This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/ac6b5abc-2c54-4c5f-b3f8-3346f19e6cc8/0/9B481670EF7678276B7F667CD9CB3577AF393FD0.mft
File:                     9B481670EF7678276B7F667CD9CB3577AF393FD0.mft (raw, json)
Hash identifier:          lEIKCYkLCNuVeD5O2rRtJiS86ez/YMG84GMTJYUDcyo=
Subject key identifier:   CE:ED:82:A7:77:CB:CB:10:7D:16:04:2C:A5:94:0E:B6:E4:31:F1:02
Authority key identifier: 9B:48:16:70:EF:76:78:27:6B:7F:66:7C:D9:CB:35:77:AF:39:3F:D0
Certificate issuer:       /CN=9B481670EF7678276B7F667CD9CB3577AF393FD0
Certificate serial:       36B4A1D5753DF93641A72965F6268A14CF09856D
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9B481670EF7678276B7F667CD9CB3577AF393FD0.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/ac6b5abc-2c54-4c5f-b3f8-3346f19e6cc8/0/9B481670EF7678276B7F667CD9CB3577AF393FD0.mft
Manifest number:          016C
Signing time:             Sun 25 Jan 2026 09:31:21 +0000
Manifest this update:     Sun 25 Jan 2026 09:26:21 +0000
Manifest next update:     Wed 28 Jan 2026 13:55:21 +0000
Files and hashes:         1: 9B481670EF7678276B7F667CD9CB3577AF393FD0.crl (hash: kII9lmBgkwnQS369GH/HV7BGc+jTKQRewjQLOm69spU=)
                          2: 3130332e37382e3139352e302f32342d3234203d3e203634333033.roa (hash: nctnXPjyCy8J8rL5xXqCg2sFFkEJpXiz1am6alHjeHM=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/ac6b5abc-2c54-4c5f-b3f8-3346f19e6cc8/0/9B481670EF7678276B7F667CD9CB3577AF393FD0.crl
                          rsync://repo-rpki.idnic.net/repo/ac6b5abc-2c54-4c5f-b3f8-3346f19e6cc8/0/9B481670EF7678276B7F667CD9CB3577AF393FD0.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9B481670EF7678276B7F667CD9CB3577AF393FD0.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 28 Jan 2026 13:55:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:b4:a1:d5:75:3d:f9:36:41:a7:29:65:f6:26:8a:14:cf:09:85:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9B481670EF7678276B7F667CD9CB3577AF393FD0
        Validity
            Not Before: Jan 25 09:26:21 2026 GMT
            Not After : Jan 28 13:55:21 2026 GMT
        Subject: CN=CEED82A777CBCB107D16042CA5940EB6E431F102
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:76:a0:13:4f:f4:d3:cb:3e:80:91:81:b8:e6:
                    aa:26:41:bf:ce:82:0a:48:49:5a:33:7e:f5:03:2f:
                    0d:97:15:b1:02:43:99:6d:3e:3d:84:86:48:ad:9d:
                    6c:51:df:de:80:40:3f:87:74:53:3e:f5:52:0d:9b:
                    15:bf:78:c8:e5:b5:3b:7f:b9:87:88:50:08:eb:03:
                    9e:ae:8d:63:a3:e4:f6:ce:2b:17:68:e3:2b:01:e7:
                    5f:cf:af:73:90:8c:96:6d:8e:f3:21:09:54:52:e1:
                    17:7f:b0:9b:7a:24:e6:ff:51:ce:1c:2c:37:7f:b1:
                    56:1e:9b:e6:b8:b5:c9:27:c6:b2:83:b3:f6:e4:fa:
                    56:b4:db:0b:b6:9b:b8:05:80:94:f4:c7:a8:8c:9c:
                    a7:95:85:e6:59:1c:43:1f:20:18:13:d4:e4:43:71:
                    be:9d:2a:13:55:f6:7f:35:c5:7d:a5:1e:cb:3c:c5:
                    b9:fd:59:e3:19:7b:94:d8:44:a3:27:c0:09:6c:80:
                    19:cc:56:b4:a4:7f:af:4d:4c:ab:47:27:69:94:1b:
                    41:60:77:e7:c0:1c:11:31:9c:20:43:78:c2:b4:1f:
                    23:f2:6c:ed:76:df:3e:35:59:83:95:6f:86:d5:36:
                    6a:d4:e3:b8:3f:2b:99:d2:9b:c6:72:36:0a:29:a3:
                    8e:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:ED:82:A7:77:CB:CB:10:7D:16:04:2C:A5:94:0E:B6:E4:31:F1:02
            X509v3 Authority Key Identifier:
                keyid:9B:48:16:70:EF:76:78:27:6B:7F:66:7C:D9:CB:35:77:AF:39:3F:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/ac6b5abc-2c54-4c5f-b3f8-3346f19e6cc8/0/9B481670EF7678276B7F667CD9CB3577AF393FD0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9B481670EF7678276B7F667CD9CB3577AF393FD0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ac6b5abc-2c54-4c5f-b3f8-3346f19e6cc8/0/9B481670EF7678276B7F667CD9CB3577AF393FD0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:62:08:ce:ff:75:05:f8:51:46:3c:09:4a:7f:91:f8:46:3f:
         7a:ff:08:f6:81:2b:60:17:c5:1f:23:f5:3f:0a:23:19:09:b3:
         5d:2b:4f:d1:ec:48:47:25:60:e9:18:83:a6:a3:8f:48:f5:92:
         21:c1:fb:14:43:24:83:c4:a0:d0:ab:bd:95:fd:0a:42:1b:1c:
         20:f6:53:b1:7f:b1:98:15:8c:f0:9a:00:b1:e1:66:c3:e0:aa:
         c2:5c:7a:34:30:6a:f3:ef:07:e5:f2:a3:45:e8:98:21:8f:9e:
         00:38:b6:cb:82:35:b4:b0:8e:77:83:da:6e:10:04:df:a4:96:
         89:60:96:6a:40:18:d7:bd:f2:40:e0:fb:27:1b:ac:2b:a3:c5:
         21:f6:34:11:34:30:3e:50:1a:48:1b:1c:91:31:44:6a:aa:b4:
         63:45:d8:59:6f:1d:96:90:5b:8d:53:84:23:0c:cb:a3:0d:53:
         5e:4e:94:0c:a8:63:59:c1:b0:06:11:8a:63:8e:f1:1f:13:1f:
         f1:dd:5b:8e:da:ad:e4:57:0f:3f:a3:74:dc:57:c7:73:c8:91:
         af:af:37:bb:0f:3a:28:36:30:0e:30:08:23:fd:00:08:95:2f:
         bb:9a:79:6f:f4:7f:7d:54:70:6b:35:db:df:45:fd:96:98:92:
         76:cf:d1:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 05:37:15 2026 by rpki-client