This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/9795a378-d69e-452e-ac67-3b749039a8c8/0/9705995FB5C87DC40E50B1256B8809A101D17047.mft
File:                     9705995FB5C87DC40E50B1256B8809A101D17047.mft (raw, json)
Hash identifier:          KbdsAxLFVjHNZpdRLHY0/+harP4RthkAtbYQWG0mhUs=
Subject key identifier:   2C:CE:C6:AD:F1:8E:4E:01:FB:DE:67:6B:AE:92:ED:6A:74:B9:22:FC
Authority key identifier: 97:05:99:5F:B5:C8:7D:C4:0E:50:B1:25:6B:88:09:A1:01:D1:70:47
Certificate issuer:       /CN=9705995FB5C87DC40E50B1256B8809A101D17047
Certificate serial:       69DE61A3773695A6E0DB3A30CD1E0E68ECB774E3
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9705995FB5C87DC40E50B1256B8809A101D17047.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/9795a378-d69e-452e-ac67-3b749039a8c8/0/9705995FB5C87DC40E50B1256B8809A101D17047.mft
Manifest number:          01D5
Signing time:             Sun 25 Jan 2026 15:11:42 +0000
Manifest this update:     Sun 25 Jan 2026 15:06:42 +0000
Manifest next update:     Wed 28 Jan 2026 22:11:42 +0000
Files and hashes:         1: 9705995FB5C87DC40E50B1256B8809A101D17047.crl (hash: N4XuE5oscC/6EnRxu8afqY57ojlTGsxDGnu1iHrA5dc=)
                          2: 3130332e3136312e3131342e302f32332d3234203d3e20313431363132.roa (hash: dQEw2/q0jb+KQe+GF06aed8m+MpEA25/2ivEEFSNjyQ=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/9795a378-d69e-452e-ac67-3b749039a8c8/0/9705995FB5C87DC40E50B1256B8809A101D17047.crl
                          rsync://repo-rpki.idnic.net/repo/9795a378-d69e-452e-ac67-3b749039a8c8/0/9705995FB5C87DC40E50B1256B8809A101D17047.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9705995FB5C87DC40E50B1256B8809A101D17047.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 28 Jan 2026 14:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:de:61:a3:77:36:95:a6:e0:db:3a:30:cd:1e:0e:68:ec:b7:74:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9705995FB5C87DC40E50B1256B8809A101D17047
        Validity
            Not Before: Jan 25 15:06:42 2026 GMT
            Not After : Jan 28 22:11:42 2026 GMT
        Subject: CN=2CCEC6ADF18E4E01FBDE676BAE92ED6A74B922FC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:42:d9:ac:51:6c:f2:7e:70:3e:9e:c3:fa:28:
                    3c:f0:4c:db:25:12:95:b7:4c:3c:f4:b7:68:79:fb:
                    78:a7:78:2f:a9:2a:28:4e:0c:fd:db:45:a1:48:06:
                    a6:b6:70:f1:9d:f8:28:bf:44:c2:e1:5d:f9:f5:6c:
                    94:96:14:13:37:3c:78:9f:7a:b7:bc:49:20:f8:5e:
                    33:aa:ad:1b:ee:dd:ba:79:7f:28:7e:56:b1:a3:43:
                    cb:3e:36:d4:5b:49:c1:b8:87:b0:cf:8e:ea:a7:43:
                    f0:91:6a:70:24:13:09:3e:20:d3:17:96:8d:a3:a9:
                    f3:85:08:37:b9:7d:0a:a2:24:bb:1d:03:f6:fc:81:
                    77:da:d6:09:2e:11:b7:f1:cd:a8:b0:91:46:4b:50:
                    6a:4f:06:9d:0b:c9:ac:2d:3d:e2:88:98:77:d3:80:
                    01:65:b1:0e:e9:ac:1c:18:36:5d:f5:a3:b0:0b:58:
                    04:49:f1:0f:f2:ba:17:74:ef:4e:77:90:f2:47:bf:
                    f7:eb:77:f3:ec:ed:47:a4:a0:95:0a:39:9b:de:d2:
                    ce:b8:79:a7:b2:85:f8:e2:05:95:65:2e:7f:02:9f:
                    88:bd:d1:74:76:5a:13:fa:b9:73:38:0b:10:a5:97:
                    b8:dc:6e:b9:9b:74:49:a7:3a:98:d7:08:b9:aa:4c:
                    f1:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:CE:C6:AD:F1:8E:4E:01:FB:DE:67:6B:AE:92:ED:6A:74:B9:22:FC
            X509v3 Authority Key Identifier:
                keyid:97:05:99:5F:B5:C8:7D:C4:0E:50:B1:25:6B:88:09:A1:01:D1:70:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/9795a378-d69e-452e-ac67-3b749039a8c8/0/9705995FB5C87DC40E50B1256B8809A101D17047.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9705995FB5C87DC40E50B1256B8809A101D17047.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9795a378-d69e-452e-ac67-3b749039a8c8/0/9705995FB5C87DC40E50B1256B8809A101D17047.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:3e:28:00:41:94:0e:3f:66:54:8a:8a:10:0a:be:1d:9c:55:
         9f:a7:4f:4a:9c:c5:d9:47:fa:c3:1a:ad:2e:8b:b6:c5:44:4b:
         85:4c:a2:ab:e7:24:41:c7:ca:1c:53:83:ba:90:40:8f:72:70:
         a6:d3:05:12:8d:a2:b1:65:12:cf:9d:c2:a4:a9:cf:f8:d2:bd:
         08:67:06:5d:5f:9f:77:d0:e1:f5:35:69:21:9b:0b:e7:00:0c:
         96:1f:32:f4:a1:bb:5e:2e:3d:36:32:1a:46:42:ec:f3:7b:e9:
         87:95:f2:e4:91:3f:d8:1f:e4:89:61:1a:4d:a4:33:d8:29:a7:
         7d:c4:f9:09:45:c0:14:14:cb:12:6b:57:ba:0d:92:51:22:41:
         a7:7c:05:51:24:dd:7f:6e:bc:27:45:41:c7:18:ce:6f:c0:3c:
         1f:07:e2:9f:8e:18:f6:66:93:3b:c7:b5:42:01:5e:f7:28:c2:
         4f:21:0d:66:c6:63:71:f6:23:9c:1c:58:e2:6c:6c:4e:a9:ba:
         cf:5a:a0:ef:7b:9b:10:50:23:53:76:60:17:ae:d4:b8:9a:68:
         40:1e:79:54:3e:64:a3:06:f3:70:a4:bd:5e:ba:5c:e8:2c:d0:
         46:50:7e:49:e9:2b:a8:30:43:d5:80:ae:43:bc:17:e0:d8:e8:
         97:a9:03:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 23:22:03 2026 by rpki-client