:e0:1f:bc:86:c1:e5:fd:24:2c:39:75:b1:92:
                    19:1a:33:2e:6e:1c:10:32:20:5f:b9:b0:4b:be:24:
                    b9:3d:c3:6a:11:7e:50:be:c9:20:09:1c:c8:8b:fd:
                    05:b3:41:45:80:e9:54:3f:7f:2e:c8:4d:44:c1:de:
                    7f:f4:5b:62:1d:14:88:54:59:e6:59:03:64:51:5a:
                    98:7b:77:06:85:1c:7d:20:71:1a:2d:de:3d:3f:3a:
                    47:03:cc:a9:28:e2:17:ab:0f:10:41:69:9f:04:17:
                    78:73:6d:30:c7:87:77:14:88:60:9a:a3:1e:14:4f:
                    b9:6b:b4:c0:0b:2e:cf:ac:2f:bc:8a:ad:3f:08:f2:
                    e2:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:A4:25:55:AA:F2:67:02:4F:DA:C4:38:51:46:00:C6:75:2E:5D:03
            X509v3 Authority Key Identifier:
                keyid:6D:6B:AE:DB:FD:BB:AA:46:BF:3D:A2:18:55:70:77:16:27:BE:7B:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/96bb333c-982b-4fce-ac81-bc069229e243/0/6D6BAEDBFDBBAA46BF3DA2185570771627BE7B19.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6D6BAEDBFDBBAA46BF3DA2185570771627BE7B19.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/96bb333c-982b-4fce-ac81-bc069229e243/0/6D6BAEDBFDBBAA46BF3DA2185570771627BE7B19.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:ba:c5:21:c3:f8:a6:70:c7:9e:ae:14:79:b3:10:e5:c8:ba:
         8f:1d:0d:a3:62:ab:82:84:78:cb:5e:0c:fd:20:a0:9e:93:b5:
         77:d7:79:69:69:19:ad:e5:b0:42:f8:94:ea:a9:1b:9e:62:b2:
         e7:3e:0c:0e:3c:ad:fb:78:bd:72:3a:fd:17:04:a7:08:b9:a3:
         38:52:db:ae:8b:02:12:ef:08:c0:2f:a8:47:6b:2a:4a:e8:f7:
         d8:82:a6:21:1f:db:ff:1d:d8:22:38:33:39:e3:f2:22:fa:0b:
         4e:cd:23:7e:89:e6:7d:4c:3a:57:c5:72:14:b0:ed:be:d1:ce:
         e7:d7:bf:5f:0b:ce:a6:c1:bc:3e:25:b1:9e:b6:36:2c:ab:2b:
         6d:30:8d:54:14:a5:47:14:b7:0d:e6:d0:17:7f:08:3e:8b:fc:
         d1:6e:1a:bc:73:a2:52:8e:c1:0d:a6:a7:d5:37:f0:9f:71:3a:
         66:99:c7:a5:00:0c:f3:57:49:e3:c6:1a:73:ab:20:92:3d:84:
         6f:06:03:9f:a3:c2:53:d4:2f:4e:ca:c4:4e:41:4f:83:26:0f:
         3f:1c:fb:5f:59:c8:12:c9:9a:57:20:d3:cd:1a:c4:31:e3:98:
         04:7e:0b:3f:06:59:27:96:16:48:27:3f:60:73:75:59:b5:0f:
         fb:6c:f4:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 22:00:20 2026 by rpki-client