This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/c998195f-14bb-41fd-b6ed-7a967c8e43df/0/312D6572B0C104C0D51834C1B01CB0C593DAE8B4.mft
File:                     312D6572B0C104C0D51834C1B01CB0C593DAE8B4.mft (raw, json)
Hash identifier:          HxP2N8DkR/KHDnvGnSGkwiPB6ZSqtG5GxY3hOgUC5gI=
Subject key identifier:   7A:89:49:8C:27:20:E5:AB:F7:DA:28:87:F3:DF:CD:15:35:4D:BF:8F
Authority key identifier: 31:2D:65:72:B0:C1:04:C0:D5:18:34:C1:B0:1C:B0:C5:93:DA:E8:B4
Certificate issuer:       /CN=312D6572B0C104C0D51834C1B01CB0C593DAE8B4
Certificate serial:       68D1B877AB6E00FA74E4DB9205AA423BA8D86281
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/312D6572B0C104C0D51834C1B01CB0C593DAE8B4.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/c998195f-14bb-41fd-b6ed-7a967c8e43df/0/312D6572B0C104C0D51834C1B01CB0C593DAE8B4.mft
Manifest number:          0165
Signing time:             Fri 23 Jan 2026 15:42:23 +0000
Manifest this update:     Fri 23 Jan 2026 15:37:23 +0000
Manifest next update:     Tue 27 Jan 2026 01:08:23 +0000
Files and hashes:         1: 3230332e3137352e3130302e302f32332d3234203d3e20313532303132.roa (hash: Via8twfYiTOYYUS4MnDOw8zvlMb40Ue2urMBm24mYnU=)
                          2: 312D6572B0C104C0D51834C1B01CB0C593DAE8B4.crl (hash: zPy5hvTAeGUKinR9fWLCyfULr09HQElqu63k57SPIuM=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/c998195f-14bb-41fd-b6ed-7a967c8e43df/0/312D6572B0C104C0D51834C1B01CB0C593DAE8B4.crl
                          rsync://repo-rpki.idnic.net/repo/c998195f-14bb-41fd-b6ed-7a967c8e43df/0/312D6572B0C104C0D51834C1B01CB0C593DAE8B4.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/312D6572B0C104C0D51834C1B01CB0C593DAE8B4.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 27 Jan 2026 01:08:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:d1:b8:77:ab:6e:00:fa:74:e4:db:92:05:aa:42:3b:a8:d8:62:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=312D6572B0C104C0D51834C1B01CB0C593DAE8B4
        Validity
            Not Before: Jan 23 15:37:23 2026 GMT
            Not After : Jan 27 01:08:23 2026 GMT
        Subject: CN=7A89498C2720E5ABF7DA2887F3DFCD15354DBF8F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:fc:be:d8:ab:ea:d8:12:b3:80:32:54:2d:07:
                    1c:a2:c7:54:11:e4:d9:b2:cb:f2:3b:61:ae:bf:c7:
                    00:b9:95:82:7f:28:62:90:73:84:e7:bd:bc:6b:e2:
                    58:b5:88:6a:1f:07:51:1e:5d:bf:2f:d4:4e:dc:73:
                    a1:2f:58:c5:b0:72:7c:46:af:02:84:44:0b:c5:13:
                    92:3f:43:2e:15:08:97:6c:ab:26:9c:cf:ab:9f:cc:
                    ac:77:a0:1b:15:a4:27:76:e2:4e:34:32:67:ca:73:
                    67:03:75:4a:6d:d9:d9:79:23:14:e0:c8:d6:8a:48:
                    cd:38:14:7b:7a:7f:8c:44:31:5b:6b:fb:e7:dd:50:
                    c7:f0:a3:1f:d9:ea:cb:a5:cc:a4:16:f6:55:29:86:
                    85:14:35:44:e2:a7:0f:90:e3:4b:b8:0d:b3:55:8d:
                    08:52:ee:70:83:34:4c:5b:8d:25:e0:2b:f9:6e:4e:
                    b2:d8:c3:26:7c:51:bb:cb:c6:f4:41:46:9e:0f:2b:
                    bc:20:be:f3:15:4a:37:87:a8:0c:63:49:06:c0:ee:
                    3d:e7:9f:ac:84:c2:61:bb:33:e5:7a:5d:d8:66:ba:
                    c7:2a:2d:b0:95:73:83:58:fe:17:af:a7:a4:2e:76:
                    d1:60:bd:08:82:f6:8b:ff:3b:8b:57:dc:ba:d4:77:
                    9c:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:89:49:8C:27:20:E5:AB:F7:DA:28:87:F3:DF:CD:15:35:4D:BF:8F
            X509v3 Authority Key Identifier:
                keyid:31:2D:65:72:B0:C1:04:C0:D5:18:34:C1:B0:1C:B0:C5:93:DA:E8:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/c998195f-14bb-41fd-b6ed-7a967c8e43df/0/312D6572B0C104C0D51834C1B01CB0C593DAE8B4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/312D6572B0C104C0D51834C1B01CB0C593DAE8B4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c998195f-14bb-41fd-b6ed-7a967c8e43df/0/312D6572B0C104C0D51834C1B01CB0C593DAE8B4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:6f:bb:fd:94:37:37:91:7d:5e:45:42:61:97:03:17:ad:21:
         b9:37:30:98:45:dd:bb:f1:46:b5:66:b6:5e:13:1b:f7:3f:4a:
         3d:54:d6:0f:9c:6f:0a:8d:e1:51:5a:0d:a4:2f:04:b8:99:65:
         c8:2c:9f:8b:1c:0e:1b:b6:3c:aa:a4:39:30:30:a3:0f:62:d8:
         af:e8:d8:d7:e6:e5:74:27:ba:e4:15:16:63:10:af:02:b8:2c:
         a9:52:1c:d1:bb:d6:ff:09:af:c1:d8:2a:54:b9:a6:3b:f9:86:
         4d:15:15:ff:96:95:c4:5b:da:d0:0d:ca:a0:bd:4b:e9:e9:6c:
         85:b5:a9:7d:79:d1:e2:3a:d7:55:f7:1f:c9:f5:73:86:89:83:
         fa:29:88:ee:af:15:c5:3d:fe:ca:01:d2:67:e8:99:06:d7:c9:
         df:1f:ba:f8:e2:34:f4:24:c5:1c:d5:d2:e5:a8:af:f4:5b:08:
         c3:31:e9:a9:5b:6d:d2:15:d3:fb:e9:e4:72:ec:98:18:d4:95:
         67:3c:49:6c:02:b7:93:8e:fe:8e:b2:41:1b:48:9a:73:88:b9:
         bb:39:42:c9:3c:73:aa:db:59:a3:fc:39:ee:db:ea:cf:33:11:
         0e:5a:64:d4:f9:0d:da:07:61:1d:b8:69:a4:79:7b:9e:55:2c:
         0f:dc:48:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:46:00 2026 by rpki-client