This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/df2e7fd6-eb5e-480a-8e97-c55f68e0589a/0/C16E46D556A47D2429EC847E95E7C429D38AC26D.mft
File:                     C16E46D556A47D2429EC847E95E7C429D38AC26D.mft (raw, json)
Hash identifier:          9tWNfZk9n5MuUqaKHRNFnhgnvqVx4gh1V3N6sReMfWU=
Subject key identifier:   50:6D:3D:91:8F:12:E4:E6:63:CA:0B:62:5C:57:19:CF:AE:BD:B8:D9
Authority key identifier: C1:6E:46:D5:56:A4:7D:24:29:EC:84:7E:95:E7:C4:29:D3:8A:C2:6D
Certificate issuer:       /CN=C16E46D556A47D2429EC847E95E7C429D38AC26D
Certificate serial:       6D5A5122D111AFBA4CDC5981797E7B6A0B1C0CED
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C16E46D556A47D2429EC847E95E7C429D38AC26D.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/df2e7fd6-eb5e-480a-8e97-c55f68e0589a/0/C16E46D556A47D2429EC847E95E7C429D38AC26D.mft
Manifest number:          03AC
Signing time:             Sat 24 Jan 2026 05:42:23 +0000
Manifest this update:     Sat 24 Jan 2026 05:37:23 +0000
Manifest next update:     Tue 27 Jan 2026 13:53:23 +0000
Files and hashes:         1: 3132322e3234382e34302e302f32342d3234203d3e203435333235.roa (hash: r1xG0EZ+diPvqjo3maUSgSdAXF/PbzNzYbElj3DkPms=)
                          2: 3132322e3234382e34362e302f32342d3234203d3e203435333235.roa (hash: cNjA+vEY4etZqGchJ8HDvYFIMYzWVJuVGOU4SD9SCJc=)
                          3: 3132322e3234382e33392e302f32342d3234203d3e203435333235.roa (hash: VdRAPx9PRO631CUuDsRT3G+gpxtg4/VX90lYsk0SMVU=)
                          4: 3230332e33302e3235342e302f32342d3234203d3e203435333235.roa (hash: f0QuTjuXU3+PMwtOvyLhhE3F7fk0wnPs64pd29FWWiY=)
                          5: 3132322e3234382e34322e302f32342d3234203d3e20313431313432.roa (hash: BEXTqeRuOYeCds/GtbXckcTCx17EaQiOC1/BtPp70DI=)
                          6: 3132322e3234382e33382e302f32342d3234203d3e203435333235.roa (hash: Giz7os34qxdcaeyi2EtKcr2LS4LsMlTnJlV8pqSpEa4=)
                          7: 3230322e34332e3131322e302f32342d3234203d3e203435333235.roa (hash: YfbB3z09y4MNoTi1HjR4+z9IdxMYyBM89bj8p3WiTw4=)
                          8: 3132322e3234382e34342e302f32342d3234203d3e20313431313432.roa (hash: /wV95wT81KDKro/jg/Buo94wrPpWyGBGso5Gssi1qLc=)
                          9: 3230332e33302e3235352e302f32342d3234203d3e203435333235.roa (hash: xUdwOu6GtGdzxItV3iA1A5hAD2Ey5dnmQ19p3DcRu10=)
                          10: 3230322e34332e3131332e302f32342d3234203d3e203435333235.roa (hash: 8c4EuCrXR9USSkoSueUSWcZF3Vya08SYcqUOI9OfmOY=)
                          11: C16E46D556A47D2429EC847E95E7C429D38AC26D.crl (hash: laBcEYLvw9tOv4wo0Cw/6nntPuEVZmzxUHLJrI0lKQk=)
                          12: 3132322e3234382e34332e302f32342d3234203d3e203435333235.roa (hash: TzoAuOSZ6mXbYFD7JpUog8X7cU+aL4pu97WqgSsQlww=)
                          13: 3132322e3234382e34372e302f32342d3234203d3e203435333235.roa (hash: pMSHdCGU3wSWW64VJ8Q+XCnRMyb8p81kTgkpP+Gwk14=)
                          14: 3132322e3234382e33322e302f32342d3234203d3e203435333235.roa (hash: YtgOnaLw1bxl1wUrgM2neAz8Qf57lo3CvBW85nMyhJg=)
                          15: 3230322e35382e3234332e302f32342d3234203d3e203435333235.roa (hash: WivqrExuW/czATKs+PzCjFZrJxIri49e6BcoDofHA0A=)
                          16: 3132322e3234382e34312e302f32342d3234203d3e203435333235.roa (hash: VEDwBMu7e2mzL/h9CHSnsP+W8nFPBXkEhV06ak5Sn4k=)
                          17: 323430303a373530303a3a2f33322d3332203d3e20313431313432.roa (hash: jAH5xZ0mM2gJ4zgC+LxXgivI18TAlcZ5CPYpBlGyxP0=)
                          18: 3132322e3234382e33332e302f32342d3234203d3e203435333235.roa (hash: 8NBF7TYD3mv93Ahcm2U3DCAxcvF4PEalBVAFdo0PIhA=)
                          19: 3132322e3234382e33342e302f32342d3234203d3e203435333235.roa (hash: TPAjUCjHJnWAtWeWIogMrgqyIk1DQzed8sLTl5HA/OY=)
                          20: 3132322e3234382e33352e302f32342d3234203d3e20313431313432.roa (hash: GE7T9YC/kqBLoYKuMN7OgXcO8QMg0KTigD9MICwdRZo=)
                          21: 3132322e3234382e33372e302f32342d3234203d3e20313431313432.roa (hash: q+4LJqnEtPR8u/O7vXDxEMWbUC+3pBdRVabjnpWaIW8=)
