This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/c8d59430-de78-4532-8e1a-34b53b8f26fa/0/1CF115D0218CAB4E3167A7D5B0D0FAC2D5CB8A17.mft
File:                     1CF115D0218CAB4E3167A7D5B0D0FAC2D5CB8A17.mft (raw, json)
Hash identifier:          r9L2QsTGC7NWO9b+pfiDJdnO24rf2eDArIOifzTcCDc=
Subject key identifier:   D4:3C:11:53:61:DD:53:63:EA:34:27:7A:30:FA:F8:21:04:CC:B4:B2
Authority key identifier: 1C:F1:15:D0:21:8C:AB:4E:31:67:A7:D5:B0:D0:FA:C2:D5:CB:8A:17
Certificate issuer:       /CN=1CF115D0218CAB4E3167A7D5B0D0FAC2D5CB8A17
Certificate serial:       18A9BD3B4023AAD2B2C84DDE3EFCA0685FA27A66
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1CF115D0218CAB4E3167A7D5B0D0FAC2D5CB8A17.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/c8d59430-de78-4532-8e1a-34b53b8f26fa/0/1CF115D0218CAB4E3167A7D5B0D0FAC2D5CB8A17.mft
Manifest number:          01F6
Signing time:             Fri 23 Jan 2026 17:21:45 +0000
Manifest this update:     Fri 23 Jan 2026 17:16:45 +0000
Manifest next update:     Mon 26 Jan 2026 19:34:45 +0000
Files and hashes:         1: 1CF115D0218CAB4E3167A7D5B0D0FAC2D5CB8A17.crl (hash: gQacOf+rXlF9HM0+tmb8B4OuxQwflpR4N13JXHmnuxI=)
                          2: 3130332e38372e3230322e302f32342d3234203d3e20313530323539.roa (hash: 6g8PbhkbZbLbnKoZLBgTfyMpeWvcwwbeUmAnxaDznuY=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/c8d59430-de78-4532-8e1a-34b53b8f26fa/0/1CF115D0218CAB4E3167A7D5B0D0FAC2D5CB8A17.crl
                          rsync://repo-rpki.idnic.net/repo/c8d59430-de78-4532-8e1a-34b53b8f26fa/0/1CF115D0218CAB4E3167A7D5B0D0FAC2D5CB8A17.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1CF115D0218CAB4E3167A7D5B0D0FAC2D5CB8A17.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 26 Jan 2026 19:34:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:a9:bd:3b:40:23:aa:d2:b2:c8:4d:de:3e:fc:a0:68:5f:a2:7a:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1CF115D0218CAB4E3167A7D5B0D0FAC2D5CB8A17
        Validity
            Not Before: Jan 23 17:16:45 2026 GMT
            Not After : Jan 26 19:34:45 2026 GMT
        Subject: CN=D43C115361DD5363EA34277A30FAF82104CCB4B2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:95:a5:9e:a7:92:34:ca:21:77:b8:09:99:89:
                    4e:56:15:8d:6c:41:9c:7b:cf:ba:fc:54:cd:93:b8:
                    d7:de:28:9a:34:e0:d4:81:ef:8e:af:8b:40:8b:a2:
                    c5:a3:b4:ca:de:cf:41:12:3c:ce:2b:c2:d3:0e:27:
                    77:fb:dd:ef:d1:90:48:45:21:26:c0:7c:4b:49:c6:
                    0a:0a:c7:ee:53:5a:94:50:8d:dc:e1:0a:9f:db:83:
                    b6:d7:36:c2:e5:b5:56:b3:ef:b4:34:5b:c2:8c:a6:
                    d3:00:b0:5e:a0:d2:f1:fd:29:56:27:38:b1:64:29:
                    e3:a8:4f:c4:50:9a:f7:fe:c7:58:50:30:31:79:cf:
                    74:f9:2a:3b:21:a3:95:c7:13:38:8c:22:4d:b0:e0:
                    d7:fb:02:53:d0:b7:e9:2f:1a:28:96:a7:04:2d:2e:
                    a7:23:c5:35:80:31:5c:7a:4c:6a:f4:bb:f0:9e:89:
                    80:ba:d1:03:f1:47:97:df:59:e6:79:53:57:d2:c8:
                    b7:61:2a:6a:cd:6f:51:a9:1f:38:6b:44:88:83:39:
                    1f:a5:03:12:55:eb:4e:06:77:e1:6f:dc:13:3a:a7:
                    a9:fd:46:d7:d6:2c:59:47:9d:6b:ae:46:1f:9e:de:
                    f7:fe:d5:8c:ea:ca:44:df:ed:1b:bc:99:b4:e2:d8:
                    75:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:3C:11:53:61:DD:53:63:EA:34:27:7A:30:FA:F8:21:04:CC:B4:B2
            X509v3 Authority Key Identifier:
                keyid:1C:F1:15:D0:21:8C:AB:4E:31:67:A7:D5:B0:D0:FA:C2:D5:CB:8A:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/c8d59430-de78-4532-8e1a-34b53b8f26fa/0/1CF115D0218CAB4E3167A7D5B0D0FAC2D5CB8A17.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1CF115D0218CAB4E3167A7D5B0D0FAC2D5CB8A17.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c8d59430-de78-4532-8e1a-34b53b8f26fa/0/1CF115D0218CAB4E3167A7D5B0D0FAC2D5CB8A17.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:be:5f:84:44:4b:1a:b3:ec:34:a6:78:93:52:1c:17:99:d4:
         54:60:0f:28:c6:97:11:67:5e:57:1c:c0:51:47:eb:53:24:f4:
         c6:43:37:e5:42:88:ff:59:07:cd:96:eb:49:ee:94:7e:a8:35:
         b3:c7:72:14:25:51:fb:35:31:67:e5:42:cd:e5:a0:e8:c0:59:
         7c:a0:c5:28:4a:fb:1a:c6:ed:6f:06:d6:fa:ab:0f:5e:e2:5b:
         80:4f:e0:86:9b:20:58:34:b8:52:83:c3:be:f6:2d:94:9b:87:
         7c:5c:b3:cb:77:86:57:fe:d1:bb:d1:87:61:5e:99:df:de:77:
         97:f6:9b:db:0b:f8:ed:35:79:a1:76:d1:5c:ba:02:8c:7b:f7:
         ad:29:1e:3d:1b:df:1b:8a:12:cf:cf:65:4b:32:a1:a0:7d:03:
         fd:90:87:1d:d8:c4:d8:d0:b5:75:d5:f5:69:8b:dd:95:58:c0:
         5a:1f:c4:93:8e:32:75:71:5f:a0:8c:9e:5f:69:ba:7d:ce:c9:
         ab:b6:83:98:2e:b7:93:88:18:b4:cf:c5:28:14:20:70:e6:41:
         07:25:82:a1:2e:26:ac:1a:be:d5:3f:07:35:cc:a4:25:ad:2b:
         da:8d:ed:2a:5e:c1:e6:8a:e1:3d:ef:bf:66:09:24:fd:7a:24:
         d3:2b:c6:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 22:00:23 2026 by rpki-client