This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/ccbcc00d-ce79-4216-a62b-e3d50cc79442/0/9973E5D6F7F65DCF015E9DAFCEF394F512E4FD61.mft
File:                     9973E5D6F7F65DCF015E9DAFCEF394F512E4FD61.mft (raw, json)
Hash identifier:          7TEP/5bA6CNiYllMuLkbY11lvPTbT1ANzwr10pNEsvI=
Subject key identifier:   CD:05:39:69:CA:D3:29:19:4F:FA:32:02:3D:A7:11:5D:37:3A:4E:F4
Authority key identifier: 99:73:E5:D6:F7:F6:5D:CF:01:5E:9D:AF:CE:F3:94:F5:12:E4:FD:61
Certificate issuer:       /CN=9973E5D6F7F65DCF015E9DAFCEF394F512E4FD61
Certificate serial:       627C6BB9184A72413C48C8AA2F89A5286ED36708
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9973E5D6F7F65DCF015E9DAFCEF394F512E4FD61.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/ccbcc00d-ce79-4216-a62b-e3d50cc79442/0/9973E5D6F7F65DCF015E9DAFCEF394F512E4FD61.mft
Manifest number:          0558
Signing time:             Sun 25 Jan 2026 17:50:51 +0000
Manifest this update:     Sun 25 Jan 2026 17:45:51 +0000
Manifest next update:     Wed 28 Jan 2026 23:31:51 +0000
Files and hashes:         1: 9973E5D6F7F65DCF015E9DAFCEF394F512E4FD61.crl (hash: 089wZjsIAzjLdK5N4F5sNvEu6zk5rYjLwb32AWVpcgg=)
                          2: 3130332e3234312e3137392e302f32342d3234203d3e203435323839.roa (hash: dZG8PuN4hDz7vnWbBJwf0vedp1FXcfJd17aOP8ITVq4=)
                          3: 3132302e38392e38382e302f32342d3234203d3e203435323839.roa (hash: zV6VOfyU7gHl6iq1/boiJwTObcVc0Um3Mv8W2+pcczY=)
                          4: 3130332e332e35392e302f32342d3234203d3e203435323839.roa (hash: fmCDQtKS2ftUrbPcEbad1XBtr6cEi/QP2/W3MlVCX1c=)
                          5: 323430323a613130303a3a2f33322d3332203d3e203435323839.roa (hash: E3+NRC3VjXItTWrq3I3RCmXGmxhXv0rFF7yaUnokJmY=)
                          6: 3230332e3134382e38352e302f32342d3234203d3e203435323839.roa (hash: qaFCPFspiQeiO/D4iLrD1q+n5cnqG21DWLl7U5yS6HU=)
                          7: 3230332e3134382e38342e302f32342d3234203d3e203435323839.roa (hash: VArGluacjPIXzb+nl1+PqiIKNzHKscV2RQj2F/IjCew=)
                          8: 3132302e38392e38392e302f32342d3234203d3e203435323839.roa (hash: z6RH1urHvz4DWcpVUdgKl8GebYPf5sPgLD/rSpRR2GM=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/ccbcc00d-ce79-4216-a62b-e3d50cc79442/0/9973E5D6F7F65DCF015E9DAFCEF394F512E4FD61.crl
                          rsync://repo-rpki.idnic.net/repo/ccbcc00d-ce79-4216-a62b-e3d50cc79442/0/9973E5D6F7F65DCF015E9DAFCEF394F512E4FD61.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9973E5D6F7F65DCF015E9DAFCEF394F512E4FD61.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 28 Jan 2026 14:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:7c:6b:b9:18:4a:72:41:3c:48:c8:aa:2f:89:a5:28:6e:d3:67:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9973E5D6F7F65DCF015E9DAFCEF394F512E4FD61
        Validity
            Not Before: Jan 25 17:45:51 2026 GMT
            Not After : Jan 28 23:31:51 2026 GMT