                          22: 3132322e3234382e34352e302f32342d3234203d3e203435333235.roa (hash: OxhA3uXfrHkYk9hpK8Kprlt50rQpJAHKf4/psbChj9g=)
                          23: 3132322e3234382e33362e302f32342d3234203d3e203435333235.roa (hash: s1sd22aoOx7eVnGzzPZfaCEnUeLM+0ey0B/Ng0FNQzE=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/df2e7fd6-eb5e-480a-8e97-c55f68e0589a/0/C16E46D556A47D2429EC847E95E7C429D38AC26D.crl
                          rsync://repo-rpki.idnic.net/repo/df2e7fd6-eb5e-480a-8e97-c55f68e0589a/0/C16E46D556A47D2429EC847E95E7C429D38AC26D.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C16E46D556A47D2429EC847E95E7C429D38AC26D.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 27 Jan 2026 13:53:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:5a:51:22:d1:11:af:ba:4c:dc:59:81:79:7e:7b:6a:0b:1c:0c:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C16E46D556A47D2429EC847E95E7C429D38AC26D
        Validity
            Not Before: Jan 24 05:37:23 2026 GMT
            Not After : Jan 27 13:53:23 2026 GMT
        Subject: CN=506D3D918F12E4E663CA0B625C5719CFAEBDB8D9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:7f:94:4b:eb:85:1d:f0:71:19:97:63:5c:32:
                    b1:73:c2:f7:d3:2c:d1:cd:75:b9:61:d4:b2:9e:17:
                    fd:50:fb:05:51:10:aa:70:1a:bb:0a:b7:20:bb:a4:
                    65:e4:f3:08:2b:d7:ee:d6:97:9a:c9:13:4e:e6:ae:
                    d2:9e:a1:dc:20:bc:84:67:82:85:18:d4:49:ad:cd:
                    1b:ae:58:5d:ec:d4:45:1c:58:1a:92:c7:7d:d9:38:
                    f7:57:e1:c6:11:ab:43:b7:04:29:20:d4:16:11:1d:
                    53:eb:e3:ed:01:0c:27:11:22:9b:3f:ef:8c:7b:d0:
                    01:45:2b:44:1d:39:d3:c3:f8:ec:61:7c:a8:9a:4c:
                    fb:46:b8:19:43:90:9f:b1:57:01:86:c6:8e:37:d7:
                    eb:38:ff:7f:46:8a:9e:b2:87:d9:41:2d:33:96:73:
                    41:f7:85:72:57:fc:3a:99:ea:8b:75:9a:93:c8:87:
                    86:f1:18:24:66:b6:b8:38:b2:65:c1:91:c8:dd:6e:
                    b4:90:48:61:0e:a4:46:a4:63:de:a2:7f:e1:3d:4e:
                    5d:70:4c:a4:8b:e6:53:24:21:08:c3:aa:c7:a2:42:
                    80:a2:04:c9:57:6c:19:b5:71:50:aa:ce:3e:9d:1c:
                    e8:05:f9:07:10:17:ef:25:8d:65:ae:e5:2e:6e:74:
                    2c:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:6D:3D:91:8F:12:E4:E6:63:CA:0B:62:5C:57:19:CF:AE:BD:B8:D9
            X509v3 Authority Key Identifier:
                keyid:C1:6E:46:D5:56:A4:7D:24:29:EC:84:7E:95:E7:C4:29:D3:8A:C2:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/df2e7fd6-eb5e-480a-8e97-c55f68e0589a/0/C16E46D556A47D2429EC847E95E7C429D38AC26D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C16E46D556A47D2429EC847E95E7C429D38AC26D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/df2e7fd6-eb5e-480a-8e97-c55f68e0589a/0/C16E46D556A47D2429EC847E95E7C429D38AC26D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:3b:6e:7d:75:38:a6:2f:01:e0:6a:8b:4f:99:0c:2f:3f:90:
         64:76:cf:e9:e4:a1:6d:ca:b4:cd:d9:5c:93:26:88:84:6c:02:
         64:2b:7f:b0:98:af:6e:00:b7:36:44:2a:95:cc:a3:7d:bf:d9:
         87:be:fa:10:7f:05:d8:7e:ff:bf:1a:fc:01:6f:22:65:81:d8:
         bf:39:89:fa:dd:cd:c4:cc:a6:fa:ad:44:f4:14:67:b4:cb:2b:
         f5:5c:01:f2:e6:41:04:1f:bb:e2:cc:ed:8f:62:77:4a:dc:41:
         1c:7d:06:b7:02:80:13:07:ad:59:f6:ce:6a:42:45:53:ea:88:
         1d:47:e3:d2:4a:c8:7c:28:91:7a:e5:28:30:4b:d4:a4:c9:0f:
         f6:1b:e1:36:cf:14:8d:5c:0e:eb:46:99:51:8e:a8:67:d6:47:
         dd:a0:aa:44:ad:b5:6b:ba:21:fb:af:ac:77:84:3a:20:bc:7e:
         fe:75:d1:ae:2e:c3:74:09:2e:c5:62:e1:8b:92:87:95:77:1d:
         9d:9e:17:34:c8:1f:c3:60:f0:dd:2d:5d:49:33:1a:2c:8a:9c:
         62:e2:cf:2f:76:07:63:c4:b9:ef:84:ae:b2:30:97:4e:e8:44:
         e7:56:ac:8e:4a:6a:b7:e6:67:ed:a5:2d:49:78:bb:54:07:63:
         5b:65:d1:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 23:13:34 2026 by rpki-client