This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/bf0c7a37-5d19-4c5c-9301-a14a7f185c92/0/A708865394D992A01D1736F0AB500E24889B7F34.mft
File:                     A708865394D992A01D1736F0AB500E24889B7F34.mft (raw, json)
Hash identifier:          Lu3HBmCUuRUXMRnGAHBprtK3LWsi06vF2dyW5NM2CKA=
Subject key identifier:   72:10:6D:EE:12:2F:41:86:C7:6A:F2:A9:71:79:F6:61:46:F3:8D:93
Authority key identifier: A7:08:86:53:94:D9:92:A0:1D:17:36:F0:AB:50:0E:24:88:9B:7F:34
Certificate issuer:       /CN=A708865394D992A01D1736F0AB500E24889B7F34
Certificate serial:       464BBB10E7E7ED303C95B396D4CB75C6FE78133B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A708865394D992A01D1736F0AB500E24889B7F34.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/bf0c7a37-5d19-4c5c-9301-a14a7f185c92/0/A708865394D992A01D1736F0AB500E24889B7F34.mft
Manifest number:          019A
Signing time:             Sun 25 Jan 2026 13:50:52 +0000
Manifest this update:     Sun 25 Jan 2026 13:45:52 +0000
Manifest next update:     Wed 28 Jan 2026 18:54:52 +0000
Files and hashes:         1: A708865394D992A01D1736F0AB500E24889B7F34.crl (hash: WgFMUrrbxQ8KUxhjous7AMs6ObiirD2Wj59NLBGdUvM=)
                          2: 3130332e3234322e31302e302f32332d3234203d3e20313336303532.roa (hash: yL0gLS/lvq9j5h+L42yAYYctUM1Kqtv5bl12En0Z8dY=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/bf0c7a37-5d19-4c5c-9301-a14a7f185c92/0/A708865394D992A01D1736F0AB500E24889B7F34.crl
                          rsync://repo-rpki.idnic.net/repo/bf0c7a37-5d19-4c5c-9301-a14a7f185c92/0/A708865394D992A01D1736F0AB500E24889B7F34.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A708865394D992A01D1736F0AB500E24889B7F34.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 28 Jan 2026 14:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:4b:bb:10:e7:e7:ed:30:3c:95:b3:96:d4:cb:75:c6:fe:78:13:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A708865394D992A01D1736F0AB500E24889B7F34
        Validity
            Not Before: Jan 25 13:45:52 2026 GMT
            Not After : Jan 28 18:54:52 2026 GMT
        Subject: CN=72106DEE122F4186C76AF2A97179F66146F38D93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:58:ad:7b:7f:b2:22:28:68:e3:fc:be:3c:e7:
                    f2:4b:51:53:39:09:c9:1e:4c:df:ab:e7:c3:f1:24:
                    35:27:97:66:d4:17:69:e4:3d:36:05:25:c1:45:11:
                    3a:c9:b2:05:b5:6b:f6:14:45:ec:df:f9:38:f7:d0:
                    94:c5:a1:d2:1d:82:54:9a:a1:da:ea:cf:b2:71:0e:
                    a3:92:0f:e5:0f:07:d9:f1:59:4f:4c:52:16:19:3b:
                    92:34:87:30:41:66:c2:b4:40:5f:ae:0f:f2:fa:be:
                    8a:55:9e:c8:b6:82:fa:63:f5:45:dc:4d:af:2c:9d:
                    3c:7b:71:88:95:56:22:65:94:f1:20:5e:45:46:fb:
                    9f:97:74:56:48:29:ab:d8:ac:bc:87:6c:e9:d4:33:
                    6b:69:4a:c8:4d:5d:7e:74:fe:26:70:52:e6:60:5a:
                    de:1a:ca:9e:2e:98:92:51:1f:17:b1:08:4d:78:76:
                    db:da:7b:1e:7c:6d:2c:67:e0:8f:32:c7:28:73:0a:
                    73:d3:28:4d:bc:72:e2:43:d2:68:de:3e:b5:73:36:
                    a1:9e:da:90:2a:0a:85:d6:c0:c7:53:99:ce:11:cc:
                    38:02:66:81:28:e3:19:39:88:95:b5:12:4c:bf:ab:
                    0f:69:8d:b0:63:78:0e:94:53:41:00:35:f2:7b:45:
                    2b:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:10:6D:EE:12:2F:41:86:C7:6A:F2:A9:71:79:F6:61:46:F3:8D:93
            X509v3 Authority Key Identifier:
                keyid:A7:08:86:53:94:D9:92:A0:1D:17:36:F0:AB:50:0E:24:88:9B:7F:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/bf0c7a37-5d19-4c5c-9301-a14a7f185c92/0/A708865394D992A01D1736F0AB500E24889B7F34.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A708865394D992A01D1736F0AB500E24889B7F34.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bf0c7a37-5d19-4c5c-9301-a14a7f185c92/0/A708865394D992A01D1736F0AB500E24889B7F34.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:a6:cb:10:bd:80:dc:34:e8:74:ee:c5:4b:23:ac:84:6b:bc:
         6a:a5:2a:c7:7a:8b:72:44:09:eb:16:9e:65:9f:0f:33:39:e9:
         5b:e1:a8:8e:79:11:3a:82:aa:50:c0:34:0a:92:61:59:59:c9:
         f8:c8:08:9e:56:f0:a8:9c:4d:6b:24:a4:b7:97:65:d3:55:b1:
         5d:4b:78:ed:8c:d1:3f:3f:32:da:a8:72:a3:af:6e:b6:6e:8c:
         bc:39:c1:89:2d:1f:f9:f4:c6:da:90:c6:41:c6:c8:8c:d8:8f:
         80:68:76:6a:78:4a:3b:8b:33:d3:21:54:7d:f4:fb:45:81:18:
         20:ac:de:30:5f:dd:dc:05:93:e9:60:c9:6f:06:00:72:03:e5:
         98:15:65:67:8f:7d:a8:fb:df:93:49:70:1a:2e:55:2e:f1:53:
         8f:2a:13:f1:51:80:aa:91:d6:28:0a:28:eb:30:ac:c2:be:9f:
         8d:f6:6f:ef:73:a2:d8:88:61:ff:46:75:c2:31:e0:cc:41:36:
         2a:6c:b2:cc:a8:3d:e5:e7:5d:95:5f:29:6d:d3:5a:ce:96:3d:
         07:f2:9e:52:23:69:43:c6:86:97:06:23:61:41:1c:04:29:7f:
         9e:2c:e5:f0:71:54:3f:c1:04:86:0e:de:df:5f:be:5e:1c:4e:
         18:48:44:15
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIURku7EOfn7TA8lbOW1Mt1xv54EzswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTcwODg2NTM5NEQ5OTJBMDFEMTczNkYwQUI1MDBFMjQ4
ODlCN0YzNDAeFw0yNjAxMjUxMzQ1NTJaFw0yNjAxMjgxODU0NTJaMDMxMTAvBgNV
BAMTKDcyMTA2REVFMTIyRjQxODZDNzZBRjJBOTcxNzlGNjYxNDZGMzhEOTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWWK17f7IiKGjj/L485/JLUVM5
CckeTN+r58PxJDUnl2bUF2nkPTYFJcFFETrJsgW1a/YURezf+Tj30JTFodIdglSa
odrqz7JxDqOSD+UPB9nxWU9MUhYZO5I0hzBBZsK0QF+uD/L6vopVnsi2gvpj9UXc
Ta8snTx7cYiVViJllPEgXkVG+5+XdFZIKavYrLyHbOnUM2tpSshNXX50/iZwUuZg
Wt4ayp4umJJRHxexCE14dtvaex58bSxn4I8yxyhzCnPTKE28cuJD0mjePrVzNqGe
2pAqCoXWwMdTmc4RzDgCZoEo4xk5iJW1Eky/qw9pjbBjeA6UU0EANfJ7RSvTAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUchBt7hIvQYbHavKpcXn2YUbzjZMwHwYDVR0j
BBgwFoAUpwiGU5TZkqAdFzbwq1AOJIibfzQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i
ZjBjN2EzNy01ZDE5LTRjNWMtOTMwMS1hMTRhN2YxODVjOTIvMC9BNzA4ODY1Mzk0
RDk5MkEwMUQxNzM2RjBBQjUwMEUyNDg4OUI3RjM0LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQTcwODg2NTM5NEQ5OTJBMDFEMTczNkYwQUI1MDBFMjQ4ODlC
N0YzNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmYwYzdhMzctNWQxOS00YzVjLTkz
MDEtYTE0YTdmMTg1YzkyLzAvQTcwODg2NTM5NEQ5OTJBMDFEMTczNkYwQUI1MDBF
MjQ4ODlCN0YzNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAGSmyxC9gNw06HTuxUsjrIRrvGqlKsd6i3JE
CesWnmWfDzM56VvhqI55ETqCqlDANAqSYVlZyfjICJ5W8KicTWskpLeXZdNVsV1L
eO2M0T8/MtqocqOvbrZujLw5wYktH/n0xtqQxkHGyIzYj4Bodmp4SjuLM9MhVH30
+0WBGCCs3jBf3dwFk+lgyW8GAHID5ZgVZWePfaj735NJcBouVS7xU48qE/FRgKqR
1igKKOswrMK+n432b+9zotiIYf9GdcIx4MxBNipsssyoPeXnXZVfKW3TWs6WPQfy
nlIjaUPGhpcGI2FBHAQpf54s5fBxVD/BBIYO3t9fvl4cThhIRBU=
-----END CERTIFICATE-----
Generated at Sun Jan 25 23:20:44 2026 by rpki-client