This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/cb63f771-a95f-4b53-87bc-8bff504da1f4/0/108261B2B5A1F3CC828EF2A532ED94DFC1202853.mft
File:                     108261B2B5A1F3CC828EF2A532ED94DFC1202853.mft (raw, json)
Hash identifier:          qvb3twdvR9DECVPjA+qWHtAqUqMn2yRivJHOuvcS8b8=
Subject key identifier:   5F:11:C8:7F:8D:EA:A2:1D:F8:C9:A3:6D:2E:BF:0B:B5:F3:CD:F0:F8
Authority key identifier: 10:82:61:B2:B5:A1:F3:CC:82:8E:F2:A5:32:ED:94:DF:C1:20:28:53
Certificate issuer:       /CN=108261B2B5A1F3CC828EF2A532ED94DFC1202853
Certificate serial:       26CF7A7FD1357FD7D91BB825B47214D280FEA178
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/108261B2B5A1F3CC828EF2A532ED94DFC1202853.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/cb63f771-a95f-4b53-87bc-8bff504da1f4/0/108261B2B5A1F3CC828EF2A532ED94DFC1202853.mft
Manifest number:          0124
Signing time:             Sat 24 Jan 2026 10:11:40 +0000
Manifest this update:     Sat 24 Jan 2026 10:06:40 +0000
Manifest next update:     Tue 27 Jan 2026 13:46:40 +0000
Files and hashes:         1: 3132332e3130382e36342e302f32342d3234203d3e20313333373939.roa (hash: YLUa9f9Ix42SsoAFmSGmhnlKGmYHofqL4ey07MvkUwA=)
                          2: 3132332e3130382e36352e302f32342d3234203d3e20313333373939.roa (hash: 2MPbE9DHmM30NHKgthoS9sI03vGrnEvS4h+kAcqNSBY=)
                          3: 3130332e34322e3235342e302f32342d3234203d3e20313333373939.roa (hash: dta96fOO5R3KY41745HRH3tf4b61/DKoGwUN3Q11U24=)
                          4: 323430313a626538303a3a2f33322d3332203d3e20313333373939.roa (hash: U1+UJYOPqeG7oUJWUM0ECQEyGoOhn9MsVuuE8ER7syk=)
                          5: 3130332e34322e3235322e302f32322d3232203d3e20313333373939.roa (hash: 02uGPdQ9hFird7xTsc25uxwhcDH5++RrfPud5wB034E=)
                          6: 3132332e3130382e36372e302f32342d3234203d3e20313333373939.roa (hash: mb4RdHaLVtluUJXDmdVSpVl3zLc9LDc6xWU2Tugox0c=)
                          7: 3132332e3130382e36362e302f32342d3234203d3e20313333373939.roa (hash: DACxlfdaRrzYV99yR/yeAhjiMh8XR4kIKAf+dkh/dOU=)
                          8: 3130332e34322e3235332e302f32342d3234203d3e20313333373939.roa (hash: ZpCaLj3IjbNE+GXo6EylCwD1IX57XlXTChG6yMIUs9k=)
                          9: 3130332e34322e3235322e302f32342d3234203d3e20313333373939.roa (hash: KSUbvXfR6wqgEtV1jcjWsrQSqy5TRuM5IxH97Spd5gE=)
                          10: 108261B2B5A1F3CC828EF2A532ED94DFC1202853.crl (hash: Fxbh+dx7HZkgT4wCGUx22D9OAsdd69eH6tDKcMvPaqQ=)
                          11: 3132332e3130382e36342e302f32322d3232203d3e20313333373939.roa (hash: abJz0HXL4r3WKDjsYu+oZiEGGhSowngdRONlkzkes1A=)
                          12: 3130332e34322e3235352e302f32342d3234203d3e20313333373939.roa (hash: wR+IWZMCxrwb5/faol2/GF6hZhc853OeCuHNs3ivUEk=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/cb63f771-a95f-4b53-87bc-8bff504da1f4/0/108261B2B5A1F3CC828EF2A532ED94DFC1202853.crl
                          rsync://repo-rpki.idnic.net/repo/cb63f771-a95f-4b53-87bc-8bff504da1f4/0/108261B2B5A1F3CC828EF2A532ED94DFC1202853.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/108261B2B5A1F3CC828EF2A532ED94DFC1202853.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 27 Jan 2026 13:46:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:cf:7a:7f:d1:35:7f:d7:d9:1b:b8:25:b4:72:14:d2:80:fe:a1:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=108261B2B5A1F3CC828EF2A532ED94DFC1202853
