This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/d720ce76-db75-4651-85b0-0bfb18e0b175/0/00C1EB3BEE971CEAB531D756361F934BE0179628.mft
File:                     00C1EB3BEE971CEAB531D756361F934BE0179628.mft (raw, json)
Hash identifier:          ht4QqwQzxcp4bFjhwLbE5mutW9VTxlhm7waraEQQ+S8=
Subject key identifier:   03:C1:86:2C:AE:59:CE:8A:CC:63:A7:79:EE:0C:99:E4:0A:90:DB:AE
Authority key identifier: 00:C1:EB:3B:EE:97:1C:EA:B5:31:D7:56:36:1F:93:4B:E0:17:96:28
Certificate issuer:       /CN=00C1EB3BEE971CEAB531D756361F934BE0179628
Certificate serial:       4D15C775ACD9F27E047ED3159AA57BE0650D9AFC
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/00C1EB3BEE971CEAB531D756361F934BE0179628.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/d720ce76-db75-4651-85b0-0bfb18e0b175/0/00C1EB3BEE971CEAB531D756361F934BE0179628.mft
Manifest number:          E8
Signing time:             Fri 23 Jan 2026 18:41:49 +0000
Manifest this update:     Fri 23 Jan 2026 18:36:49 +0000
Manifest next update:     Mon 26 Jan 2026 20:12:49 +0000
Files and hashes:         1: 00C1EB3BEE971CEAB531D756361F934BE0179628.crl (hash: JQnTia6kx18JwTEM4k2ILunDDiPnA6kwL6Xz7S3O1Fw=)
                          2: 3130332e37362e3130362e302f32332d3234203d3e20313531353737.roa (hash: 2PH25lGx4aoDxJSQ/LOSozIUBGDxDVOVLodCc7y15nU=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/d720ce76-db75-4651-85b0-0bfb18e0b175/0/00C1EB3BEE971CEAB531D756361F934BE0179628.crl
                          rsync://repo-rpki.idnic.net/repo/d720ce76-db75-4651-85b0-0bfb18e0b175/0/00C1EB3BEE971CEAB531D756361F934BE0179628.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/00C1EB3BEE971CEAB531D756361F934BE0179628.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 26 Jan 2026 20:12:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:15:c7:75:ac:d9:f2:7e:04:7e:d3:15:9a:a5:7b:e0:65:0d:9a:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00C1EB3BEE971CEAB531D756361F934BE0179628
        Validity
            Not Before: Jan 23 18:36:49 2026 GMT
            Not After : Jan 26 20:12:49 2026 GMT
        Subject: CN=03C1862CAE59CE8ACC63A779EE0C99E40A90DBAE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:c3:f1:23:be:5c:ca:01:0a:4e:01:12:d6:27:
                    34:3e:ee:6d:20:41:a3:ea:68:c4:7a:9c:2e:59:a9:
                    a3:1a:f5:55:b1:ba:4d:13:62:69:a1:0f:3c:32:94:
                    d5:06:8e:a0:14:b2:8e:ba:19:4b:79:3c:c7:20:5f:
                    e7:bf:5a:04:2c:97:cf:6c:48:5e:87:ad:f5:28:bb:
                    84:0a:80:1d:20:47:3d:06:04:f2:ff:5a:21:cd:66:
                    af:7f:ed:f7:91:7f:e8:aa:4f:3a:ea:6d:17:9e:74:
                    3d:35:67:c9:ab:37:27:d6:d4:b1:b1:7a:67:ed:28:
                    b3:36:1e:a4:e2:ef:a5:f2:27:0d:cb:aa:55:25:4c:
                    0b:ac:26:59:5c:dd:c1:1a:9e:f0:60:ae:b5:00:15:
                    c5:a5:49:92:7c:8f:6e:28:1d:8a:e7:7e:33:53:62:
                    ae:6d:2b:1d:81:16:12:95:e0:61:2f:c8:be:44:77:
                    cd:8b:6d:d9:38:4c:07:e0:66:3f:c8:b3:68:5e:42:
                    bd:09:93:13:fe:44:1c:52:b6:58:e2:17:c4:2f:b0:
                    8f:a0:38:4e:7b:9f:be:07:cb:0e:5c:18:ef:72:a5:
                    08:12:6b:f3:b8:92:d0:f1:50:1e:2b:a9:ad:aa:a9:
                    91:a3:e5:00:e5:c3:fa:c6:15:de:49:4a:7d:85:05:
                    d1:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:C1:86:2C:AE:59:CE:8A:CC:63:A7:79:EE:0C:99:E4:0A:90:DB:AE
            X509v3 Authority Key Identifier:
                keyid:00:C1:EB:3B:EE:97:1C:EA:B5:31:D7:56:36:1F:93:4B:E0:17:96:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/d720ce76-db75-4651-85b0-0bfb18e0b175/0/00C1EB3BEE971CEAB531D756361F934BE0179628.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/00C1EB3BEE971CEAB531D756361F934BE0179628.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d720ce76-db75-4651-85b0-0bfb18e0b175/0/00C1EB3BEE971CEAB531D756361F934BE0179628.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:65:d2:5c:f1:5b:7d:3a:52:d1:f1:2b:0e:51:88:28:11:c4:
         c0:a5:50:a9:c1:87:c4:ee:fa:9a:2d:46:bf:f6:fc:2a:48:46:
         4a:a1:b4:e0:ae:7c:65:b1:e1:21:6c:9c:f2:ed:d5:08:22:c1:
         92:c0:9a:68:e8:dd:3c:db:d9:ec:76:1a:cd:fd:64:da:f4:ff:
         7c:43:84:29:bf:56:5d:70:a4:a6:de:0d:09:06:be:fa:03:42:
         2b:d1:2d:f4:c5:98:19:bc:7d:7a:3c:45:19:35:3f:8f:b2:5e:
         27:be:9a:97:94:a8:df:5b:83:ed:45:dc:94:13:42:0e:bf:83:
         51:c1:74:54:4d:d8:66:cd:61:69:ca:59:2f:4a:37:c8:75:2b:
         a4:29:17:34:ea:7b:5b:de:20:45:b2:c8:88:28:bc:4c:c5:43:
         dc:e5:e6:8e:cb:f3:ce:e4:3e:d7:85:51:4d:99:5c:47:59:ca:
         46:f8:de:4a:da:ba:a7:e0:ee:94:10:c8:9a:19:4b:18:84:a4:
         49:58:c7:80:38:d7:75:b7:27:60:0a:96:aa:e2:23:85:b1:76:
         5b:f3:59:34:00:57:91:a9:d4:fd:5d:2a:e2:17:ac:c7:e9:be:
         d1:1b:49:4d:f0:1f:1e:6a:a2:8f:42:4b:f8:d7:e5:2f:6a:1e:
         de:cd:9a:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:46:01 2026 by rpki-client