This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/d9243950-3fdf-49ab-bfdc-f586453704c6/0/51B0CF7488516A897D04B7AFE3238190B6B5606C.mft
File:                     51B0CF7488516A897D04B7AFE3238190B6B5606C.mft (raw, json)
Hash identifier:          pbxEks/VCe/xQBT63gE3hcWFDytl4Ig2dYiBUpPAkbA=
Subject key identifier:   3C:DB:01:42:0A:E4:DE:A9:66:D0:BA:7D:8A:86:0F:10:09:23:DB:51
Authority key identifier: 51:B0:CF:74:88:51:6A:89:7D:04:B7:AF:E3:23:81:90:B6:B5:60:6C
Certificate issuer:       /CN=51B0CF7488516A897D04B7AFE3238190B6B5606C
Certificate serial:       0773834F88D75A3591B623713E152C6C5BC24B05
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/51B0CF7488516A897D04B7AFE3238190B6B5606C.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/d9243950-3fdf-49ab-bfdc-f586453704c6/0/51B0CF7488516A897D04B7AFE3238190B6B5606C.mft
Manifest number:          01D6
Signing time:             Fri 23 Jan 2026 22:32:25 +0000
Manifest this update:     Fri 23 Jan 2026 22:27:25 +0000
Manifest next update:     Tue 27 Jan 2026 05:05:25 +0000
Files and hashes:         1: 51B0CF7488516A897D04B7AFE3238190B6B5606C.crl (hash: G+VP1GHqQGEdgweKJS/hx484iouS+XMurYVeSXFK/Lc=)
                          2: 3130332e3133312e3130372e302f32342d3234203d3e20313338313139.roa (hash: nFi+ipcei3slR6xJ5GlGKgJXGqfTYRFEoIAi6SGugKw=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/d9243950-3fdf-49ab-bfdc-f586453704c6/0/51B0CF7488516A897D04B7AFE3238190B6B5606C.crl
                          rsync://repo-rpki.idnic.net/repo/d9243950-3fdf-49ab-bfdc-f586453704c6/0/51B0CF7488516A897D04B7AFE3238190B6B5606C.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/51B0CF7488516A897D04B7AFE3238190B6B5606C.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 27 Jan 2026 05:05:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:73:83:4f:88:d7:5a:35:91:b6:23:71:3e:15:2c:6c:5b:c2:4b:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51B0CF7488516A897D04B7AFE3238190B6B5606C
        Validity
            Not Before: Jan 23 22:27:25 2026 GMT
            Not After : Jan 27 05:05:25 2026 GMT
        Subject: CN=3CDB01420AE4DEA966D0BA7D8A860F100923DB51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:2c:99:0e:3d:9c:ab:8c:02:1f:53:aa:0a:01:
                    2f:0a:d5:f8:43:c0:1b:56:9d:ea:9d:e8:dd:6f:6a:
                    4a:82:65:95:d3:78:6e:64:db:01:15:e4:64:a7:d0:
                    c1:12:dd:6a:f7:10:58:46:96:67:d9:56:81:13:81:
                    65:62:67:a1:cc:b1:89:8b:f0:14:02:b3:2e:05:e2:
                    43:aa:d8:58:79:ce:07:57:4d:ac:41:c3:88:50:0c:
                    c2:76:69:24:61:3c:76:77:d9:70:48:d7:8c:62:51:
                    b2:0a:f5:68:14:9e:91:fa:da:1a:5e:79:ef:3d:d8:
                    65:87:af:52:c7:31:17:4e:5f:d8:04:98:42:f0:64:
                    67:4a:6c:c8:ff:d0:7c:97:20:59:be:f2:2a:d3:18:
                    ce:53:52:07:c9:6e:3d:e2:73:bd:83:b0:a1:0e:04:
                    d9:29:32:65:a1:8c:67:6e:28:ed:25:3a:28:dd:7f:
                    01:e3:b7:5b:76:a4:e5:3d:4a:32:44:26:36:1e:0f:
                    1d:10:8f:9a:ce:51:20:29:0a:f3:31:de:b3:29:7b:
                    f4:e8:cf:a8:89:4c:90:16:0e:84:06:ef:c0:9c:c1:
                    89:73:e3:b9:b3:61:8f:ab:f5:9e:2c:88:15:88:8e:
                    85:5a:46:ca:c5:64:02:be:2d:15:40:14:c4:a7:b3:
                    6e:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:DB:01:42:0A:E4:DE:A9:66:D0:BA:7D:8A:86:0F:10:09:23:DB:51
            X509v3 Authority Key Identifier:
                keyid:51:B0:CF:74:88:51:6A:89:7D:04:B7:AF:E3:23:81:90:B6:B5:60:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/d9243950-3fdf-49ab-bfdc-f586453704c6/0/51B0CF7488516A897D04B7AFE3238190B6B5606C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/51B0CF7488516A897D04B7AFE3238190B6B5606C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d9243950-3fdf-49ab-bfdc-f586453704c6/0/51B0CF7488516A897D04B7AFE3238190B6B5606C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:79:3d:b0:5a:e0:12:a0:e4:9b:14:67:0c:84:12:d7:bd:ae:
         21:72:57:8b:d2:15:45:7e:fe:6a:b4:f2:07:fe:8f:9c:76:94:
         01:71:c6:6b:81:04:72:1f:2c:75:e0:cc:27:b4:82:11:ea:a5:
         a2:8b:8a:4a:17:bd:8a:71:db:2e:5b:6e:e7:10:ec:d7:78:c8:
         09:1b:b4:91:db:52:4c:66:55:e5:6d:8b:81:45:bd:88:56:89:
         88:0c:14:18:6e:7e:71:09:72:a9:fa:89:cb:81:ba:a0:e8:0e:
         6d:e8:ac:05:7a:b4:c8:5b:c2:e9:d2:4a:e4:6a:eb:d3:15:a3:
         ed:77:89:74:50:9a:ff:61:a6:8d:2f:69:7d:a8:bb:25:7d:08:
         3d:e7:77:70:c9:09:01:ae:7c:97:53:5e:e9:25:dc:ce:9c:30:
         17:be:30:ff:75:49:d3:13:21:ce:6d:0b:6d:3e:9b:fc:bb:76:
         7a:2b:b7:1a:f2:00:ad:65:ce:92:18:17:0f:0d:60:35:3a:88:
         91:6b:f9:f2:2c:5f:79:3e:72:54:c8:8d:8d:0e:79:03:b6:21:
         c9:e2:6c:7a:cb:ae:90:f0:2a:e1:e1:85:a2:35:47:fb:c0:88:
         c2:43:23:2c:39:02:61:32:26:07:97:99:ca:97:a1:67:41:31:
         51:ff:f9:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 23:22:06 2026 by rpki-client