This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/cc8d4ee2-549e-4160-8d6f-87730e8ae5e2/0/819AD043A7A2F8424ABC9E6CFD9C518670507FC3.mft
File:                     819AD043A7A2F8424ABC9E6CFD9C518670507FC3.mft (raw, json)
Hash identifier:          95T4COVslxs0vM0kkUugj0d3UWbUmN2ymrc1XzV9HpY=
Subject key identifier:   EB:17:E7:9E:5A:56:77:D0:4F:7D:2B:90:8C:1C:77:15:23:05:22:DE
Authority key identifier: 81:9A:D0:43:A7:A2:F8:42:4A:BC:9E:6C:FD:9C:51:86:70:50:7F:C3
Certificate issuer:       /CN=819AD043A7A2F8424ABC9E6CFD9C518670507FC3
Certificate serial:       70752D9B3599B9B09FF6E2526F991C27982E3A8E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/819AD043A7A2F8424ABC9E6CFD9C518670507FC3.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/cc8d4ee2-549e-4160-8d6f-87730e8ae5e2/0/819AD043A7A2F8424ABC9E6CFD9C518670507FC3.mft
Manifest number:          01E8
Signing time:             Sat 24 Jan 2026 13:02:11 +0000
Manifest this update:     Sat 24 Jan 2026 12:57:11 +0000
Manifest next update:     Tue 27 Jan 2026 20:17:11 +0000
Files and hashes:         1: 3130332e3132392e35382e302f32332d3234203d3e20313335343738.roa (hash: YeGR8oOh1UfyEQoGwDtsTMZrPfaKasaF2ECFyYxm2Hg=)
                          2: 819AD043A7A2F8424ABC9E6CFD9C518670507FC3.crl (hash: wWAyQblanrUp+vgRorlgLGlSjJ9C3/zYIl55PUnJxkA=)
                          3: 3130332e3132392e35362e302f32332d3234203d3e20313335343738.roa (hash: tGutfHYLd+1w5afOstLzep3nkeXsmFCSKPGKSJYYWl0=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/cc8d4ee2-549e-4160-8d6f-87730e8ae5e2/0/819AD043A7A2F8424ABC9E6CFD9C518670507FC3.crl
                          rsync://repo-rpki.idnic.net/repo/cc8d4ee2-549e-4160-8d6f-87730e8ae5e2/0/819AD043A7A2F8424ABC9E6CFD9C518670507FC3.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/819AD043A7A2F8424ABC9E6CFD9C518670507FC3.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 27 Jan 2026 20:17:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:75:2d:9b:35:99:b9:b0:9f:f6:e2:52:6f:99:1c:27:98:2e:3a:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=819AD043A7A2F8424ABC9E6CFD9C518670507FC3
        Validity
            Not Before: Jan 24 12:57:11 2026 GMT
            Not After : Jan 27 20:17:11 2026 GMT
        Subject: CN=EB17E79E5A5677D04F7D2B908C1C7715230522DE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:9a:c6:71:1b:77:cd:4e:e6:69:13:94:bd:79:
                    da:af:7a:54:fd:62:51:f0:03:3f:5a:86:e5:58:f7:
                    b9:b9:25:0f:c4:f8:60:54:ea:a5:8e:33:ae:99:89:
                    cf:72:36:06:16:c3:b0:9c:82:46:fe:d8:d9:15:0a:
                    ad:b3:00:1c:3c:1b:30:2c:ed:75:7a:43:29:13:80:
                    14:9b:14:74:5e:20:bd:c8:c3:b9:b0:a0:37:27:cb:
                    69:46:69:d1:fa:bb:8a:eb:fc:38:d0:60:05:2e:d0:
                    3c:06:4f:03:da:d5:5d:8e:39:3f:60:a5:de:44:a8:
                    63:4d:0e:d7:56:f9:08:f6:a1:cb:3a:b5:be:83:d6:
                    8c:1f:66:16:3f:b1:ee:60:fc:64:67:e5:f7:43:ad:
                    3a:d6:ba:e2:a4:0e:be:43:e2:c6:92:c8:14:2b:f6:
                    ad:4e:7e:ed:80:8a:6e:a1:33:f5:77:35:a8:14:92:
                    5f:b2:0e:41:05:e3:ed:ba:f5:aa:e8:b4:bc:c4:a8:
                    14:43:af:90:5f:90:0d:28:70:a1:d0:63:ae:f7:54:
                    d0:f0:bc:4a:55:8c:52:f0:c8:47:5e:d9:49:5c:30:
                    b5:da:27:08:f3:fb:68:a0:21:c4:87:0e:0b:d3:8a:
                    49:67:02:e1:ee:12:8b:30:d8:b8:c3:88:a8:5d:0e:
                    cc:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:17:E7:9E:5A:56:77:D0:4F:7D:2B:90:8C:1C:77:15:23:05:22:DE
            X509v3 Authority Key Identifier:
                keyid:81:9A:D0:43:A7:A2:F8:42:4A:BC:9E:6C:FD:9C:51:86:70:50:7F:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/cc8d4ee2-549e-4160-8d6f-87730e8ae5e2/0/819AD043A7A2F8424ABC9E6CFD9C518670507FC3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/819AD043A7A2F8424ABC9E6CFD9C518670507FC3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cc8d4ee2-549e-4160-8d6f-87730e8ae5e2/0/819AD043A7A2F8424ABC9E6CFD9C518670507FC3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:84:d2:4a:61:62:d4:1e:91:05:5e:45:a4:e0:c1:21:2d:18:
         4c:a0:03:4f:f5:aa:16:c3:4b:b5:40:d2:b6:08:c7:26:f5:01:
         a6:6b:39:3c:2a:0c:68:be:36:a9:a9:21:18:d3:44:20:76:87:
         72:73:c1:b0:d0:27:2b:a4:52:0b:ab:32:09:14:44:03:19:1a:
         59:88:f6:c4:ca:5b:aa:90:4e:98:38:be:6d:a5:fa:e1:93:9f:
         94:0b:ab:b8:1b:4f:aa:d5:4d:2b:c3:44:a1:38:9d:f8:8c:39:
         26:19:fe:fa:72:6b:d8:ad:a9:91:fc:8a:43:3e:6d:06:16:3b:
         73:7e:96:0d:dd:06:c2:7f:9a:54:96:89:9a:39:69:58:a8:df:
         c2:78:e0:f6:ed:ac:9e:4e:08:0b:66:85:01:44:88:92:c0:3b:
         31:78:ae:7d:ff:fe:17:9e:35:52:af:b1:7f:15:55:97:43:d4:
         3a:01:14:ae:77:e2:52:95:cf:e5:76:29:85:db:85:1b:dd:d0:
         d2:4d:43:a1:b2:69:d2:6a:93:f8:4f:40:9c:dc:33:cf:ed:ef:
         56:e8:f1:88:64:cc:70:22:f4:d9:bf:ef:38:2f:25:1e:03:6f:
         16:1f:8a:27:e0:3a:32:bb:18:d4:58:fc:2d:ea:26:02:f8:04:
         ce:9a:91:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 22:00:45 2026 by rpki-client