This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/c4f07987-b8ec-444a-9b44-291011ff46a6/0/94159FAF0A979502CAB6C5ADDCAE4CFDECDEEDEF.mft
File:                     94159FAF0A979502CAB6C5ADDCAE4CFDECDEEDEF.mft (raw, json)
Hash identifier:          VG7kJEQGWtf5ThwPb92lubUML7DvwfunuIbsK3KWZZE=
Subject key identifier:   2B:71:75:07:44:BD:64:4E:04:46:E8:CF:68:21:84:99:30:56:5A:92
Authority key identifier: 94:15:9F:AF:0A:97:95:02:CA:B6:C5:AD:DC:AE:4C:FD:EC:DE:ED:EF
Certificate issuer:       /CN=94159FAF0A979502CAB6C5ADDCAE4CFDECDEEDEF
Certificate serial:       448F6F81728253592CFE77E742B65C78E2B7B678
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/94159FAF0A979502CAB6C5ADDCAE4CFDECDEEDEF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/c4f07987-b8ec-444a-9b44-291011ff46a6/0/94159FAF0A979502CAB6C5ADDCAE4CFDECDEEDEF.mft
Manifest number:          EE
Signing time:             Sat 24 Jan 2026 07:00:39 +0000
Manifest this update:     Sat 24 Jan 2026 06:55:39 +0000
Manifest next update:     Tue 27 Jan 2026 13:32:39 +0000
Files and hashes:         1: 3130332e3135322e3233322e302f32332d3234203d3e20313430343436.roa (hash: w8USKPwJWUmAD2EnMdpXJB1C3F3hUfqedwFlox0zn3A=)
                          2: 94159FAF0A979502CAB6C5ADDCAE4CFDECDEEDEF.crl (hash: nT9/sU1bYASBegKmSkKMoVuz8fRcxknx+Ft3ixvt7fM=)
                          3: 323030313a6466343a323038303a3a2f34382d3438203d3e20313430343436.roa (hash: /sVHS2YVPGN4I7pjlv0CumuB8iSOyLfbW32z22cHMqg=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/c4f07987-b8ec-444a-9b44-291011ff46a6/0/94159FAF0A979502CAB6C5ADDCAE4CFDECDEEDEF.crl
                          rsync://repo-rpki.idnic.net/repo/c4f07987-b8ec-444a-9b44-291011ff46a6/0/94159FAF0A979502CAB6C5ADDCAE4CFDECDEEDEF.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/94159FAF0A979502CAB6C5ADDCAE4CFDECDEEDEF.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 27 Jan 2026 13:32:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:8f:6f:81:72:82:53:59:2c:fe:77:e7:42:b6:5c:78:e2:b7:b6:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=94159FAF0A979502CAB6C5ADDCAE4CFDECDEEDEF
        Validity
            Not Before: Jan 24 06:55:39 2026 GMT
            Not After : Jan 27 13:32:39 2026 GMT
        Subject: CN=2B71750744BD644E0446E8CF6821849930565A92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:f8:5f:df:19:62:c5:6f:99:ef:7d:2c:e3:75:
                    5c:99:33:57:9f:a8:0f:47:c4:d8:57:54:5f:23:3d:
                    aa:91:ee:90:f1:ad:69:9b:ab:26:0e:47:7f:85:76:
                    94:45:d8:1a:dd:58:50:d5:73:ef:06:c8:ed:78:95:
                    6e:74:82:42:84:5a:b1:2a:a1:4d:0d:37:8f:a5:46:
                    50:20:82:b4:24:43:46:80:e9:16:28:2e:5e:d8:e7:
                    67:a6:58:ca:82:54:10:4f:0d:4d:54:d5:41:c7:f3:
                    b4:18:66:5b:3e:52:90:11:06:f7:e0:65:6a:5c:6d:
                    7d:11:6a:3c:9d:83:79:75:49:d2:41:1b:01:a8:93:
                    62:67:1e:e6:5a:b9:38:42:8d:a6:ac:02:de:29:19:
                    68:d9:d3:cf:4e:dc:ca:22:00:46:68:af:fd:d5:51:
                    ab:25:f1:a3:67:52:9c:ef:ae:12:88:09:73:a9:b4:
                    93:96:ce:23:a6:71:54:db:8d:e3:2d:8d:63:24:66:
                    f4:09:08:72:69:52:09:df:79:ad:06:c3:40:62:3f:
                    4d:3e:d7:b1:6f:fd:ab:be:37:03:cd:eb:64:3d:56:
                    5d:8a:eb:9b:0b:f1:6e:bc:d0:4e:e8:4d:30:33:1b:
