This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/b3327ffd-1e2e-4c52-9717-65f85e6359e5/0/AD0607E86EA3F833674BB0AF1A5EA7D5EE064B39.mft
File:                     AD0607E86EA3F833674BB0AF1A5EA7D5EE064B39.mft (raw, json)
Hash identifier:          ADBX6slor9eBTcyf38aSVTSOmET8dxY2VKM54a6o7ys=
Subject key identifier:   86:31:DF:6A:C1:5B:9C:E4:D0:D1:3F:82:DA:04:45:74:0A:E9:A4:17
Authority key identifier: AD:06:07:E8:6E:A3:F8:33:67:4B:B0:AF:1A:5E:A7:D5:EE:06:4B:39
Certificate issuer:       /CN=AD0607E86EA3F833674BB0AF1A5EA7D5EE064B39
Certificate serial:       7A68731C411977C45661CCDBDF9FA92A295B4AC7
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AD0607E86EA3F833674BB0AF1A5EA7D5EE064B39.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/b3327ffd-1e2e-4c52-9717-65f85e6359e5/0/AD0607E86EA3F833674BB0AF1A5EA7D5EE064B39.mft
Manifest number:          023E
Signing time:             Sat 24 Jan 2026 20:30:52 +0000
Manifest this update:     Sat 24 Jan 2026 20:25:52 +0000
Manifest next update:     Wed 28 Jan 2026 01:52:52 +0000
Files and hashes:         1: AD0607E86EA3F833674BB0AF1A5EA7D5EE064B39.crl (hash: 9due0P+VvlL9UJ06PT4uOGpzXeU7BDts7KFC4HgO1ig=)
                          2: 3130332e3139312e36332e302f32342d3234203d3e20313338313135.roa (hash: Y9Gmd38S3GEr38X8sg4lpu4Cyhz7V9M44aocE3LKRAo=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/b3327ffd-1e2e-4c52-9717-65f85e6359e5/0/AD0607E86EA3F833674BB0AF1A5EA7D5EE064B39.crl
                          rsync://repo-rpki.idnic.net/repo/b3327ffd-1e2e-4c52-9717-65f85e6359e5/0/AD0607E86EA3F833674BB0AF1A5EA7D5EE064B39.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AD0607E86EA3F833674BB0AF1A5EA7D5EE064B39.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 28 Jan 2026 01:52:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:68:73:1c:41:19:77:c4:56:61:cc:db:df:9f:a9:2a:29:5b:4a:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AD0607E86EA3F833674BB0AF1A5EA7D5EE064B39
        Validity
            Not Before: Jan 24 20:25:52 2026 GMT
            Not After : Jan 28 01:52:52 2026 GMT
        Subject: CN=8631DF6AC15B9CE4D0D13F82DA0445740AE9A417
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:c4:68:93:e4:64:45:a8:99:d1:47:24:26:87:
                    fe:d3:18:63:47:d7:c1:bb:5b:a2:fb:14:aa:62:c2:
                    5a:bc:db:91:90:54:c7:bb:03:b0:8b:6a:43:44:1a:
                    98:92:d0:68:7f:01:38:2a:cc:4b:3c:b9:64:50:0b:
                    a2:b9:53:4e:72:5f:e9:7e:4b:e9:69:76:48:9a:a7:
                    dc:f6:6d:ce:06:50:b5:64:38:da:21:50:0c:f8:a8:
                    42:a5:40:e0:c8:e8:68:63:e5:34:6e:c0:d0:27:b4:
                    28:80:f4:48:69:46:f5:43:2e:d1:ad:1f:43:85:02:
                    79:95:1d:8c:07:81:4a:fe:b1:3d:74:8a:c0:96:1c:
                    a1:16:e7:b5:43:e8:b0:b0:1e:2f:69:e8:b0:6c:78:
                    fb:cf:1b:63:18:0f:3f:a4:ad:6a:d9:2c:af:9f:52:
                    d8:28:cd:61:58:2d:22:c7:2f:f0:05:eb:fd:da:27:
                    23:9e:8b:8d:ef:5e:11:41:92:20:c1:f8:c5:fd:a0:
                    30:c6:2d:7a:b8:80:60:64:9d:46:7c:29:80:01:2f:
                    07:da:ae:32:2f:76:a9:e0:0f:ef:5c:bb:b1:a3:7a:
                    29:ef:a7:09:13:8a:54:26:92:79:a9:a5:72:64:f0:
                    7f:02:0f:57:a6:e6:0c:32:da:7e:39:fe:c7:eb:24:
