This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.mft
File:                     639473CD2054A78B39F9AC7A83232462F00E71AA.mft (raw, json)
Hash identifier:          NeynP9T8YvJvNdSbZF6LIq4mRsF5Jr33cOJWK6NuyDE=
Subject key identifier:   FF:1C:8B:FD:95:13:64:3A:AC:90:22:E2:9C:C9:74:FE:94:CD:E7:C2
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Certificate issuer:       /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial:       4055AC7E9C5008B50ABA1F0432CB9B0DBB225105
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.mft
Manifest number:          0D85
Signing time:             Fri 23 Jan 2026 20:41:58 +0000
Manifest this update:     Fri 23 Jan 2026 20:36:58 +0000
Manifest next update:     Tue 27 Jan 2026 04:45:58 +0000
Files and hashes:         1: 639473CD2054A78B39F9AC7A83232462F00E71AA.crl (hash: UGYt8RAMwQK1Vid8rIY5EAYgrbknPBhqdBwaKnrxg4Q=)
                          2: 323430303a643638303a353a3a2f34382d3438203d3e203539323832.roa (hash: /8HKOKl3PxMMPopAmXJsDfZHfFoo7wkQ81V5TqWB1uE=)
                          3: 3131362e3230362e3231322e302f32342d3234203d3e203539323832.roa (hash: QsDPs2mlZqyMZXfjf6Zh+NWMXGWy1j4R+YaYRxdbecQ=)
                          4: 3130332e3232382e3234342e302f32322d3234203d3e203539323832.roa (hash: kkZ5080z9oUs+jW8iHX1Tzr1MG5R0/keiimPL4Y7DMk=)
                          5: 323430303a643638303a666163653a3a2f34382d3438203d3e203539323832.roa (hash: u5dDjhuBvBzcqNjKEeW7vizdTx58v6wY4rfkMiHiI5I=)
                          6: 3131362e3230362e3231342e302f32342d3234203d3e203539323832.roa (hash: mgdd33inbho0w/YafQxmlb4mn2645LWgbd4GjzvqC5g=)
                          7: 3130332e3232382e3234362e302f32342d3234203d3e203539323832.roa (hash: XZ4OJKWgYbKu4ak8HWaN9bEJfkYQKh79GGoEWm0kS2Q=)
                          8: 323430303a643638303a3a2f33322d3438203d3e203539323832.roa (hash: SgqLAGcMTNBEKnSS7cpl5WafnRLBI8WCT5GxxXyN0zA=)
                          9: 3130332e3232382e3234372e302f32342d3234203d3e203539323832.roa (hash: 4gtV8ZXJhBLgP6alnZmazQL9Du+oKvqI/MvatS0Bbyw=)
                          10: 3130332e3232382e3234342e302f32342d3234203d3e203539323832.roa (hash: esxHqUt3Xq6PKKXsfFgfUEYi1fJUgVnC6F8M6sDPUJM=)
                          11: 3131362e3230362e3231322e302f32322d3234203d3e203539323832.roa (hash: 7JHZWmtz01hYjYbLRHq9pCZCM42A/jGx+qscoYZR+8M=)
                          12: 323430303a643638303a363a3a2f34382d3438203d3e203539323832.roa (hash: 5B7v2ShhK5C4wbhQiHatQFgCi8oUxqkoPlhjyp+Rnaw=)
                          13: 3131362e3230362e3231332e302f32342d3234203d3e203539323832.roa (hash: JPYapDBTyTePbdwtE88+heXxGhufXE50JBbJ2fq7FKo=)
                          14: 3130332e3232382e3234352e302f32342d3234203d3e203539323832.roa (hash: /sujTtwH0ddwmWj6UyMseljhgpcNLVkP8+vtS5y3rGg=)
                          15: 323430303a643638303a323a3a2f34382d3438203d3e203539323832.roa (hash: qLkIroWnbqSVivBGqvgi5oF8E8eNhXgrJocCdlawdNk=)