                    c4:c6:4f:06:55:6b:07:40:e1:88:a0:e7:e4:fa:92:
                    40:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:71:75:07:44:BD:64:4E:04:46:E8:CF:68:21:84:99:30:56:5A:92
            X509v3 Authority Key Identifier:
                keyid:94:15:9F:AF:0A:97:95:02:CA:B6:C5:AD:DC:AE:4C:FD:EC:DE:ED:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/c4f07987-b8ec-444a-9b44-291011ff46a6/0/94159FAF0A979502CAB6C5ADDCAE4CFDECDEEDEF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/94159FAF0A979502CAB6C5ADDCAE4CFDECDEEDEF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c4f07987-b8ec-444a-9b44-291011ff46a6/0/94159FAF0A979502CAB6C5ADDCAE4CFDECDEEDEF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:90:a8:9b:31:01:f1:45:95:a3:50:b7:fc:6a:00:61:3d:2b:
         aa:8d:40:47:23:97:29:a5:0f:a3:4d:38:0e:3c:b6:90:e4:64:
         03:d8:6f:97:ee:1d:29:9e:ca:a2:94:6e:99:d7:55:53:f7:9c:
         ba:18:16:0e:68:b9:f5:73:ff:70:36:cc:79:b6:dc:9c:74:b0:
         94:6a:c1:84:36:8a:c6:21:cf:c3:f6:27:62:96:a1:43:4b:a3:
         2c:11:5c:42:bf:a0:90:c5:12:ce:56:34:ff:06:9f:dd:ea:82:
         ab:5f:33:be:62:ef:2f:47:6c:17:23:67:91:89:0f:23:be:ea:
         da:df:d0:3a:68:19:8a:da:2e:31:e0:e6:fd:6a:a3:0e:49:0a:
         5d:eb:e6:b3:b4:60:80:48:7d:f6:b7:59:06:c6:fb:d7:0a:ed:
         9e:ba:1f:e0:c3:fb:d1:de:7a:b4:09:fb:32:10:ee:04:3c:26:
         31:74:04:86:a6:4f:af:bc:60:34:27:41:5f:df:18:3d:01:87:
         16:18:15:93:fa:9d:61:68:2c:36:e1:b5:85:8c:40:45:30:ee:
         a0:4e:3b:58:7c:89:c2:f8:0c:8c:45:38:72:6e:d2:ac:c5:d3:
         bb:67:85:01:6c:41:1f:c7:78:cc:83:b6:ad:ba:d0:bd:ef:07:
         38:2c:be:35
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIURI9vgXKCU1ks/nfnQrZceOK3tngwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTQxNTlGQUYwQTk3OTUwMkNBQjZDNUFERENBRTRDRkRF
Q0RFRURFRjAeFw0yNjAxMjQwNjU1MzlaFw0yNjAxMjcxMzMyMzlaMDMxMTAvBgNV
BAMTKDJCNzE3NTA3NDRCRDY0NEUwNDQ2RThDRjY4MjE4NDk5MzA1NjVBOTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDT+F/fGWLFb5nvfSzjdVyZM1ef
qA9HxNhXVF8jPaqR7pDxrWmbqyYOR3+FdpRF2BrdWFDVc+8GyO14lW50gkKEWrEq
oU0NN4+lRlAggrQkQ0aA6RYoLl7Y52emWMqCVBBPDU1U1UHH87QYZls+UpARBvfg
ZWpcbX0Rajydg3l1SdJBGwGok2JnHuZauThCjaasAt4pGWjZ089O3MoiAEZor/3V
Uasl8aNnUpzvrhKICXOptJOWziOmcVTbjeMtjWMkZvQJCHJpUgnfea0Gw0BiP00+
17Fv/au+NwPN62Q9Vl2K65sL8W680E7oTTAzG8TGTwZVawdA4Yig5+T6kkBjAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUK3F1B0S9ZE4ERujPaCGEmTBWWpIwHwYDVR0j
BBgwFoAUlBWfrwqXlQLKtsWt3K5M/eze7e8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j
NGYwNzk4Ny1iOGVjLTQ0NGEtOWI0NC0yOTEwMTFmZjQ2YTYvMC85NDE1OUZBRjBB
OTc5NTAyQ0FCNkM1QUREQ0FFNENGREVDREVFREVGLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvOTQxNTlGQUYwQTk3OTUwMkNBQjZDNUFERENBRTRDRkRFQ0RF
RURFRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzRmMDc5ODctYjhlYy00NDRhLTli
NDQtMjkxMDExZmY0NmE2LzAvOTQxNTlGQUYwQTk3OTUwMkNBQjZDNUFERENBRTRD
RkRFQ0RFRURFRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBACiQqJsxAfFFlaNQt/xqAGE9K6qNQEcjlyml
D6NNOA48tpDkZAPYb5fuHSmeyqKUbpnXVVP3nLoYFg5oufVz/3A2zHm23Jx0sJRq
wYQ2isYhz8P2J2KWoUNLoywRXEK/oJDFEs5WNP8Gn93qgqtfM75i7y9HbBcjZ5GJ
DyO+6trf0DpoGYraLjHg5v1qow5JCl3r5rO0YIBIffa3WQbG+9cK7Z66H+DD+9He
erQJ+zIQ7gQ8JjF0BIamT6+8YDQnQV/fGD0BhxYYFZP6nWFoLDbhtYWMQEUw7qBO
O1h8icL4DIxFOHJu0qzF07tnhQFsQR/HeMyDtq260L3vBzgsvjU=
-----END CERTIFICATE-----
Generated at Sun Jan 25 18:59:39 2026 by rpki-client