This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/c883fe75-91e4-4989-bc5e-6a26082dc334/0/F55642EAEBD83D2B9D92B6DB7987FBE6D36839C6.mft
File:                     F55642EAEBD83D2B9D92B6DB7987FBE6D36839C6.mft (raw, json)
Hash identifier:          DW6K5o9W+dlSSFtPDOo0iNIU9rOhKt3mqjA/tOfVbjg=
Subject key identifier:   2E:20:F6:C0:FC:64:8C:24:24:EF:7B:AC:86:FF:23:DB:99:54:CD:FC
Authority key identifier: F5:56:42:EA:EB:D8:3D:2B:9D:92:B6:DB:79:87:FB:E6:D3:68:39:C6
Certificate issuer:       /CN=F55642EAEBD83D2B9D92B6DB7987FBE6D36839C6
Certificate serial:       14775C1083329FF639AF387169738EB59E2EE236
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F55642EAEBD83D2B9D92B6DB7987FBE6D36839C6.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/c883fe75-91e4-4989-bc5e-6a26082dc334/0/F55642EAEBD83D2B9D92B6DB7987FBE6D36839C6.mft
Manifest number:          01B7
Signing time:             Sun 25 Jan 2026 10:02:23 +0000
Manifest this update:     Sun 25 Jan 2026 09:57:23 +0000
Manifest next update:     Wed 28 Jan 2026 13:37:23 +0000
Files and hashes:         1: 3130332e3139332e3134342e302f32332d3234203d3e203538383231.roa (hash: xqDmQkKvNjqDIhr5W6P74uer/xZQw7F/hF7jgT+PobU=)
                          2: F55642EAEBD83D2B9D92B6DB7987FBE6D36839C6.crl (hash: 2Zvumf+x9ApL9ub/XNvkOFHx6FSFG0Ah6+ama0aaCgQ=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/c883fe75-91e4-4989-bc5e-6a26082dc334/0/F55642EAEBD83D2B9D92B6DB7987FBE6D36839C6.crl
                          rsync://repo-rpki.idnic.net/repo/c883fe75-91e4-4989-bc5e-6a26082dc334/0/F55642EAEBD83D2B9D92B6DB7987FBE6D36839C6.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F55642EAEBD83D2B9D92B6DB7987FBE6D36839C6.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 28 Jan 2026 13:37:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:77:5c:10:83:32:9f:f6:39:af:38:71:69:73:8e:b5:9e:2e:e2:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F55642EAEBD83D2B9D92B6DB7987FBE6D36839C6
        Validity
            Not Before: Jan 25 09:57:23 2026 GMT
            Not After : Jan 28 13:37:23 2026 GMT
        Subject: CN=2E20F6C0FC648C2424EF7BAC86FF23DB9954CDFC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:46:e1:d8:54:35:6f:7c:31:ba:f5:d8:95:6c:
                    3e:bb:28:10:5e:f4:27:9e:dc:0b:d0:5f:13:94:80:
                    e7:84:a9:56:4f:5c:9c:2c:8f:c2:e1:8c:6c:1c:8e:
                    d6:f8:b8:eb:b9:eb:b0:03:32:ff:f8:6d:69:fa:ae:
                    50:31:92:3c:e3:7f:c6:95:40:9d:1f:55:de:33:78:
                    43:ac:e8:7f:66:38:8f:47:d4:ba:02:5b:59:3e:25:
                    3a:e6:62:2c:a0:1c:1f:ed:86:f4:7c:9d:38:7a:e0:
                    9f:67:ea:a6:86:a3:1f:ce:28:6a:fb:d2:64:8c:9d:
                    5b:86:ef:9b:e1:ba:6a:66:ec:14:48:ee:6b:e5:ec:
                    82:54:1c:0b:c3:c6:d9:5d:95:6c:98:7c:fa:fa:fd:
                    1a:30:c8:aa:67:98:f3:df:55:24:ce:85:6b:45:57:
                    83:fd:23:d0:d0:66:38:de:f4:30:3f:32:14:11:d2:
                    17:41:e2:c1:c9:99:39:ea:5b:ac:ae:37:05:17:3b:
                    ed:75:72:b9:b3:60:5c:c8:7c:b0:f8:41:85:f5:ea:
                    a0:0c:b7:2f:7c:91:75:0a:c2:0e:42:18:a3:ef:07:
                    94:a2:99:74:f3:fd:a0:f3:16:fa:9c:df:06:d5:7b:
                    11:1a:2d:7b:0e:86:53:43:7d:e4:b2:a6:cb:e9:5c:
                    a4:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:20:F6:C0:FC:64:8C:24:24:EF:7B:AC:86:FF:23:DB:99:54:CD:FC
            X509v3 Authority Key Identifier:
                keyid:F5:56:42:EA:EB:D8:3D:2B:9D:92:B6:DB:79:87:FB:E6:D3:68:39:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/c883fe75-91e4-4989-bc5e-6a26082dc334/0/F55642EAEBD83D2B9D92B6DB7987FBE6D36839C6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F55642EAEBD83D2B9D92B6DB7987FBE6D36839C6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c883fe75-91e4-4989-bc5e-6a26082dc334/0/F55642EAEBD83D2B9D92B6DB7987FBE6D36839C6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:76:3e:97:3b:7b:a3:53:32:30:a8:69:72:f9:66:a2:3d:5e:
         98:06:be:38:54:da:34:12:8d:46:d4:84:6c:cc:59:8a:22:71:
         43:e9:f8:21:f3:6a:9c:96:8f:6a:d5:61:02:11:46:cd:18:60:
         4c:ea:cb:0f:42:ff:ac:c7:fb:43:78:11:40:37:4d:94:0b:14:
         84:b6:23:4d:ec:ab:4f:0f:7e:77:f4:62:0f:e9:95:57:90:c6:
         8c:38:41:ee:61:75:4a:8e:f1:ab:e3:43:f9:9c:58:bd:c5:af:
         78:18:19:b3:47:5d:75:c5:6f:05:1d:29:c6:3f:4b:c5:a7:7d:
         6f:5f:c8:d6:7e:9e:a0:07:87:58:61:a3:77:1a:cb:73:47:9f:
         7b:23:7b:ef:f3:94:4c:aa:e3:27:39:0a:2a:8f:a5:85:46:a9:
         41:bb:7f:cf:86:c6:72:33:6f:eb:25:84:6d:f0:dc:39:c6:52:
         57:37:a3:12:a7:07:37:30:62:b6:a8:b3:fe:25:53:50:95:01:
         57:a4:58:ce:f5:f1:61:aa:85:66:f5:a8:c2:a0:d9:c9:40:39:
         57:be:4c:f1:d5:6d:38:f2:20:c7:f5:27:d6:b2:5f:55:d9:71:
         6f:a8:46:fa:ea:c2:59:e7:52:ec:36:12:1b:8c:e0:26:86:d7:
         72:3d:25:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:08:56 2026 by rpki-client