                          16: 323430303a643638303a35393a3a2f34382d3438203d3e203539323832.roa (hash: 0AzZnlQLCCzpiwYH8VB91hQfBqmdrJ+ok40Qb8sCeko=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
                          rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 27 Jan 2026 04:45:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:55:ac:7e:9c:50:08:b5:0a:ba:1f:04:32:cb:9b:0d:bb:22:51:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
        Validity
            Not Before: Jan 23 20:36:58 2026 GMT
            Not After : Jan 27 04:45:58 2026 GMT
        Subject: CN=FF1C8BFD9513643AAC9022E29CC974FE94CDE7C2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:33:c4:bb:4a:6c:15:2b:f9:70:79:43:46:0d:
                    a6:04:66:19:a4:17:e1:4d:e8:43:97:ed:86:f1:97:
                    3e:aa:a2:d8:1d:96:a4:a5:40:34:29:5d:3d:7e:89:
                    cf:97:a6:d3:0b:48:6c:7b:69:1b:c2:fa:f1:27:37:
                    92:c9:d7:f4:c0:75:d5:56:3b:3d:ad:65:8f:60:6e:
                    e2:50:46:95:4c:d3:ec:df:74:65:14:c2:da:0c:a8:
                    c4:2f:81:da:33:c8:80:73:07:cd:74:56:c8:bf:11:
                    64:9d:de:5f:83:62:38:89:b6:13:95:fc:62:b9:a1:
                    20:29:9b:5e:31:cb:2e:66:87:5a:2c:b3:3a:ca:c3:
                    91:ad:7c:12:a8:f5:70:fd:fc:ea:de:d2:77:d8:cf:
                    d8:ad:a6:94:68:2d:d2:49:25:90:9b:66:28:ff:cc:
                    5e:a7:10:da:34:ad:6d:e6:c6:3c:b0:b0:9c:06:d4:
                    d3:b9:e0:76:2b:ad:bb:8c:28:f5:8b:14:f1:d9:07:
                    1f:8e:a8:38:3c:47:30:54:30:3b:4b:69:24:1f:d6:
                    77:66:cc:a0:ed:9c:f9:ca:f9:16:e4:43:92:37:d3:
                    8a:a9:c7:62:0f:f6:38:bb:01:0b:28:a7:87:a1:71:
                    c7:98:c4:39:c8:17:2a:80:e5:78:ca:9f:2d:35:9d:
                    d0:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:1C:8B:FD:95:13:64:3A:AC:90:22:E2:9C:C9:74:FE:94:CD:E7:C2
            X509v3 Authority Key Identifier:
                keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:a3:9f:68:a6:6f:e7:a3:62:5a:a5:9a:fd:24:db:db:24:66:
         a8:7b:7f:6a:f1:ab:b7:1e:de:25:4d:38:46:c9:6d:34:9f:48:
         83:70:dd:03:35:e8:93:01:a7:6a:e5:47:33:4c:04:2a:a1:5d:
         6f:c5:0f:61:11:b8:5c:45:77:01:d2:e7:1f:a7:e1:16:c8:36:
         54:ef:58:db:6c:08:64:92:3e:4b:73:cf:c7:fc:06:de:ad:1c:
         71:b1:55:aa:a9:9b:b0:30:08:0c:86:fe:a6:12:42:05:36:76:
         e5:91:83:38:e2:ae:12:ac:f0:5d:1d:03:a5:42:6d:d3:47:01:
         ce:99:66:33:9a:d2:13:ff:fa:9e:27:07:c2:52:da:7a:a1:7e:
         95:b3:e7:3d:10:46:dd:03:fe:1d:c9:81:eb:9d:46:5a:c8:33:
         4e:c0:4f:06:d1:0a:60:f5:d3:00:2d:6c:57:fb:3f:2e:93:b1:
         d6:5f:de:03:d3:1a:23:d4:86:17:bf:01:cd:cd:da:e9:29:ca:
         0a:0a:71:8d:79:79:b2:e4:db:82:e2:b4:d8:e2:92:3c:56:c5:
         15:0b:d6:72:64:4d:30:2d:50:4b:fb:15:14:9e:21:23:a4:b9:
         8e:cb:43:a2:51:e0:e0:d6:41:6a:71:d0:42:28:4f:e3:99:f2:
         11:e4:0c:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 20:12:44 2026 by rpki-client