This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/c0de6c82-d92b-4085-8893-d647791c277f/0/60BC307CE1DD1C8ED9D9C87D85E4D80064BB935C.mft
File:                     60BC307CE1DD1C8ED9D9C87D85E4D80064BB935C.mft (raw, json)
Hash identifier:          aQ1lCvAXwkAJwksY5JEZpUMswpkJwmP51Zl4THdJWRw=
Subject key identifier:   25:5E:80:04:84:95:2D:CB:BB:7D:EA:40:2B:59:67:05:C1:26:52:84
Authority key identifier: 60:BC:30:7C:E1:DD:1C:8E:D9:D9:C8:7D:85:E4:D8:00:64:BB:93:5C
Certificate issuer:       /CN=60BC307CE1DD1C8ED9D9C87D85E4D80064BB935C
Certificate serial:       2B26A86BE841349506067F5A4E4BE747D55F243F
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/60BC307CE1DD1C8ED9D9C87D85E4D80064BB935C.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/c0de6c82-d92b-4085-8893-d647791c277f/0/60BC307CE1DD1C8ED9D9C87D85E4D80064BB935C.mft
Manifest number:          0102
Signing time:             Fri 23 Jan 2026 16:10:53 +0000
Manifest this update:     Fri 23 Jan 2026 16:05:53 +0000
Manifest next update:     Mon 26 Jan 2026 18:04:53 +0000
Files and hashes:         1: 3130332e3138302e3234362e302f32332d3234203d3e20313439333731.roa (hash: VQEEEXuPlisinrBwT/1FJcAfMTnGRscgl2dxnDWnkuY=)
                          2: 60BC307CE1DD1C8ED9D9C87D85E4D80064BB935C.crl (hash: zROmoCwMN6TB3TdSBfeFkw0P2Uqwf6jJoOAK8H976iA=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/c0de6c82-d92b-4085-8893-d647791c277f/0/60BC307CE1DD1C8ED9D9C87D85E4D80064BB935C.crl
                          rsync://repo-rpki.idnic.net/repo/c0de6c82-d92b-4085-8893-d647791c277f/0/60BC307CE1DD1C8ED9D9C87D85E4D80064BB935C.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/60BC307CE1DD1C8ED9D9C87D85E4D80064BB935C.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 26 Jan 2026 18:04:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:26:a8:6b:e8:41:34:95:06:06:7f:5a:4e:4b:e7:47:d5:5f:24:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60BC307CE1DD1C8ED9D9C87D85E4D80064BB935C
        Validity
            Not Before: Jan 23 16:05:53 2026 GMT
            Not After : Jan 26 18:04:53 2026 GMT
        Subject: CN=255E800484952DCBBB7DEA402B596705C1265284
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:ce:f4:66:dd:2b:17:11:35:d5:9f:84:6c:24:
                    48:f5:1d:99:19:5f:60:a7:31:76:a9:a8:d3:0b:b0:
                    14:92:d6:a6:14:ad:72:e3:49:63:67:ee:4d:05:8c:
                    82:e4:47:bc:a6:97:01:ce:b2:3b:64:cf:02:f5:0d:
                    1e:93:bf:9b:fd:79:e4:fc:8a:ad:98:4e:62:47:76:
                    a4:98:8f:3f:e9:15:b2:a1:3b:28:a0:25:89:9b:80:
                    06:a2:13:f9:43:1e:2e:fa:5a:ec:f7:9c:c9:e0:a9:
                    d1:fe:20:6c:71:29:c5:52:14:29:ae:63:65:97:b2:
                    ed:2e:0c:d3:32:b4:2d:d6:04:2b:5b:7b:82:ba:3e:
                    e3:a7:ab:e7:34:04:12:19:a7:64:5c:27:05:89:1d:
                    21:20:c9:2b:90:7a:2a:6c:0c:0e:6d:72:e5:df:48:
                    76:91:32:4b:fc:e5:0c:07:42:e2:70:69:e0:2d:c1:
                    bc:12:a6:24:1d:c6:1f:c4:bd:f0:3e:5d:f2:fd:94:
                    78:fa:9b:9d:d6:4e:69:3c:b5:e3:80:6e:b0:2a:28:
                    b7:2a:11:c5:ca:e3:98:fd:cc:2f:61:a1:39:fa:e8:
                    c4:69:ef:e3:78:f3:d7:83:65:8a:2a:5e:b6:48:c4:
                    d9:32:06:7a:66:9d:36:ff:cf:2d:b2:2c:7e:34:84:
                    f5:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:5E:80:04:84:95:2D:CB:BB:7D:EA:40:2B:59:67:05:C1:26:52:84
            X509v3 Authority Key Identifier:
                keyid:60:BC:30:7C:E1:DD:1C:8E:D9:D9:C8:7D:85:E4:D8:00:64:BB:93:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/c0de6c82-d92b-4085-8893-d647791c277f/0/60BC307CE1DD1C8ED9D9C87D85E4D80064BB935C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/60BC307CE1DD1C8ED9D9C87D85E4D80064BB935C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c0de6c82-d92b-4085-8893-d647791c277f/0/60BC307CE1DD1C8ED9D9C87D85E4D80064BB935C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:e8:74:ef:e3:9c:72:f9:be:64:53:05:bb:92:a4:91:a9:5e:
         4a:b6:95:4e:63:a5:2a:5c:e4:fa:5b:59:4a:a1:de:68:52:64:
         af:dc:4f:b2:95:66:d9:4d:21:dd:72:74:d3:e5:c2:e4:c1:69:
         68:12:7d:f0:2d:14:f4:c7:06:16:0d:e6:7a:e5:40:1c:03:92:
         39:02:7b:5f:05:44:72:aa:94:fa:25:7a:a7:a8:c0:0d:05:c7:
         40:0d:70:0e:99:38:83:7d:27:80:95:16:ab:e9:b1:52:f8:aa:
         49:29:4f:9d:74:95:c6:24:ce:b9:c2:a6:69:80:03:72:f7:f6:
         88:2c:73:14:1f:2e:d4:63:d7:b8:a6:1a:d0:e0:e7:65:a3:af:
         2f:39:18:cf:3e:8b:2d:03:a5:52:a5:39:8a:9a:66:01:ef:5a:
         4f:dd:9a:7e:e9:64:af:40:a1:0b:33:d0:3a:97:c1:38:77:3e:
         ff:78:97:1a:24:6f:8b:d6:c9:b9:3c:cc:38:2b:70:87:d7:cd:
         84:bc:7b:db:0d:3b:d2:bb:f8:a7:22:ac:fd:bd:ce:37:6b:dc:
         be:6f:36:fc:fc:a7:f0:f4:fd:d3:0d:6f:28:fb:0f:f7:30:95:
         3e:00:05:d9:c1:93:3d:84:95:ef:19:ad:4a:a0:dc:b8:94:e5:
         ae:81:df:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:48:26 2026 by rpki-client