This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/d20fa14a-aaac-40f4-9c84-69257868f2cb/0/1762D22131EE967D86536D2B475A9A8C08CE6003.mft
File:                     1762D22131EE967D86536D2B475A9A8C08CE6003.mft (raw, json)
Hash identifier:          ZswwKji2mVOmKA8Oebk5vXiHUys3k7/GIQNk2gJCND0=
Subject key identifier:   69:CD:5B:84:31:F2:FF:92:2C:85:11:A6:4C:F3:56:A6:56:71:97:C0
Authority key identifier: 17:62:D2:21:31:EE:96:7D:86:53:6D:2B:47:5A:9A:8C:08:CE:60:03
Certificate issuer:       /CN=1762D22131EE967D86536D2B475A9A8C08CE6003
Certificate serial:       4677817CB88EC610802340DFBFEF89E7D44FF621
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1762D22131EE967D86536D2B475A9A8C08CE6003.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/d20fa14a-aaac-40f4-9c84-69257868f2cb/0/1762D22131EE967D86536D2B475A9A8C08CE6003.mft
Manifest number:          036F
Signing time:             Sun 25 Jan 2026 10:01:28 +0000
Manifest this update:     Sun 25 Jan 2026 09:56:28 +0000
Manifest next update:     Wed 28 Jan 2026 10:30:28 +0000
Files and hashes:         1: 3130332e3135392e3230342e302f32332d3234203d3e20313331313131.roa (hash: uumiLUQfphgqskF7mpd6oqfDDTxMSTqQ7X8YmHylWvY=)
                          2: 1762D22131EE967D86536D2B475A9A8C08CE6003.crl (hash: bZ3PxeNj1wtPalaKm9T/SwuLdN6fH46eSV92hZ2Wro0=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/d20fa14a-aaac-40f4-9c84-69257868f2cb/0/1762D22131EE967D86536D2B475A9A8C08CE6003.crl
                          rsync://repo-rpki.idnic.net/repo/d20fa14a-aaac-40f4-9c84-69257868f2cb/0/1762D22131EE967D86536D2B475A9A8C08CE6003.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1762D22131EE967D86536D2B475A9A8C08CE6003.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 28 Jan 2026 10:30:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:77:81:7c:b8:8e:c6:10:80:23:40:df:bf:ef:89:e7:d4:4f:f6:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1762D22131EE967D86536D2B475A9A8C08CE6003
        Validity
            Not Before: Jan 25 09:56:28 2026 GMT
            Not After : Jan 28 10:30:28 2026 GMT
        Subject: CN=69CD5B8431F2FF922C8511A64CF356A6567197C0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:21:3a:c7:57:50:c5:fe:f6:ce:8b:4c:2b:33:
                    03:82:8f:bb:1f:91:5f:6e:d5:c1:23:2e:e6:ff:99:
                    58:9b:e3:26:97:10:64:d4:58:1f:63:42:a7:22:7d:
                    fe:29:d0:a1:c1:a0:88:f7:f4:0d:df:05:ee:e7:3c:
                    d2:18:3b:13:87:9a:d9:1d:ed:14:5d:30:05:25:95:
                    55:6f:ee:ae:4e:1b:37:e9:ca:de:44:cc:06:1b:28:
                    b8:bc:b8:8e:8e:57:09:5f:49:61:2b:71:90:45:01:
                    c2:09:01:43:a5:64:69:91:00:e6:af:aa:5d:4e:23:
                    ac:84:f4:97:f3:76:26:30:64:5c:07:9e:88:1a:89:
                    d5:a9:18:93:fb:ff:ca:e5:0e:36:e2:56:64:20:5f:
                    47:47:cf:47:9b:30:cd:10:b3:a9:1c:44:ad:15:62:
                    9a:52:eb:82:42:18:65:59:6d:e2:33:bd:37:13:dc:
                    57:f4:a3:a8:7a:67:e8:91:01:b2:17:2d:24:b3:73:
                    d9:7b:ab:e5:21:a6:27:74:23:0f:93:d2:b9:29:94:
                    44:d1:b0:2e:88:da:c6:78:61:42:25:97:3a:cb:7e:
                    3c:bb:61:6f:70:72:46:90:68:4d:f5:90:17:9a:4f:
                    12:1c:72:fa:5d:1d:82:d3:91:f8:c1:29:61:d5:fc:
                    9c:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:CD:5B:84:31:F2:FF:92:2C:85:11:A6:4C:F3:56:A6:56:71:97:C0
            X509v3 Authority Key Identifier:
                keyid:17:62:D2:21:31:EE:96:7D:86:53:6D:2B:47:5A:9A:8C:08:CE:60:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/d20fa14a-aaac-40f4-9c84-69257868f2cb/0/1762D22131EE967D86536D2B475A9A8C08CE6003.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1762D22131EE967D86536D2B475A9A8C08CE6003.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d20fa14a-aaac-40f4-9c84-69257868f2cb/0/1762D22131EE967D86536D2B475A9A8C08CE6003.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:64:56:22:83:67:fd:b8:aa:53:e2:cc:3a:bd:7d:7b:23:b3:
         b8:47:ab:5d:06:6f:16:23:5a:9d:7b:09:b2:50:14:c9:4d:26:
         c8:67:f3:30:a8:ce:a4:49:3d:d2:de:ee:4a:43:e8:e5:2d:16:
         60:45:ff:16:44:42:95:bc:51:f2:48:20:4f:1e:37:0f:df:85:
         b8:98:60:e4:5f:cb:6b:c3:d2:19:73:89:88:5d:1a:3b:56:a9:
         99:05:12:a7:1c:c6:f8:a2:e5:ec:d5:5a:0a:4a:30:98:40:ce:
         ad:2d:8b:83:ad:ad:7d:fe:32:cb:c4:cd:84:38:c0:21:80:a4:
         c3:06:00:a9:a7:d4:3e:07:b4:20:6d:bc:ba:41:59:08:f2:d8:
         91:23:51:5f:66:3f:64:d7:18:e5:00:7e:9f:ae:1e:b0:86:d7:
         0e:63:0c:1e:ab:62:60:b6:3a:3d:a2:5f:c0:46:68:3d:4f:db:
         2f:f5:40:09:2c:67:6b:9f:28:a2:62:91:f0:7b:06:05:50:d4:
         6a:aa:4f:90:1b:e3:46:41:a5:24:a5:b1:55:18:ac:48:1c:7a:
         82:e2:7b:b2:a9:19:50:60:f2:f8:e5:98:f0:40:d0:d1:40:4c:
         55:db:dd:8f:1f:18:39:65:41:93:e3:e0:5b:e8:68:cf:3b:4e:
         a5:88:fb:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:37:22 2026 by rpki-client