This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/a682bca3-e858-4d52-b1a3-2f4bae47c9f2/0/6A6C813654E0C29339E6CAF522201F8E702FEAD3.mft
File:                     6A6C813654E0C29339E6CAF522201F8E702FEAD3.mft (raw, json)
Hash identifier:          u1H8xxnHnmIfJJ5DptQ0rP8XYZQznUd2XO7Ka+O61vo=
Subject key identifier:   74:7B:D1:14:F5:63:43:3F:61:D8:C6:FF:D2:DA:69:CD:F4:C6:5E:2C
Authority key identifier: 6A:6C:81:36:54:E0:C2:93:39:E6:CA:F5:22:20:1F:8E:70:2F:EA:D3
Certificate issuer:       /CN=6A6C813654E0C29339E6CAF522201F8E702FEAD3
Certificate serial:       1BB038D03A8CFB2F5F448DD53E6CE65637B03FD2
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6A6C813654E0C29339E6CAF522201F8E702FEAD3.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/a682bca3-e858-4d52-b1a3-2f4bae47c9f2/0/6A6C813654E0C29339E6CAF522201F8E702FEAD3.mft
Manifest number:          04AA
Signing time:             Sun 25 Jan 2026 05:32:12 +0000
Manifest this update:     Sun 25 Jan 2026 05:27:12 +0000
Manifest next update:     Wed 28 Jan 2026 10:22:12 +0000
Files and hashes:         1: 3130332e3136302e3138352e302f32342d3234203d3e20313339393532.roa (hash: fILGplhDIU4U8qE+HJJyt+4SNVKoBOrgk1ZojWa+PYM=)
                          2: 3130332e3136302e3138342e302f32342d3234203d3e20313339393532.roa (hash: lM92Y8NAq84+9u66XJy1rtkUnS0gYFJFy14ToZCCjs0=)
                          3: 6A6C813654E0C29339E6CAF522201F8E702FEAD3.crl (hash: kd87WJVZpruikOnP6bA3WiOVH1TWUAGxhHKtTCJpBGQ=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/a682bca3-e858-4d52-b1a3-2f4bae47c9f2/0/6A6C813654E0C29339E6CAF522201F8E702FEAD3.crl
                          rsync://repo-rpki.idnic.net/repo/a682bca3-e858-4d52-b1a3-2f4bae47c9f2/0/6A6C813654E0C29339E6CAF522201F8E702FEAD3.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6A6C813654E0C29339E6CAF522201F8E702FEAD3.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 28 Jan 2026 10:22:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:b0:38:d0:3a:8c:fb:2f:5f:44:8d:d5:3e:6c:e6:56:37:b0:3f:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6A6C813654E0C29339E6CAF522201F8E702FEAD3
        Validity
            Not Before: Jan 25 05:27:12 2026 GMT
            Not After : Jan 28 10:22:12 2026 GMT
        Subject: CN=747BD114F563433F61D8C6FFD2DA69CDF4C65E2C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:b6:d5:66:ed:b7:b8:05:d7:2c:ab:e3:d9:15:
                    cc:be:a8:e1:a8:69:b1:5f:c7:1e:50:d6:08:bb:20:
                    b5:f1:bc:41:3c:11:5d:65:0f:32:26:e9:b9:17:b1:
                    44:e9:1f:7d:2b:dc:df:67:5a:af:60:66:df:be:bf:
                    19:84:17:c3:ca:b8:a4:d1:8d:0c:e6:43:09:ba:56:
                    e6:d7:34:b1:a0:66:f4:be:8a:9a:8b:b5:54:28:13:
                    56:d7:fd:1f:06:3e:d4:0b:0c:51:d5:e6:ae:e4:59:
                    03:d8:e8:a6:e0:b7:c0:0e:83:8b:90:6e:c4:d3:82:
                    9b:2c:e3:1a:7d:4e:14:1d:dd:67:73:cb:50:1b:5a:
                    a6:b4:28:34:3e:ac:c1:61:29:a1:ec:1c:b8:7b:2e:
                    3a:f4:a3:5f:9c:2e:06:d8:b1:82:55:16:2a:e4:48:
                    9f:49:4e:e6:db:7b:9b:5e:1f:25:85:66:9d:fd:33:
                    da:aa:18:09:04:62:0d:e9:fe:40:cc:68:fb:e2:14:
                    d3:7a:c8:9e:b0:23:d4:58:46:ee:c6:7c:fc:02:93:
                    6c:69:80:fb:0f:f5:d3:8b:9e:38:27:87:32:32:99:
                    d0:a7:1b:f4:4c:33:b7:db:b6:1d:fd:73:0f:7d:9c:
                    51:fa:de:50:39:3f:64:9a:a3:07:1c:60:72:6e:00:
                    eb:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:7B:D1:14:F5:63:43:3F:61:D8:C6:FF:D2:DA:69:CD:F4:C6:5E:2C
            X509v3 Authority Key Identifier:
                keyid:6A:6C:81:36:54:E0:C2:93:39:E6:CA:F5:22:20:1F:8E:70:2F:EA:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/a682bca3-e858-4d52-b1a3-2f4bae47c9f2/0/6A6C813654E0C29339E6CAF522201F8E702FEAD3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6A6C813654E0C29339E6CAF522201F8E702FEAD3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a682bca3-e858-4d52-b1a3-2f4bae47c9f2/0/6A6C813654E0C29339E6CAF522201F8E702FEAD3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:20:25:38:69:30:91:2b:e1:38:e5:1b:a1:01:23:12:ca:56:
         5d:11:c0:5d:ed:03:1f:14:80:8e:0b:3a:37:82:d2:f4:ae:e8:
         38:de:60:7d:26:12:77:f9:09:fb:a0:c8:8d:56:f0:9d:7c:0c:
         c4:f2:94:61:00:83:a0:5e:9d:d9:97:a8:12:24:f9:b9:ff:d9:
         1c:28:1b:85:13:2a:85:f7:0d:94:d4:1f:f5:63:16:e1:6d:45:
         a4:ec:6a:b8:1b:f6:e5:25:1b:b0:ff:be:38:b3:ec:48:5b:98:
         89:33:5f:67:0f:dd:ad:8b:ba:f3:b1:d5:83:75:1b:33:53:23:
         25:c6:86:67:db:65:91:74:a8:6a:b4:db:1e:fe:3a:ef:b7:71:
         6c:e8:4d:f3:17:b0:9c:25:c3:eb:ad:ce:d0:80:cb:d1:9c:11:
         ac:30:ec:b5:2a:0a:d3:25:6e:c0:92:2f:aa:f1:51:de:b0:36:
         12:fb:8b:99:6f:b1:dc:3f:d2:71:e2:67:b0:12:ed:27:62:1e:
         a5:16:06:7b:00:f9:8d:1b:10:0a:c8:4e:26:f0:54:91:e9:04:
         6b:2d:1d:2c:70:ac:4c:6d:9b:26:9f:4e:35:1f:fb:01:93:fc:
         f6:22:73:ed:5e:4c:97:e4:1e:8e:ef:7a:1e:23:76:bd:22:ab:
         69:84:ec:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 00:44:26 2026 by rpki-client