        Validity
            Not Before: Jan 24 10:06:40 2026 GMT
            Not After : Jan 27 13:46:40 2026 GMT
        Subject: CN=5F11C87F8DEAA21DF8C9A36D2EBF0BB5F3CDF0F8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:22:2c:5d:e6:53:09:9a:f1:86:e0:40:6c:25:
                    87:88:1d:6f:a8:eb:eb:03:cb:20:90:21:a4:2a:a3:
                    7d:26:35:65:49:d7:1f:46:34:2c:19:fa:fa:db:d1:
                    2f:4b:90:21:e3:87:6c:ae:02:d3:d7:b5:2d:cb:ac:
                    84:7a:0d:41:06:26:51:04:3d:13:1a:b6:46:01:e9:
                    a5:07:98:a6:e1:8c:18:e5:b9:c0:2a:1b:be:4d:b1:
                    74:97:12:08:bc:91:f0:24:30:29:27:5a:48:35:b2:
                    cf:22:63:27:dc:92:a8:99:4b:ab:16:4d:38:07:bc:
                    86:aa:14:76:bb:fd:8d:f4:8b:5e:56:07:96:51:0b:
                    86:2a:dd:d4:d4:a6:92:73:37:ad:57:1a:84:3f:80:
                    a1:07:db:8f:f3:f0:4b:cf:30:4f:b5:4d:3e:a3:47:
                    99:3d:f5:fd:85:b3:e3:4b:39:20:54:91:64:00:4a:
                    5e:a1:a7:57:3c:de:fe:29:03:61:ed:88:59:7f:85:
                    20:f7:75:6e:88:9d:45:7e:25:de:90:30:08:6f:45:
                    bf:42:ee:5e:45:8e:33:30:17:33:a8:7e:ee:b6:dc:
                    ff:f4:a3:5d:bf:f8:99:5f:f7:d4:3e:77:6e:8f:81:
                    ba:26:45:5b:ec:89:26:05:6a:39:50:5e:81:0f:23:
                    36:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:11:C8:7F:8D:EA:A2:1D:F8:C9:A3:6D:2E:BF:0B:B5:F3:CD:F0:F8
            X509v3 Authority Key Identifier:
                keyid:10:82:61:B2:B5:A1:F3:CC:82:8E:F2:A5:32:ED:94:DF:C1:20:28:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/cb63f771-a95f-4b53-87bc-8bff504da1f4/0/108261B2B5A1F3CC828EF2A532ED94DFC1202853.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/108261B2B5A1F3CC828EF2A532ED94DFC1202853.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cb63f771-a95f-4b53-87bc-8bff504da1f4/0/108261B2B5A1F3CC828EF2A532ED94DFC1202853.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:56:b3:44:b1:a3:02:c9:7f:10:f7:1d:60:87:52:7a:9c:e3:
         8e:37:46:4b:e3:2c:09:ab:d5:ba:e2:38:3a:87:d1:65:b0:e4:
         a5:72:28:f7:75:2c:ae:d9:dd:64:6b:62:b6:ad:19:2b:52:b0:
         52:87:cc:78:dc:13:5c:63:e3:47:1d:f1:08:0f:1d:83:16:0a:
         cf:a4:c1:2b:e8:ad:a8:2b:d0:f5:83:16:ae:82:2a:a3:f4:4f:
         b5:4b:1b:7e:12:65:3c:c8:f7:41:d9:ee:05:7d:5d:72:67:79:
         52:53:ad:59:42:db:80:15:83:7f:c5:18:15:95:f5:55:15:cf:
         36:fe:bb:d3:0a:0f:2b:6c:b3:33:e7:f9:93:c4:5e:04:ab:e4:
         bf:2a:d2:bd:cd:03:78:e5:ed:c6:f2:80:28:c1:b2:9e:c9:8b:
         9c:d5:99:cd:ed:27:16:47:ce:98:5f:5c:bc:38:bb:39:8e:a4:
         0d:b3:3f:1d:df:ee:a4:d9:21:cc:89:5e:0b:42:09:de:f7:99:
         28:87:60:51:5e:df:8d:e5:4a:98:05:bf:52:7b:b1:9d:02:a1:
         b0:ab:48:c1:00:3e:21:da:63:d4:44:a0:35:40:09:da:e6:f4:
         7a:2b:71:69:6b:33:e1:b2:85:58:86:78:88:23:a4:01:46:9d:
         e2:27:21:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 20:38:09 2026 by rpki-client