This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/c4431751-664b-47a0-a520-d97f5c12618c/0/690E7BC726C787991D438BDDB48990A7A17D8D15.mft
File:                     690E7BC726C787991D438BDDB48990A7A17D8D15.mft (raw, json)
Hash identifier:          CETtw7oNA/zBUNUfyiYY/EuZyq+4jTSk4jQuH7y2m9g=
Subject key identifier:   3D:96:14:1B:E6:F6:4B:F6:30:8A:43:83:22:9E:15:6C:24:C9:A6:7B
Authority key identifier: 69:0E:7B:C7:26:C7:87:99:1D:43:8B:DD:B4:89:90:A7:A1:7D:8D:15
Certificate issuer:       /CN=690E7BC726C787991D438BDDB48990A7A17D8D15
Certificate serial:       7EF5EAE54A08E6F8F3A5CC7602DB1529969EB3D5
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/690E7BC726C787991D438BDDB48990A7A17D8D15.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/c4431751-664b-47a0-a520-d97f5c12618c/0/690E7BC726C787991D438BDDB48990A7A17D8D15.mft
Manifest number:          0168
Signing time:             Sat 24 Jan 2026 19:51:42 +0000
Manifest this update:     Sat 24 Jan 2026 19:46:42 +0000
Manifest next update:     Wed 28 Jan 2026 05:30:42 +0000
Files and hashes:         1: 3130332e32362e3230382e302f32322d3234203d3e203138313033.roa (hash: 6bqd3P1jvnQnjsCjRtIIfzvZLlg5nv5q33H6TglsIt4=)
                          2: 690E7BC726C787991D438BDDB48990A7A17D8D15.crl (hash: GyvWgl1I3C2KUfNmFlbgdVysMKQn7kbQXtZDmDl5jzA=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/c4431751-664b-47a0-a520-d97f5c12618c/0/690E7BC726C787991D438BDDB48990A7A17D8D15.crl
                          rsync://repo-rpki.idnic.net/repo/c4431751-664b-47a0-a520-d97f5c12618c/0/690E7BC726C787991D438BDDB48990A7A17D8D15.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/690E7BC726C787991D438BDDB48990A7A17D8D15.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 28 Jan 2026 05:30:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:f5:ea:e5:4a:08:e6:f8:f3:a5:cc:76:02:db:15:29:96:9e:b3:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=690E7BC726C787991D438BDDB48990A7A17D8D15
        Validity
            Not Before: Jan 24 19:46:42 2026 GMT
            Not After : Jan 28 05:30:42 2026 GMT
        Subject: CN=3D96141BE6F64BF6308A4383229E156C24C9A67B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:12:17:e2:df:ee:08:b6:d0:c0:df:3d:18:f6:
                    52:7c:94:a7:92:60:dc:98:d0:73:71:c7:57:6a:44:
                    76:28:29:2f:18:f7:30:59:e0:1c:9a:75:e5:d7:71:
                    d3:d2:62:a8:55:29:68:cb:5b:84:d4:cc:47:da:3d:
                    1a:b8:79:85:72:9e:a3:42:3a:e6:b5:9e:13:88:6b:
                    5d:82:8e:8b:61:68:ed:53:8a:ac:d4:ba:48:76:1a:
                    6e:20:d2:32:d4:00:20:b5:2c:35:c9:fe:ba:74:cf:
                    2e:26:f3:f5:b0:d9:0a:48:31:8e:08:18:ef:e5:70:
                    93:c2:5e:d6:30:09:9a:94:8b:db:e0:d3:ff:68:f5:
                    79:00:c5:3d:1b:7b:c2:90:36:49:22:f6:ce:ee:dc:
                    d5:8e:81:af:c3:36:9d:03:d7:e5:0c:f6:25:14:51:
                    ea:41:e3:e7:43:b4:7a:9e:b9:27:13:e6:cf:3f:ea:
                    7f:e7:a9:98:01:98:ea:05:19:53:19:e9:55:05:c0:
                    e5:b0:9b:4f:bd:d8:6f:bd:88:7d:a7:c2:b1:25:dc:
                    c6:0a:8f:ca:07:77:1b:b3:7b:86:c7:5e:e9:3f:25:
                    d0:31:1d:d5:31:c9:98:73:4f:8e:fe:89:18:15:2d:
                    13:8c:3e:cd:37:e3:52:4e:0b:05:2c:99:dc:91:b9:
                    5f:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:96:14:1B:E6:F6:4B:F6:30:8A:43:83:22:9E:15:6C:24:C9:A6:7B
            X509v3 Authority Key Identifier:
                keyid:69:0E:7B:C7:26:C7:87:99:1D:43:8B:DD:B4:89:90:A7:A1:7D:8D:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/c4431751-664b-47a0-a520-d97f5c12618c/0/690E7BC726C787991D438BDDB48990A7A17D8D15.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/690E7BC726C787991D438BDDB48990A7A17D8D15.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c4431751-664b-47a0-a520-d97f5c12618c/0/690E7BC726C787991D438BDDB48990A7A17D8D15.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:d6:3e:e0:dd:56:52:b0:4d:1b:32:7b:3a:0f:2e:59:ba:30:
         e9:63:ca:7b:8b:8a:9b:59:21:67:ae:d9:9e:90:0b:57:e2:b9:
         f6:11:02:92:47:37:ac:1e:9b:a6:00:fc:0e:5a:62:e2:22:2e:
         9a:b8:93:cc:f0:81:b0:2e:cb:59:cb:0e:68:b7:1b:54:30:5b:
         65:03:be:20:25:9a:72:38:5c:34:0c:07:3d:35:81:c8:94:7e:
         8e:0d:0d:09:7e:21:ac:f3:6e:76:cf:10:61:1a:d7:0e:78:4e:
         78:dc:9d:33:f4:67:4d:83:d0:8c:d5:45:05:6e:66:77:9b:ae:
         25:7f:34:26:a4:98:77:71:21:0c:33:18:8d:e3:16:a3:f6:a7:
         b0:fa:34:2a:ad:a3:31:8d:fd:49:07:42:b4:81:11:c9:b9:8f:
         a6:e2:79:91:c9:ab:75:29:ba:1d:b4:ce:41:b5:e6:a9:01:c9:
         be:08:64:9e:e8:c1:f0:f4:e7:62:21:f1:2a:5a:47:29:4d:f8:
         a6:9e:95:be:1a:05:5c:55:9c:57:ce:d9:a5:a5:3a:b2:48:e0:
         f5:2f:c2:96:21:3b:35:1e:33:60:c2:13:2e:78:48:b8:46:44:
         04:67:d2:d9:4a:f7:34:94:0e:a8:3c:63:52:36:66:38:e9:7f:
         95:c1:3d:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 09:29:09 2026 by rpki-client