This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/c80dde94-e5be-4d29-bb12-45fb5c1d2c79/0/744F97E1DF1BD6D37E6C2EA8F02C088498F43323.mft
File:                     744F97E1DF1BD6D37E6C2EA8F02C088498F43323.mft (raw, json)
Hash identifier:          NTIB0hXcD7Cdu/cQO49c0ZfpYS8K9nUON8Xl4sTvtxk=
Subject key identifier:   A8:05:B4:56:30:AB:BF:45:E9:9A:80:57:7F:16:85:53:E2:60:B8:F9
Authority key identifier: 74:4F:97:E1:DF:1B:D6:D3:7E:6C:2E:A8:F0:2C:08:84:98:F4:33:23
Certificate issuer:       /CN=744F97E1DF1BD6D37E6C2EA8F02C088498F43323
Certificate serial:       052C9A1D5F761BD0B9FB67DEE5B8381F751A4076
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/744F97E1DF1BD6D37E6C2EA8F02C088498F43323.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/c80dde94-e5be-4d29-bb12-45fb5c1d2c79/0/744F97E1DF1BD6D37E6C2EA8F02C088498F43323.mft
Manifest number:          014E
Signing time:             Sat 24 Jan 2026 01:11:03 +0000
Manifest this update:     Sat 24 Jan 2026 01:06:03 +0000
Manifest next update:     Tue 27 Jan 2026 11:35:03 +0000
Files and hashes:         1: 744F97E1DF1BD6D37E6C2EA8F02C088498F43323.crl (hash: c+CKY0K1h74lQEHyqApgz18sSobm9IOXhG1PB7S88f0=)
                          2: 3130332e3232322e3235342e302f32342d3234203d3e20313531303131.roa (hash: Nyxgg8pBzc0S11WPRtK59UFRSivtWFPC71vDqqqNcpI=)
                          3: 3130332e3235302e3130332e302f32342d3234203d3e20313531303131.roa (hash: 0RiS+RR5AkQk/dYZxan36BDxuGPtCqd2prjnjXfUECQ=)
                          4: 323030313a6466323a653463303a3a2f34382d3438203d3e20313531303131.roa (hash: f6CLm//dO0n6OthDYmsvLFicH09gzcmnHxf/Flc+xDQ=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/c80dde94-e5be-4d29-bb12-45fb5c1d2c79/0/744F97E1DF1BD6D37E6C2EA8F02C088498F43323.crl
                          rsync://repo-rpki.idnic.net/repo/c80dde94-e5be-4d29-bb12-45fb5c1d2c79/0/744F97E1DF1BD6D37E6C2EA8F02C088498F43323.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/744F97E1DF1BD6D37E6C2EA8F02C088498F43323.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 27 Jan 2026 11:35:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:2c:9a:1d:5f:76:1b:d0:b9:fb:67:de:e5:b8:38:1f:75:1a:40:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=744F97E1DF1BD6D37E6C2EA8F02C088498F43323
        Validity
            Not Before: Jan 24 01:06:03 2026 GMT
            Not After : Jan 27 11:35:03 2026 GMT
        Subject: CN=A805B45630ABBF45E99A80577F168553E260B8F9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:1e:7e:c5:da:ca:e5:cd:16:eb:60:e1:3b:8c:
                    ac:01:d0:38:de:27:47:4d:aa:56:21:ef:21:f1:b7:
                    04:a7:c2:81:a0:4d:f2:1d:0f:1b:4b:eb:bb:b7:ee:
                    66:8e:50:ab:50:c3:ca:0c:02:ac:c3:20:22:63:a1:
                    0c:2e:2f:e3:d8:6a:3b:6c:8c:32:83:1c:4b:a5:10:
                    ac:fa:c1:a9:99:92:61:64:7a:85:a9:02:10:99:68:
                    a1:5d:84:57:4e:b8:6c:94:5a:e4:9b:52:28:90:f7:
                    27:4e:45:55:cb:ad:cc:41:58:60:00:ae:f7:d3:4c:
                    40:ba:1d:15:bc:99:2b:74:f3:ad:70:ac:eb:ba:2c:
                    ee:af:2f:6e:b0:17:80:86:4b:3b:9c:c2:10:0a:26:
                    89:ca:0a:88:52:74:2b:6c:90:1b:a6:e4:cb:a0:44:
                    c0:8c:9f:ea:1b:42:fa:cf:1a:89:e2:b6:53:6a:d6:
                    f3:66:3d:9f:31:07:bd:6c:a6:64:5c:dc:24:c8:1b:
                    cc:bc:cc:06:da:86:f8:50:c8:0e:a9:a0:a2:d8:6a:
                    98:03:9c:b5:5f:38:ad:e7:bb:98:bb:13:ce:53:9d:
                    fa:a0:45:97:09:f3:aa:cb:a0:55:7f:09:07:be:f3:
                    ea:ce:f0:25:ca:3b:d0:0f:8a:8a:23:bb:73:86:e8:
                    86:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:05:B4:56:30:AB:BF:45:E9:9A:80:57:7F:16:85:53:E2:60:B8:F9
            X509v3 Authority Key Identifier:
                keyid:74:4F:97:E1:DF:1B:D6:D3:7E:6C:2E:A8:F0:2C:08:84:98:F4:33:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/c80dde94-e5be-4d29-bb12-45fb5c1d2c79/0/744F97E1DF1BD6D37E6C2EA8F02C088498F43323.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/744F97E1DF1BD6D37E6C2EA8F02C088498F43323.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c80dde94-e5be-4d29-bb12-45fb5c1d2c79/0/744F97E1DF1BD6D37E6C2EA8F02C088498F43323.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:cf:44:46:b3:ae:2b:07:95:ab:d3:22:fe:a5:2e:08:af:d7:
         d1:8b:d3:9b:c6:cc:99:b2:69:d8:cd:8e:22:38:45:eb:bb:8c:
         40:0e:82:4b:ec:b8:d7:ef:1b:29:8b:f5:9b:12:32:21:c6:f3:
         84:d8:d8:fb:f4:c9:cd:3e:14:d8:27:6c:be:04:ef:01:51:15:
         62:0e:a0:b0:57:93:4a:fa:d0:fb:b1:2c:72:f7:00:39:c7:34:
         5a:a1:1a:6e:b9:ef:85:01:85:c6:e7:f2:9a:6f:02:0a:c8:b9:
         aa:7e:59:98:52:8b:f5:ad:52:7a:e1:1b:49:a1:84:9c:8e:c1:
         f2:dc:05:a5:a3:a8:fb:ec:53:94:19:b4:1a:c6:aa:a5:a9:ac:
         f3:f2:5a:94:40:04:67:61:c9:15:91:23:3f:00:ae:bb:42:70:
         09:cb:ca:ab:ba:fd:b3:a0:df:a5:f0:ec:ad:2a:c7:53:c1:84:
         20:24:d3:b3:a4:51:68:b8:0e:b4:2b:a5:41:2d:c4:22:73:c9:
         66:5a:83:04:22:04:13:c2:f0:90:2f:47:34:0d:99:85:dd:7d:
         2f:54:1d:97:27:2e:9a:d9:39:85:b1:29:6d:90:0d:03:9e:f8:
         dd:2d:a3:45:68:9e:7c:14:94:43:53:58:61:af:92:37:93:3c:
         c2:14:17:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:52:43 2026 by rpki-client