        Subject: CN=CD053969CAD329194FFA32023DA7115D373A4EF4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:c9:4e:d8:8e:a9:ec:e4:f2:09:f3:56:d0:db:
                    d7:8c:fc:6e:46:1b:0b:05:db:53:d6:dd:2f:35:61:
                    ae:6b:ef:31:34:fd:d5:6e:d7:1d:e0:6d:f9:ab:c4:
                    75:8f:0f:80:f4:da:98:74:01:37:e1:f0:76:92:4e:
                    42:21:d0:9c:af:d3:a6:90:bc:93:2f:70:25:e6:2e:
                    28:bb:a4:86:a3:22:d9:df:12:2c:22:0f:72:92:88:
                    25:54:40:7a:b4:45:58:61:4c:44:19:d6:23:01:ab:
                    78:20:ee:e8:5f:91:74:56:27:9f:87:cc:c3:c3:f2:
                    28:c5:85:83:dc:97:45:da:48:d8:90:11:6f:81:89:
                    61:69:ce:5e:1a:13:58:dd:a2:2a:18:3b:e6:bb:95:
                    d0:90:77:79:17:00:2a:f5:e6:10:3d:98:09:01:be:
                    e0:c1:d1:f1:2e:79:1d:77:75:8a:52:ab:b9:c9:3c:
                    4f:98:0b:b3:62:1c:25:b7:f5:85:75:d5:7b:ef:92:
                    f8:5c:3d:b9:fa:d7:1e:e0:31:e4:b6:b4:54:04:6c:
                    62:d8:a3:db:c8:19:55:0b:4b:8c:d2:10:dc:2a:71:
                    a3:a8:7e:09:3e:de:6e:5b:a4:3c:c1:92:4c:15:ac:
                    a1:21:d6:99:cf:05:67:c3:f4:43:16:02:8d:f6:5b:
                    e3:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:05:39:69:CA:D3:29:19:4F:FA:32:02:3D:A7:11:5D:37:3A:4E:F4
            X509v3 Authority Key Identifier:
                keyid:99:73:E5:D6:F7:F6:5D:CF:01:5E:9D:AF:CE:F3:94:F5:12:E4:FD:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/ccbcc00d-ce79-4216-a62b-e3d50cc79442/0/9973E5D6F7F65DCF015E9DAFCEF394F512E4FD61.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9973E5D6F7F65DCF015E9DAFCEF394F512E4FD61.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ccbcc00d-ce79-4216-a62b-e3d50cc79442/0/9973E5D6F7F65DCF015E9DAFCEF394F512E4FD61.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:a4:13:e0:ce:1b:93:3c:6d:51:84:50:fb:21:d1:1e:53:09:
         9f:14:33:d0:7f:0f:08:f7:fa:29:81:2e:89:d8:12:1c:6b:2e:
         2d:13:02:c5:af:85:e5:fa:44:f6:5b:b7:b7:30:41:0d:c5:f9:
         33:d9:6d:bf:01:81:53:68:49:db:63:5d:cc:bd:ae:90:be:e9:
         df:73:75:58:2b:dd:02:ef:12:c6:a1:e7:a9:b7:ee:36:aa:98:
         c4:d9:e8:a3:67:92:e4:e6:a7:63:aa:57:73:f5:4f:57:82:ff:
         55:ba:33:2d:08:62:9b:e7:ba:35:c5:19:71:b3:5e:2e:17:e3:
         ac:84:0d:eb:c7:34:97:26:f1:f6:17:a3:c8:90:30:e3:1f:80:
         5e:cc:c0:6f:01:0b:a4:f3:ac:ce:e2:04:1c:ce:42:53:fb:a8:
         6a:df:8f:f3:35:0e:6e:b5:0a:ad:a5:b2:d7:fa:12:ea:cd:bd:
         2c:82:6a:c5:d8:7d:f4:68:5d:a1:59:84:f6:6a:bd:9d:3b:7e:
         b6:f7:20:8a:37:7e:bb:36:3c:85:08:66:0c:1b:d3:9e:e5:06:
         a8:5d:0b:39:83:3d:62:09:50:80:51:2c:b5:5d:f7:66:c8:8a:
         9c:45:3a:7a:87:a2:8a:21:a2:de:96:ab:61:b4:68:59:4c:99:
         0c:7a:88:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 20:08:28 2026 by rpki-client