This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/d501cdf9-52e1-4c98-9ab3-afb70fac377c/0/F1BDA572CF8D7920C210DBCA1454B1904F1C1D5F.mft
File:                     F1BDA572CF8D7920C210DBCA1454B1904F1C1D5F.mft (raw, json)
Hash identifier:          pRKrZWX5qZVZZqB/xjMZazxhVAsth9x0LhX8ELmG7vI=
Subject key identifier:   D7:28:66:57:65:D2:DA:55:3E:0E:C6:04:45:68:98:BB:12:3F:76:81
Authority key identifier: F1:BD:A5:72:CF:8D:79:20:C2:10:DB:CA:14:54:B1:90:4F:1C:1D:5F
Certificate issuer:       /CN=F1BDA572CF8D7920C210DBCA1454B1904F1C1D5F
Certificate serial:       164492DA825A901D4DE2DC61DAC1B447F382D282
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F1BDA572CF8D7920C210DBCA1454B1904F1C1D5F.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/d501cdf9-52e1-4c98-9ab3-afb70fac377c/0/F1BDA572CF8D7920C210DBCA1454B1904F1C1D5F.mft
Manifest number:          01B7
Signing time:             Sat 24 Jan 2026 15:50:43 +0000
Manifest this update:     Sat 24 Jan 2026 15:45:43 +0000
Manifest next update:     Tue 27 Jan 2026 22:00:43 +0000
Files and hashes:         1: F1BDA572CF8D7920C210DBCA1454B1904F1C1D5F.crl (hash: j/GdumjVc9v6YRCqPb1Pfe+CC6TF0/Jhvppq4sBVHYc=)
                          2: 3130332e3136342e35382e302f32342d3234203d3e20313431393130.roa (hash: jruW/AUePdWFgbuv5StGivVVFVpHpBSL3kjIWCplc4g=)
                          3: 3130332e3136342e35382e302f32332d3233203d3e20313431393130.roa (hash: O7uhBUEz+z1Q2GX4lPzEa5VOca0EqQ+u9YYJDNTn8wg=)
                          4: 3130332e3136342e35392e302f32342d3234203d3e20313431393130.roa (hash: IoIh0X1wtCWoeOPeFilpjxljpSISulJCU4DOxkNVruE=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/d501cdf9-52e1-4c98-9ab3-afb70fac377c/0/F1BDA572CF8D7920C210DBCA1454B1904F1C1D5F.crl
                          rsync://repo-rpki.idnic.net/repo/d501cdf9-52e1-4c98-9ab3-afb70fac377c/0/F1BDA572CF8D7920C210DBCA1454B1904F1C1D5F.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F1BDA572CF8D7920C210DBCA1454B1904F1C1D5F.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 27 Jan 2026 22:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:44:92:da:82:5a:90:1d:4d:e2:dc:61:da:c1:b4:47:f3:82:d2:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F1BDA572CF8D7920C210DBCA1454B1904F1C1D5F
        Validity
            Not Before: Jan 24 15:45:43 2026 GMT
            Not After : Jan 27 22:00:43 2026 GMT
        Subject: CN=D728665765D2DA553E0EC604456898BB123F7681
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:89:51:56:39:64:47:36:71:ac:ec:70:2a:7a:
                    6b:5c:8f:22:6a:1f:bb:0a:29:60:e0:57:a2:44:13:
                    7f:13:fc:a4:72:f1:93:0d:a7:8c:b4:ac:48:80:29:
                    29:01:5f:e7:b3:0a:e9:f0:fe:db:0b:1d:24:3d:c0:
                    92:02:99:ba:f5:ae:87:78:ed:94:81:d6:6d:2c:24:
                    bc:1f:fa:6f:b9:91:26:43:6c:c1:4c:68:58:f9:d2:
                    3d:bb:f0:3f:75:7e:60:0c:67:56:d5:c8:02:59:3f:
                    3e:16:f4:29:e7:54:6b:86:03:1c:53:5f:57:2b:0d:
                    07:fe:85:33:02:b9:a8:3c:72:ba:9e:0b:9c:3c:48:
                    00:9d:a0:43:65:6b:c7:52:69:13:40:15:63:61:d8:
                    cf:85:07:c1:66:09:28:04:26:f4:d3:8c:64:dd:c4:
                    93:c7:ed:e4:00:6b:4c:2e:2e:cb:b5:d9:38:45:15:
                    ed:d7:5f:ca:b9:66:ef:be:39:fe:05:fa:61:39:7b:
                    86:7f:e2:13:02:cd:8f:f5:f4:a1:5c:3e:e6:af:3c:
                    29:7a:69:53:99:24:90:d9:7a:d0:a6:d5:24:ee:42:
                    f8:83:03:42:e5:ed:ef:08:ee:c6:45:a1:bc:d5:7d:
                    37:c4:49:4e:57:f0:dd:e9:cb:cd:b1:73:06:76:af:
                    01:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:28:66:57:65:D2:DA:55:3E:0E:C6:04:45:68:98:BB:12:3F:76:81
            X509v3 Authority Key Identifier:
                keyid:F1:BD:A5:72:CF:8D:79:20:C2:10:DB:CA:14:54:B1:90:4F:1C:1D:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/d501cdf9-52e1-4c98-9ab3-afb70fac377c/0/F1BDA572CF8D7920C210DBCA1454B1904F1C1D5F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F1BDA572CF8D7920C210DBCA1454B1904F1C1D5F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d501cdf9-52e1-4c98-9ab3-afb70fac377c/0/F1BDA572CF8D7920C210DBCA1454B1904F1C1D5F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:a3:a8:55:90:3e:81:69:70:7b:75:25:db:08:82:84:f1:a3:
         cd:27:9b:17:da:dc:5b:1e:a1:f0:54:65:fe:fe:b5:1c:15:ba:
         80:f1:4d:d7:97:48:40:21:f4:49:f6:87:db:12:e5:ab:13:a9:
         d3:e4:cd:ca:1a:55:2d:23:16:fc:62:91:2d:ac:9c:20:b6:51:
         7b:cc:9e:fc:b9:aa:35:2b:3a:78:8d:ab:55:bc:b8:35:9b:e4:
         73:6e:ff:65:40:67:11:5e:b4:c9:ff:2d:83:87:3b:30:37:4c:
         0c:35:ee:05:64:c6:b6:e7:2c:4a:c3:c7:d7:77:e1:36:b5:d1:
         90:bd:ab:8b:8f:7b:0b:06:c2:79:4d:63:07:ea:82:59:cf:ba:
         21:24:ff:81:57:80:ad:6d:81:5a:a5:9b:18:ca:30:4d:cd:02:
         77:cb:84:89:37:ff:57:5c:19:c2:68:26:4d:93:24:c2:79:fc:
         cd:20:29:b6:42:53:9b:7a:40:83:f1:73:9b:8c:c1:19:53:cc:
         26:e7:3a:bf:77:4b:a7:d9:2f:17:7c:8e:28:68:3a:84:ad:f3:
         3d:cd:80:5a:a0:e3:b1:8a:d0:7a:1a:65:3d:65:e5:f1:74:6b:
         af:cd:28:3c:dd:d5:a0:81:99:0c:c1:0d:35:06:05:44:0e:9a:
         22:8d:3d:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:50:02 2026 by rpki-client