This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/d07471a3-ee53-499c-9f2d-cf16b1e4a353/0/882209E37356E0512FBE4E81B00E4F2481865087.mft
File:                     882209E37356E0512FBE4E81B00E4F2481865087.mft (raw, json)
Hash identifier:          9rwL/KZSwZf76SUIrfVzOzabdWK7cLZJLb1YjBF+o7I=
Subject key identifier:   35:C2:35:9D:A4:44:22:5B:3B:D2:46:EC:73:69:5B:0F:01:C2:AD:80
Authority key identifier: 88:22:09:E3:73:56:E0:51:2F:BE:4E:81:B0:0E:4F:24:81:86:50:87
Certificate issuer:       /CN=882209E37356E0512FBE4E81B00E4F2481865087
Certificate serial:       3D43776C6CF3CB165155D8377E2AA0BB8FF81844
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/882209E37356E0512FBE4E81B00E4F2481865087.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/d07471a3-ee53-499c-9f2d-cf16b1e4a353/0/882209E37356E0512FBE4E81B00E4F2481865087.mft
Manifest number:          0542
Signing time:             Sat 24 Jan 2026 19:32:14 +0000
Manifest this update:     Sat 24 Jan 2026 19:27:14 +0000
Manifest next update:     Wed 28 Jan 2026 03:54:14 +0000
Files and hashes:         1: 323430313a313063303a343030303a3a2f33342d3334203d3e20313331373137.roa (hash: sH9AL8idt6oa1DBw1y1K2NRJOkrnep4hXxdB09oly/A=)
                          2: 3130332e32352e3136362e302f32332d3233203d3e20313331373137.roa (hash: GuM7P7x/u39aCvmJkxVuMlpYCmbP89xnoCs5WogcWI4=)
                          3: 34352e3131382e3131332e302f32342d3234203d3e20313331373137.roa (hash: fWpUZJchVDwudRJxgK1oYcEU6iSSZ9RgPdltpwuInA8=)
                          4: 34352e3131382e3131322e302f32332d3233203d3e20313331373137.roa (hash: GNr97+CgZOUFbCIDGfnRBjjUL8CMyp0MB4VIgO96YwM=)
                          5: 3130332e32352e3136372e302f32342d3234203d3e20313331373137.roa (hash: ILfqmoxfXPHlh8GmZbUT7jZa6GPfE6TlAFjcXTufWHY=)
                          6: 3130332e31342e32312e302f32342d3234203d3e20313331373137.roa (hash: 5In45d5yPgAgu4EKrWednA3s/tNDYrqkLBEAtmGlKjI=)
                          7: 323430313a313063303a633030303a3a2f33342d3334203d3e20313331373137.roa (hash: upfq/Ll023pCAPQGTeGs2hbSXasfCV07dRWvMTFoCJY=)
                          8: 34352e3131382e3131322e302f32322d3232203d3e20313331373137.roa (hash: 4exgwdcQ1exTycgJCK/gqBNOkO+g3t+MeUPzY4BXBs4=)
                          9: 323430313a313063303a383030303a3a2f33342d3334203d3e20313331373137.roa (hash: s/GWk0rnx1fQe+9N5/NiE2vZ64ixoUOqYZCvVVS5fa4=)
                          10: 34352e3131382e3131342e302f32332d3233203d3e20313331373137.roa (hash: MdJ8RxR8ZYDVXBT9P8fF751Cc4xL7JgxekzcB9xdKx0=)
                          11: 3130332e31342e32302e302f32332d3233203d3e20313331373137.roa (hash: RohtMVPp7ZjWT76AR25hywvAjC+yVkxy154FLnUsdBk=)
                          12: 34352e3131382e3131322e302f32342d3234203d3e20313331373137.roa (hash: TUhhdvGp1LOiLtnysRzIGChLZFMNnT5PF4OEU6rQz1g=)
                          13: 3130332e32352e3136362e302f32342d3234203d3e20313331373137.roa (hash: ae/dG+5qLBYT7KzQliS37oy8tODqNSMPLH4vHatbgLA=)
                          14: 3130332e31342e32302e302f32342d3234203d3e20313331373137.roa (hash: 4YSDNpw3vRi1ZpYELRMW9RHjucU5y6DLjYnJw7lk5Lw=)
                          15: 34352e3131382e3131342e302f32342d3234203d3e20313331373137.roa (hash: yQorJw+u2n8BFPvZbej71Ji8nM/16g2mSwkEj1PF54g=)
                          16: 323430313a313063303a3a2f33342d3334203d3e20313331373137.roa (hash: njg/qVMnSFnXNm23LFJOAC9Brxk9FM9096rC9yQ0CXk=)
                          17: 882209E37356E0512FBE4E81B00E4F2481865087.crl (hash: g0I2r+B16bD5cpAfRYHITSjeBrrnel1B5w7Jt3UePtU=)
                          18: 323430313a313063303a3a2f33322d3332203d3e20313331373137.roa (hash: UtJFn8cjB9oRRuew5QEOrcUcIRIAJ+KfKoJMwxwZf1I=)
