This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/a6d57201-7e2f-49bb-941d-9fcabe8623f5/0/809C666CC84F942588E109E6E6C454A9CD0524EB.mft
File:                     809C666CC84F942588E109E6E6C454A9CD0524EB.mft (raw, json)
Hash identifier:          Vt+50792fE33mI+zeRLO3HPQ3jpjjJ9YR0QzdV0TplA=
Subject key identifier:   32:29:07:DB:1C:EC:F6:74:B1:64:B8:56:0B:65:73:49:3C:24:8D:8B
Authority key identifier: 80:9C:66:6C:C8:4F:94:25:88:E1:09:E6:E6:C4:54:A9:CD:05:24:EB
Certificate issuer:       /CN=809C666CC84F942588E109E6E6C454A9CD0524EB
Certificate serial:       A330FAEE7D80FDA8BE340BCF88E73AC897F7F6
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/809C666CC84F942588E109E6E6C454A9CD0524EB.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/a6d57201-7e2f-49bb-941d-9fcabe8623f5/0/809C666CC84F942588E109E6E6C454A9CD0524EB.mft
Manifest number:          0230
Signing time:             Sat 24 Jan 2026 11:20:48 +0000
Manifest this update:     Sat 24 Jan 2026 11:15:48 +0000
Manifest next update:     Tue 27 Jan 2026 15:37:48 +0000
Files and hashes:         1: 3130332e3133312e36312e302f32342d3234203d3e20313338313236.roa (hash: JcJ+92BdJBAynj8d5WBKVDE8qMrLGTneeQasC0St1x4=)
                          2: 809C666CC84F942588E109E6E6C454A9CD0524EB.crl (hash: CMDfHRir695JAxwmBbhM4f2MuS1Ops4W+9IAxq+dVXE=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/a6d57201-7e2f-49bb-941d-9fcabe8623f5/0/809C666CC84F942588E109E6E6C454A9CD0524EB.crl
                          rsync://repo-rpki.idnic.net/repo/a6d57201-7e2f-49bb-941d-9fcabe8623f5/0/809C666CC84F942588E109E6E6C454A9CD0524EB.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/809C666CC84F942588E109E6E6C454A9CD0524EB.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 27 Jan 2026 15:37:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            a3:30:fa:ee:7d:80:fd:a8:be:34:0b:cf:88:e7:3a:c8:97:f7:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=809C666CC84F942588E109E6E6C454A9CD0524EB
        Validity
            Not Before: Jan 24 11:15:48 2026 GMT
            Not After : Jan 27 15:37:48 2026 GMT
        Subject: CN=322907DB1CECF674B164B8560B6573493C248D8B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:e5:d1:50:18:db:20:02:25:ca:aa:76:b1:33:
                    cf:58:44:64:31:7b:55:15:cb:2d:f5:f9:b7:28:bd:
                    d0:e3:fa:ab:f9:16:af:a6:cd:24:f2:56:84:8e:83:
                    60:1a:2b:8a:6c:25:fe:d8:5e:66:41:d2:36:06:80:
                    6a:c2:10:5c:1a:17:7b:c4:fb:f0:8c:78:d8:71:50:
                    07:34:5f:5f:8e:3f:a0:b7:d7:34:d9:be:c0:9b:cf:
                    ab:c8:38:8b:37:41:2c:d9:35:43:29:2f:83:e6:bb:
                    a0:c1:41:74:d6:e2:4e:18:b2:f2:3f:c5:48:6d:4d:
                    7f:4d:c3:6d:3a:af:92:35:a8:5b:3a:75:35:7a:d5:
                    20:b7:9d:ff:4f:8d:9a:66:d5:a0:60:da:a9:54:7a:
                    fc:e4:e1:22:a3:5b:4c:1c:81:b2:c6:0f:a5:bb:25:
                    66:9a:15:9e:9a:42:c2:36:f5:ff:70:57:4d:95:8b:
                    24:3e:e8:5b:26:fa:b2:92:74:7c:2f:33:ec:89:45:
                    67:b7:30:50:28:9c:27:2e:13:8b:b0:91:d7:76:c6:
                    b9:d1:ac:69:93:96:d7:43:52:52:41:82:29:4c:bf:
                    51:fa:8f:33:a9:0d:b0:9c:8c:48:af:7f:ab:8e:da:
                    98:f9:a4:d3:fe:41:f2:c2:b9:83:46:60:04:59:10:
                    1c:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:29:07:DB:1C:EC:F6:74:B1:64:B8:56:0B:65:73:49:3C:24:8D:8B
            X509v3 Authority Key Identifier:
                keyid:80:9C:66:6C:C8:4F:94:25:88:E1:09:E6:E6:C4:54:A9:CD:05:24:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/a6d57201-7e2f-49bb-941d-9fcabe8623f5/0/809C666CC84F942588E109E6E6C454A9CD0524EB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/809C666CC84F942588E109E6E6C454A9CD0524EB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a6d57201-7e2f-49bb-941d-9fcabe8623f5/0/809C666CC84F942588E109E6E6C454A9CD0524EB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:21:38:42:2b:11:55:7b:39:6a:fa:81:3f:80:6e:5c:0d:a4:
         ed:f8:f0:68:97:a2:dd:37:d0:7d:42:2d:27:57:00:1a:02:c6:
         e2:82:71:5f:b8:d9:37:f4:90:e1:b3:f6:f9:db:a2:5f:4d:5e:
         e3:4a:05:77:ad:07:94:8c:e4:3f:3a:8f:78:a8:ee:03:0d:78:
         89:ff:29:59:d4:57:f4:5f:c6:38:4b:f3:b1:71:21:25:a6:54:
         28:71:fd:d3:c1:de:04:c2:9d:3f:e9:3c:e5:38:be:f1:c6:59:
         7c:9e:3d:5e:de:e5:68:1c:9d:d0:c5:62:a8:b7:39:ef:64:ac:
         d8:eb:5e:b7:2e:70:00:01:9c:81:b1:2a:c9:dd:be:36:b3:b3:
         89:f8:49:48:45:d8:25:5a:62:b9:4b:d8:ab:97:0c:29:9e:c7:
         32:3e:b8:14:03:6b:82:f3:55:ca:b2:73:f7:ea:fe:15:0c:9b:
         6b:d6:81:63:45:bd:fa:3e:a1:df:c8:47:76:34:f9:a5:95:a4:
         33:22:61:0a:f8:66:04:67:4f:1e:d6:3f:fc:35:f1:fe:6c:07:
         58:50:a8:9e:41:e3:42:02:6b:d3:c9:65:27:3b:0e:2e:7d:00:
         92:f2:73:e4:1c:c6:6f:ab:1b:cd:ef:ce:be:44:1a:a1:36:46:
         9f:cb:6c:bb
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUAKMw+u59gP2ovjQLz4jnOsiX9/YwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODA5QzY2NkNDODRGOTQyNTg4RTEwOUU2RTZDNDU0QTlD
RDA1MjRFQjAeFw0yNjAxMjQxMTE1NDhaFw0yNjAxMjcxNTM3NDhaMDMxMTAvBgNV
BAMTKDMyMjkwN0RCMUNFQ0Y2NzRCMTY0Qjg1NjBCNjU3MzQ5M0MyNDhEOEIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCv5dFQGNsgAiXKqnaxM89YRGQx
e1UVyy31+bcovdDj+qv5Fq+mzSTyVoSOg2AaK4psJf7YXmZB0jYGgGrCEFwaF3vE
+/CMeNhxUAc0X1+OP6C31zTZvsCbz6vIOIs3QSzZNUMpL4Pmu6DBQXTW4k4YsvI/
xUhtTX9Nw206r5I1qFs6dTV61SC3nf9PjZpm1aBg2qlUevzk4SKjW0wcgbLGD6W7
JWaaFZ6aQsI29f9wV02ViyQ+6Fsm+rKSdHwvM+yJRWe3MFAonCcuE4uwkdd2xrnR
rGmTltdDUlJBgilMv1H6jzOpDbCcjEivf6uO2pj5pNP+QfLCuYNGYARZEBw9AgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUMikH2xzs9nSxZLhWC2VzSTwkjYswHwYDVR0j
BBgwFoAUgJxmbMhPlCWI4Qnm5sRUqc0FJOswDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h
NmQ1NzIwMS03ZTJmLTQ5YmItOTQxZC05ZmNhYmU4NjIzZjUvMC84MDlDNjY2Q0M4
NEY5NDI1ODhFMTA5RTZFNkM0NTRBOUNEMDUyNEVCLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvODA5QzY2NkNDODRGOTQyNTg4RTEwOUU2RTZDNDU0QTlDRDA1
MjRFQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTZkNTcyMDEtN2UyZi00OWJiLTk0
MWQtOWZjYWJlODYyM2Y1LzAvODA5QzY2NkNDODRGOTQyNTg4RTEwOUU2RTZDNDU0
QTlDRDA1MjRFQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAFkhOEIrEVV7OWr6gT+AblwNpO348GiXot03
0H1CLSdXABoCxuKCcV+42Tf0kOGz9vnbol9NXuNKBXetB5SM5D86j3io7gMNeIn/
KVnUV/RfxjhL87FxISWmVChx/dPB3gTCnT/pPOU4vvHGWXyePV7e5WgcndDFYqi3
Oe9krNjrXrcucAABnIGxKsndvjazs4n4SUhF2CVaYrlL2KuXDCmexzI+uBQDa4Lz
Vcqyc/fq/hUMm2vWgWNFvfo+od/IR3Y0+aWVpDMiYQr4ZgRnTx7WP/w18f5sB1hQ
qJ5B40ICa9PJZSc7Di59AJLyc+Qcxm+rG83vzr5EGqE2Rp/LbLs=
-----END CERTIFICATE-----
Generated at Sun Jan 25 18:46:16 2026 by rpki-client