This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/e40029c7-742c-4da8-b2ee-d629ae78bf01/0/10B7822CA22013D1B3095AB974949FD98A76025C.mft
File:                     10B7822CA22013D1B3095AB974949FD98A76025C.mft (raw, json)
Hash identifier:          tKh09rcj2iAvgZRD6n6y/EGzwaRIbOmPq3vYksamnNU=
Subject key identifier:   68:3D:0E:47:2F:8D:B5:FB:E7:EA:A3:DF:24:6E:D2:B1:BC:80:5A:3D
Authority key identifier: 10:B7:82:2C:A2:20:13:D1:B3:09:5A:B9:74:94:9F:D9:8A:76:02:5C
Certificate issuer:       /CN=10B7822CA22013D1B3095AB974949FD98A76025C
Certificate serial:       6A5162AE2DD6673EACD26B35F51863070E293E0A
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10B7822CA22013D1B3095AB974949FD98A76025C.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/e40029c7-742c-4da8-b2ee-d629ae78bf01/0/10B7822CA22013D1B3095AB974949FD98A76025C.mft
Manifest number:          0164
Signing time:             Sat 24 Jan 2026 15:01:20 +0000
Manifest this update:     Sat 24 Jan 2026 14:56:20 +0000
Manifest next update:     Wed 28 Jan 2026 01:49:20 +0000
Files and hashes:         1: 3130332e3134352e3232362e302f32342d3234203d3e20313339343536.roa (hash: pdj6kWhUHiHBGDkiWMJSGwDu1DiR3cH1bD9Qa0wAwf0=)
                          2: 10B7822CA22013D1B3095AB974949FD98A76025C.crl (hash: qHedLpOE9nS8d1LGShK4e/ZXLGw9U2MTXvd6MF8In1E=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/e40029c7-742c-4da8-b2ee-d629ae78bf01/0/10B7822CA22013D1B3095AB974949FD98A76025C.crl
                          rsync://repo-rpki.idnic.net/repo/e40029c7-742c-4da8-b2ee-d629ae78bf01/0/10B7822CA22013D1B3095AB974949FD98A76025C.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10B7822CA22013D1B3095AB974949FD98A76025C.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 28 Jan 2026 01:49:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:51:62:ae:2d:d6:67:3e:ac:d2:6b:35:f5:18:63:07:0e:29:3e:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10B7822CA22013D1B3095AB974949FD98A76025C
        Validity
            Not Before: Jan 24 14:56:20 2026 GMT
            Not After : Jan 28 01:49:20 2026 GMT
        Subject: CN=683D0E472F8DB5FBE7EAA3DF246ED2B1BC805A3D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:d1:7c:b1:f5:3b:fd:8d:a9:ac:14:98:0a:8d:
                    22:e9:6b:1a:b0:e5:58:53:6e:ca:34:b6:51:81:bc:
                    39:c8:86:43:bb:1b:29:37:56:03:ce:5f:c2:c2:8a:
                    bb:ea:35:f3:85:1c:99:d7:7b:91:ab:33:5f:14:69:
                    c7:86:de:45:90:8b:7f:35:63:56:4e:a0:7b:db:00:
                    68:cb:fd:68:b4:a7:3b:bd:be:dc:7d:6a:ef:24:95:
                    3b:b6:bc:0b:bf:09:26:4b:17:74:7f:51:c7:fe:f8:
                    ba:a5:21:54:10:09:b4:62:d3:3e:63:ed:8f:a7:9d:
                    11:22:b5:72:73:0b:8c:22:ee:7f:ea:b1:47:a5:1d:
                    4c:ed:d0:12:1c:bf:14:82:00:d4:18:a2:45:b7:04:
                    78:73:69:b7:44:2a:d9:0f:01:b2:e1:e0:fa:9f:bf:
                    c7:74:50:db:bd:66:0f:90:ff:7e:04:1b:b3:d6:b1:
                    23:a3:6f:c4:a2:39:1d:e9:cc:b2:fc:3a:57:20:d1:
                    eb:54:b7:b6:36:5a:69:34:23:0e:4b:29:b3:91:10:
                    7d:51:c6:93:0a:a2:a5:df:52:b6:31:bb:82:f9:4a:
                    c6:85:61:cb:de:61:d0:42:0a:50:b0:6d:aa:b4:a5:
                    78:ee:a6:98:2d:f7:d5:ce:02:51:ea:1f:7b:91:59:
                    47:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:3D:0E:47:2F:8D:B5:FB:E7:EA:A3:DF:24:6E:D2:B1:BC:80:5A:3D
            X509v3 Authority Key Identifier:
                keyid:10:B7:82:2C:A2:20:13:D1:B3:09:5A:B9:74:94:9F:D9:8A:76:02:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/e40029c7-742c-4da8-b2ee-d629ae78bf01/0/10B7822CA22013D1B3095AB974949FD98A76025C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10B7822CA22013D1B3095AB974949FD98A76025C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e40029c7-742c-4da8-b2ee-d629ae78bf01/0/10B7822CA22013D1B3095AB974949FD98A76025C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:f4:f9:7b:d4:df:a4:3d:f2:b8:c3:b2:48:98:53:48:ef:b8:
         17:9d:56:1a:bd:04:8b:ff:4e:44:50:82:78:3e:c4:ef:e6:d4:
         dd:35:34:08:6c:b1:a9:05:ed:c6:4c:b7:c7:86:f7:bd:71:d0:
         8d:73:93:6c:bf:e8:98:5a:3c:42:23:55:22:0f:f8:20:c4:76:
         f4:80:19:43:06:3d:3d:7a:ba:2d:13:30:7d:2e:d7:66:15:d3:
         51:59:e2:8d:d9:89:a9:5e:3d:25:f5:c0:68:b7:79:47:50:eb:
         94:1b:67:ee:42:5c:35:cc:7e:b8:69:a8:b7:93:2a:51:69:e3:
         91:07:d4:0b:11:4c:50:cb:88:52:69:7c:38:f6:84:97:44:ce:
         3e:f9:cd:5a:94:81:bd:a8:27:80:ac:e2:c8:ab:c2:59:b6:88:
         5f:8b:a5:93:dc:a1:d7:ad:d2:0d:bd:da:9c:23:5c:8e:fe:a1:
         58:c2:2a:ff:6d:95:46:56:0d:a4:88:92:48:cb:41:db:e8:78:
         07:06:d6:15:d8:14:7e:9e:46:c4:47:80:72:41:4b:f6:e4:bd:
         87:d3:6c:47:b4:51:43:25:fc:11:f4:d5:12:65:bc:2b:3a:c4:
         82:e3:e5:50:4b:19:05:34:8a:cd:73:3b:e6:b3:61:2c:68:da:
         d8:4d:fd:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:54:40 2026 by rpki-client