                    f0:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:31:DF:6A:C1:5B:9C:E4:D0:D1:3F:82:DA:04:45:74:0A:E9:A4:17
            X509v3 Authority Key Identifier:
                keyid:AD:06:07:E8:6E:A3:F8:33:67:4B:B0:AF:1A:5E:A7:D5:EE:06:4B:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/b3327ffd-1e2e-4c52-9717-65f85e6359e5/0/AD0607E86EA3F833674BB0AF1A5EA7D5EE064B39.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AD0607E86EA3F833674BB0AF1A5EA7D5EE064B39.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b3327ffd-1e2e-4c52-9717-65f85e6359e5/0/AD0607E86EA3F833674BB0AF1A5EA7D5EE064B39.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d8:25:ce:1f:40:0e:14:6f:12:24:a8:8f:72:ae:9b:f1:01:ee:
         70:78:82:aa:92:03:ed:b1:ef:bf:98:46:c5:70:e5:31:ac:83:
         1b:15:85:52:fc:83:fe:32:85:27:d8:ca:41:78:09:bb:2e:71:
         0a:db:08:80:ba:a1:49:a1:d1:08:54:b5:a4:30:75:bf:a3:41:
         65:ec:27:dc:7a:e7:fd:12:a7:68:8c:48:c3:89:bd:12:b9:17:
         18:68:7d:d3:b1:7b:af:43:5f:cd:bb:16:f7:8a:f9:57:b7:00:
         a2:c3:df:71:e7:36:11:60:5a:70:19:1b:8a:b4:b1:6f:8c:a3:
         0c:85:d1:c8:f0:5c:4c:01:48:53:cc:d2:c5:2a:e7:bf:24:77:
         eb:34:99:19:0f:9b:98:28:01:f1:db:e4:5b:e3:03:4c:41:f8:
         8a:d7:f7:f8:a6:66:87:6e:8e:12:7f:35:d3:69:12:ac:88:4d:
         89:04:00:b5:e5:5f:0b:46:23:bc:01:f7:df:5c:3c:27:55:9c:
         e3:d6:15:8a:32:2e:17:0b:ce:5f:f0:61:c3:cf:67:2e:82:dc:
         83:6b:ce:3a:44:3e:f8:b1:3d:e1:9d:53:46:72:3e:df:f7:58:
         62:14:ab:b6:be:54:85:a0:53:d2:d9:44:29:fa:4c:7e:4b:97:
         07:c7:f3:18
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUemhzHEEZd8RWYczb35+pKilbSscwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUQwNjA3RTg2RUEzRjgzMzY3NEJCMEFGMUE1RUE3RDVF
RTA2NEIzOTAeFw0yNjAxMjQyMDI1NTJaFw0yNjAxMjgwMTUyNTJaMDMxMTAvBgNV
BAMTKDg2MzFERjZBQzE1QjlDRTREMEQxM0Y4MkRBMDQ0NTc0MEFFOUE0MTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD6xGiT5GRFqJnRRyQmh/7TGGNH
18G7W6L7FKpiwlq825GQVMe7A7CLakNEGpiS0Gh/ATgqzEs8uWRQC6K5U05yX+l+
S+lpdkiap9z2bc4GULVkONohUAz4qEKlQODI6Ghj5TRuwNAntCiA9EhpRvVDLtGt
H0OFAnmVHYwHgUr+sT10isCWHKEW57VD6LCwHi9p6LBsePvPG2MYDz+krWrZLK+f
UtgozWFYLSLHL/AF6/3aJyOei43vXhFBkiDB+MX9oDDGLXq4gGBknUZ8KYABLwfa
rjIvdqngD+9cu7GjeinvpwkTilQmknmppXJk8H8CD1em5gwy2n45/sfrJPD9AgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUhjHfasFbnOTQ0T+C2gRFdArppBcwHwYDVR0j
BBgwFoAUrQYH6G6j+DNnS7CvGl6n1e4GSzkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i
MzMyN2ZmZC0xZTJlLTRjNTItOTcxNy02NWY4NWU2MzU5ZTUvMC9BRDA2MDdFODZF
QTNGODMzNjc0QkIwQUYxQTVFQTdENUVFMDY0QjM5LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQUQwNjA3RTg2RUEzRjgzMzY3NEJCMEFGMUE1RUE3RDVFRTA2
NEIzOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjMzMjdmZmQtMWUyZS00YzUyLTk3
MTctNjVmODVlNjM1OWU1LzAvQUQwNjA3RTg2RUEzRjgzMzY3NEJCMEFGMUE1RUE3
RDVFRTA2NEIzOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBANglzh9ADhRvEiSoj3Kum/EB7nB4gqqSA+2x
77+YRsVw5TGsgxsVhVL8g/4yhSfYykF4CbsucQrbCIC6oUmh0QhUtaQwdb+jQWXs
J9x65/0Sp2iMSMOJvRK5FxhofdOxe69DX827FveK+Ve3AKLD33HnNhFgWnAZG4q0
sW+MowyF0cjwXEwBSFPM0sUq578kd+s0mRkPm5goAfHb5FvjA0xB+IrX9/imZodu
jhJ/NdNpEqyITYkEALXlXwtGI7wB999cPCdVnOPWFYoyLhcLzl/wYcPPZy6C3INr
zjpEPvixPeGdU0ZyPt/3WGIUq7a+VIWgU9LZRCn6TH5LlwfH8xg=
-----END CERTIFICATE-----
Generated at Sun Jan 25 14:24:24 2026 by rpki-client