This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/d159a362-950c-45c2-aecc-82b214bce474/0/3C6D7485D61AD54226152E5D8A813D70E34D29AB.mft
File:                     3C6D7485D61AD54226152E5D8A813D70E34D29AB.mft (raw, json)
Hash identifier:          wpb0Tk6aUMwY67/aA5r2qMXQnnvAuqDc1dtxGya7Ehk=
Subject key identifier:   0C:CE:EC:81:CE:CA:FC:5B:C5:B3:80:CB:EB:02:31:14:83:81:5E:6A
Authority key identifier: 3C:6D:74:85:D6:1A:D5:42:26:15:2E:5D:8A:81:3D:70:E3:4D:29:AB
Certificate issuer:       /CN=3C6D7485D61AD54226152E5D8A813D70E34D29AB
Certificate serial:       6D0FD4EA535D1B2BD586B6F8F4D9FB21F8CCD280
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/3C6D7485D61AD54226152E5D8A813D70E34D29AB.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/d159a362-950c-45c2-aecc-82b214bce474/0/3C6D7485D61AD54226152E5D8A813D70E34D29AB.mft
Manifest number:          012B
Signing time:             Sat 24 Jan 2026 07:50:56 +0000
Manifest this update:     Sat 24 Jan 2026 07:45:56 +0000
Manifest next update:     Tue 27 Jan 2026 17:43:56 +0000
Files and hashes:         1: 3C6D7485D61AD54226152E5D8A813D70E34D29AB.crl (hash: kr+ZnzMgCcAECeSRCQpvnmrr1WodtZDg13XiBjlH34A=)
                          2: 3135372e32302e3135382e302f32332d3233203d3e20313431313230.roa (hash: uyjSRskgL9BJCMKxVifWZ7TJaXQpE36bCbtIhaZsOr4=)
                          3: 3135372e32302e3135392e302f32342d3234203d3e20313431313230.roa (hash: gfWNy9lIc/MVIMgNjSxC32IkW0PrSYj/0GoqdaAmvtI=)
                          4: 3135372e32302e3135382e302f32342d3234203d3e20313431313230.roa (hash: YasvvxbCzsiYxjm39PQuEFNka/y9AUBvJZG9vLwVOCc=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/d159a362-950c-45c2-aecc-82b214bce474/0/3C6D7485D61AD54226152E5D8A813D70E34D29AB.crl
                          rsync://repo-rpki.idnic.net/repo/d159a362-950c-45c2-aecc-82b214bce474/0/3C6D7485D61AD54226152E5D8A813D70E34D29AB.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/3C6D7485D61AD54226152E5D8A813D70E34D29AB.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 27 Jan 2026 17:43:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:0f:d4:ea:53:5d:1b:2b:d5:86:b6:f8:f4:d9:fb:21:f8:cc:d2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3C6D7485D61AD54226152E5D8A813D70E34D29AB
        Validity
            Not Before: Jan 24 07:45:56 2026 GMT
            Not After : Jan 27 17:43:56 2026 GMT
        Subject: CN=0CCEEC81CECAFC5BC5B380CBEB02311483815E6A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:71:eb:18:9d:1c:1f:13:f1:08:da:64:91:99:
                    0e:5d:39:64:30:3c:9c:20:7e:33:f9:84:38:b4:5f:
                    65:c3:a0:65:af:d4:87:fe:59:6e:ab:49:39:48:9c:
                    0b:79:68:23:e4:29:15:92:a9:c2:b6:69:1a:d5:d9:
                    a0:d2:74:69:ac:2b:a8:36:92:56:30:e7:fb:e2:94:
                    94:af:c4:64:cb:15:84:fa:dd:40:98:81:72:3c:7e:
                    4d:fe:6c:43:02:f8:d1:24:7f:d4:e3:85:af:66:36:
                    ad:2b:b8:e8:ee:21:f6:9d:b8:7c:88:ea:71:42:0b:
                    21:e5:d5:20:6d:5f:37:ba:4a:11:6e:40:23:1a:f0:
                    9d:e9:b1:d3:7a:2b:fd:1e:7f:5d:ef:17:ce:a2:f1:
                    99:08:78:cb:e0:41:77:b1:78:cc:cf:d4:2c:66:36:
                    4c:c3:15:e7:9c:26:71:52:7f:22:9a:51:85:7a:68:
                    d5:6e:a1:7b:b5:6a:e7:25:ac:65:b4:86:08:d6:a1:
                    6f:f9:7a:c9:ba:44:72:a8:d6:54:90:4e:2e:ad:04:
                    e8:59:54:aa:5b:f8:3d:a1:d7:48:fe:25:e3:ab:f2:
                    c2:6d:fd:a4:2f:20:19:da:0c:1e:17:f4:9e:ad:70:
                    4d:0d:0c:2a:df:b4:b2:4e:e2:b3:ae:84:a2:f1:cc:
                    de:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:CE:EC:81:CE:CA:FC:5B:C5:B3:80:CB:EB:02:31:14:83:81:5E:6A
            X509v3 Authority Key Identifier:
                keyid:3C:6D:74:85:D6:1A:D5:42:26:15:2E:5D:8A:81:3D:70:E3:4D:29:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/d159a362-950c-45c2-aecc-82b214bce474/0/3C6D7485D61AD54226152E5D8A813D70E34D29AB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/3C6D7485D61AD54226152E5D8A813D70E34D29AB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d159a362-950c-45c2-aecc-82b214bce474/0/3C6D7485D61AD54226152E5D8A813D70E34D29AB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:4a:ac:b0:15:a6:d3:6a:8f:f0:bb:d7:e3:f1:8c:d1:a3:04:
         b1:b4:e8:e3:60:a5:b3:a8:ac:b2:4b:0a:b3:1e:7e:de:6a:32:
         8a:91:a9:03:6f:55:00:04:98:b0:ac:8d:30:c4:6e:e2:de:fd:
         f7:82:bf:62:fe:50:55:a6:57:b7:a2:19:91:ee:e9:10:37:d8:
         70:e6:5d:9d:13:45:5d:60:f4:e1:19:b7:5d:78:6f:a8:e2:28:
         02:bc:a0:25:2f:b0:6c:3a:4e:43:88:36:5f:ca:e5:65:e0:d6:
         dd:cd:3a:eb:07:43:2b:fd:ff:95:9b:5e:49:46:f7:13:3b:97:
         6b:a5:d6:a0:1e:4b:f3:a7:08:9d:8e:7a:eb:2e:73:14:b9:ff:
         f5:af:86:d0:b8:a8:d1:39:0e:30:fc:c9:87:c9:25:ec:9a:6d:
         60:9c:aa:f1:4e:84:4b:ba:d6:23:9b:51:b3:86:25:cf:77:ff:
         cd:11:b3:3c:7c:f0:15:fe:d8:76:6b:f7:02:c1:69:7b:5f:ab:
         19:83:b8:be:09:69:d2:34:47:c2:a6:58:35:71:25:94:cb:d7:
         b4:50:40:36:9e:9a:9c:32:d3:3e:cf:4c:ac:07:cc:00:e6:ba:
         c1:85:07:83:61:6c:e8:a1:ef:04:17:78:da:7c:ff:a4:21:30:
         a9:70:de:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 04:23:55 2026 by rpki-client