This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/a40fccb2-ce1c-4862-8edf-8c35273011c2/0/469E6FE6725709FD0CDCD16B0CF84682AFBCBF76.mft
File:                     469E6FE6725709FD0CDCD16B0CF84682AFBCBF76.mft (raw, json)
Hash identifier:          XDTQnMEzC92nX26rahamwOUTp0A1y2rUes7wX3zNO+o=
Subject key identifier:   E3:20:70:4B:C5:3B:B0:1D:DF:B7:3D:E2:E5:FE:56:5F:A1:E2:4C:E5
Authority key identifier: 46:9E:6F:E6:72:57:09:FD:0C:DC:D1:6B:0C:F8:46:82:AF:BC:BF:76
Certificate issuer:       /CN=469E6FE6725709FD0CDCD16B0CF84682AFBCBF76
Certificate serial:       590CD6CC24A533381CB5B51E819D872614FFDA1C
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/469E6FE6725709FD0CDCD16B0CF84682AFBCBF76.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/a40fccb2-ce1c-4862-8edf-8c35273011c2/0/469E6FE6725709FD0CDCD16B0CF84682AFBCBF76.mft
Manifest number:          0159
Signing time:             Sat 24 Jan 2026 11:20:55 +0000
Manifest this update:     Sat 24 Jan 2026 11:15:55 +0000
Manifest next update:     Tue 27 Jan 2026 12:30:55 +0000
Files and hashes:         1: 3130332e3131362e3131302e302f32342d3234203d3e20313337333634.roa (hash: pdmfugYEj65Crz309oxNUT8Zr4xfygCpSwRusfz0tXY=)
                          2: 469E6FE6725709FD0CDCD16B0CF84682AFBCBF76.crl (hash: aK8kol1FiwOBFQ4EOXPUP2WHRB0b2PF+R7How60k7Ak=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/a40fccb2-ce1c-4862-8edf-8c35273011c2/0/469E6FE6725709FD0CDCD16B0CF84682AFBCBF76.crl
                          rsync://repo-rpki.idnic.net/repo/a40fccb2-ce1c-4862-8edf-8c35273011c2/0/469E6FE6725709FD0CDCD16B0CF84682AFBCBF76.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/469E6FE6725709FD0CDCD16B0CF84682AFBCBF76.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 27 Jan 2026 12:30:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:0c:d6:cc:24:a5:33:38:1c:b5:b5:1e:81:9d:87:26:14:ff:da:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=469E6FE6725709FD0CDCD16B0CF84682AFBCBF76
        Validity
            Not Before: Jan 24 11:15:55 2026 GMT
            Not After : Jan 27 12:30:55 2026 GMT
        Subject: CN=E320704BC53BB01DDFB73DE2E5FE565FA1E24CE5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:c2:70:19:42:22:07:c5:94:b8:6c:67:99:8d:
                    25:1a:20:55:37:c3:41:b9:5a:60:5b:a0:91:fd:fe:
                    43:a1:e6:72:aa:d1:7a:23:3f:c9:de:1d:c5:4c:45:
                    1b:ba:5c:fe:1a:b8:5d:44:ed:1d:08:ff:ff:c4:78:
                    2e:34:af:a9:df:3d:1c:ed:04:7c:35:1a:6b:25:ed:
                    f4:a4:02:bb:b5:47:66:cd:c2:df:de:f0:86:e1:3d:
                    d0:29:a3:c0:25:7f:b6:b2:11:0b:60:cd:a8:18:5e:
                    77:67:04:98:9b:62:db:3b:13:f1:3e:e5:4b:72:d4:
                    ce:b4:8f:93:2b:f8:04:b6:da:0b:e2:93:1c:38:c4:
                    a8:16:4a:94:a5:23:80:9e:0e:e4:2d:69:a5:9b:c0:
                    7f:f0:a8:c7:f2:97:b8:3d:ff:04:f9:5b:5b:22:0b:
                    5d:b5:b5:bf:f8:5d:a1:47:f0:f9:06:2b:d8:70:84:
                    9f:ce:74:7b:5b:6f:09:e2:28:83:de:88:36:d4:e4:
                    d8:c7:54:60:8a:ee:b8:dc:65:d1:c8:27:7a:05:f9:
                    c7:ba:2c:e7:3d:7c:2b:6a:26:86:ef:93:73:cc:63:
                    80:4f:fc:83:48:db:41:f3:f2:e0:89:f3:ce:7a:41:
                    ba:52:b0:22:64:d4:aa:72:c8:64:40:e4:d7:97:0e:
                    22:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:20:70:4B:C5:3B:B0:1D:DF:B7:3D:E2:E5:FE:56:5F:A1:E2:4C:E5
            X509v3 Authority Key Identifier:
                keyid:46:9E:6F:E6:72:57:09:FD:0C:DC:D1:6B:0C:F8:46:82:AF:BC:BF:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/a40fccb2-ce1c-4862-8edf-8c35273011c2/0/469E6FE6725709FD0CDCD16B0CF84682AFBCBF76.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/469E6FE6725709FD0CDCD16B0CF84682AFBCBF76.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a40fccb2-ce1c-4862-8edf-8c35273011c2/0/469E6FE6725709FD0CDCD16B0CF84682AFBCBF76.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:97:cc:01:2f:22:35:c3:7e:64:5f:ad:f7:d0:dd:21:10:ca:
         41:ba:99:a2:c0:c3:aa:0d:5f:37:d4:6c:5b:82:8f:4e:0a:2c:
         7b:3c:b9:17:74:f8:2d:7f:46:19:be:fe:3a:72:ee:d9:9f:55:
         c0:21:9b:f5:d7:d5:ca:1a:7b:73:2e:7c:7f:7b:d7:30:0b:9a:
         f5:64:71:d8:30:e9:9e:a3:c2:ee:de:cd:f8:73:a8:44:02:bb:
         f6:33:71:9f:f3:7f:e4:7f:60:df:47:07:30:6b:be:e2:bc:f7:
         04:e1:46:73:c2:20:c0:f2:09:60:c8:fb:f4:c8:9e:57:e4:b3:
         07:ad:0a:25:78:2b:54:43:24:85:ee:de:ce:f8:e4:2d:c7:b2:
         be:af:10:e9:7d:da:10:31:df:d1:ec:ec:8f:ab:fd:58:62:15:
         5d:f3:40:63:2d:0f:79:ea:4a:10:b1:85:36:40:fe:d8:4b:14:
         71:5f:f8:a7:ef:21:01:f7:dd:10:7a:1c:b4:9a:1b:e8:30:b5:
         43:06:66:96:67:2c:32:8b:77:99:9b:c8:88:fd:3d:66:d2:8f:
         36:a7:cd:4f:ad:00:e2:f5:6d:6a:fd:ef:71:a8:11:08:c6:f4:
         f0:b6:49:a9:31:d5:d1:1e:c8:4e:57:7d:08:b0:66:b5:23:60:
         ff:5f:65:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 22:00:18 2026 by rpki-client