This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/d90ac5ca-35df-4607-9405-397b7aadb2a7/0/17B62F0E5DF5F2306F0656875EF6187F83423CBD.mft
File:                     17B62F0E5DF5F2306F0656875EF6187F83423CBD.mft (raw, json)
Hash identifier:          X7gt2gMERqutsG169rE6Im2X/U5gq4q+RlRaqjoS+Yg=
Subject key identifier:   6E:58:0F:17:27:7F:5C:8D:0D:AF:78:4F:A0:DB:F4:F4:0A:40:FE:DF
Authority key identifier: 17:B6:2F:0E:5D:F5:F2:30:6F:06:56:87:5E:F6:18:7F:83:42:3C:BD
Certificate issuer:       /CN=17B62F0E5DF5F2306F0656875EF6187F83423CBD
Certificate serial:       1D664E3FF50E871B6590408D3FA228616847BD19
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/17B62F0E5DF5F2306F0656875EF6187F83423CBD.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/d90ac5ca-35df-4607-9405-397b7aadb2a7/0/17B62F0E5DF5F2306F0656875EF6187F83423CBD.mft
Manifest number:          DD
Signing time:             Sun 25 Jan 2026 06:41:06 +0000
Manifest this update:     Sun 25 Jan 2026 06:36:06 +0000
Manifest next update:     Wed 28 Jan 2026 17:23:06 +0000
Files and hashes:         1: 17B62F0E5DF5F2306F0656875EF6187F83423CBD.crl (hash: rxVDFp7irYVuKZKPMBsu/t34YA1lwzpe6mT+sRl/HXM=)
                          2: 3130332e3136362e3137382e302f32342d3234203d3e20313431393534.roa (hash: K9hLNaJsVqOwSy9Ix0jk05uLxSrKFjPApuz0gPW2bKo=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/d90ac5ca-35df-4607-9405-397b7aadb2a7/0/17B62F0E5DF5F2306F0656875EF6187F83423CBD.crl
                          rsync://repo-rpki.idnic.net/repo/d90ac5ca-35df-4607-9405-397b7aadb2a7/0/17B62F0E5DF5F2306F0656875EF6187F83423CBD.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/17B62F0E5DF5F2306F0656875EF6187F83423CBD.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 28 Jan 2026 14:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:66:4e:3f:f5:0e:87:1b:65:90:40:8d:3f:a2:28:61:68:47:bd:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17B62F0E5DF5F2306F0656875EF6187F83423CBD
        Validity
            Not Before: Jan 25 06:36:06 2026 GMT
            Not After : Jan 28 17:23:06 2026 GMT
        Subject: CN=6E580F17277F5C8D0DAF784FA0DBF4F40A40FEDF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:1e:40:f0:cc:5c:2c:6e:88:c8:98:c0:95:73:
                    0c:07:53:b8:4e:d6:b2:fe:cb:f7:02:6c:93:59:1c:
                    d3:55:99:f1:5d:16:5e:16:fd:7b:a7:46:13:28:2d:
                    cf:7d:9d:ef:ac:a0:9f:a4:34:74:83:6c:0d:92:9f:
                    80:16:76:91:c0:a6:90:89:35:55:96:e7:cd:68:3f:
                    ca:71:0c:91:06:d3:c2:09:28:93:5b:8c:58:c5:43:
                    fa:f1:34:59:78:8a:c3:02:7c:d4:0c:3d:5c:9f:5d:
                    8a:2f:c3:19:92:59:a9:de:0e:c7:20:54:f7:3e:40:
                    1f:a0:cb:a7:41:c0:a1:b3:26:02:1a:58:7e:1a:36:
                    92:dd:d2:65:81:b4:0c:23:f3:d7:79:11:7c:ca:0d:
                    09:40:33:80:fa:0e:ed:58:b8:04:ef:6d:7a:aa:05:
                    05:95:d9:76:00:10:9a:99:4a:34:aa:fb:b5:ac:22:
                    93:f3:86:d5:fc:5f:9b:9b:4f:be:f1:04:88:a8:ca:
                    f9:22:23:ba:ff:4c:aa:c3:f2:64:f4:b0:6f:aa:83:
                    9f:39:4f:08:88:c5:0f:55:1e:a1:30:d9:9f:b9:ef:
                    7a:56:56:1b:40:f9:37:48:35:c6:93:d8:b2:8f:c7:
                    c6:fe:4e:33:b8:06:db:b9:88:e9:58:3f:19:e5:89:
                    d5:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:58:0F:17:27:7F:5C:8D:0D:AF:78:4F:A0:DB:F4:F4:0A:40:FE:DF
            X509v3 Authority Key Identifier:
                keyid:17:B6:2F:0E:5D:F5:F2:30:6F:06:56:87:5E:F6:18:7F:83:42:3C:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/d90ac5ca-35df-4607-9405-397b7aadb2a7/0/17B62F0E5DF5F2306F0656875EF6187F83423CBD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/17B62F0E5DF5F2306F0656875EF6187F83423CBD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d90ac5ca-35df-4607-9405-397b7aadb2a7/0/17B62F0E5DF5F2306F0656875EF6187F83423CBD.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:e7:3c:4b:d5:59:48:a9:55:2e:33:80:28:2b:84:3a:56:75:
         f4:a6:05:31:76:82:25:6d:a8:bb:59:29:71:4b:38:f9:27:cd:
         a5:6e:08:b5:f6:f0:bf:af:22:76:d8:f0:bb:f2:c7:88:b4:1e:
         c4:75:f8:c6:5c:67:29:89:91:1c:17:8c:a0:6c:fe:93:d0:e9:
         d4:90:83:e1:41:ba:be:ce:d8:c0:2c:f0:35:fe:61:3f:49:2e:
         7b:46:1a:ca:09:a7:7b:a4:e7:2e:74:2d:90:d1:22:b2:9c:19:
         2c:5b:f5:11:5a:95:f3:c0:2d:68:2d:7d:77:71:02:e5:ee:45:
         2a:fa:30:2c:8e:6e:54:e5:1b:7f:15:bb:83:1f:16:41:8d:2b:
         f7:09:43:f6:72:01:8e:ac:0b:b4:b6:70:ef:08:8c:b1:29:2a:
         69:2a:66:3d:4b:fc:c9:50:2e:32:11:f7:d6:d9:4d:ee:ef:50:
         c7:86:7d:08:29:3a:11:80:a5:d5:52:f1:09:e8:ce:d5:d8:56:
         1a:59:38:14:9a:c4:75:07:93:3e:e6:f8:4d:60:5f:c1:4a:22:
         16:5e:da:5b:84:db:27:49:b7:20:b3:bd:3f:77:d8:f2:47:88:
         88:58:53:d4:20:f6:bd:84:be:2d:ce:07:f7:d8:38:bd:66:f7:
         66:3b:60:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 01:19:51 2026 by rpki-client