This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/acb9a4b9-4ae3-467a-b919-410e142b679f/0/342061B97FF97E5180511F38B0A0DCBAB1CE0325.mft
File:                     342061B97FF97E5180511F38B0A0DCBAB1CE0325.mft (raw, json)
Hash identifier:          Htzspr+FjjktalJWDO2jbIYSMsqRItgZ2NBEM7MyQzg=
Subject key identifier:   8A:F4:EA:89:6F:DC:A9:F1:44:41:2F:9C:8C:F5:3F:36:DA:CF:62:92
Authority key identifier: 34:20:61:B9:7F:F9:7E:51:80:51:1F:38:B0:A0:DC:BA:B1:CE:03:25
Certificate issuer:       /CN=342061B97FF97E5180511F38B0A0DCBAB1CE0325
Certificate serial:       3CAB8A083E61BD67ACDA728CBDC156F66F406D3B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/342061B97FF97E5180511F38B0A0DCBAB1CE0325.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/acb9a4b9-4ae3-467a-b919-410e142b679f/0/342061B97FF97E5180511F38B0A0DCBAB1CE0325.mft
Manifest number:          0260
Signing time:             Sat 24 Jan 2026 12:31:18 +0000
Manifest this update:     Sat 24 Jan 2026 12:26:18 +0000
Manifest next update:     Tue 27 Jan 2026 21:22:18 +0000
Files and hashes:         1: 3230322e3136392e3234342e302f32342d3234203d3e203338313433.roa (hash: XQzSwHSK4NT6x/BumC0g2WFFmjLzbeNbB1ShA2P1aTE=)
                          2: 3230322e3136392e3234382e302f32342d3234203d3e20313432333834.roa (hash: 1mC7C69TR7tBnN/daNAA9WmPgkYuyOIPLbSlaAFBxwE=)
                          3: 3230322e3136392e3234302e302f32312d3234203d3e203338313433.roa (hash: b/I7ycII/z7dGqAxoUw+Z4V82X6TIOAObMHi+7TZz4M=)
                          4: 3230322e3136392e3234322e302f32342d3234203d3e203338313433.roa (hash: 5amV64UjC0JF6r/w8omeOHv9ivuPJRMb5ZoL5FJE140=)
                          5: 3230322e3136392e3235332e302f32342d3234203d3e20313339333635.roa (hash: 9ueNsf48SUY+xtp4ywCcHlMUOqR56TvW5HOOZ8L51Fc=)
                          6: 3230322e3136392e3235352e302f32342d3234203d3e203338313433.roa (hash: KztHeAlZTb1TsWRrQNB1dA4yh8nWa44vDriF9q5fsBI=)
                          7: 3230322e3136392e3234312e302f32342d3234203d3e203338313433.roa (hash: h6Ee6mAwoTclDh87yxMaZrVLxSRNZyCSkjNCMnA187Q=)
                          8: 3230322e3136392e3234372e302f32342d3234203d3e203338313433.roa (hash: EHAcnltJ3DUdK1uIbA4hKVUWSmY2jQkQrKawd/5VQz4=)
                          9: 3230322e3136392e3235302e302f32342d3234203d3e203338313433.roa (hash: cf3UAkRQmA3WUKBEqtORsFOQiEOHc1PfGF6nPJ39kNs=)
                          10: 3230322e3136392e3234332e302f32342d3234203d3e203338313433.roa (hash: mRFofWRrZn+Yb0eQvfEdVI2WDAC7eNzlAjyjGXNnoes=)
                          11: 3230322e3136392e3234352e302f32342d3234203d3e203338313433.roa (hash: fuw/gxErkL+bJ/gGyq+bm4hu+zVzYCPlr170AzT5bDA=)
                          12: 3230322e3136392e3234302e302f32342d3234203d3e203338313433.roa (hash: KmrzRtX+v96Jlcy5meT57LKNlJBPtOAKRwhOLamVofo=)
                          13: 3230322e3136392e3235342e302f32342d3234203d3e203338313433.roa (hash: JWTNXuMyPReVmjqlA3f9ZAbwJWQGYLxUWUTTvp66CZU=)
                          14: 342061B97FF97E5180511F38B0A0DCBAB1CE0325.crl (hash: GweugiECxCZ/41A6pOo7Z7+l8K+cTG+dEMteVLRrMxA=)
                          15: 3230322e3136392e3234362e302f32342d3234203d3e203338313433.roa (hash: 7oSpg4PI8iO/bLRmdJp1xDm1mTZbqamrPwvewQ0Kcpc=)
                          16: 3230322e3136392e3235312e302f32342d3234203d3e203338313433.roa (hash: 41XCYMRh55k6Um2y8+Tik7Eqic7p5rV1jZeEXAGor68=)
                          17: 3230322e3136392e3234392e302f32342d3234203d3e203338313433.roa (hash: cS5ythDEzT5AmV1FQ7Iw8w4U5LMT6dUxmiuZiyl9vkg=)
                          18: 3230322e3136392e3235322e302f32342d3234203d3e203338313433.roa (hash: id0g1JaYO1pziZ0XdQnIbqcSOarNqVLUxMrtCKVg664=)
