This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/1/1E64BF65051052D913D7DB8C4512F615E3FAB9B2.mft
File:                     1E64BF65051052D913D7DB8C4512F615E3FAB9B2.mft (raw, json)
Hash identifier:          AMdtN8qjFqvRIWNRhx2DwYxfFwstvGBUUvfcAE0iBA0=
Subject key identifier:   17:1C:26:BF:BB:D2:AE:A2:92:4B:1D:0D:3A:57:07:5B:EE:79:D5:EB
Authority key identifier: 1E:64:BF:65:05:10:52:D9:13:D7:DB:8C:45:12:F6:15:E3:FA:B9:B2
Certificate issuer:       /CN=1E64BF65051052D913D7DB8C4512F615E3FAB9B2
Certificate serial:       0FE7D09C9A974E74F04A9D0E932F3F78BC95D0E4
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1E64BF65051052D913D7DB8C4512F615E3FAB9B2.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/1/1E64BF65051052D913D7DB8C4512F615E3FAB9B2.mft
Manifest number:          010A
Signing time:             Sun 25 Jan 2026 16:11:11 +0000
Manifest this update:     Sun 25 Jan 2026 16:06:11 +0000
Manifest next update:     Wed 28 Jan 2026 18:24:11 +0000
Files and hashes:         1: 1E64BF65051052D913D7DB8C4512F615E3FAB9B2.crl (hash: 8eE7vVZVUejmEa21CKt+SuNaE2ufTqAREuwdcfTwxVI=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/1/1E64BF65051052D913D7DB8C4512F615E3FAB9B2.crl
                          rsync://repo-rpki.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/1/1E64BF65051052D913D7DB8C4512F615E3FAB9B2.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1E64BF65051052D913D7DB8C4512F615E3FAB9B2.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 28 Jan 2026 14:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:e7:d0:9c:9a:97:4e:74:f0:4a:9d:0e:93:2f:3f:78:bc:95:d0:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1E64BF65051052D913D7DB8C4512F615E3FAB9B2
        Validity
            Not Before: Jan 25 16:06:11 2026 GMT
            Not After : Jan 28 18:24:11 2026 GMT
        Subject: CN=171C26BFBBD2AEA2924B1D0D3A57075BEE79D5EB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:8d:3d:7b:f9:c0:a7:90:b9:14:6b:af:2a:b8:
                    ff:26:09:cb:83:e1:c0:3d:3b:04:db:50:23:5e:2d:
                    b8:58:71:0d:f8:74:23:b4:fd:72:9d:dc:00:d0:2c:
                    3a:9e:9e:32:cb:d9:93:ec:5c:86:35:15:2d:7e:99:
                    86:39:df:9a:92:8f:b4:e9:e0:81:db:fd:d5:f7:4d:
                    e2:34:15:a3:b5:55:50:62:e5:59:91:f0:01:b3:10:
                    4e:f9:71:9f:a4:b9:eb:d1:e8:fd:ee:a2:94:32:0f:
                    0d:a6:ca:df:31:cf:75:b2:99:ec:91:46:e8:a1:d1:
                    65:36:5d:7c:5c:a2:c1:42:5b:3f:f1:96:a3:e0:12:
                    9f:55:0b:20:c9:50:48:b5:bf:58:85:c9:e4:f8:ae:
                    56:33:d5:ef:b9:dd:92:2a:d2:ec:62:22:07:c8:a2:
                    31:6c:fd:d2:57:bc:d2:4b:64:21:3e:9f:00:67:d9:
                    26:d6:e7:28:69:6c:93:cb:aa:d3:76:94:02:8c:2a:
                    b0:47:79:6d:5d:63:61:9d:e0:08:20:60:b4:d8:ad:
                    40:c8:38:36:72:ae:1a:c1:72:d9:a6:4a:b8:4f:09:
                    ea:60:92:5b:63:7f:69:ea:30:6d:e0:9b:ba:71:83:
                    42:1d:1e:2b:78:82:d6:c0:49:fb:a4:41:fe:b6:ca:
                    0c:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:1C:26:BF:BB:D2:AE:A2:92:4B:1D:0D:3A:57:07:5B:EE:79:D5:EB
            X509v3 Authority Key Identifier:
                keyid:1E:64:BF:65:05:10:52:D9:13:D7:DB:8C:45:12:F6:15:E3:FA:B9:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/1/1E64BF65051052D913D7DB8C4512F615E3FAB9B2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1E64BF65051052D913D7DB8C4512F615E3FAB9B2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/1/1E64BF65051052D913D7DB8C4512F615E3FAB9B2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:f0:77:3f:7e:2b:15:66:40:c0:97:88:b3:3e:a5:31:6d:17:
         fb:5a:cc:c7:fa:43:5d:4e:40:f8:b3:76:5c:23:e3:bc:34:89:
         17:89:f1:8b:7c:af:8e:d5:b4:34:92:cf:65:ed:32:48:a7:37:
         7e:8f:1d:5c:de:0e:ce:61:49:5d:81:ab:54:b9:a3:78:34:68:
         41:68:6c:78:22:4e:b1:3c:68:aa:b0:d7:c6:eb:1f:72:cb:c9:
         1d:f8:75:35:e6:1b:56:e5:59:ae:4a:ff:ec:4e:ba:3a:af:3a:
         34:a6:3c:5f:9c:59:07:17:39:4d:d8:91:17:eb:ad:10:ce:f2:
         42:7c:b6:2a:37:fc:2a:fe:8b:52:56:61:74:ae:71:03:64:5d:
         26:4f:87:40:a1:3c:f9:c1:92:f0:1e:8f:3c:a8:a0:72:6c:d0:
         94:29:68:d3:c2:9e:f6:7d:b8:0f:13:50:71:fa:33:64:58:f0:
         84:63:af:8e:b2:bb:29:49:e2:5f:75:8f:0d:56:44:c7:af:b4:
         9d:96:19:4c:6c:ae:b9:7d:6c:fb:ff:82:55:d5:76:ba:24:e9:
         ca:a9:0e:15:53:f0:f6:b3:7b:7c:69:2c:be:5a:0b:df:06:05:
         f0:d6:d9:42:c9:1d:1f:f1:82:3d:ed:a9:25:26:37:c9:9f:d0:
         a0:d8:be:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:38:18 2026 by rpki-client