This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/a70dfb5a-845e-4ddf-aca7-a9b31c31dff4/0/0110A7C2C5E7B74C89B036FFF78974619577D31C.mft
File:                     0110A7C2C5E7B74C89B036FFF78974619577D31C.mft (raw, json)
Hash identifier:          6XXSMa7lPc+acHUky9be1pep7rq3LOYKcInYa3ej3tE=
Subject key identifier:   6B:8C:2D:37:C2:32:F9:77:48:CB:FE:04:2F:3E:DB:33:AB:CF:77:26
Authority key identifier: 01:10:A7:C2:C5:E7:B7:4C:89:B0:36:FF:F7:89:74:61:95:77:D3:1C
Certificate issuer:       /CN=0110A7C2C5E7B74C89B036FFF78974619577D31C
Certificate serial:       070BE4CFC248B82E21BFBB04BC01DDFAB127133C
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0110A7C2C5E7B74C89B036FFF78974619577D31C.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/a70dfb5a-845e-4ddf-aca7-a9b31c31dff4/0/0110A7C2C5E7B74C89B036FFF78974619577D31C.mft
Manifest number:          03B4
Signing time:             Sun 25 Jan 2026 08:02:24 +0000
Manifest this update:     Sun 25 Jan 2026 07:57:24 +0000
Manifest next update:     Wed 28 Jan 2026 12:59:24 +0000
Files and hashes:         1: 323430373a623463303a31323a3a2f34382d3438203d3e20313432333636.roa (hash: F5F4og+0ANkMp2eyG+y4uSqqLHGppY2rxvIFdOjz0YY=)
                          2: 323430373a623463303a633a3a2f34382d3438203d3e20313432333636.roa (hash: PwS8ZteZSgPMYr/+U7TBWB1NbbKeXLIctaDRv9tMXAw=)
                          3: 323430373a623463303a63633a3a2f34382d3438203d3e20313432333636.roa (hash: keDZ5dqo7QpwKbY9EEgBghaBvUKpvyvuxTWbyrg58Eo=)
                          4: 323430373a623463303a643a3a2f34382d3438203d3e20313432333636.roa (hash: neHLBe/fEcPkBE3oSjIGkPPuzPFnKvLrnK1gADqMmBU=)
                          5: 3130332e3137302e33312e302f32342d3234203d3e20313432333636.roa (hash: 3F5ryh384+w3GpvdHsyBJS1AxEbRZUnJ/gwprNobPkU=)
                          6: 3130332e3137302e33302e302f32342d3234203d3e20313432333636.roa (hash: L9UqHBOT0KM8Y3HKq7TuZiV7NwWM18YFSbtkcApuAS0=)
                          7: 323430373a623463303a64643a3a2f34382d3438203d3e20313432333636.roa (hash: fYJfmsjf+SULVX6dy88bE8cQRoUB/HUNHP8Mc9BU5Es=)
                          8: 3130332e3137302e33302e302f32332d3233203d3e20313432333636.roa (hash: AljrwxcXPRJV2CeaxgkjeFz1mPYn0NpdJRkpDNeohWs=)
                          9: 0110A7C2C5E7B74C89B036FFF78974619577D31C.crl (hash: oBhFZDmhgAtPPONMcvDqXTRAKMD9XVlo3HmUxFXvxRE=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/a70dfb5a-845e-4ddf-aca7-a9b31c31dff4/0/0110A7C2C5E7B74C89B036FFF78974619577D31C.crl
                          rsync://repo-rpki.idnic.net/repo/a70dfb5a-845e-4ddf-aca7-a9b31c31dff4/0/0110A7C2C5E7B74C89B036FFF78974619577D31C.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0110A7C2C5E7B74C89B036FFF78974619577D31C.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 28 Jan 2026 12:59:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:0b:e4:cf:c2:48:b8:2e:21:bf:bb:04:bc:01:dd:fa:b1:27:13:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0110A7C2C5E7B74C89B036FFF78974619577D31C
