This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/af2b1786-1833-4d0a-a139-464433393d78/0/7AD0DDB5789DE529C8697A033978C381FFE40D83.mft
File:                     7AD0DDB5789DE529C8697A033978C381FFE40D83.mft (raw, json)
Hash identifier:          UXlSqU5G/IbinzkDFd5V756SVeDtbFzXrbQk3fv7ZIo=
Subject key identifier:   10:D5:E3:59:27:EB:30:F0:C3:4D:C8:05:C0:10:25:C4:77:11:73:82
Authority key identifier: 7A:D0:DD:B5:78:9D:E5:29:C8:69:7A:03:39:78:C3:81:FF:E4:0D:83
Certificate issuer:       /CN=7AD0DDB5789DE529C8697A033978C381FFE40D83
Certificate serial:       254551DD856FCACF20E939C14B27F91AA824EE40
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7AD0DDB5789DE529C8697A033978C381FFE40D83.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/af2b1786-1833-4d0a-a139-464433393d78/0/7AD0DDB5789DE529C8697A033978C381FFE40D83.mft
Manifest number:          0241
Signing time:             Sun 25 Jan 2026 10:41:36 +0000
Manifest this update:     Sun 25 Jan 2026 10:36:36 +0000
Manifest next update:     Wed 28 Jan 2026 15:07:36 +0000
Files and hashes:         1: 7AD0DDB5789DE529C8697A033978C381FFE40D83.crl (hash: xxqzwQTm2xpTggwS9jzQ0RBqM4ZXW3hA/awzaqZTxuo=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/af2b1786-1833-4d0a-a139-464433393d78/0/7AD0DDB5789DE529C8697A033978C381FFE40D83.crl
                          rsync://repo-rpki.idnic.net/repo/af2b1786-1833-4d0a-a139-464433393d78/0/7AD0DDB5789DE529C8697A033978C381FFE40D83.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7AD0DDB5789DE529C8697A033978C381FFE40D83.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 28 Jan 2026 14:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:45:51:dd:85:6f:ca:cf:20:e9:39:c1:4b:27:f9:1a:a8:24:ee:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7AD0DDB5789DE529C8697A033978C381FFE40D83
        Validity
            Not Before: Jan 25 10:36:36 2026 GMT
            Not After : Jan 28 15:07:36 2026 GMT
        Subject: CN=10D5E35927EB30F0C34DC805C01025C477117382
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:cd:75:0b:74:60:ce:5a:97:48:f0:72:e3:b8:
                    17:92:46:be:78:19:14:4e:86:54:16:60:ed:b4:90:
                    81:48:32:1d:39:7b:9a:a8:48:9d:20:41:7b:a9:05:
                    2a:0e:e7:37:66:de:ac:aa:b7:c7:a0:31:c1:5e:77:
                    5e:8b:b8:48:57:22:28:e5:27:3c:96:d6:6d:55:e0:
                    11:72:fc:cc:e4:9a:71:6d:9f:0e:04:51:fe:e2:d7:
                    83:ac:f5:da:a3:a3:39:96:be:9f:38:db:93:fb:51:
                    00:db:c5:bd:ea:83:65:ed:87:e4:e5:bf:8c:55:f0:
                    d5:ca:de:8b:49:ac:e5:81:9e:6a:f5:78:f4:ed:aa:
                    49:d3:e0:5f:d5:4a:15:24:df:28:00:c3:d4:f7:b0:
                    91:1d:fd:cd:c2:d5:63:f8:e2:c1:fb:f7:5d:3f:8e:
                    b5:98:8d:42:de:3b:a7:4b:f6:fd:86:ca:32:c6:db:
                    bd:4c:ab:a0:c7:75:98:2b:4f:47:00:2d:70:d2:80:
                    1d:45:4b:3f:9f:ae:67:f1:e7:8e:96:bd:68:0d:f4:
                    32:88:54:11:f3:dc:64:80:75:2d:5d:0c:dd:81:ff:
                    44:bc:1e:e2:04:eb:57:e3:22:ce:82:85:75:99:e4:
                    89:27:a4:98:25:c1:76:eb:20:f6:d2:ef:3d:bd:ee:
                    b2:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:D5:E3:59:27:EB:30:F0:C3:4D:C8:05:C0:10:25:C4:77:11:73:82
            X509v3 Authority Key Identifier:
                keyid:7A:D0:DD:B5:78:9D:E5:29:C8:69:7A:03:39:78:C3:81:FF:E4:0D:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/af2b1786-1833-4d0a-a139-464433393d78/0/7AD0DDB5789DE529C8697A033978C381FFE40D83.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7AD0DDB5789DE529C8697A033978C381FFE40D83.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/af2b1786-1833-4d0a-a139-464433393d78/0/7AD0DDB5789DE529C8697A033978C381FFE40D83.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d4:5e:97:e9:72:02:38:82:f2:e5:5f:ab:bb:b9:cc:94:70:83:
         3e:14:20:f1:1d:b8:77:73:21:fb:c7:67:ff:6c:ad:ae:12:86:
         52:6f:43:fa:54:a5:ea:8b:c1:d0:52:1f:97:3c:69:be:b8:87:
         2e:dc:5e:0d:ed:ce:7f:fd:be:0d:a5:5f:91:81:1f:46:bf:05:
         14:da:0a:ec:a9:29:2e:31:94:19:2f:e1:7a:03:e3:a8:1f:3e:
         ff:33:02:5d:e3:69:7a:54:b6:e2:35:6f:74:90:22:45:5e:2c:
         49:e3:7d:9f:30:1e:26:54:de:a7:02:b8:a1:a7:36:25:54:b0:
         af:7a:25:72:52:a6:11:a4:95:a4:98:b9:a2:d7:01:93:23:aa:
         40:c0:95:43:ce:1a:ee:bd:11:ba:87:65:ac:15:89:de:87:40:
         f9:cc:a8:8c:d4:80:f7:e9:ed:67:59:52:2b:0f:64:55:d7:92:
         f9:37:91:18:ef:3f:7e:29:57:7b:16:bd:bf:59:9a:a7:4d:10:
         68:af:2a:3d:7a:b7:a3:64:91:a6:02:6d:5f:71:0f:ff:7b:e6:
         a2:f7:db:42:ef:bd:3c:2d:30:87:f9:f7:e8:a7:7b:93:26:6a:
         ba:cf:ea:c4:b5:df:4f:71:a4:07:a3:fc:36:6b:73:4d:88:ce:
         9f:1a:75:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:38:35 2026 by rpki-client