This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/d3ec2cb6-35ad-4101-982e-2e34d566efda/0/E48634E1D6FB2E8A06A48825B4D7EEC47B2AE4BE.mft
File:                     E48634E1D6FB2E8A06A48825B4D7EEC47B2AE4BE.mft (raw, json)
Hash identifier:          3pyXuGpFVZNhYNu2HlmUxAwUHulMuIirrXBVH59Km4Q=
Subject key identifier:   CC:91:27:7E:FF:68:90:CC:EE:F1:26:70:85:8B:77:0B:B8:CD:AC:13
Authority key identifier: E4:86:34:E1:D6:FB:2E:8A:06:A4:88:25:B4:D7:EE:C4:7B:2A:E4:BE
Certificate issuer:       /CN=E48634E1D6FB2E8A06A48825B4D7EEC47B2AE4BE
Certificate serial:       4B179A12F9CD02B6B7245305A8096E2634D9C7D8
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E48634E1D6FB2E8A06A48825B4D7EEC47B2AE4BE.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/d3ec2cb6-35ad-4101-982e-2e34d566efda/0/E48634E1D6FB2E8A06A48825B4D7EEC47B2AE4BE.mft
Manifest number:          0266
Signing time:             Sun 25 Jan 2026 06:40:56 +0000
Manifest this update:     Sun 25 Jan 2026 06:35:56 +0000
Manifest next update:     Wed 28 Jan 2026 12:11:56 +0000
Files and hashes:         1: E48634E1D6FB2E8A06A48825B4D7EEC47B2AE4BE.crl (hash: Z8R4g9SAouqULvsV0fIRELcQBUYWIy1su7n22NVyD6A=)
                          2: 3130332e3137322e3139342e302f32332d3233203d3e20313437303735.roa (hash: PyDXoIlT1NIef5VwI6vIhfIo1ytHrmrJtk3n+sEFsT0=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/d3ec2cb6-35ad-4101-982e-2e34d566efda/0/E48634E1D6FB2E8A06A48825B4D7EEC47B2AE4BE.crl
                          rsync://repo-rpki.idnic.net/repo/d3ec2cb6-35ad-4101-982e-2e34d566efda/0/E48634E1D6FB2E8A06A48825B4D7EEC47B2AE4BE.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E48634E1D6FB2E8A06A48825B4D7EEC47B2AE4BE.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 28 Jan 2026 12:11:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:17:9a:12:f9:cd:02:b6:b7:24:53:05:a8:09:6e:26:34:d9:c7:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E48634E1D6FB2E8A06A48825B4D7EEC47B2AE4BE
        Validity
            Not Before: Jan 25 06:35:56 2026 GMT
            Not After : Jan 28 12:11:56 2026 GMT
        Subject: CN=CC91277EFF6890CCEEF12670858B770BB8CDAC13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:65:96:40:aa:11:ed:00:31:d8:bd:50:1e:9e:
                    f0:01:b6:81:3d:91:85:92:83:62:da:ae:8c:ac:29:
                    fe:76:9e:9c:3c:d8:08:ff:26:9f:22:46:be:7d:cb:
                    03:10:ef:89:6c:96:c9:ed:d7:e3:21:96:62:b3:b8:
                    c3:06:82:bc:78:fb:f7:a9:2e:1a:4a:dd:23:a7:b8:
                    65:e0:44:29:62:8e:3c:c9:4e:3a:2f:6d:f8:ec:65:
                    05:c0:7b:16:7c:77:8e:4f:c2:d0:01:61:3a:a2:2a:
                    11:9c:f7:14:76:eb:7e:23:33:c5:7b:01:4b:6a:33:
                    1d:71:4a:98:5e:56:30:b4:aa:be:24:26:ee:d2:b0:
                    c5:ce:a5:82:3e:79:05:f0:f6:2e:b2:e8:cb:61:d1:
                    19:84:42:c2:4a:17:12:11:6a:d9:6d:fd:45:72:30:
                    5a:10:7b:0f:d3:79:c5:83:b5:5d:97:7e:12:ea:33:
                    77:f5:f9:11:ad:9f:11:77:56:24:3a:08:6a:b5:26:
                    4f:9a:1b:ad:e5:19:ee:4c:4c:d0:82:f7:3a:46:39:
                    7d:9a:f2:cc:4f:1c:ed:c7:e2:68:02:19:44:5a:77:
                    78:7d:2f:dd:44:a4:91:38:78:65:a1:c6:dc:45:44:
                    52:32:aa:38:7b:bf:f1:22:7e:a9:35:17:e7:0d:33:
                    a8:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:91:27:7E:FF:68:90:CC:EE:F1:26:70:85:8B:77:0B:B8:CD:AC:13
            X509v3 Authority Key Identifier:
                keyid:E4:86:34:E1:D6:FB:2E:8A:06:A4:88:25:B4:D7:EE:C4:7B:2A:E4:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/d3ec2cb6-35ad-4101-982e-2e34d566efda/0/E48634E1D6FB2E8A06A48825B4D7EEC47B2AE4BE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E48634E1D6FB2E8A06A48825B4D7EEC47B2AE4BE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d3ec2cb6-35ad-4101-982e-2e34d566efda/0/E48634E1D6FB2E8A06A48825B4D7EEC47B2AE4BE.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:d0:24:3a:1f:c6:c4:1b:c3:10:4d:27:8e:12:f6:fa:79:79:
         1a:db:58:e5:f1:2e:d0:29:ea:95:c7:7a:c5:03:ef:c4:f4:68:
         97:3a:a8:e5:69:1a:11:be:82:aa:c5:12:58:f3:2d:35:1b:59:
         cd:13:67:80:dc:82:f8:2e:0e:11:55:9a:71:7d:c8:83:f2:27:
         8e:48:db:c0:11:ad:eb:87:35:5a:40:73:92:8a:0a:82:48:dc:
         36:af:b7:a3:0e:21:bc:fe:8a:58:7e:3e:04:32:16:92:f1:80:
         a1:97:0c:63:56:ab:4e:78:50:20:ad:68:32:fb:cb:23:d4:12:
         dc:e9:b9:5b:93:d3:32:b9:0a:86:a2:b5:a8:23:95:5f:1e:e2:
         ec:10:3e:3c:c0:26:d4:d5:9a:e2:57:cd:d6:ae:04:d0:7b:c2:
         f7:db:96:89:67:64:79:1a:da:4d:8c:d7:04:d7:fd:8a:da:e0:
         f0:14:9b:9c:3a:f2:2e:c9:8a:67:8e:f3:39:3b:13:13:77:4c:
         44:03:80:ed:b7:91:1d:60:55:d1:63:30:52:2f:36:a5:7b:99:
         39:2c:a0:07:8e:c9:cd:01:4c:d6:e0:44:8d:7a:f2:cc:21:84:
         66:ab:f6:39:c8:3c:4d:7a:5a:36:d7:af:3f:35:79:51:d4:aa:
         c7:f6:f8:80
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUSxeaEvnNAra3JFMFqAluJjTZx9gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTQ4NjM0RTFENkZCMkU4QTA2QTQ4ODI1QjREN0VFQzQ3
QjJBRTRCRTAeFw0yNjAxMjUwNjM1NTZaFw0yNjAxMjgxMjExNTZaMDMxMTAvBgNV
BAMTKENDOTEyNzdFRkY2ODkwQ0NFRUYxMjY3MDg1OEI3NzBCQjhDREFDMTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZZZZAqhHtADHYvVAenvABtoE9
kYWSg2LaroysKf52npw82Aj/Jp8iRr59ywMQ74lslsnt1+MhlmKzuMMGgrx4+/ep
LhpK3SOnuGXgRClijjzJTjovbfjsZQXAexZ8d45PwtABYTqiKhGc9xR2634jM8V7
AUtqMx1xSpheVjC0qr4kJu7SsMXOpYI+eQXw9i6y6Mth0RmEQsJKFxIRatlt/UVy
MFoQew/TecWDtV2XfhLqM3f1+RGtnxF3ViQ6CGq1Jk+aG63lGe5MTNCC9zpGOX2a
8sxPHO3H4mgCGURad3h9L91EpJE4eGWhxtxFRFIyqjh7v/Eifqk1F+cNM6jFAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUzJEnfv9okMzu8SZwhYt3C7jNrBMwHwYDVR0j
BBgwFoAU5IY04db7LooGpIgltNfuxHsq5L4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k
M2VjMmNiNi0zNWFkLTQxMDEtOTgyZS0yZTM0ZDU2NmVmZGEvMC9FNDg2MzRFMUQ2
RkIyRThBMDZBNDg4MjVCNEQ3RUVDNDdCMkFFNEJFLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvRTQ4NjM0RTFENkZCMkU4QTA2QTQ4ODI1QjREN0VFQzQ3QjJB
RTRCRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDNlYzJjYjYtMzVhZC00MTAxLTk4
MmUtMmUzNGQ1NjZlZmRhLzAvRTQ4NjM0RTFENkZCMkU4QTA2QTQ4ODI1QjREN0VF
QzQ3QjJBRTRCRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAKjQJDofxsQbwxBNJ44S9vp5eRrbWOXxLtAp
6pXHesUD78T0aJc6qOVpGhG+gqrFEljzLTUbWc0TZ4DcgvguDhFVmnF9yIPyJ45I
28ARreuHNVpAc5KKCoJI3Davt6MOIbz+ilh+PgQyFpLxgKGXDGNWq054UCCtaDL7
yyPUEtzpuVuT0zK5CoaitagjlV8e4uwQPjzAJtTVmuJXzdauBNB7wvfblolnZHka
2k2M1wTX/Yra4PAUm5w68i7JimeO8zk7ExN3TEQDgO23kR1gVdFjMFIvNqV7mTks
oAeOyc0BTNbgRI168swhhGar9jnIPE16WjbXrz81eVHUqsf2+IA=
-----END CERTIFICATE-----
Generated at Sun Jan 25 23:13:04 2026 by rpki-client