This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/ccf68aba-9515-4d12-aac2-8cee5db2a48f/0/C3F80A35C1C6877BBE49719B908D029FBFCDDBB0.mft
File:                     C3F80A35C1C6877BBE49719B908D029FBFCDDBB0.mft (raw, json)
Hash identifier:          eiKSUSCP7393PHD0jU70XAJjT0Pw6I/A+I8W/kNlt+A=
Subject key identifier:   6B:44:55:F3:48:48:84:F0:E9:68:B7:2D:FC:73:5E:21:10:61:53:B5
Authority key identifier: C3:F8:0A:35:C1:C6:87:7B:BE:49:71:9B:90:8D:02:9F:BF:CD:DB:B0
Certificate issuer:       /CN=C3F80A35C1C6877BBE49719B908D029FBFCDDBB0
Certificate serial:       23DC72D63C9DFDC90C71AB257D74D975FD4D76BB
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C3F80A35C1C6877BBE49719B908D029FBFCDDBB0.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/ccf68aba-9515-4d12-aac2-8cee5db2a48f/0/C3F80A35C1C6877BBE49719B908D029FBFCDDBB0.mft
Manifest number:          0553
Signing time:             Sun 25 Jan 2026 15:42:23 +0000
Manifest this update:     Sun 25 Jan 2026 15:37:23 +0000
Manifest next update:     Wed 28 Jan 2026 23:55:23 +0000
Files and hashes:         1: 323430343a343863303a3a2f33322d3332203d3e20313338313334.roa (hash: /uE3RoNjstpZuWvkeLBYaDpbs3/pa2JGUNOwerwb9Qk=)
                          2: C3F80A35C1C6877BBE49719B908D029FBFCDDBB0.crl (hash: U0q/gVCZ94R8Z7FI869rfQaxYh+GACcxzdn8plx2qyk=)
                          3: 3130332e3133332e36302e302f32322d3232203d3e20313338313334.roa (hash: 1FGJd6AqSTK9oY+Kf0u0bGP0qcgnLzetRfPl9A2Bh4w=)
                          4: 3130332e3133332e36322e302f32342d3234203d3e20313338313334.roa (hash: hXWJa8fVoj0vzNayNv76Qv76zEys5r5KfZWHwpWNqSA=)
                          5: 3130332e3133332e36332e302f32342d3234203d3e20313338313334.roa (hash: M4zMEE4gM9B2z9mzotuldgSgaCKFtNvfP7tGSiFjQks=)
                          6: 3130332e3133332e36312e302f32342d3234203d3e20313338313334.roa (hash: fEqrWk5yzRrIfC/NwZzR4O5o8YjE++0relBMS0Qsam4=)
                          7: 3130332e3133332e36302e302f32342d3234203d3e20313338313334.roa (hash: amdqV6lzMAC4zxO9RwYxm18VuzSqbFKiq2hPtX/elIw=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/ccf68aba-9515-4d12-aac2-8cee5db2a48f/0/C3F80A35C1C6877BBE49719B908D029FBFCDDBB0.crl
                          rsync://repo-rpki.idnic.net/repo/ccf68aba-9515-4d12-aac2-8cee5db2a48f/0/C3F80A35C1C6877BBE49719B908D029FBFCDDBB0.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C3F80A35C1C6877BBE49719B908D029FBFCDDBB0.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 28 Jan 2026 14:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:dc:72:d6:3c:9d:fd:c9:0c:71:ab:25:7d:74:d9:75:fd:4d:76:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C3F80A35C1C6877BBE49719B908D029FBFCDDBB0
        Validity
            Not Before: Jan 25 15:37:23 2026 GMT
            Not After : Jan 28 23:55:23 2026 GMT
