This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/ce505319-c33d-434a-abc5-6a61ce853e95/0/6AC58D24855E7FE24AC452B7D0FDDB9BD9003A8B.mft
File:                     6AC58D24855E7FE24AC452B7D0FDDB9BD9003A8B.mft (raw, json)
Hash identifier:          bfK5HaUjO7GeuEjWuGT2aXNJKTUNcKfZoH7RvTJCt2M=
Subject key identifier:   B8:71:61:D8:25:C1:AC:56:F0:1E:AD:57:D6:DA:B1:BB:96:5F:44:AE
Authority key identifier: 6A:C5:8D:24:85:5E:7F:E2:4A:C4:52:B7:D0:FD:DB:9B:D9:00:3A:8B
Certificate issuer:       /CN=6AC58D24855E7FE24AC452B7D0FDDB9BD9003A8B
Certificate serial:       1477D1141B20D8063A04D48E216D60BB26ADCA88
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6AC58D24855E7FE24AC452B7D0FDDB9BD9003A8B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/ce505319-c33d-434a-abc5-6a61ce853e95/0/6AC58D24855E7FE24AC452B7D0FDDB9BD9003A8B.mft
Manifest number:          021E
Signing time:             Sat 24 Jan 2026 21:12:25 +0000
Manifest this update:     Sat 24 Jan 2026 21:07:25 +0000
Manifest next update:     Wed 28 Jan 2026 05:19:25 +0000
Files and hashes:         1: 6AC58D24855E7FE24AC452B7D0FDDB9BD9003A8B.crl (hash: pWNRbFeyl2yxTEc7ejRHOZ6JT5lL9kQvpnRUTkj3srE=)
                          2: 3130332e3135342e37342e302f32342d3234203d3e20313430343830.roa (hash: 9yEpf7UptHKPtJGMSNZGjTG/u5N0H8I6F7MGckJB2CA=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/ce505319-c33d-434a-abc5-6a61ce853e95/0/6AC58D24855E7FE24AC452B7D0FDDB9BD9003A8B.crl
                          rsync://repo-rpki.idnic.net/repo/ce505319-c33d-434a-abc5-6a61ce853e95/0/6AC58D24855E7FE24AC452B7D0FDDB9BD9003A8B.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6AC58D24855E7FE24AC452B7D0FDDB9BD9003A8B.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 28 Jan 2026 05:19:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:77:d1:14:1b:20:d8:06:3a:04:d4:8e:21:6d:60:bb:26:ad:ca:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6AC58D24855E7FE24AC452B7D0FDDB9BD9003A8B
        Validity
            Not Before: Jan 24 21:07:25 2026 GMT
            Not After : Jan 28 05:19:25 2026 GMT
        Subject: CN=B87161D825C1AC56F01EAD57D6DAB1BB965F44AE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:c9:40:cf:e2:7e:97:1d:fd:88:75:4d:e5:2e:
                    d3:28:19:80:2f:c9:4d:a4:41:33:e3:35:bf:b9:3d:
                    60:b8:1e:64:e3:21:ee:26:e7:f8:8e:06:20:97:ed:
                    6c:3c:b4:6b:17:35:9e:c6:5b:1d:d9:f1:2d:49:44:
                    43:71:7b:e4:23:b1:3a:b4:0a:9b:b1:f2:eb:02:f4:
                    f9:11:f1:9f:a1:5b:4e:b8:2b:c2:7f:f4:63:de:39:
                    09:5d:68:bb:f1:ac:ee:2e:e3:ee:e7:7f:3a:14:3d:
                    22:de:a0:e8:8e:ef:99:15:46:ab:00:13:40:9d:23:
                    14:83:1b:3f:87:b1:c6:de:00:05:3b:cd:6a:1f:16:
                    af:d7:47:e1:2c:72:f5:13:71:6a:bd:be:ef:ee:56:
                    e0:92:2e:20:58:67:1f:e3:57:75:10:eb:4c:9a:c2:
                    ea:b9:4c:af:52:ba:c4:48:f6:79:64:71:e1:e6:df:
                    96:8f:37:6b:a6:35:cb:98:1e:47:70:92:6b:72:92:
                    67:7b:93:21:21:3a:b7:af:66:14:63:9f:c1:3e:2e:
                    b6:df:11:c7:ca:87:e0:b3:6c:f7:50:75:a0:1e:7f:
                    ac:75:59:80:06:31:68:8f:ee:ce:c6:b7:39:f6:8a:
                    df:83:9a:9d:ea:6d:3e:28:4d:1f:7b:88:24:99:30:
