This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/e543241b-cfd1-4cbb-9219-c7a36237c148/0/22504F83E378CE066AD31D32EB24280CB0F6E560.mft
File:                     22504F83E378CE066AD31D32EB24280CB0F6E560.mft (raw, json)
Hash identifier:          14obCsIa0ks7TV/fCblWyxkMbWgiuC2RMTJp1VhRBM4=
Subject key identifier:   75:58:95:B8:E1:2F:51:85:F3:5E:9B:E3:F9:C6:37:71:09:31:8C:23
Authority key identifier: 22:50:4F:83:E3:78:CE:06:6A:D3:1D:32:EB:24:28:0C:B0:F6:E5:60
Certificate issuer:       /CN=22504F83E378CE066AD31D32EB24280CB0F6E560
Certificate serial:       7B5DFA2A239129724651C10CDE7C58555A7786B0
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/22504F83E378CE066AD31D32EB24280CB0F6E560.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/e543241b-cfd1-4cbb-9219-c7a36237c148/0/22504F83E378CE066AD31D32EB24280CB0F6E560.mft
Manifest number:          0201
Signing time:             Sat 24 Jan 2026 18:51:21 +0000
Manifest this update:     Sat 24 Jan 2026 18:46:21 +0000
Manifest next update:     Wed 28 Jan 2026 03:52:21 +0000
Files and hashes:         1: 3130332e34362e3138372e302f32342d3234203d3e20313530343632.roa (hash: 3MFYnAUdA7YDVt9GLc9O7yMdgWVCYVJhgGeVAk7k6cA=)
                          2: 22504F83E378CE066AD31D32EB24280CB0F6E560.crl (hash: nv/W9B/s6PWqXVmV76jReVTjBJ8E5X4tFidaqS4mnto=)
                          3: 3130332e34362e3138362e302f32332d3233203d3e20313530343632.roa (hash: rlPDCVNSf12GT3UB6JNKAKIcKwQhkdo/IHpQgzId5qI=)
                          4: 3130332e34362e3138362e302f32342d3234203d3e20313530343632.roa (hash: ppVHCACqlSkCk2zBbZsJHXx5IRxFz5QYyP09fnWth0M=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/e543241b-cfd1-4cbb-9219-c7a36237c148/0/22504F83E378CE066AD31D32EB24280CB0F6E560.crl
                          rsync://repo-rpki.idnic.net/repo/e543241b-cfd1-4cbb-9219-c7a36237c148/0/22504F83E378CE066AD31D32EB24280CB0F6E560.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/22504F83E378CE066AD31D32EB24280CB0F6E560.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 28 Jan 2026 03:52:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:5d:fa:2a:23:91:29:72:46:51:c1:0c:de:7c:58:55:5a:77:86:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22504F83E378CE066AD31D32EB24280CB0F6E560
        Validity
            Not Before: Jan 24 18:46:21 2026 GMT
            Not After : Jan 28 03:52:21 2026 GMT
        Subject: CN=755895B8E12F5185F35E9BE3F9C6377109318C23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:07:67:b3:c0:3e:f1:39:f1:78:29:14:cf:e1:
                    50:a9:39:54:75:cd:f6:9e:d0:8c:1b:20:fa:0a:e9:
                    09:19:ba:42:a4:0a:80:41:3d:ac:37:93:82:13:4e:
                    ed:e6:86:00:64:fa:1e:4e:1d:a2:e1:65:da:94:69:
                    9d:db:bc:18:c0:cd:a5:28:c3:33:e1:26:9c:66:c2:
                    5a:b3:ce:47:e2:a8:2f:b6:ee:6a:60:55:0d:7e:c2:
                    4a:18:91:13:28:b7:3c:e8:ad:1d:92:3f:2a:cc:1d:
                    c0:fd:5b:46:03:24:71:99:37:58:3d:7e:0f:dc:4d:
                    f8:48:e1:1a:cd:85:7b:f7:c7:1e:a3:af:d9:1d:2f:
                    bb:e0:83:e2:ca:b2:3a:58:b3:37:50:20:b6:95:89:
                    37:93:ad:04:47:e8:d5:6e:b6:fb:86:fe:b1:61:0a:
                    b7:10:56:e7:b4:27:57:aa:fc:cd:45:45:28:c9:76:
                    d0:fa:4c:60:92:3f:79:03:99:19:06:41:c1:11:f2:
                    e9:d9:a8:2f:e2:a5:8f:51:d0:db:be:88:4e:26:9c:
                    d1:a5:93:a5:14:ea:b4:91:21:b2:ba:a9:6f:33:7c:
                    2b:28:77:65:91:47:2b:47:93:4a:bf:11:5d:00:bc:
                    58:9e:55:c5:6b:f1:91:51:11:cd:94:12:86:63:9b:
                    6e:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:58:95:B8:E1:2F:51:85:F3:5E:9B:E3:F9:C6:37:71:09:31:8C:23
            X509v3 Authority Key Identifier:
                keyid:22:50:4F:83:E3:78:CE:06:6A:D3:1D:32:EB:24:28:0C:B0:F6:E5:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/e543241b-cfd1-4cbb-9219-c7a36237c148/0/22504F83E378CE066AD31D32EB24280CB0F6E560.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/22504F83E378CE066AD31D32EB24280CB0F6E560.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e543241b-cfd1-4cbb-9219-c7a36237c148/0/22504F83E378CE066AD31D32EB24280CB0F6E560.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:c8:64:83:8b:a9:d1:df:63:3e:c8:43:cb:1f:2f:30:71:67:
         87:8d:52:f7:fe:42:65:9e:51:a2:d8:16:8e:ab:bb:bb:8d:77:
         96:31:0f:b0:3c:8a:18:69:15:9d:d8:2b:1d:68:01:6e:aa:03:
         c7:55:a4:d3:8b:3e:96:14:5c:f6:51:8f:9a:d8:82:8d:cf:2a:
         4f:5e:ae:47:94:21:b5:11:1c:d7:7e:43:08:19:e5:7a:7d:d7:
         de:b6:93:96:5a:0a:62:7e:e3:c1:de:d9:91:be:94:59:fa:76:
         e6:c5:7c:57:dc:04:86:13:bf:5a:bf:7b:92:2f:91:0a:0d:fc:
         b0:4a:ed:a9:ee:50:0d:75:f7:3f:e5:42:c9:72:9a:c0:4c:aa:
         e1:ec:2e:e5:40:ba:68:a0:df:bf:ca:c5:70:85:56:a3:cf:dd:
         de:f7:98:47:21:e6:ea:80:02:c1:9d:74:3f:42:5b:ba:14:0d:
         b1:2a:4f:2a:ac:42:b7:5e:c0:82:f2:b1:4f:d0:4a:c5:59:00:
         49:45:e3:0a:bf:03:12:46:c9:67:ad:23:35:cb:c9:3f:d3:ae:
         e0:2e:08:0e:cc:9f:21:91:3e:f8:ad:38:3a:56:b9:d5:98:75:
         e0:d5:42:05:75:60:d5:f1:69:57:4e:ab:42:bd:6f:82:20:04:
         25:af:01:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 21:49:29 2026 by rpki-client