        Subject: CN=6B4455F3484884F0E968B72DFC735E21106153B5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:ba:d6:e6:f1:4b:71:1f:7a:4f:46:64:e5:a3:
                    34:51:7e:74:59:6a:b5:79:d8:71:2d:bb:82:59:69:
                    37:04:47:b5:ee:c8:a4:dc:ed:6c:a5:19:5c:c4:68:
                    64:e8:c5:24:61:69:f4:09:8e:ed:4f:d6:9e:9e:a8:
                    39:70:8c:86:0d:03:96:a4:bc:05:c4:db:53:7b:96:
                    46:57:85:9b:eb:2b:ac:72:cc:c8:b1:c0:25:b6:cb:
                    fa:47:6d:22:8e:c4:1d:a7:1d:b6:c9:22:02:f4:ab:
                    38:82:51:3e:42:29:7e:e9:54:29:1e:31:4c:da:b4:
                    77:f7:d6:9a:c5:61:29:d3:e5:c0:e9:0a:64:56:d4:
                    ed:6e:e9:8d:05:7a:39:f4:f5:40:94:9e:cf:89:39:
                    07:77:6a:a3:54:45:3f:07:a3:2a:25:ba:29:9b:0c:
                    fc:ed:a2:08:3f:94:03:c8:f4:40:e2:cd:28:77:91:
                    97:aa:05:83:7e:18:d2:1d:06:38:01:fc:92:ca:81:
                    36:6b:6f:6f:88:91:7b:9f:4a:15:55:13:bf:5a:92:
                    a7:87:93:74:a8:42:94:29:31:e6:65:90:13:9a:76:
                    97:55:04:15:4e:28:d8:71:f8:b3:74:6a:35:72:bc:
                    98:bf:15:d9:32:90:47:e8:be:71:d4:58:f5:97:9f:
                    99:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:44:55:F3:48:48:84:F0:E9:68:B7:2D:FC:73:5E:21:10:61:53:B5
            X509v3 Authority Key Identifier:
                keyid:C3:F8:0A:35:C1:C6:87:7B:BE:49:71:9B:90:8D:02:9F:BF:CD:DB:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/ccf68aba-9515-4d12-aac2-8cee5db2a48f/0/C3F80A35C1C6877BBE49719B908D029FBFCDDBB0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C3F80A35C1C6877BBE49719B908D029FBFCDDBB0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ccf68aba-9515-4d12-aac2-8cee5db2a48f/0/C3F80A35C1C6877BBE49719B908D029FBFCDDBB0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:e8:d2:90:50:1c:50:8c:62:f1:90:96:27:40:17:a7:ff:c6:
         aa:66:dc:c7:56:38:f9:b3:ab:a1:2c:4a:10:14:f3:68:eb:5d:
         8e:08:ab:32:b0:67:d5:17:45:74:24:f8:88:c2:04:d6:58:16:
         09:1b:d4:e5:e0:91:32:f9:df:af:78:d8:f0:1b:dc:f0:1c:60:
         ca:a6:6a:5c:df:3d:19:e3:6d:7f:ed:87:27:6b:04:ff:53:af:
         0b:bd:d8:57:f5:5b:da:89:98:13:8a:45:88:8a:88:ba:14:90:
         98:1d:42:48:5a:45:3a:ec:b5:da:46:da:5b:b3:97:4f:5e:39:
         a1:e6:b1:9f:82:4c:5f:04:44:68:49:5b:87:91:68:42:0b:c5:
         8b:62:bb:2e:3d:82:32:7d:07:71:99:1d:54:fa:08:2a:55:16:
         06:c5:f2:45:c7:87:c2:4f:4f:9e:05:9b:4e:f9:1b:6b:92:10:
         f6:9a:c2:f9:d6:69:f8:5a:fa:54:76:16:e7:04:17:b9:61:82:
         71:8f:c5:55:01:b6:7c:a4:de:41:1f:f0:18:0a:29:39:af:48:
         b7:24:6d:8f:14:41:fd:38:49:4d:23:e8:bc:7f:01:bf:5a:a5:
         4c:e6:4f:e1:30:cc:7a:00:47:60:0a:99:5a:64:7a:0b:35:02:
         4c:94:04:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:52:37 2026 by rpki-client