                    07:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:71:61:D8:25:C1:AC:56:F0:1E:AD:57:D6:DA:B1:BB:96:5F:44:AE
            X509v3 Authority Key Identifier:
                keyid:6A:C5:8D:24:85:5E:7F:E2:4A:C4:52:B7:D0:FD:DB:9B:D9:00:3A:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/ce505319-c33d-434a-abc5-6a61ce853e95/0/6AC58D24855E7FE24AC452B7D0FDDB9BD9003A8B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6AC58D24855E7FE24AC452B7D0FDDB9BD9003A8B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ce505319-c33d-434a-abc5-6a61ce853e95/0/6AC58D24855E7FE24AC452B7D0FDDB9BD9003A8B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cd:1a:3b:40:29:10:42:00:95:70:39:6f:26:81:5d:e4:0f:d0:
         6d:64:96:10:e9:4b:35:a7:97:30:9f:83:be:b0:a9:01:7a:b8:
         fd:14:d3:2a:45:ab:2d:e6:09:d6:39:de:9b:22:c2:40:82:6a:
         4c:85:56:3f:7b:b2:e1:de:74:26:25:a4:38:69:68:f9:fa:8e:
         8c:e5:40:da:93:80:a0:1d:cf:3c:ca:2a:3d:c2:11:9f:c5:e3:
         20:fe:c4:91:e9:90:d4:9e:64:65:b3:62:ca:99:18:5a:7e:f6:
         e5:2a:63:d4:b9:9e:83:6b:e6:57:3f:9e:e2:1c:b1:f8:5c:b0:
         5e:05:1a:54:f2:db:9c:1f:e2:cd:85:5a:9a:48:0f:a8:30:81:
         7b:7d:99:8f:c9:05:64:07:77:3f:38:55:86:d1:2c:ef:a9:59:
         c5:f3:fd:58:ad:9b:12:77:a6:d3:33:4f:cf:3d:36:6c:c0:1a:
         e0:eb:a3:18:8c:c9:29:9d:2e:61:ec:12:c4:e4:4c:e9:42:dc:
         21:5e:ac:1d:7b:59:0e:1d:1b:3d:d0:09:ed:d6:79:cf:fc:bd:
         22:22:c5:a3:02:1e:47:54:ad:01:4e:ac:b8:24:ce:82:49:78:
         c8:bd:5e:60:b6:9c:f8:9f:d0:b4:8a:3d:10:6b:69:79:5c:83:
         e0:1c:de:89
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUFHfRFBsg2AY6BNSOIW1guyatyogwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkFDNThEMjQ4NTVFN0ZFMjRBQzQ1MkI3RDBGRERCOUJE
OTAwM0E4QjAeFw0yNjAxMjQyMTA3MjVaFw0yNjAxMjgwNTE5MjVaMDMxMTAvBgNV
BAMTKEI4NzE2MUQ4MjVDMUFDNTZGMDFFQUQ1N0Q2REFCMUJCOTY1RjQ0QUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD1yUDP4n6XHf2IdU3lLtMoGYAv
yU2kQTPjNb+5PWC4HmTjIe4m5/iOBiCX7Ww8tGsXNZ7GWx3Z8S1JRENxe+QjsTq0
Cpux8usC9PkR8Z+hW064K8J/9GPeOQldaLvxrO4u4+7nfzoUPSLeoOiO75kVRqsA
E0CdIxSDGz+HscbeAAU7zWofFq/XR+EscvUTcWq9vu/uVuCSLiBYZx/jV3UQ60ya
wuq5TK9SusRI9nlkceHm35aPN2umNcuYHkdwkmtykmd7kyEhOrevZhRjn8E+Lrbf
EcfKh+CzbPdQdaAef6x1WYAGMWiP7s7Gtzn2it+Dmp3qbT4oTR97iCSZMAelAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUuHFh2CXBrFbwHq1X1tqxu5ZfRK4wHwYDVR0j
BBgwFoAUasWNJIVef+JKxFK30P3bm9kAOoswDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j
ZTUwNTMxOS1jMzNkLTQzNGEtYWJjNS02YTYxY2U4NTNlOTUvMC82QUM1OEQyNDg1
NUU3RkUyNEFDNDUyQjdEMEZEREI5QkQ5MDAzQThCLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNkFDNThEMjQ4NTVFN0ZFMjRBQzQ1MkI3RDBGRERCOUJEOTAw
M0E4Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2U1MDUzMTktYzMzZC00MzRhLWFi
YzUtNmE2MWNlODUzZTk1LzAvNkFDNThEMjQ4NTVFN0ZFMjRBQzQ1MkI3RDBGRERC
OUJEOTAwM0E4Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAM0aO0ApEEIAlXA5byaBXeQP0G1klhDpSzWn
lzCfg76wqQF6uP0U0ypFqy3mCdY53psiwkCCakyFVj97suHedCYlpDhpaPn6jozl
QNqTgKAdzzzKKj3CEZ/F4yD+xJHpkNSeZGWzYsqZGFp+9uUqY9S5noNr5lc/nuIc
sfhcsF4FGlTy25wf4s2FWppID6gwgXt9mY/JBWQHdz84VYbRLO+pWcXz/VitmxJ3
ptMzT889NmzAGuDroxiMySmdLmHsEsTkTOlC3CFerB17WQ4dGz3QCe3Wec/8vSIi
xaMCHkdUrQFOrLgkzoJJeMi9XmC2nPif0LSKPRBraXlcg+Ac3ok=
-----END CERTIFICATE-----
Generated at Sun Jan 25 18:57:49 2026 by rpki-client