This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/c03802e2-03af-4dd0-8dce-54c28a72563d/0/30CE8572EA9DEDA805151BBD165E699D1191FED0.mft
File:                     30CE8572EA9DEDA805151BBD165E699D1191FED0.mft (raw, json)
Hash identifier:          xH5iPUugQ2TcgNAfq/OW9GBjPDUCtp4819oJmxbUaY8=
Subject key identifier:   70:FE:5D:DA:34:50:98:90:56:3D:2C:AD:FF:50:1C:A2:0F:C7:47:B7
Authority key identifier: 30:CE:85:72:EA:9D:ED:A8:05:15:1B:BD:16:5E:69:9D:11:91:FE:D0
Certificate issuer:       /CN=30CE8572EA9DEDA805151BBD165E699D1191FED0
Certificate serial:       6F83F30372006E50C49F9E6AEB4AADBA056467DB
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/30CE8572EA9DEDA805151BBD165E699D1191FED0.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/c03802e2-03af-4dd0-8dce-54c28a72563d/0/30CE8572EA9DEDA805151BBD165E699D1191FED0.mft
Manifest number:          01BD
Signing time:             Sat 24 Jan 2026 13:31:49 +0000
Manifest this update:     Sat 24 Jan 2026 13:26:49 +0000
Manifest next update:     Tue 27 Jan 2026 14:00:49 +0000
Files and hashes:         1: 3130332e3231312e3139362e302f32342d3234203d3e20313530393532.roa (hash: Q2j6s7F7V0sOCSPl3aHs6rPupunQzCX/dgkjx2YSfjU=)
                          2: 30CE8572EA9DEDA805151BBD165E699D1191FED0.crl (hash: vIxMGToz3/j800034Xsu1pudOQ9gdap2vtF7GAp4ec0=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/c03802e2-03af-4dd0-8dce-54c28a72563d/0/30CE8572EA9DEDA805151BBD165E699D1191FED0.crl
                          rsync://repo-rpki.idnic.net/repo/c03802e2-03af-4dd0-8dce-54c28a72563d/0/30CE8572EA9DEDA805151BBD165E699D1191FED0.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/30CE8572EA9DEDA805151BBD165E699D1191FED0.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 27 Jan 2026 14:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:83:f3:03:72:00:6e:50:c4:9f:9e:6a:eb:4a:ad:ba:05:64:67:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30CE8572EA9DEDA805151BBD165E699D1191FED0
        Validity
            Not Before: Jan 24 13:26:49 2026 GMT
            Not After : Jan 27 14:00:49 2026 GMT
        Subject: CN=70FE5DDA34509890563D2CADFF501CA20FC747B7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:f3:8a:9b:9d:26:15:92:05:b7:77:87:71:b2:
                    15:49:1d:66:ca:2b:3c:75:35:f5:72:d4:9e:80:d2:
                    3d:03:0b:f8:28:db:a0:2a:d5:dd:0b:a1:bb:60:2d:
                    ba:35:90:9b:ad:8e:4f:d3:dd:85:98:50:d1:a8:26:
                    07:5e:73:bf:b3:78:3c:03:7e:59:ce:fc:54:8d:68:
                    10:2a:b5:fd:1e:f0:1a:01:94:62:96:d4:e1:2a:97:
                    8f:8f:a3:39:fd:49:59:44:f0:c6:2e:90:19:4b:4d:
                    a8:c6:21:84:66:54:9a:a4:04:fd:55:ce:96:39:f8:
                    07:b3:ed:c5:2c:e4:a9:71:a7:d7:e6:f1:66:96:7d:
                    43:4c:17:8e:4a:c8:df:35:e2:ca:d7:98:01:ed:55:
                    ba:10:3e:4f:61:0d:45:cc:db:7b:0f:86:8b:30:82:
                    03:74:2e:7d:46:88:b5:04:99:60:2a:d1:77:6e:5d:
                    0c:cb:f9:c3:3d:a3:88:8f:33:6d:37:ac:e6:90:c2:
                    3a:ab:81:6b:c2:e7:56:2f:33:2d:d1:e1:97:b3:de:
                    46:9c:fa:fd:cf:4f:7b:e9:61:e5:ed:8e:25:9b:98:
                    86:3b:5e:79:ca:cd:4f:6e:d4:4e:d8:39:b9:cc:39:
                    d0:48:e1:44:4a:92:68:00:b3:cf:ae:c0:06:a3:ce:
                    aa:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:FE:5D:DA:34:50:98:90:56:3D:2C:AD:FF:50:1C:A2:0F:C7:47:B7
            X509v3 Authority Key Identifier:
                keyid:30:CE:85:72:EA:9D:ED:A8:05:15:1B:BD:16:5E:69:9D:11:91:FE:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/c03802e2-03af-4dd0-8dce-54c28a72563d/0/30CE8572EA9DEDA805151BBD165E699D1191FED0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/30CE8572EA9DEDA805151BBD165E699D1191FED0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c03802e2-03af-4dd0-8dce-54c28a72563d/0/30CE8572EA9DEDA805151BBD165E699D1191FED0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:50:84:a1:74:85:2e:7b:03:fd:7a:47:08:d3:f5:77:74:78:
         10:a3:5f:d9:bc:9d:0b:0a:b9:73:14:16:54:b6:79:b4:c1:df:
         3f:3f:e3:f8:d1:d4:52:af:8b:c6:6d:cc:6f:17:28:79:4c:8c:
         ce:1e:a8:4c:d4:3d:ab:ed:58:8b:e8:7c:ee:b5:7b:24:b4:dc:
         cf:16:eb:19:4c:5b:12:1c:1d:1b:fd:2a:d0:29:4f:be:28:e3:
         72:5f:e5:0b:68:71:46:7f:b7:48:e0:af:06:43:e3:7b:7a:ac:
         ec:8b:4c:d5:a2:2b:54:df:84:92:e9:97:ee:71:d6:d9:26:af:
         75:79:56:90:a5:6f:06:f9:2b:33:fa:6c:84:37:44:d1:18:c0:
         1e:58:13:f2:52:df:cf:05:87:e8:6c:25:ad:d4:8c:06:41:96:
         0e:77:e6:7b:20:21:7b:9b:42:d6:8c:2b:72:73:07:b5:42:32:
         81:76:47:a5:52:11:4e:f3:d5:98:b4:df:76:34:52:22:b6:8f:
         f7:c0:34:4d:50:ea:60:86:9b:95:de:af:9e:08:bd:a7:43:65:
         69:a0:43:83:0c:e5:0b:cf:e4:f5:46:70:b2:50:7c:6d:00:d4:
         11:5f:ba:bd:8b:4e:88:2f:74:36:32:93:e4:80:23:8c:37:04:
         02:e9:98:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:48:21 2026 by rpki-client