This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/b42aa0a9-4588-4f87-ab89-f3b9dc6107b6/0/D51CE7B1B9196EF73BFF65318453095C925ECF91.mft
File:                     D51CE7B1B9196EF73BFF65318453095C925ECF91.mft (raw, json)
Hash identifier:          EXtF27NJaTg5/CF04z4I3HtXOeQXai1fWDOIy0IY/38=
Subject key identifier:   49:52:0A:99:66:6C:78:C9:81:F6:7C:02:E3:D9:BB:B0:D2:29:B9:1B
Authority key identifier: D5:1C:E7:B1:B9:19:6E:F7:3B:FF:65:31:84:53:09:5C:92:5E:CF:91
Certificate issuer:       /CN=D51CE7B1B9196EF73BFF65318453095C925ECF91
Certificate serial:       34250093CD8F1633F353DA18499F8E43ECFC76D7
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D51CE7B1B9196EF73BFF65318453095C925ECF91.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/b42aa0a9-4588-4f87-ab89-f3b9dc6107b6/0/D51CE7B1B9196EF73BFF65318453095C925ECF91.mft
Manifest number:          050D
Signing time:             Sat 24 Jan 2026 03:41:19 +0000
Manifest this update:     Sat 24 Jan 2026 03:36:19 +0000
Manifest next update:     Tue 27 Jan 2026 06:55:19 +0000
Files and hashes:         1: 3130332e3134362e3132382e302f32342d3234203d3e20313430303238.roa (hash: gicJjzX38cvUlj+q/M4Y/XP1+pLgazBAyQOFz8mgKiM=)
                          2: 3130332e3134362e3132392e302f32342d3234203d3e20313430303238.roa (hash: 1Ph7pIbfyLL/MFd5kaSHsFP+/qk1l1ex5P/+8l18KxM=)
                          3: 3130332e3134362e3132382e302f32332d3233203d3e20313430303238.roa (hash: yKK3Hq8hEk1LGbPgkhx2NEZ4T23a1BRrLBg1d7QrEfc=)
                          4: D51CE7B1B9196EF73BFF65318453095C925ECF91.crl (hash: DX6YCNIsP0OdVsHZEV4t4A6rXdMCLSwfMUJ9GZ1ADAY=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/b42aa0a9-4588-4f87-ab89-f3b9dc6107b6/0/D51CE7B1B9196EF73BFF65318453095C925ECF91.crl
                          rsync://repo-rpki.idnic.net/repo/b42aa0a9-4588-4f87-ab89-f3b9dc6107b6/0/D51CE7B1B9196EF73BFF65318453095C925ECF91.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D51CE7B1B9196EF73BFF65318453095C925ECF91.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 27 Jan 2026 06:55:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:25:00:93:cd:8f:16:33:f3:53:da:18:49:9f:8e:43:ec:fc:76:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D51CE7B1B9196EF73BFF65318453095C925ECF91
        Validity
            Not Before: Jan 24 03:36:19 2026 GMT
            Not After : Jan 27 06:55:19 2026 GMT
        Subject: CN=49520A99666C78C981F67C02E3D9BBB0D229B91B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:4e:10:d0:ea:ea:86:a2:e7:ad:d4:d0:f2:96:
                    1e:a3:9c:9a:96:2e:05:07:fc:8a:ad:1e:27:1f:b3:
                    df:91:4d:bd:c8:03:6a:e5:4f:c0:21:82:a2:e4:7a:
                    78:cb:21:96:6c:63:03:0e:5e:ec:5d:85:7a:43:a2:
                    c5:54:05:a1:fd:b0:e5:f9:be:d8:75:f3:20:74:d5:
                    2a:86:78:99:34:0b:ba:37:70:57:b6:a3:d3:76:d3:
                    1f:c3:19:9f:b2:bd:6a:d6:28:c7:5e:1b:49:3a:40:
                    20:63:54:e5:12:c9:ae:ae:99:ae:06:fc:52:73:d3:
                    d7:a3:ed:69:b8:e3:4a:b7:1d:97:e0:35:a3:87:e1:
                    41:52:5e:02:e7:a7:a9:a9:44:9f:71:c2:e5:10:cf:
                    84:f9:0f:84:fb:3f:ce:4b:e0:f6:6e:bd:bc:c6:c5:
                    e1:e9:02:c0:9c:c3:55:44:da:f6:0a:40:5f:73:12:
                    42:1a:0d:1d:63:be:8e:7d:76:78:1f:fe:a1:46:9e:
                    08:11:c0:53:0b:c8:4e:e0:78:22:e2:0b:94:1a:b5:
                    c2:7e:43:6e:83:02:12:fb:43:8f:57:21:d0:89:34:
                    19:85:d0:68:08:a0:5d:e2:ab:78:66:b2:f3:da:f2:
                    3d:cd:d6:14:25:83:3c:ec:1d:d4:3a:16:35:24:e9:
                    b5:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:52:0A:99:66:6C:78:C9:81:F6:7C:02:E3:D9:BB:B0:D2:29:B9:1B
            X509v3 Authority Key Identifier:
                keyid:D5:1C:E7:B1:B9:19:6E:F7:3B:FF:65:31:84:53:09:5C:92:5E:CF:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/b42aa0a9-4588-4f87-ab89-f3b9dc6107b6/0/D51CE7B1B9196EF73BFF65318453095C925ECF91.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D51CE7B1B9196EF73BFF65318453095C925ECF91.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b42aa0a9-4588-4f87-ab89-f3b9dc6107b6/0/D51CE7B1B9196EF73BFF65318453095C925ECF91.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:07:80:77:ad:26:f9:3c:fb:39:a5:50:40:9e:8f:66:59:30:
         1a:b1:36:11:74:c8:4f:40:ce:14:65:4e:ac:8d:ba:1d:96:ec:
         6d:9c:7b:6d:1f:9c:d5:14:b3:e1:a5:94:83:db:65:32:f3:b9:
         18:8e:26:73:1a:f6:af:0d:d2:77:43:af:b1:55:69:a2:df:17:
         8f:ec:57:2b:ec:75:3f:b6:3c:fd:5a:97:4d:29:de:0e:97:21:
         04:ec:90:56:2f:e3:dd:e3:54:0a:6a:cd:9d:e7:42:49:e1:57:
         c5:12:c3:05:ac:02:46:44:c9:24:1a:5d:60:19:07:6d:97:fc:
         b8:b3:66:d0:02:18:39:1b:48:00:12:9c:dd:1d:ae:bb:52:e5:
         42:7b:23:db:6a:02:26:ed:ae:23:d7:ae:6f:6d:61:d3:f7:f3:
         0a:40:8a:a1:88:10:eb:ae:da:14:42:76:cb:f9:d8:49:f7:7f:
         f2:1a:e7:37:02:14:9d:19:85:96:71:4c:4f:e7:bf:d0:90:9f:
         e2:b7:15:70:a8:26:26:96:17:56:50:8a:21:9c:13:22:b3:44:
         c2:8c:d7:95:6a:d7:fa:96:e1:02:b7:75:8a:7a:8a:f1:8b:ae:
         6f:23:9d:20:ee:32:92:c6:38:25:49:6a:39:6d:0b:ab:95:43:
         27:fb:73:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 20:41:57 2026 by rpki-client