This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/d36ab04d-68c7-4249-b109-46b28cf803f3/0/1D4A7562F096F3F753E388C14594BA75AE09E7F3.mft
File:                     1D4A7562F096F3F753E388C14594BA75AE09E7F3.mft (raw, json)
Hash identifier:          Cfs+LY2gjuPoEaRlT+jsFxREnWtnTVQvw9DxU3+a50Q=
Subject key identifier:   8A:16:65:DA:BF:75:CB:12:61:48:9E:75:08:99:D9:34:AA:3B:B0:B5
Authority key identifier: 1D:4A:75:62:F0:96:F3:F7:53:E3:88:C1:45:94:BA:75:AE:09:E7:F3
Certificate issuer:       /CN=1D4A7562F096F3F753E388C14594BA75AE09E7F3
Certificate serial:       1B4F13DCF9C158D92F705C0A23E327963FCC7E96
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D4A7562F096F3F753E388C14594BA75AE09E7F3.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/d36ab04d-68c7-4249-b109-46b28cf803f3/0/1D4A7562F096F3F753E388C14594BA75AE09E7F3.mft
Manifest number:          01BF
Signing time:             Sun 25 Jan 2026 19:01:39 +0000
Manifest this update:     Sun 25 Jan 2026 18:56:39 +0000
Manifest next update:     Thu 29 Jan 2026 00:21:39 +0000
Files and hashes:         1: 3130332e3130372e3137372e302f32342d3234203d3e20313530393434.roa (hash: Tu2pBk/URNroZW6zOqNNP1pzL3rQikcBMBsuhpkJzRA=)
                          2: 3130332e3130372e3137362e302f32342d3234203d3e20313530393434.roa (hash: t5cP9pI7pfpZ95tebj5VAs5xM+wyda4Uz0LABi641BU=)
                          3: 1D4A7562F096F3F753E388C14594BA75AE09E7F3.crl (hash: cHSvcTYh6v9GJkZR1ADvVuA4GCu+OVLNqBTpY0cahJk=)
                          4: 3130332e3130372e3137362e302f32332d3233203d3e20313530393434.roa (hash: +kGXvvTp0IkbxrGv/DEpgvQeRlEwoEyXoWledhe0tWQ=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/d36ab04d-68c7-4249-b109-46b28cf803f3/0/1D4A7562F096F3F753E388C14594BA75AE09E7F3.crl
                          rsync://repo-rpki.idnic.net/repo/d36ab04d-68c7-4249-b109-46b28cf803f3/0/1D4A7562F096F3F753E388C14594BA75AE09E7F3.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D4A7562F096F3F753E388C14594BA75AE09E7F3.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 28 Jan 2026 14:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:4f:13:dc:f9:c1:58:d9:2f:70:5c:0a:23:e3:27:96:3f:cc:7e:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1D4A7562F096F3F753E388C14594BA75AE09E7F3
        Validity
            Not Before: Jan 25 18:56:39 2026 GMT
            Not After : Jan 29 00:21:39 2026 GMT
        Subject: CN=8A1665DABF75CB1261489E750899D934AA3BB0B5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:9b:e7:a0:5c:94:d8:27:85:e8:11:09:36:84:
                    2e:02:50:5b:41:36:5c:ae:02:10:db:a8:c1:c3:1d:
                    77:dd:3e:fb:1d:7d:0c:cf:39:6e:96:ae:5a:bb:30:
                    75:98:3b:0f:e7:5d:88:df:e9:f5:ec:24:ac:37:00:
                    c2:ac:16:20:f6:f2:d0:ea:8f:a2:1c:d6:a8:69:f7:
                    72:2b:9a:b8:b9:42:91:cc:77:f7:ac:03:bc:c7:61:
                    8e:47:df:cf:a1:24:a2:0e:a4:9f:89:c9:47:dc:ea:
                    19:17:65:89:bf:6b:92:15:cc:02:44:7a:a7:d2:3d:
                    d6:59:ed:fb:f7:fc:a4:ed:2f:ca:50:45:c6:ce:bc:
                    d3:b4:4f:1a:ea:91:4e:24:6c:ca:f6:a1:45:92:b3:
                    a9:c6:c6:53:84:82:14:b2:89:b4:5e:1b:bf:98:7b:
                    eb:f4:83:49:ff:23:7d:7f:58:4b:b5:1a:f7:20:81:
                    df:49:24:3e:c4:70:f2:8b:83:8c:04:65:0c:60:9c:
                    31:47:7a:9f:d1:3d:5f:c6:ef:89:e2:10:4e:c8:5b:
                    9c:21:ae:c0:8d:8f:db:29:f3:31:df:97:2d:90:8c:
                    2e:37:50:60:ed:51:c9:2e:63:53:7e:21:80:e3:82:
                    42:b5:3c:8e:f4:85:f4:ec:2f:da:7a:95:d0:d4:9a:
                    a8:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:16:65:DA:BF:75:CB:12:61:48:9E:75:08:99:D9:34:AA:3B:B0:B5
            X509v3 Authority Key Identifier:
                keyid:1D:4A:75:62:F0:96:F3:F7:53:E3:88:C1:45:94:BA:75:AE:09:E7:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/d36ab04d-68c7-4249-b109-46b28cf803f3/0/1D4A7562F096F3F753E388C14594BA75AE09E7F3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D4A7562F096F3F753E388C14594BA75AE09E7F3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d36ab04d-68c7-4249-b109-46b28cf803f3/0/1D4A7562F096F3F753E388C14594BA75AE09E7F3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:de:f7:cc:12:32:67:c0:11:c6:48:bc:06:67:e2:43:23:76:
         40:75:eb:d7:94:9f:af:c9:ea:dd:4e:8b:df:1a:d6:86:fb:a1:
         35:31:04:bc:76:20:d6:33:d7:ad:a5:5d:ba:7b:23:5b:90:ce:
         86:0e:16:d3:0c:e1:d6:03:a5:66:d2:23:2b:33:d6:2b:ff:73:
         8b:de:b4:d1:be:d1:2a:5e:05:c5:ed:e9:3b:96:b1:75:cf:22:
         e8:ce:ea:28:90:9a:6c:f4:d7:81:81:5d:59:2d:0b:c4:79:89:
         04:e3:07:b5:38:b9:f4:3a:01:8d:31:ab:2d:b4:a1:0b:4c:3d:
         46:cf:5d:fd:a5:65:61:8e:f1:ca:fd:db:61:7c:17:f9:62:08:
         0e:a1:4c:cf:b6:49:21:7d:5c:4f:8b:44:1a:60:04:dc:c7:0c:
         7b:05:73:b9:4e:59:e4:93:90:4d:d9:73:77:f6:b5:cc:bc:0c:
         2a:cb:e4:60:fd:1a:19:8e:0e:3e:a3:1d:54:e0:d6:56:de:51:
         32:26:af:0b:50:14:35:cb:2c:7c:5b:0d:c1:f1:e9:b5:5f:52:
         a0:5b:0d:35:9e:e8:70:14:fd:ad:d0:13:09:62:ae:76:c5:b2:
         8d:ec:e9:dc:84:05:55:75:ba:4d:96:69:91:ab:da:33:7a:25:
         ff:e6:12:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 22:02:34 2026 by rpki-client