This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/98035b12-6ca3-4fd2-b9b3-260d573e57c2/0/0A874A4CB5F8A46DF4501B63FA5487F42800F93E.mft
File:                     0A874A4CB5F8A46DF4501B63FA5487F42800F93E.mft (raw, json)
Hash identifier:          xlv2C7zLeWAu0h47cALGqXtIxMEAaNXY8hM728hu81Q=
Subject key identifier:   DD:C2:3C:25:28:08:40:A4:15:61:76:4C:B6:63:33:D8:C2:20:07:81
Authority key identifier: 0A:87:4A:4C:B5:F8:A4:6D:F4:50:1B:63:FA:54:87:F4:28:00:F9:3E
Certificate issuer:       /CN=0A874A4CB5F8A46DF4501B63FA5487F42800F93E
Certificate serial:       6109E0424027D006182B9B1FA9C1AE6706DC27DB
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0A874A4CB5F8A46DF4501B63FA5487F42800F93E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/98035b12-6ca3-4fd2-b9b3-260d573e57c2/0/0A874A4CB5F8A46DF4501B63FA5487F42800F93E.mft
Manifest number:          02B0
Signing time:             Sat 24 Jan 2026 16:21:34 +0000
Manifest this update:     Sat 24 Jan 2026 16:16:34 +0000
Manifest next update:     Wed 28 Jan 2026 02:25:34 +0000
Files and hashes:         1: 0A874A4CB5F8A46DF4501B63FA5487F42800F93E.crl (hash: VKtKFsA1KGCgoThPUWCQYAKOxT4UaUrPDAa6NXZZ4QI=)
                          2: 3130332e3137372e3235352e302f32342d3234203d3e20313439333238.roa (hash: ew6FBh5cPjMaDtq6eoOfJ8yer7wJ+Y8LRfEbpfeqcdU=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/98035b12-6ca3-4fd2-b9b3-260d573e57c2/0/0A874A4CB5F8A46DF4501B63FA5487F42800F93E.crl
                          rsync://repo-rpki.idnic.net/repo/98035b12-6ca3-4fd2-b9b3-260d573e57c2/0/0A874A4CB5F8A46DF4501B63FA5487F42800F93E.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0A874A4CB5F8A46DF4501B63FA5487F42800F93E.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 28 Jan 2026 02:25:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:09:e0:42:40:27:d0:06:18:2b:9b:1f:a9:c1:ae:67:06:dc:27:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0A874A4CB5F8A46DF4501B63FA5487F42800F93E
        Validity
            Not Before: Jan 24 16:16:34 2026 GMT
            Not After : Jan 28 02:25:34 2026 GMT
        Subject: CN=DDC23C25280840A41561764CB66333D8C2200781
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:5f:89:4d:55:7d:a0:76:c1:56:67:cc:84:53:
                    81:2c:3f:60:05:8c:25:ee:7d:40:54:1d:ff:46:2a:
                    70:b5:cb:6e:04:0b:6a:02:fd:79:7a:88:d7:80:0f:
                    1b:3a:36:54:b3:d3:57:c9:cf:9d:a3:11:a8:7c:80:
                    25:49:fc:73:0b:5a:50:3d:63:4e:54:e1:f1:8d:4e:
                    7a:ee:ea:eb:63:95:c4:94:13:33:d6:2c:73:cc:75:
                    fe:67:46:8a:9e:21:33:a6:a4:ec:da:ef:28:b4:e9:
                    88:47:af:1b:e3:8d:3a:95:fc:61:24:f7:9c:d7:d7:
                    6a:f0:1f:80:c1:d7:cb:b2:33:4e:f7:95:0f:cb:a4:
                    49:37:40:31:0c:3e:f0:cd:c7:5e:09:1d:ac:fb:35:
                    3a:2c:f3:ca:4c:af:79:c8:ac:e3:40:06:71:29:65:
                    bd:e3:1c:62:e5:87:38:f5:cf:d4:fc:a6:ff:ff:b4:
                    2d:33:ca:a9:f4:9f:3d:08:63:af:db:45:c3:98:94:
                    06:2c:2a:f6:c8:e3:51:fe:df:5d:5c:b4:2b:35:92:
                    26:fa:50:a9:9a:30:5e:7c:13:28:cd:b9:4d:6e:a3:
                    02:00:45:89:a6:85:61:ca:25:33:0c:dc:ce:f9:b8:
                    fc:ee:d4:a7:71:50:e9:e4:09:1a:93:d0:a5:fb:30:
                    93:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:C2:3C:25:28:08:40:A4:15:61:76:4C:B6:63:33:D8:C2:20:07:81
            X509v3 Authority Key Identifier:
                keyid:0A:87:4A:4C:B5:F8:A4:6D:F4:50:1B:63:FA:54:87:F4:28:00:F9:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/98035b12-6ca3-4fd2-b9b3-260d573e57c2/0/0A874A4CB5F8A46DF4501B63FA5487F42800F93E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0A874A4CB5F8A46DF4501B63FA5487F42800F93E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/98035b12-6ca3-4fd2-b9b3-260d573e57c2/0/0A874A4CB5F8A46DF4501B63FA5487F42800F93E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         be:9f:42:32:ae:23:5a:ae:74:f2:df:ab:54:da:37:88:08:bd:
         f2:dd:9d:2a:41:4d:f2:5d:42:dc:40:42:c9:31:97:71:77:6e:
         6c:00:3a:dc:b4:76:55:d8:fe:4a:70:79:13:4d:c8:8b:70:37:
         b4:c4:0c:02:ff:56:be:3b:3e:70:a4:1b:e0:83:38:0c:9e:7f:
         46:3e:72:1c:fd:c9:62:c4:ac:01:f8:5b:12:b4:58:8c:54:62:
         ee:e0:09:0c:53:90:df:92:03:46:ea:bb:91:9c:69:c9:d7:d1:
         2d:3c:8c:6f:66:80:ad:ee:16:57:a0:91:ef:9d:61:b5:5d:a9:
         28:74:76:a7:9f:52:cf:93:b9:71:b7:1b:39:01:e3:f7:66:aa:
         cf:ab:cf:cc:32:fa:a6:85:36:42:ae:f4:5d:0f:a4:0d:29:d0:
         55:49:39:54:99:60:c2:98:1d:04:8b:7f:82:94:df:2d:d5:14:
         14:71:6c:31:eb:e0:9a:52:29:53:8f:7f:9f:68:2e:62:f1:14:
         93:0d:0c:c7:9b:0a:5f:88:89:73:00:7b:ca:04:a3:22:69:f6:
         1e:a3:6f:c8:cd:58:c0:4b:96:5f:af:ef:4b:81:10:9f:8a:79:
         9b:50:c8:78:85:fa:8b:31:c0:7a:d1:00:07:7c:4e:7a:fb:a2:
         f0:5a:29:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:58:55 2026 by rpki-client