This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/ca96f458-ce5e-41a2-a232-9964f4988a06/0/0D800491C03BFB579D58FFC7A24CAA8710845A9C.mft
File:                     0D800491C03BFB579D58FFC7A24CAA8710845A9C.mft (raw, json)
Hash identifier:          RagSoU8/NWmb2aN95n0n1mMPe0WkKijKKbxibJZsGaY=
Subject key identifier:   57:A6:B9:D3:2D:87:DE:70:CA:36:19:16:95:59:A0:9B:61:4E:CE:21
Authority key identifier: 0D:80:04:91:C0:3B:FB:57:9D:58:FF:C7:A2:4C:AA:87:10:84:5A:9C
Certificate issuer:       /CN=0D800491C03BFB579D58FFC7A24CAA8710845A9C
Certificate serial:       1B90B1D7F169E396582769B954DF184DAEB29789
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0D800491C03BFB579D58FFC7A24CAA8710845A9C.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/ca96f458-ce5e-41a2-a232-9964f4988a06/0/0D800491C03BFB579D58FFC7A24CAA8710845A9C.mft
Manifest number:          016B
Signing time:             Sat 24 Jan 2026 13:41:30 +0000
Manifest this update:     Sat 24 Jan 2026 13:36:30 +0000
Manifest next update:     Tue 27 Jan 2026 17:36:30 +0000
Files and hashes:         1: 3130332e3134342e3132382e302f32342d3234203d3e20313339343333.roa (hash: DWfEMEPWxsUozNiwbgr8ihU7QhgizyAKxGEXUL32Nzc=)
                          2: 0D800491C03BFB579D58FFC7A24CAA8710845A9C.crl (hash: KA5ylYJUELzFfwF2Ly7VK9x3KPuVP8N5pt0iLsqalXw=)
                          3: 3130332e3134342e3132392e302f32342d3234203d3e20313339343333.roa (hash: vmmdKTzGdj+WW7oR5Y7BlF5cHcjcyn2ZeY0vBD9tiWM=)
                          4: 3130332e3134342e3132382e302f32332d3233203d3e20313339343333.roa (hash: +5s73n1GRDKOs1PLsu8AmlmjjmE1TE3hQKNaKdkD1e0=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/ca96f458-ce5e-41a2-a232-9964f4988a06/0/0D800491C03BFB579D58FFC7A24CAA8710845A9C.crl
                          rsync://repo-rpki.idnic.net/repo/ca96f458-ce5e-41a2-a232-9964f4988a06/0/0D800491C03BFB579D58FFC7A24CAA8710845A9C.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0D800491C03BFB579D58FFC7A24CAA8710845A9C.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 27 Jan 2026 17:36:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:90:b1:d7:f1:69:e3:96:58:27:69:b9:54:df:18:4d:ae:b2:97:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D800491C03BFB579D58FFC7A24CAA8710845A9C
        Validity
            Not Before: Jan 24 13:36:30 2026 GMT
            Not After : Jan 27 17:36:30 2026 GMT
        Subject: CN=57A6B9D32D87DE70CA3619169559A09B614ECE21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:55:02:9c:46:2e:14:bf:ea:46:dd:98:ca:3f:
                    8d:c2:82:80:2e:71:74:3b:a2:c3:a5:33:bd:47:d4:
                    1f:fe:0f:83:4f:1d:62:0b:94:62:6b:63:21:f8:65:
                    51:42:b2:f7:e2:65:c6:5a:f0:73:10:ba:fe:a4:98:
                    c4:ac:60:8d:1f:28:95:1a:bd:4f:2a:6b:70:cb:c6:
                    8a:26:44:51:38:aa:d2:b1:28:a7:35:b0:e0:3f:49:
                    c1:4a:3c:d2:7e:5a:19:82:65:11:e7:23:61:5a:72:
                    ce:8b:4c:0f:e9:f3:46:8f:e4:ee:39:f4:d7:bc:b3:
                    6e:19:4e:ac:3b:b1:bc:8d:4b:75:13:96:cf:ca:c0:
                    43:ca:7d:5e:0a:29:59:6f:fe:f8:61:66:0e:32:96:
                    57:a4:30:4f:e9:f3:28:8e:d6:ce:be:d2:27:8f:df:
                    cb:54:5b:75:f1:21:07:df:67:ce:18:50:eb:37:00:
                    b3:77:8a:e9:24:e8:3d:77:5a:dc:33:1d:45:85:22:
                    1f:8d:1b:09:e6:b1:e9:73:a8:29:a6:e7:3f:89:8f:
                    0b:02:15:73:54:82:1b:35:9e:38:49:23:c5:16:af:
                    25:f5:ce:27:4a:df:ee:78:2f:9d:0d:0d:ea:3e:42:
                    4b:af:0e:f7:04:b8:84:9a:f6:93:fe:2e:e5:1e:7a:
                    f2:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:A6:B9:D3:2D:87:DE:70:CA:36:19:16:95:59:A0:9B:61:4E:CE:21
            X509v3 Authority Key Identifier:
                keyid:0D:80:04:91:C0:3B:FB:57:9D:58:FF:C7:A2:4C:AA:87:10:84:5A:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/ca96f458-ce5e-41a2-a232-9964f4988a06/0/0D800491C03BFB579D58FFC7A24CAA8710845A9C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0D800491C03BFB579D58FFC7A24CAA8710845A9C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ca96f458-ce5e-41a2-a232-9964f4988a06/0/0D800491C03BFB579D58FFC7A24CAA8710845A9C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:bd:2d:38:61:70:c7:b5:19:38:95:60:71:95:4d:ca:48:3f:
         4a:41:43:76:5b:d3:1f:b6:b4:c1:0c:0c:94:be:81:02:5b:b4:
         11:fb:b6:09:6c:ae:63:c6:47:63:db:4c:fa:7b:da:5f:26:a9:
         64:7e:4b:b8:5b:b5:e9:6b:0d:b8:6d:65:86:60:66:ff:2a:bd:
         5d:b7:e5:f6:7f:34:27:0b:7b:5c:90:cc:f8:94:4e:62:8b:9d:
         67:ef:90:5b:6b:27:1d:d5:c1:eb:bd:f8:76:0a:dd:a4:1e:df:
         12:ef:25:fd:85:9f:37:61:fe:68:3d:20:e1:4b:8b:e0:c2:10:
         12:26:00:72:da:66:e3:6d:46:b8:c9:71:89:d0:d5:18:2c:8a:
         eb:73:fe:69:51:17:ac:00:1e:9e:09:6c:69:c9:e6:00:92:39:
         bd:0a:51:95:d1:71:21:c9:ca:10:a7:17:50:82:12:64:66:dd:
         96:3d:64:2f:75:ac:a8:96:a0:2e:3e:58:bb:c4:27:bc:aa:d5:
         87:ff:1f:7b:ef:ec:e0:6c:ef:93:bc:14:3f:4e:52:b6:f7:6a:
         59:75:90:6c:ed:7f:51:be:a7:cb:d3:e3:22:b4:0a:15:50:8f:
         34:4f:77:f0:11:10:1f:43:4b:0c:52:dc:e9:9d:29:63:d4:aa:
         aa:d9:7b:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:47:00 2026 by rpki-client