                          19: 34352e3131382e3131352e302f32342d3234203d3e20313331373137.roa (hash: sxL8WI3UrWSTsLdgL4krtb4YzuPS2/H7rwpNl9kG2s8=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/d07471a3-ee53-499c-9f2d-cf16b1e4a353/0/882209E37356E0512FBE4E81B00E4F2481865087.crl
                          rsync://repo-rpki.idnic.net/repo/d07471a3-ee53-499c-9f2d-cf16b1e4a353/0/882209E37356E0512FBE4E81B00E4F2481865087.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/882209E37356E0512FBE4E81B00E4F2481865087.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 28 Jan 2026 03:54:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:43:77:6c:6c:f3:cb:16:51:55:d8:37:7e:2a:a0:bb:8f:f8:18:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=882209E37356E0512FBE4E81B00E4F2481865087
        Validity
            Not Before: Jan 24 19:27:14 2026 GMT
            Not After : Jan 28 03:54:14 2026 GMT
        Subject: CN=35C2359DA444225B3BD246EC73695B0F01C2AD80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:80:49:99:db:ae:c2:7c:82:00:09:b8:6a:1f:
                    b5:4a:58:e8:bf:24:47:93:0c:cf:c5:c4:29:80:59:
                    8e:03:38:88:e1:3a:ce:48:a6:5d:7f:f8:88:5f:83:
                    82:c1:60:be:ee:1a:c1:aa:c6:91:f5:58:79:ca:d4:
                    7f:33:23:55:9c:10:4f:6f:d7:0f:b0:5f:5b:b5:59:
                    30:9d:6b:ba:bd:c8:87:d4:09:6c:fd:ae:43:fe:38:
                    fa:77:60:7d:41:55:66:d3:7d:66:98:95:3d:41:ae:
                    33:96:99:63:5d:4c:fe:e2:fb:77:cb:db:e6:07:ff:
                    a7:c6:f6:2f:02:1a:f2:f2:63:00:2d:29:e3:ea:55:
                    c4:3f:c6:3f:25:20:23:e8:74:58:5b:c2:40:50:85:
                    7c:91:7a:d6:5f:92:34:2f:cd:ff:6f:21:7d:86:22:
                    a2:61:75:1c:da:b0:4b:6b:1b:ed:a1:7e:1f:d7:16:
                    c8:4a:c2:91:b1:5b:0a:93:5b:b9:96:be:e8:01:25:
                    70:5d:da:76:e3:fa:96:9b:8e:a0:36:e0:86:a3:e2:
                    5f:8e:19:9c:25:e2:90:00:28:a5:68:eb:74:35:98:
                    0f:f7:7d:c8:36:ca:26:4b:03:19:4d:9a:d9:4e:80:
                    ee:df:af:eb:0e:4f:3e:73:41:ed:9a:2c:2f:4f:78:
                    d6:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:C2:35:9D:A4:44:22:5B:3B:D2:46:EC:73:69:5B:0F:01:C2:AD:80
            X509v3 Authority Key Identifier:
                keyid:88:22:09:E3:73:56:E0:51:2F:BE:4E:81:B0:0E:4F:24:81:86:50:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/d07471a3-ee53-499c-9f2d-cf16b1e4a353/0/882209E37356E0512FBE4E81B00E4F2481865087.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/882209E37356E0512FBE4E81B00E4F2481865087.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d07471a3-ee53-499c-9f2d-cf16b1e4a353/0/882209E37356E0512FBE4E81B00E4F2481865087.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b7:b3:5f:ef:5c:e2:14:c3:da:8b:ed:db:05:90:46:23:1e:3b:
         fd:b6:28:e3:62:11:9b:ef:27:6a:26:2a:1f:94:7d:f2:3e:74:
         71:6e:7a:54:9c:ef:40:25:a0:d6:c1:36:65:54:bc:94:c1:94:
         f5:6f:83:f5:04:46:ac:d3:e1:f0:15:f4:18:4c:6d:ce:a0:42:
         26:98:f4:44:36:36:a5:2d:dd:a3:da:92:e3:f4:95:be:8f:73:
         fa:35:13:46:f9:1a:7d:d3:5b:e0:dd:bd:92:8e:42:05:ed:6d:
         5a:1f:2f:7b:c5:19:5b:fe:fc:d6:6c:e6:9f:bc:fe:9e:61:5c:
         6b:7b:4c:d1:50:ab:d4:dc:d5:ae:30:53:db:48:93:29:20:76:
         f7:53:ce:c2:01:00:e2:3f:cf:48:20:0e:6d:ec:47:92:93:75:
         e8:0d:2c:77:1c:c6:90:99:d4:ef:33:3c:ce:36:5f:98:c5:35:
         8c:0a:09:a5:84:2b:6e:1d:48:ae:b7:a3:fa:9e:0a:11:d3:9a:
         cc:68:23:13:a5:1a:16:69:da:69:5a:ca:36:94:61:69:0d:89:
         b3:67:ad:96:83:c4:e0:c4:87:0e:bc:67:09:26:9a:30:8c:df:
         4c:01:51:91:50:3b:66:fa:46:c1:9e:dc:11:9c:fc:a2:a9:03:
         ef:d0:88:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 21:49:04 2026 by rpki-client