        Validity
            Not Before: Jan 25 07:57:24 2026 GMT
            Not After : Jan 28 12:59:24 2026 GMT
        Subject: CN=6B8C2D37C232F97748CBFE042F3EDB33ABCF7726
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:b9:a1:7b:80:06:7e:20:85:89:91:d5:f7:9c:
                    b6:a3:c4:2e:66:c5:01:a0:17:07:49:e1:46:1c:ca:
                    d5:32:db:38:36:2a:11:24:42:fe:81:4b:cc:1c:aa:
                    00:69:2a:8d:44:d4:af:cf:67:ec:b8:32:3d:37:15:
                    b3:3f:ad:c2:14:19:10:dc:9f:e2:f8:5b:73:d9:a6:
                    6b:4b:a5:fc:2b:a2:a1:d9:81:ae:cd:ef:54:c8:69:
                    4e:45:84:41:a2:96:b3:b1:e5:31:72:c8:e3:4b:d0:
                    87:14:3a:8f:33:c3:4e:9e:81:a0:91:d1:54:6d:64:
                    a9:08:b4:98:a4:cf:7c:a4:7b:55:23:f1:88:7c:4a:
                    84:89:80:73:80:91:09:f4:85:41:ff:b5:0f:44:9f:
                    c7:08:f1:5a:9e:05:0f:c8:27:f7:33:af:38:19:3d:
                    74:b2:86:84:e8:d3:75:db:1c:03:ef:5d:37:7e:28:
                    8d:d5:5d:ee:c3:77:99:ea:3c:a8:a3:6e:5e:1e:a7:
                    a3:c5:ad:de:fb:b5:18:a4:d3:05:f6:ac:9b:fd:b3:
                    d4:c1:32:73:8e:03:15:08:66:17:6c:10:56:e3:6f:
                    64:54:61:ed:1e:f4:25:2a:40:9b:d9:bc:57:bc:44:
                    9e:e6:4d:29:bb:bb:64:12:b6:ee:20:89:d1:c7:d6:
                    7f:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:8C:2D:37:C2:32:F9:77:48:CB:FE:04:2F:3E:DB:33:AB:CF:77:26
            X509v3 Authority Key Identifier:
                keyid:01:10:A7:C2:C5:E7:B7:4C:89:B0:36:FF:F7:89:74:61:95:77:D3:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/a70dfb5a-845e-4ddf-aca7-a9b31c31dff4/0/0110A7C2C5E7B74C89B036FFF78974619577D31C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0110A7C2C5E7B74C89B036FFF78974619577D31C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a70dfb5a-845e-4ddf-aca7-a9b31c31dff4/0/0110A7C2C5E7B74C89B036FFF78974619577D31C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:34:c1:53:b1:3d:a8:2c:f2:7f:2c:47:3f:16:f4:3d:61:b0:
         2b:aa:95:15:5c:1a:68:a2:ce:90:e0:b3:d7:2e:1a:47:08:38:
         58:79:cb:62:b0:6b:ee:4f:93:c4:87:37:75:11:c1:c0:d3:bb:
         ad:3a:9d:61:8c:0e:29:06:9a:be:8a:61:92:ea:44:5b:10:e9:
         a6:25:84:6a:eb:0b:22:cb:18:6b:8c:15:b3:a9:9f:80:79:3e:
         80:cb:b7:aa:7c:ba:e6:05:a6:12:bc:15:ae:de:3a:a9:c3:38:
         f4:77:d4:74:b4:a1:38:bb:f7:51:a9:7c:b6:94:39:c8:19:40:
         4e:91:10:57:01:0c:4a:f4:d7:b7:25:c9:46:e9:e3:d9:91:a2:
         5b:93:23:f5:4e:6f:ef:fb:ef:58:8a:3e:c7:46:2b:91:75:79:
         e6:97:e1:aa:af:43:d6:9a:10:3f:ad:cc:8f:2f:08:3a:4d:ea:
         c4:49:b9:3a:86:a5:66:73:8a:15:59:b2:66:ee:37:ef:a3:67:
         38:e2:b2:1e:9b:27:43:8c:e5:be:4b:27:b1:bd:5a:b8:0a:c8:
         6e:80:c9:dc:bd:16:5f:93:e4:8a:b7:02:e6:3a:d4:13:66:fd:
         de:97:b3:58:17:61:e2:c3:fa:3f:11:23:6d:6b:93:cf:6e:2d:
         02:bf:c7:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 01:12:26 2026 by rpki-client