This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/e0c55034-5f36-4173-b64c-a975e323138a/0/0E7BF2CE27D899D8E985DBD9311DF8B250C58581.mft
File:                     0E7BF2CE27D899D8E985DBD9311DF8B250C58581.mft (raw, json)
Hash identifier:          6O2XxLX1Kz05di3VYDAPSJ7Mp0+3CGv3VqjeqUIG+nM=
Subject key identifier:   23:8E:CD:03:B6:45:42:E7:27:DA:DD:AD:4F:86:AD:72:5E:28:63:4F
Authority key identifier: 0E:7B:F2:CE:27:D8:99:D8:E9:85:DB:D9:31:1D:F8:B2:50:C5:85:81
Certificate issuer:       /CN=0E7BF2CE27D899D8E985DBD9311DF8B250C58581
Certificate serial:       1918062D793E21B78B5A96A6E13EA245A50DECEB
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0E7BF2CE27D899D8E985DBD9311DF8B250C58581.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/e0c55034-5f36-4173-b64c-a975e323138a/0/0E7BF2CE27D899D8E985DBD9311DF8B250C58581.mft
Manifest number:          0137
Signing time:             Sat 24 Jan 2026 18:41:25 +0000
Manifest this update:     Sat 24 Jan 2026 18:36:25 +0000
Manifest next update:     Tue 27 Jan 2026 22:54:25 +0000
Files and hashes:         1: 3130332e3235322e3130302e302f32332d3233203d3e203539313437.roa (hash: MBFnv7ZoP4iaMV1OJ7B+JK9tAnoUgV3W7EEXgSWuTJc=)
                          2: 3130332e3235322e3130312e302f32342d3234203d3e203539313437.roa (hash: N8BYJ8Ja8cI/O8F5jWMsSdJz8j5GkTqxxcCM4rTW7ZA=)
                          3: 3130332e3235322e3130302e302f32342d3234203d3e203539313437.roa (hash: Q18iWCzyIgnJ03JWHzXheCWpGYNBjtSoC3dIdyCS6t0=)
                          4: 0E7BF2CE27D899D8E985DBD9311DF8B250C58581.crl (hash: cm+6eyR7vNFL3xWEjMC+DCRE2hQXidLbWoHnUFHZX2k=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/e0c55034-5f36-4173-b64c-a975e323138a/0/0E7BF2CE27D899D8E985DBD9311DF8B250C58581.crl
                          rsync://repo-rpki.idnic.net/repo/e0c55034-5f36-4173-b64c-a975e323138a/0/0E7BF2CE27D899D8E985DBD9311DF8B250C58581.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0E7BF2CE27D899D8E985DBD9311DF8B250C58581.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 27 Jan 2026 22:54:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:18:06:2d:79:3e:21:b7:8b:5a:96:a6:e1:3e:a2:45:a5:0d:ec:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E7BF2CE27D899D8E985DBD9311DF8B250C58581
        Validity
            Not Before: Jan 24 18:36:25 2026 GMT
            Not After : Jan 27 22:54:25 2026 GMT
        Subject: CN=238ECD03B64542E727DADDAD4F86AD725E28634F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:eb:28:20:bf:9c:3e:00:6b:74:34:e6:27:31:
                    37:23:38:0e:5e:67:03:cc:bc:77:ae:89:bd:6a:5e:
                    7d:ff:e6:95:5f:27:3a:79:ac:92:73:de:bf:9c:bd:
                    a4:c8:00:96:5c:64:69:71:a2:72:35:b6:31:a2:4a:
                    b1:66:42:a8:b3:11:3c:67:b2:ac:bb:37:d0:84:ff:
                    0f:4d:50:1f:40:b6:b6:9a:e9:13:e8:9f:0b:87:f2:
                    f0:29:e8:9c:e5:9f:83:2c:4f:25:80:7e:04:17:35:
                    99:6d:a7:18:0a:ec:3c:36:b3:47:83:79:52:fc:8e:
                    a5:8f:f4:33:fb:64:b7:ef:db:65:4c:e6:9e:b5:e0:
                    e9:fc:65:73:cb:20:76:9f:18:dc:7a:46:46:3b:c9:
                    2d:2b:a7:cf:0b:29:95:fa:df:ec:b3:a6:f0:b6:d4:
                    92:f8:c7:76:1f:20:8c:f7:7c:9a:0f:04:08:cf:e8:
                    91:f6:8a:22:d6:73:ae:8c:d9:34:5b:fd:47:01:b5:
                    c5:29:2d:10:e5:8d:04:05:24:13:6d:43:c1:cc:04:
                    f8:fd:96:fa:90:0d:51:12:77:6c:34:c0:ec:e5:db:
                    73:dc:e2:0b:27:e7:8b:6f:3b:d5:6e:27:e4:62:98:
                    8a:b2:a8:1c:5c:9a:02:66:6c:6b:13:c5:e3:51:90:
                    84:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:8E:CD:03:B6:45:42:E7:27:DA:DD:AD:4F:86:AD:72:5E:28:63:4F
            X509v3 Authority Key Identifier:
                keyid:0E:7B:F2:CE:27:D8:99:D8:E9:85:DB:D9:31:1D:F8:B2:50:C5:85:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/e0c55034-5f36-4173-b64c-a975e323138a/0/0E7BF2CE27D899D8E985DBD9311DF8B250C58581.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0E7BF2CE27D899D8E985DBD9311DF8B250C58581.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e0c55034-5f36-4173-b64c-a975e323138a/0/0E7BF2CE27D899D8E985DBD9311DF8B250C58581.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:61:8d:0f:3a:51:b7:e2:24:a0:c3:35:a0:05:a3:91:22:b3:
         93:1b:65:b6:ed:4c:d3:57:a0:33:85:7c:50:54:90:c2:c4:1c:
         2b:7c:8d:ec:57:ab:f0:e4:43:70:6b:90:f9:32:62:ba:6a:d2:
         32:8d:aa:2f:ef:80:f8:3a:1b:7b:6e:44:4f:c5:cd:68:cf:a4:
         e4:7b:5b:c5:7e:6f:b5:d9:00:59:40:b8:d1:df:13:f2:f4:fe:
         38:0f:0f:ce:ec:42:f4:42:6b:64:51:d1:ed:63:df:cd:7b:ea:
         e2:c0:22:e3:68:33:a4:8d:d4:51:e0:40:76:28:83:59:40:e2:
         64:4d:da:9e:84:cf:df:ea:86:7c:14:b1:b2:7d:2c:82:a3:1c:
         92:32:c6:5f:5e:d0:00:dc:ab:3f:f3:de:02:05:af:ff:50:15:
         af:79:9b:7c:94:1c:ea:46:21:c4:7c:56:3f:98:57:c7:09:90:
         20:0d:ac:12:19:c1:ac:6c:9c:d0:1f:a1:32:6a:a3:61:d4:15:
         a7:26:b9:40:b5:18:51:9a:69:ac:36:9d:f5:1c:bd:ee:04:f0:
         08:ff:c6:43:75:bb:ab:1e:72:50:c9:59:cb:b8:b5:6b:79:c3:
         8c:41:ed:03:da:b3:3a:f8:f4:04:de:ce:53:59:cc:1c:8a:e0:
         fe:9d:22:a6
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUGRgGLXk+IbeLWpam4T6iRaUN7OswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEU3QkYyQ0UyN0Q4OTlEOEU5ODVEQkQ5MzExREY4QjI1
MEM1ODU4MTAeFw0yNjAxMjQxODM2MjVaFw0yNjAxMjcyMjU0MjVaMDMxMTAvBgNV
BAMTKDIzOEVDRDAzQjY0NTQyRTcyN0RBRERBRDRGODZBRDcyNUUyODYzNEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC76yggv5w+AGt0NOYnMTcjOA5e
ZwPMvHeuib1qXn3/5pVfJzp5rJJz3r+cvaTIAJZcZGlxonI1tjGiSrFmQqizETxn
sqy7N9CE/w9NUB9Atraa6RPonwuH8vAp6Jzln4MsTyWAfgQXNZltpxgK7Dw2s0eD
eVL8jqWP9DP7ZLfv22VM5p614On8ZXPLIHafGNx6RkY7yS0rp88LKZX63+yzpvC2
1JL4x3YfIIz3fJoPBAjP6JH2iiLWc66M2TRb/UcBtcUpLRDljQQFJBNtQ8HMBPj9
lvqQDVESd2w0wOzl23Pc4gsn54tvO9VuJ+RimIqyqBxcmgJmbGsTxeNRkIS1AgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUI47NA7ZFQucn2t2tT4atcl4oY08wHwYDVR0j
BBgwFoAUDnvyzifYmdjphdvZMR34slDFhYEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l
MGM1NTAzNC01ZjM2LTQxNzMtYjY0Yy1hOTc1ZTMyMzEzOGEvMC8wRTdCRjJDRTI3
RDg5OUQ4RTk4NURCRDkzMTFERjhCMjUwQzU4NTgxLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMEU3QkYyQ0UyN0Q4OTlEOEU5ODVEQkQ5MzExREY4QjI1MEM1
ODU4MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTBjNTUwMzQtNWYzNi00MTczLWI2
NGMtYTk3NWUzMjMxMzhhLzAvMEU3QkYyQ0UyN0Q4OTlEOEU5ODVEQkQ5MzExREY4
QjI1MEM1ODU4MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAHdhjQ86UbfiJKDDNaAFo5Eis5MbZbbtTNNX
oDOFfFBUkMLEHCt8jexXq/DkQ3BrkPkyYrpq0jKNqi/vgPg6G3tuRE/FzWjPpOR7
W8V+b7XZAFlAuNHfE/L0/jgPD87sQvRCa2RR0e1j38176uLAIuNoM6SN1FHgQHYo
g1lA4mRN2p6Ez9/qhnwUsbJ9LIKjHJIyxl9e0ADcqz/z3gIFr/9QFa95m3yUHOpG
IcR8Vj+YV8cJkCANrBIZwaxsnNAfoTJqo2HUFacmuUC1GFGaaaw2nfUcve4E8Aj/
xkN1u6seclDJWcu4tWt5w4xB7QPaszr49ATezlNZzByK4P6dIqY=
-----END CERTIFICATE-----
Generated at Sun Jan 25 23:40:22 2026 by rpki-client