This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/d6ecc72a-e954-4302-92c4-f4f23070b997/0/5461EABC862E4C90B32790DBA21CD5FFCB966BD3.mft
File:                     5461EABC862E4C90B32790DBA21CD5FFCB966BD3.mft (raw, json)
Hash identifier:          6LSV92JrgOTwLIyzclb9OfR9/gZmgfoKSHhaT+meQPw=
Subject key identifier:   F0:FE:48:65:65:13:16:E7:61:BD:70:96:97:50:55:36:B6:65:EB:28
Authority key identifier: 54:61:EA:BC:86:2E:4C:90:B3:27:90:DB:A2:1C:D5:FF:CB:96:6B:D3
Certificate issuer:       /CN=5461EABC862E4C90B32790DBA21CD5FFCB966BD3
Certificate serial:       3E15B8A0B39DF5FB4846BEB8609BE93EC9EED95F
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5461EABC862E4C90B32790DBA21CD5FFCB966BD3.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/d6ecc72a-e954-4302-92c4-f4f23070b997/0/5461EABC862E4C90B32790DBA21CD5FFCB966BD3.mft
Manifest number:          0216
Signing time:             Fri 23 Jan 2026 20:41:05 +0000
Manifest this update:     Fri 23 Jan 2026 20:36:05 +0000
Manifest next update:     Tue 27 Jan 2026 05:03:05 +0000
Files and hashes:         1: 5461EABC862E4C90B32790DBA21CD5FFCB966BD3.crl (hash: +NGzFhhSHB7SX5ONeKay0gprRsC2fV6ty/CnA4YE5z0=)
                          2: 3130332e37332e37322e302f32322d3234203d3e20313335343638.roa (hash: KaaHy0cR6xA7/7fhA1scnNnAkCNoe5f7kq1dVSYxDCg=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/d6ecc72a-e954-4302-92c4-f4f23070b997/0/5461EABC862E4C90B32790DBA21CD5FFCB966BD3.crl
                          rsync://repo-rpki.idnic.net/repo/d6ecc72a-e954-4302-92c4-f4f23070b997/0/5461EABC862E4C90B32790DBA21CD5FFCB966BD3.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5461EABC862E4C90B32790DBA21CD5FFCB966BD3.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 27 Jan 2026 05:03:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:15:b8:a0:b3:9d:f5:fb:48:46:be:b8:60:9b:e9:3e:c9:ee:d9:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5461EABC862E4C90B32790DBA21CD5FFCB966BD3
        Validity
            Not Before: Jan 23 20:36:05 2026 GMT
            Not After : Jan 27 05:03:05 2026 GMT
        Subject: CN=F0FE4865651316E761BD709697505536B665EB28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:b6:44:f1:a5:3f:ab:7f:84:fc:b2:b1:26:8b:
                    1c:80:c5:fb:8e:0a:47:e6:fa:18:a6:8d:24:96:f6:
                    3a:12:b1:1f:11:eb:0e:ea:f2:34:a5:44:e3:7a:9b:
                    16:d9:c1:ae:75:76:a4:cb:65:ee:7b:bd:2d:95:b1:
                    0f:93:80:32:d1:9c:40:44:ff:58:0c:04:3b:96:4f:
                    bd:dc:02:68:98:78:34:3c:71:80:ab:ce:bd:f7:3c:
                    35:d0:5b:1a:48:80:87:80:f6:e7:20:39:db:ad:15:
                    93:1f:1f:6f:ce:61:29:13:5c:b0:30:3c:c1:ef:9c:
                    55:6b:8a:33:26:dd:0f:fc:ab:ed:4c:d7:ab:29:9d:
                    05:a4:04:39:a0:65:60:0c:3e:b1:19:52:d4:1b:1c:
                    6b:bd:0a:9d:30:28:76:f9:b2:f8:76:88:af:99:ef:
                    38:91:59:d6:92:eb:3d:0f:be:b0:81:d9:50:db:34:
                    b9:c7:ec:d4:ae:2c:d0:11:be:24:a0:6e:99:aa:e1:
                    41:8e:f6:52:0c:26:43:2b:c6:a1:2c:ec:2e:c6:80:
                    b8:8e:a1:06:1f:11:a3:79:af:4b:b0:57:f9:d3:04:
                    dd:57:2a:e3:bb:2a:07:f0:4b:2f:85:68:aa:94:db:
                    63:05:c1:95:25:35:3c:fe:1a:15:52:c5:36:ba:6c:
                    4b:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:FE:48:65:65:13:16:E7:61:BD:70:96:97:50:55:36:B6:65:EB:28
            X509v3 Authority Key Identifier:
                keyid:54:61:EA:BC:86:2E:4C:90:B3:27:90:DB:A2:1C:D5:FF:CB:96:6B:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/d6ecc72a-e954-4302-92c4-f4f23070b997/0/5461EABC862E4C90B32790DBA21CD5FFCB966BD3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5461EABC862E4C90B32790DBA21CD5FFCB966BD3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d6ecc72a-e954-4302-92c4-f4f23070b997/0/5461EABC862E4C90B32790DBA21CD5FFCB966BD3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:9e:59:de:af:c1:c4:a1:01:68:32:16:a2:d1:55:0f:01:71:
         65:14:b4:b6:e0:3c:f9:d7:09:34:0c:03:58:fb:08:40:11:ab:
         e6:d8:df:0e:08:24:c0:91:ef:5d:9d:47:55:2d:8d:b2:f5:ff:
         79:0d:12:df:89:1a:21:14:14:b2:92:a6:c7:3d:7c:4a:7a:af:
         48:34:c3:f9:02:d0:57:2f:5a:37:6a:09:86:25:d1:d9:71:de:
         2d:24:4f:49:3b:32:31:a8:60:cd:62:e7:67:3e:de:7f:c2:37:
         c9:d9:9a:30:e8:ba:da:ab:d5:59:33:da:bf:69:e0:f7:b6:47:
         0c:bf:4f:7d:fc:a3:0a:74:e9:8f:74:b4:bb:37:fc:af:f5:e6:
         0c:21:b0:a1:4a:64:42:1b:8b:19:4d:fb:d8:73:c5:a5:e8:5a:
         29:cb:e8:11:be:fd:58:92:86:99:73:2b:83:c7:50:87:58:b5:
         03:33:b2:d7:6b:12:ca:30:02:72:3b:28:59:73:d6:10:be:81:
         e2:98:eb:3c:db:2d:33:16:2f:5b:86:b5:c3:7d:3f:33:0c:36:
         48:72:d3:59:b7:43:d4:72:73:45:d5:39:8b:5d:33:be:05:97:
         f7:6d:b3:04:cb:b4:9a:b1:66:97:5f:6d:8b:ff:d3:2c:ad:37:
         db:c5:18:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 23:40:17 2026 by rpki-client