                          19: 3230322e3136392e3235342e302f32332d3234203d3e203338313433.roa (hash: p7swydDsWURtiFQmZODeY4QE27/x4EblgyEQL83pXus=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/acb9a4b9-4ae3-467a-b919-410e142b679f/0/342061B97FF97E5180511F38B0A0DCBAB1CE0325.crl
                          rsync://repo-rpki.idnic.net/repo/acb9a4b9-4ae3-467a-b919-410e142b679f/0/342061B97FF97E5180511F38B0A0DCBAB1CE0325.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/342061B97FF97E5180511F38B0A0DCBAB1CE0325.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 27 Jan 2026 21:22:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:ab:8a:08:3e:61:bd:67:ac:da:72:8c:bd:c1:56:f6:6f:40:6d:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=342061B97FF97E5180511F38B0A0DCBAB1CE0325
        Validity
            Not Before: Jan 24 12:26:18 2026 GMT
            Not After : Jan 27 21:22:18 2026 GMT
        Subject: CN=8AF4EA896FDCA9F144412F9C8CF53F36DACF6292
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:0b:70:c3:45:d9:41:bc:25:db:8d:11:e2:d0:
                    17:ba:be:25:c4:78:49:ee:f0:96:0a:97:08:da:af:
                    0c:50:37:4b:15:32:2a:5f:f3:da:65:6a:4f:30:e6:
                    98:5c:db:fb:2f:92:1f:17:89:09:50:28:2f:a9:40:
                    e2:69:b7:fa:fe:3c:48:8e:64:48:ce:f4:73:0e:b6:
                    50:19:cb:82:5d:f0:f8:b3:0b:60:66:79:8b:23:7d:
                    2b:c0:cc:5c:b2:b5:d0:fc:72:14:2e:1d:41:5c:2b:
                    5d:dd:0f:3c:0f:20:ba:4a:54:5a:ff:5d:25:34:a3:
                    aa:e2:16:51:65:2c:c9:3a:04:f2:57:7b:06:41:ad:
                    82:98:5c:98:10:61:7d:ea:52:b4:58:a5:25:83:a7:
                    c0:04:f0:0a:d5:71:3b:fd:bb:50:30:c1:5b:20:e6:
                    38:c3:81:2e:1e:d4:3f:01:4a:b6:de:76:6b:b3:24:
                    3b:94:01:3d:91:66:55:69:1e:61:c5:3f:36:88:41:
                    d8:fa:f9:c2:8f:d0:ce:c2:f3:01:92:ea:ea:97:74:
                    ee:05:3d:c0:04:ef:4b:b8:9a:aa:12:57:46:e2:ef:
                    0c:dc:a5:ed:36:ff:d2:b8:7a:5c:6d:4a:44:be:a8:
                    cb:59:9f:6e:c1:6b:04:51:5f:36:ac:b8:9f:b3:fc:
                    75:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:F4:EA:89:6F:DC:A9:F1:44:41:2F:9C:8C:F5:3F:36:DA:CF:62:92
            X509v3 Authority Key Identifier:
                keyid:34:20:61:B9:7F:F9:7E:51:80:51:1F:38:B0:A0:DC:BA:B1:CE:03:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/acb9a4b9-4ae3-467a-b919-410e142b679f/0/342061B97FF97E5180511F38B0A0DCBAB1CE0325.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/342061B97FF97E5180511F38B0A0DCBAB1CE0325.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/acb9a4b9-4ae3-467a-b919-410e142b679f/0/342061B97FF97E5180511F38B0A0DCBAB1CE0325.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:9c:45:db:4b:80:ea:d1:fe:5e:42:69:96:c8:dd:0d:02:6c:
         04:b1:39:a1:8e:73:d7:19:77:f2:72:b1:e9:2a:30:91:ea:38:
         b8:b8:4c:83:25:06:8b:c9:76:8a:bf:b9:21:d0:5f:fc:1b:14:
         72:99:28:6a:12:13:f5:7d:0f:5a:e6:d3:b1:f0:6f:63:e7:22:
         a3:10:4b:ba:c8:a5:37:1f:c0:f8:a0:63:34:96:80:89:16:75:
         80:7d:74:c7:40:f0:c0:36:b2:3c:23:3e:23:e6:45:3b:34:70:
         a5:94:cd:49:2d:7a:d7:5c:47:91:5d:08:44:ba:c7:99:64:58:
         55:58:a8:15:bf:24:7a:c7:b2:d4:a1:58:a2:24:20:53:21:75:
         63:91:35:4e:da:b2:42:4b:5c:10:6c:ad:b4:3c:2f:7e:98:87:
         4e:d4:52:9a:d5:59:2e:43:e8:da:28:53:c8:9e:44:d3:c4:54:
         eb:92:17:38:20:a0:c2:b1:bc:1a:4e:db:b9:fb:f8:1a:57:19:
         98:f4:82:c3:28:97:21:b7:ca:63:3e:d0:da:ad:8d:04:ba:a8:
         3d:13:7b:17:2a:50:eb:4c:d9:87:a8:5b:46:63:32:d2:63:8c:
         72:63:12:33:4e:9b:f4:1d:03:e0:17:a7:c8:66:cf:eb:67:64:
         08:f9:63:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:49:52 2026 by rpki-client