This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/9ad73895-c84c-464f-9b4f-8d30306b9727/0/9E106F95CC461B5B1F487A53F6B2D5A36F627004.mft
File:                     9E106F95CC461B5B1F487A53F6B2D5A36F627004.mft (raw, json)
Hash identifier:          xv6CbfC9lNjB7tQHOQGWAbgTjHFUuJ3+c17l0vUHcQM=
Subject key identifier:   A9:10:23:38:28:36:50:9A:E6:6E:57:86:2F:75:B2:D9:BF:21:F9:A7
Authority key identifier: 9E:10:6F:95:CC:46:1B:5B:1F:48:7A:53:F6:B2:D5:A3:6F:62:70:04
Certificate issuer:       /CN=9E106F95CC461B5B1F487A53F6B2D5A36F627004
Certificate serial:       4A7D5448F5202D3DF09639D3718AE65CD332AB7C
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9E106F95CC461B5B1F487A53F6B2D5A36F627004.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/9ad73895-c84c-464f-9b4f-8d30306b9727/0/9E106F95CC461B5B1F487A53F6B2D5A36F627004.mft
Manifest number:          049B
Signing time:             Sat 24 Jan 2026 10:11:08 +0000
Manifest this update:     Sat 24 Jan 2026 10:06:08 +0000
Manifest next update:     Tue 27 Jan 2026 15:55:08 +0000
Files and hashes:         1: 9E106F95CC461B5B1F487A53F6B2D5A36F627004.crl (hash: vdP5M7BmtkLDKlXlaiKHICRaNVPK/D5ErTNyfOOTvbs=)
                          2: 3130332e3136322e3131322e302f32332d3234203d3e20313431363532.roa (hash: kXJhf8bjfIsjZr7MyRalHajFn6WxrxEgkOVjsPKw9mY=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/9ad73895-c84c-464f-9b4f-8d30306b9727/0/9E106F95CC461B5B1F487A53F6B2D5A36F627004.crl
                          rsync://repo-rpki.idnic.net/repo/9ad73895-c84c-464f-9b4f-8d30306b9727/0/9E106F95CC461B5B1F487A53F6B2D5A36F627004.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9E106F95CC461B5B1F487A53F6B2D5A36F627004.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 27 Jan 2026 15:55:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:7d:54:48:f5:20:2d:3d:f0:96:39:d3:71:8a:e6:5c:d3:32:ab:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9E106F95CC461B5B1F487A53F6B2D5A36F627004
        Validity
            Not Before: Jan 24 10:06:08 2026 GMT
            Not After : Jan 27 15:55:08 2026 GMT
        Subject: CN=A91023382836509AE66E57862F75B2D9BF21F9A7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:a8:82:84:8c:ac:33:69:10:a9:6b:bc:0c:79:
                    79:1d:bb:a7:10:54:1e:32:03:0f:cd:8b:45:32:5a:
                    81:bb:8c:df:a7:bf:b7:ce:e7:fa:e5:6b:15:bc:16:
                    b5:f3:b9:70:57:ad:b9:13:ae:4d:fc:80:56:e5:4e:
                    66:6d:1d:fa:79:d7:a7:0a:a2:cf:7e:e7:d4:76:0a:
                    db:13:5d:03:99:0f:b6:aa:72:74:fd:0a:2e:2a:a3:
                    26:b4:26:d5:77:ce:6a:63:48:8f:80:b7:fb:67:cb:
                    9f:f2:4a:ec:9d:ea:72:cd:ff:97:a6:7b:77:e7:9c:
                    46:ad:a6:10:36:1d:9e:0d:b1:d7:7a:e9:11:0d:b4:
                    71:20:2f:f3:44:ec:01:2f:44:7c:28:1a:8a:da:ee:
                    bf:01:9f:41:b5:1e:9d:4d:69:17:fe:4f:14:bf:cd:
                    50:95:14:f9:0c:71:64:fb:97:0f:10:fa:1f:7f:74:
                    43:2e:7a:57:c9:08:70:c4:a2:e4:da:09:88:24:d1:
                    ed:cc:50:f0:7e:ec:80:73:c6:e0:91:26:2d:36:7f:
                    ac:1e:41:b8:94:49:5c:e3:f4:dc:2f:db:f4:9d:12:
                    9c:f6:b8:b8:e7:07:87:8f:2d:45:0f:e0:88:c8:35:
                    3f:00:18:15:39:1b:2f:61:c0:9a:69:0d:30:f1:01:
                    d8:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:10:23:38:28:36:50:9A:E6:6E:57:86:2F:75:B2:D9:BF:21:F9:A7
            X509v3 Authority Key Identifier:
                keyid:9E:10:6F:95:CC:46:1B:5B:1F:48:7A:53:F6:B2:D5:A3:6F:62:70:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/9ad73895-c84c-464f-9b4f-8d30306b9727/0/9E106F95CC461B5B1F487A53F6B2D5A36F627004.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9E106F95CC461B5B1F487A53F6B2D5A36F627004.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9ad73895-c84c-464f-9b4f-8d30306b9727/0/9E106F95CC461B5B1F487A53F6B2D5A36F627004.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:85:f7:0a:f3:d2:3d:c0:b1:60:03:4e:e4:5f:d2:f1:b3:c1:
         6f:4e:ff:11:4f:47:a6:b7:22:ca:ff:86:b3:6d:6c:ee:4c:53:
         8e:9a:32:a0:4b:0d:3b:20:4e:d1:2a:f6:c9:43:8c:9e:bb:af:
         d7:d6:09:6c:b4:4d:39:bd:1c:09:20:d0:57:29:3f:a1:f4:ce:
         80:47:a5:e4:05:e7:cb:49:2e:c5:33:78:f6:db:dc:97:f2:ec:
         92:cc:4d:70:a1:ad:1b:d8:d4:24:a7:aa:5c:65:0b:66:8e:b1:
         5f:8b:4a:61:71:00:cf:28:b0:4a:fd:d0:2a:2f:d5:8e:c5:41:
         16:24:3b:54:69:dc:f1:f8:91:b3:3b:e0:df:fa:9d:02:64:57:
         94:17:c8:df:27:b6:27:49:e1:9a:93:75:1d:04:9e:82:4f:d0:
         3e:28:75:fd:be:e7:61:85:b0:12:17:34:12:80:a1:b2:31:a8:
         ea:4c:8a:a7:88:f5:84:39:aa:50:df:06:a7:a0:a9:4b:ca:be:
         30:f4:f6:33:a7:2a:d2:4f:f4:48:71:16:1c:42:e9:c7:69:d7:
         65:c9:4a:8b:c3:c9:aa:a6:f3:3f:f1:5a:7d:58:1b:e4:39:67:
         2b:e8:fa:0f:5c:84:83:60:dd:d9:d6:35:07:1c:30:c4:96:ab:
         5d:fa:fe:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:44:42 2026 by rpki-client