This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/e78a8b39-3ae3-4de7-9366-21f9ea04325a/0/DA6C3D4156C05B74E3B5C049F798B00DC6342B70.mft
File:                     DA6C3D4156C05B74E3B5C049F798B00DC6342B70.mft (raw, json)
Hash identifier:          kZkR2QmVjLy5TLLlIq1VIvC+0fY54l8ckqUMuKFQLj0=
Subject key identifier:   BF:F3:EE:69:ED:BA:29:31:02:BD:C4:57:2F:FC:B7:90:13:A3:D2:3C
Authority key identifier: DA:6C:3D:41:56:C0:5B:74:E3:B5:C0:49:F7:98:B0:0D:C6:34:2B:70
Certificate issuer:       /CN=DA6C3D4156C05B74E3B5C049F798B00DC6342B70
Certificate serial:       55FA19F3DC38B8C6614D4C7D5A4366176FE564A3
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DA6C3D4156C05B74E3B5C049F798B00DC6342B70.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/e78a8b39-3ae3-4de7-9366-21f9ea04325a/0/DA6C3D4156C05B74E3B5C049F798B00DC6342B70.mft
Manifest number:          015A
Signing time:             Fri 23 Jan 2026 23:41:50 +0000
Manifest this update:     Fri 23 Jan 2026 23:36:50 +0000
Manifest next update:     Tue 27 Jan 2026 11:12:50 +0000
Files and hashes:         1: 3130332e3234392e3232362e302f32342d3234203d3e20313531353236.roa (hash: 0NLsga2/g7s+EizQykHVB3FIXfa2PQbybGIhJhV4p2k=)
                          2: DA6C3D4156C05B74E3B5C049F798B00DC6342B70.crl (hash: u49NjoF1mJ1QV2tXlfcdltsMlQBEgJGS5vlR81AyUFo=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/e78a8b39-3ae3-4de7-9366-21f9ea04325a/0/DA6C3D4156C05B74E3B5C049F798B00DC6342B70.crl
                          rsync://repo-rpki.idnic.net/repo/e78a8b39-3ae3-4de7-9366-21f9ea04325a/0/DA6C3D4156C05B74E3B5C049F798B00DC6342B70.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DA6C3D4156C05B74E3B5C049F798B00DC6342B70.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 27 Jan 2026 11:12:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:fa:19:f3:dc:38:b8:c6:61:4d:4c:7d:5a:43:66:17:6f:e5:64:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DA6C3D4156C05B74E3B5C049F798B00DC6342B70
        Validity
            Not Before: Jan 23 23:36:50 2026 GMT
            Not After : Jan 27 11:12:50 2026 GMT
        Subject: CN=BFF3EE69EDBA293102BDC4572FFCB79013A3D23C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:40:a1:74:ea:aa:e8:05:8f:73:36:05:a9:ae:
                    f6:22:c1:ba:49:5d:4b:84:b9:92:3f:5f:ee:34:cd:
                    cc:67:47:cd:b3:ee:28:4e:2d:8f:d4:70:58:79:80:
                    9f:92:45:bc:ca:45:9b:eb:83:6b:c6:45:1c:98:e0:
                    c7:65:f9:24:1a:96:c3:15:e9:d5:12:83:0f:bf:49:
                    76:50:b3:a1:08:64:f6:4b:bb:f0:a5:7f:0e:74:fb:
                    1f:45:f0:8b:78:f5:0f:29:21:1b:4d:cf:db:36:5c:
                    31:37:45:18:b3:60:14:69:68:05:23:82:6b:bf:76:
                    89:17:5f:b5:74:5a:08:4e:31:a7:47:cf:75:92:17:
                    0d:df:cd:de:31:00:63:ca:cc:0a:57:c0:a7:e9:91:
                    f6:e2:ac:a3:7a:15:2b:38:0c:c1:ef:18:94:06:98:
                    56:c4:d1:17:d4:ae:f9:10:a8:ab:7f:05:c0:1d:da:
                    3d:b0:10:f6:2c:43:73:85:21:a8:12:e3:60:1e:28:
                    6e:d5:a3:83:1e:34:80:ac:16:fe:1a:38:ae:fc:ac:
                    26:df:33:d8:c2:55:13:72:6d:54:df:8a:c5:6e:db:
                    d3:4b:70:f0:fc:4f:7d:cf:97:f1:b8:19:0b:27:e6:
                    4a:84:e2:79:27:a1:46:86:a1:8b:48:3b:1e:69:80:
                    2c:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:F3:EE:69:ED:BA:29:31:02:BD:C4:57:2F:FC:B7:90:13:A3:D2:3C
            X509v3 Authority Key Identifier:
                keyid:DA:6C:3D:41:56:C0:5B:74:E3:B5:C0:49:F7:98:B0:0D:C6:34:2B:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/e78a8b39-3ae3-4de7-9366-21f9ea04325a/0/DA6C3D4156C05B74E3B5C049F798B00DC6342B70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DA6C3D4156C05B74E3B5C049F798B00DC6342B70.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e78a8b39-3ae3-4de7-9366-21f9ea04325a/0/DA6C3D4156C05B74E3B5C049F798B00DC6342B70.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:39:06:2e:e8:12:33:4c:f5:a2:fb:e0:d6:3d:cf:1d:a1:3c:
         4d:14:d4:f7:2d:6b:3c:e3:0a:cc:72:f0:76:5d:35:ba:bf:09:
         df:a3:59:99:9b:36:55:6f:42:2d:6f:75:67:71:1a:0e:2f:13:
         c3:05:0f:26:ac:77:5f:7f:18:2a:70:7f:c0:c8:f7:37:37:d3:
         d1:0f:82:bb:b3:45:b7:01:bc:08:fa:e7:d8:c6:09:67:c1:a6:
         ac:7f:44:32:82:5e:05:21:1c:6d:1a:ae:a2:cd:9c:67:4b:c5:
         87:63:4e:30:3f:a5:e8:90:2c:83:3f:34:5c:88:3f:b2:b6:f5:
         46:8c:6a:ca:bb:e3:96:cc:a8:3b:33:fd:b4:b1:e2:12:86:92:
         83:87:ba:88:f2:28:82:35:ed:5d:ec:52:a2:1d:69:c5:fe:04:
         b7:8d:90:92:38:b5:f0:bb:fb:54:2b:5e:10:01:76:43:7c:2a:
         a0:7f:16:7d:53:de:8b:f3:a7:cc:10:7d:0f:8e:bb:ed:5c:5c:
         9a:f7:74:3d:dc:2e:6b:de:db:e7:42:cb:3c:0b:32:40:79:de:
         d9:26:11:dc:0f:d9:a8:ae:6a:7f:af:58:a9:ac:84:91:86:f3:
         61:bc:2a:f7:5a:36:f6:2b:d8:ff:ff:6b:8c:ab:82:9c:ef:e1:
         45:de:41:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:50:03 2026 by rpki-client