This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/b5355c5a-efc8-48f7-902f-6e31fc42995a/0/6E1235C8FC3F2EF6D9D245D0607AA6D763C5D4E7.mft
File:                     6E1235C8FC3F2EF6D9D245D0607AA6D763C5D4E7.mft (raw, json)
Hash identifier:          YM2OVAuf6c8pHReK/osGT3PjCpFZWo/mZiIIuTlfmwo=
Subject key identifier:   C4:FB:EF:6E:73:17:8D:05:10:9E:F5:4E:3D:57:2D:34:49:66:C8:90
Authority key identifier: 6E:12:35:C8:FC:3F:2E:F6:D9:D2:45:D0:60:7A:A6:D7:63:C5:D4:E7
Certificate issuer:       /CN=6E1235C8FC3F2EF6D9D245D0607AA6D763C5D4E7
Certificate serial:       79B35BB835CD97AB8CB27F21810CC30ECA482025
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6E1235C8FC3F2EF6D9D245D0607AA6D763C5D4E7.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/b5355c5a-efc8-48f7-902f-6e31fc42995a/0/6E1235C8FC3F2EF6D9D245D0607AA6D763C5D4E7.mft
Manifest number:          02AA
Signing time:             Sat 24 Jan 2026 06:11:37 +0000
Manifest this update:     Sat 24 Jan 2026 06:06:37 +0000
Manifest next update:     Tue 27 Jan 2026 17:29:37 +0000
Files and hashes:         1: 323430363a386563303a3a2f33322d3332203d3e203435373031.roa (hash: MzuVDKjjbWuffKhWQ0E6XJFxJ4Xptq+EBiCyvozexRA=)
                          2: 3130332e3135362e3232362e302f32342d3234203d3e203435373031.roa (hash: OkMPQza0tirm+lkEvMo+wQnirw7z1P7FKUQAEdz/Gek=)
                          3: 6E1235C8FC3F2EF6D9D245D0607AA6D763C5D4E7.crl (hash: t1HiWHcyTdDzgiGmw0FaT1ZCUDKJCP+xJz0xuC5QE9o=)
                          4: 3130332e3135362e3232372e302f32342d3234203d3e203435373031.roa (hash: znHE6AD5Lm1YZC2YGdLN2BPXoosYaoUkOA2ryqU5ZV8=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/b5355c5a-efc8-48f7-902f-6e31fc42995a/0/6E1235C8FC3F2EF6D9D245D0607AA6D763C5D4E7.crl
                          rsync://repo-rpki.idnic.net/repo/b5355c5a-efc8-48f7-902f-6e31fc42995a/0/6E1235C8FC3F2EF6D9D245D0607AA6D763C5D4E7.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6E1235C8FC3F2EF6D9D245D0607AA6D763C5D4E7.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 27 Jan 2026 17:29:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:b3:5b:b8:35:cd:97:ab:8c:b2:7f:21:81:0c:c3:0e:ca:48:20:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6E1235C8FC3F2EF6D9D245D0607AA6D763C5D4E7
        Validity
            Not Before: Jan 24 06:06:37 2026 GMT
            Not After : Jan 27 17:29:37 2026 GMT
        Subject: CN=C4FBEF6E73178D05109EF54E3D572D344966C890
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:66:aa:3e:6f:16:70:eb:b1:41:93:f4:d2:ef:
                    65:25:09:f8:eb:7d:f6:18:e1:69:0f:ae:13:20:25:
                    84:80:19:16:1a:f7:1f:fb:42:4d:ae:1a:de:cc:c8:
                    a2:36:b5:f1:85:fa:8a:b1:f4:b2:10:eb:ed:8d:10:
                    53:10:80:b5:c8:bc:ff:77:7a:6f:46:b4:f5:86:97:
                    11:21:c4:2d:03:7d:55:99:71:6b:b9:3c:58:61:d1:
                    5e:e0:0a:54:c8:d1:38:1b:64:da:85:74:38:c0:ca:
                    8a:56:aa:72:56:43:ef:1a:e3:f0:6b:7a:7a:3c:48:
                    b7:2f:4f:36:e2:0a:a4:51:86:5e:11:68:3b:4b:fb:
                    4b:9f:59:10:d5:4e:a3:a7:dd:35:b7:b3:5d:02:fc:
                    c3:c6:02:ce:18:53:73:fa:fb:8f:04:bc:ce:2c:28:
                    f5:bd:ed:89:61:84:ca:be:96:b6:d6:2d:ae:be:4a:
                    07:63:b9:d2:e2:06:d8:83:05:89:ae:0d:9b:9b:1b:
                    ac:3c:28:91:71:5b:86:d5:71:ee:6d:2d:45:dd:eb:
                    fb:f6:7f:e4:81:89:ab:39:9f:4d:98:3a:5f:c8:36:
                    28:46:35:2b:ee:9d:f3:8d:7a:84:d4:ec:a0:3e:1b:
                    d6:39:97:46:df:95:5c:42:b6:ab:2f:84:b4:e1:0f:
                    cf:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:FB:EF:6E:73:17:8D:05:10:9E:F5:4E:3D:57:2D:34:49:66:C8:90
            X509v3 Authority Key Identifier:
                keyid:6E:12:35:C8:FC:3F:2E:F6:D9:D2:45:D0:60:7A:A6:D7:63:C5:D4:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/b5355c5a-efc8-48f7-902f-6e31fc42995a/0/6E1235C8FC3F2EF6D9D245D0607AA6D763C5D4E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6E1235C8FC3F2EF6D9D245D0607AA6D763C5D4E7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b5355c5a-efc8-48f7-902f-6e31fc42995a/0/6E1235C8FC3F2EF6D9D245D0607AA6D763C5D4E7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:5b:a4:75:dc:ad:f4:31:4b:bd:f5:88:9d:c9:05:a5:95:ef:
         49:12:33:d8:2d:55:b4:5e:7a:f6:6f:0b:5d:5d:5c:0d:66:b4:
         9a:fe:45:62:75:a5:17:74:ae:3f:7a:ee:a0:c6:ca:54:93:a6:
         f8:33:1e:94:b6:45:8b:d4:1a:e1:c1:06:3e:c4:48:d1:fa:0e:
         75:e7:72:c1:f2:ef:7a:bf:aa:3f:c4:59:39:d7:36:92:9e:c2:
         56:a9:90:f3:86:84:88:94:0d:2a:3d:92:97:16:45:5f:d6:e1:
         b5:83:00:d7:ed:17:9d:d1:3e:c5:9c:5d:61:7a:f0:61:fa:6d:
         3b:57:57:a7:87:9c:32:90:c5:55:38:17:33:f4:66:c9:49:d9:
         e8:ac:ee:1a:21:5b:94:fd:ce:8e:24:72:dc:30:a8:5a:7c:22:
         14:8e:56:53:65:20:a6:80:8b:92:07:ac:75:77:d3:fa:db:f0:
         f8:19:4d:6f:d5:b7:f4:53:d9:a2:9b:02:82:58:fa:f5:cf:59:
         84:85:84:31:58:ca:03:60:be:38:b4:4b:91:b7:a5:a0:0e:5b:
         d3:f2:7e:24:0d:7d:e4:94:50:97:f4:91:5e:fc:c1:5d:72:9e:
         34:21:19:0e:31:02:21:04:1d:a1:a7:48:2e:af:01:10:98:af:
         63:82:07:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:48:11 2026 by rpki-client