This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/bfc17cc2-f4a2-415e-8ea2-f9c47f75c4ca/0/C70A343932991281F91796DB87B011987603BBF4.mft
File:                     C70A343932991281F91796DB87B011987603BBF4.mft (raw, json)
Hash identifier:          h/Osne0HFEybOZ3shtf0g+kB1vRzyoGtsJlfeUf9XqU=
Subject key identifier:   BD:93:B7:0B:D4:D8:CF:93:6A:36:B7:EE:69:E7:41:FB:C8:C0:9B:D6
Authority key identifier: C7:0A:34:39:32:99:12:81:F9:17:96:DB:87:B0:11:98:76:03:BB:F4
Certificate issuer:       /CN=C70A343932991281F91796DB87B011987603BBF4
Certificate serial:       6676146C626853C65CD90401C82DAB082CAF088A
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C70A343932991281F91796DB87B011987603BBF4.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/bfc17cc2-f4a2-415e-8ea2-f9c47f75c4ca/0/C70A343932991281F91796DB87B011987603BBF4.mft
Manifest number:          0266
Signing time:             Sat 24 Jan 2026 20:41:41 +0000
Manifest this update:     Sat 24 Jan 2026 20:36:41 +0000
Manifest next update:     Wed 28 Jan 2026 05:41:41 +0000
Files and hashes:         1: 3130332e3138342e3132312e302f32342d3234203d3e20313439363633.roa (hash: 8nVSKMfLnOq7H4iVikz3GDhFqGNUP7VsOtUfQqLc1tA=)
                          2: 3130332e3138342e3132302e302f32342d3234203d3e20313439363633.roa (hash: LB2GT5oCXXjegdmKuSVpDwI+w3SC+aDFAkzGg3DL2X4=)
                          3: 3130332e3138342e3132302e302f32332d3233203d3e20313439363633.roa (hash: crc7GhKn9AnYAlLeRPgUvImKVvVRpJeq2KkcRuzsk7I=)
                          4: C70A343932991281F91796DB87B011987603BBF4.crl (hash: 7GioLcuwZ/6BBAlrVIKipXbUqrCGUALpW5dpjQ4rwYU=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/bfc17cc2-f4a2-415e-8ea2-f9c47f75c4ca/0/C70A343932991281F91796DB87B011987603BBF4.crl
                          rsync://repo-rpki.idnic.net/repo/bfc17cc2-f4a2-415e-8ea2-f9c47f75c4ca/0/C70A343932991281F91796DB87B011987603BBF4.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C70A343932991281F91796DB87B011987603BBF4.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 28 Jan 2026 05:41:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:76:14:6c:62:68:53:c6:5c:d9:04:01:c8:2d:ab:08:2c:af:08:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C70A343932991281F91796DB87B011987603BBF4
        Validity
            Not Before: Jan 24 20:36:41 2026 GMT
            Not After : Jan 28 05:41:41 2026 GMT
        Subject: CN=BD93B70BD4D8CF936A36B7EE69E741FBC8C09BD6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:23:bf:3d:26:dd:27:29:80:bb:d8:aa:7b:a2:
                    26:e7:ed:a3:18:53:68:fb:02:cb:25:d6:80:c7:c7:
                    7d:b8:05:e1:cc:c9:a6:68:ad:1b:0e:40:ca:c7:d1:
                    a4:c1:9c:8c:5b:e3:6b:0d:3d:02:c7:26:fe:f8:01:
                    26:41:b0:87:1c:0f:f6:7a:8f:42:33:e6:2b:71:6a:
                    07:58:84:76:87:58:56:63:a6:cf:f4:58:7a:63:71:
                    3b:76:af:59:8f:e2:ec:3b:6e:cb:90:9b:fc:c9:81:
                    64:2f:78:83:d2:00:4b:9f:91:40:9d:3d:e8:ce:09:
                    b4:2b:5f:00:97:62:47:c2:21:d6:33:31:e2:ce:c8:
                    43:b3:40:b2:fe:5a:3c:02:18:74:41:96:55:d3:08:
                    84:f7:39:dd:b1:15:52:2b:0a:65:f9:f1:63:60:d4:
                    63:cb:f9:da:dd:e3:c4:05:66:8d:86:4a:e4:eb:22:
                    1e:0e:72:1e:8f:e5:be:55:f3:72:40:c0:4e:83:7b:
                    49:bd:57:0c:e8:9e:a7:4a:03:15:b3:f4:b1:8c:71:
                    79:80:2c:e8:1d:62:52:33:55:a1:e5:38:71:56:27:
                    ee:7f:52:68:09:b5:2e:b8:17:cc:14:73:74:86:3a:
                    1d:7c:79:3c:c7:73:67:10:c0:f7:4f:3c:92:bf:1a:
                    47:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:93:B7:0B:D4:D8:CF:93:6A:36:B7:EE:69:E7:41:FB:C8:C0:9B:D6
            X509v3 Authority Key Identifier:
                keyid:C7:0A:34:39:32:99:12:81:F9:17:96:DB:87:B0:11:98:76:03:BB:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/bfc17cc2-f4a2-415e-8ea2-f9c47f75c4ca/0/C70A343932991281F91796DB87B011987603BBF4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C70A343932991281F91796DB87B011987603BBF4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bfc17cc2-f4a2-415e-8ea2-f9c47f75c4ca/0/C70A343932991281F91796DB87B011987603BBF4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:0c:90:30:38:14:c4:c2:b9:31:79:d0:3d:1f:f9:1f:07:07:
         2e:3a:8d:d7:3b:a5:e6:a0:85:09:00:e8:e4:f2:b7:ca:33:be:
         de:4b:2f:3a:12:e4:06:da:a6:47:58:a6:cb:d8:db:56:df:ef:
         8a:8b:89:3d:aa:fc:85:33:7e:df:50:33:9d:26:01:16:de:2a:
         fb:51:4a:20:33:1a:81:16:ab:be:b1:64:70:91:0f:8d:9d:a2:
         e4:1d:e0:e5:38:0e:24:e4:ad:54:8b:95:64:eb:4a:d6:1a:1d:
         60:12:6f:5d:c2:ad:37:08:c0:0d:65:99:e1:7d:23:e9:67:07:
         79:3a:02:29:85:41:a9:ae:cb:43:ff:a2:3f:f2:98:9d:99:86:
         86:e6:4a:3a:5e:2b:f2:b7:48:e2:00:fb:a8:f8:62:82:7d:25:
         23:3a:27:f9:b3:65:65:43:4d:78:bc:f6:da:61:46:35:70:65:
         98:84:b2:93:a1:10:0d:25:18:a0:c5:2c:9c:f4:b1:cc:10:98:
         a3:bb:4c:7c:26:85:bc:f9:20:da:63:8f:ac:bd:51:fe:63:b9:
         86:b0:fb:bc:8b:6e:50:fe:9f:a1:93:8b:b8:17:1c:ae:49:bb:
         0a:db:8a:f3:89:e1:85:ce:ce:23:4e:73:d9:15:17:37:90:18:
         44:18:bb:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 06:08:29 2026 by rpki-client