This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/d4f48a89-90c5-4f5a-8015-36f1196a71c8/0/F30F14F4AEB6630FF4E270B0729358AEBFA97733.mft
File:                     F30F14F4AEB6630FF4E270B0729358AEBFA97733.mft (raw, json)
Hash identifier:          amVRBkVpreTeJsnUHnubvcOOcTGZkRVmQZ4fUdDaUOs=
Subject key identifier:   06:AF:1F:7D:57:06:5A:D4:4A:93:23:37:9A:99:D3:B1:60:47:57:DD
Authority key identifier: F3:0F:14:F4:AE:B6:63:0F:F4:E2:70:B0:72:93:58:AE:BF:A9:77:33
Certificate issuer:       /CN=F30F14F4AEB6630FF4E270B0729358AEBFA97733
Certificate serial:       6A884C53609EAB3C54E2BCBA812EAD6549AA76A0
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F30F14F4AEB6630FF4E270B0729358AEBFA97733.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/d4f48a89-90c5-4f5a-8015-36f1196a71c8/0/F30F14F4AEB6630FF4E270B0729358AEBFA97733.mft
Manifest number:          0543
Signing time:             Sun 25 Jan 2026 04:32:10 +0000
Manifest this update:     Sun 25 Jan 2026 04:27:10 +0000
Manifest next update:     Wed 28 Jan 2026 08:43:10 +0000
Files and hashes:         1: 323430373a343630303a3a2f33322d3438203d3e203435323935.roa (hash: 4LpQRgrp7oBVnTYb85mIa1GKQ4oBc22IhdekLi1TA6c=)
                          2: F30F14F4AEB6630FF4E270B0729358AEBFA97733.crl (hash: Ya8DYpBOCExOk5ZTQf/M66VsR728xhAcdGhNfmzC7xU=)
                          3: 3130332e3135312e39322e302f32332d3234203d3e203435323935.roa (hash: WCf4k80HtpWJXreA4Q6XD5iDNEeVQ9AU8BVWi8IEoSM=)
                          4: 3131332e3231322e3136302e302f32312d3234203d3e203435323935.roa (hash: ykBCC6a4TUa9u53qD+3M0qE2NkGoJtCXa3OdoYw7FhA=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/d4f48a89-90c5-4f5a-8015-36f1196a71c8/0/F30F14F4AEB6630FF4E270B0729358AEBFA97733.crl
                          rsync://repo-rpki.idnic.net/repo/d4f48a89-90c5-4f5a-8015-36f1196a71c8/0/F30F14F4AEB6630FF4E270B0729358AEBFA97733.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F30F14F4AEB6630FF4E270B0729358AEBFA97733.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 28 Jan 2026 08:43:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:88:4c:53:60:9e:ab:3c:54:e2:bc:ba:81:2e:ad:65:49:aa:76:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F30F14F4AEB6630FF4E270B0729358AEBFA97733
        Validity
            Not Before: Jan 25 04:27:10 2026 GMT
            Not After : Jan 28 08:43:10 2026 GMT
        Subject: CN=06AF1F7D57065AD44A9323379A99D3B1604757DD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:cb:55:3f:c6:a6:a7:b0:06:25:ad:a8:8a:4a:
                    a2:6d:0c:61:b7:be:77:3f:2b:d1:a7:be:a1:6d:e6:
                    48:db:0a:e3:52:1f:ed:80:dd:37:fc:ac:00:5c:a3:
                    14:46:b5:b7:80:52:20:97:69:4a:8b:84:0c:71:b7:
                    23:df:26:dd:98:1f:8c:f9:58:50:a6:b9:f1:73:cf:
                    27:07:53:f1:dc:b7:b2:64:ab:ef:af:a3:be:9d:f4:
                    9c:7c:f5:ff:f7:61:be:fd:f4:2e:d8:11:a7:ab:49:
                    09:4b:53:27:d2:31:36:fd:32:4f:6b:53:e7:a5:a7:
                    1c:3c:f6:76:4d:17:9d:ce:69:2e:41:aa:c0:15:02:
                    74:9b:5a:dd:0e:55:7d:f4:7b:60:97:f0:fe:81:2c:
                    a4:a7:c4:fe:f4:fe:c8:5d:e9:e8:15:d8:fd:d6:63:
                    d7:dc:c7:ad:1f:a6:a8:b6:29:fc:d8:6f:27:f8:ff:
                    6b:31:81:9d:27:d3:c2:ed:82:64:3a:92:26:60:e3:
                    b6:3d:c8:ea:d0:0b:e9:2a:5b:05:d9:17:43:94:05:
                    99:d2:c9:19:94:c2:da:8b:6b:20:66:55:d2:a7:f0:
                    1a:a1:f8:ba:cc:12:b5:95:06:54:a3:d7:d4:ba:d0:
                    3d:3d:5a:1c:a1:ce:33:8f:ec:42:25:8f:db:3b:b9:
                    30:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:AF:1F:7D:57:06:5A:D4:4A:93:23:37:9A:99:D3:B1:60:47:57:DD
            X509v3 Authority Key Identifier:
                keyid:F3:0F:14:F4:AE:B6:63:0F:F4:E2:70:B0:72:93:58:AE:BF:A9:77:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/d4f48a89-90c5-4f5a-8015-36f1196a71c8/0/F30F14F4AEB6630FF4E270B0729358AEBFA97733.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F30F14F4AEB6630FF4E270B0729358AEBFA97733.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d4f48a89-90c5-4f5a-8015-36f1196a71c8/0/F30F14F4AEB6630FF4E270B0729358AEBFA97733.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:8e:9e:c3:b4:83:c3:f3:83:0b:9c:7e:ef:5e:81:03:62:e7:
         77:18:3e:39:b1:31:af:9f:ed:64:ed:96:fc:a2:85:cd:91:cb:
         e2:4a:a4:0f:f1:4c:f2:2e:20:bd:5a:4c:82:65:bc:7f:c3:c3:
         c8:5b:7d:69:0a:b1:4e:49:58:39:3b:65:49:d6:85:99:50:80:
         df:52:9a:a7:41:f0:b9:5f:bb:36:15:88:9c:2f:29:ff:5c:c6:
         ff:8d:aa:dd:e1:fe:b4:d4:bb:35:a6:95:6e:7c:5b:3a:14:5c:
         08:54:b0:44:e6:02:55:f2:88:11:1d:b3:1c:6b:47:a7:1d:6d:
         74:0a:2d:5a:81:5f:04:68:8c:7f:c0:56:d0:69:a4:80:06:e5:
         66:a0:0d:57:f8:b7:1d:6c:54:96:eb:96:70:bd:05:b7:38:cb:
         5b:36:c9:60:34:07:8f:7f:84:74:cc:a1:78:4d:be:e9:91:05:
         b0:31:49:d4:bd:85:88:5f:e1:21:3b:4b:75:6b:b0:c8:90:6a:
         7a:12:e9:38:1c:cc:6a:49:57:31:4e:b9:3a:d7:35:af:db:9d:
         e1:57:f5:43:cd:75:23:f9:8f:d7:69:6c:58:eb:eb:7f:83:55:
         8e:a0:d4:cf:8b:98:79:35:a3:63:16:04:94:f8:94:c6:23:9c:
         80:7a:fa:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:36:51 2026 by rpki-client