This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/f03362e2-9765-42bd-b59b-68d43cadeb5c/0/1975F0B2F27DE4AFF43CC246058A2B9E15950AEC.mft
File:                     1975F0B2F27DE4AFF43CC246058A2B9E15950AEC.mft (raw, json)
Hash identifier:          cb78TmvvbuW1yWt2qgXw3haXaHii7xtjgVa5ULExZUQ=
Subject key identifier:   4D:A4:22:CB:5F:54:CA:99:29:DA:E3:03:45:64:6C:AB:57:BD:62:3A
Authority key identifier: 19:75:F0:B2:F2:7D:E4:AF:F4:3C:C2:46:05:8A:2B:9E:15:95:0A:EC
Certificate issuer:       /CN=1975F0B2F27DE4AFF43CC246058A2B9E15950AEC
Certificate serial:       771CE8AB1223C74357A638AB351C3C36E67A007F
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1975F0B2F27DE4AFF43CC246058A2B9E15950AEC.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/f03362e2-9765-42bd-b59b-68d43cadeb5c/0/1975F0B2F27DE4AFF43CC246058A2B9E15950AEC.mft
Manifest number:          0540
Signing time:             Fri 23 Jan 2026 11:10:50 +0000
Manifest this update:     Fri 23 Jan 2026 11:05:50 +0000
Manifest next update:     Mon 26 Jan 2026 20:47:50 +0000
Files and hashes:         1: 3130332e3134352e39372e302f32342d3234203d3e20313339343433.roa (hash: PgHEb146XoyGC0/9tuhNMcAsAzVP9MObWQdPhmy9XiA=)
                          2: 1975F0B2F27DE4AFF43CC246058A2B9E15950AEC.crl (hash: ERtR82WnGdoAGNfKGKqCpCa0YW4aPI9da0zi77S6kbA=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/f03362e2-9765-42bd-b59b-68d43cadeb5c/0/1975F0B2F27DE4AFF43CC246058A2B9E15950AEC.crl
                          rsync://repo-rpki.idnic.net/repo/f03362e2-9765-42bd-b59b-68d43cadeb5c/0/1975F0B2F27DE4AFF43CC246058A2B9E15950AEC.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1975F0B2F27DE4AFF43CC246058A2B9E15950AEC.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 26 Jan 2026 20:47:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:1c:e8:ab:12:23:c7:43:57:a6:38:ab:35:1c:3c:36:e6:7a:00:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1975F0B2F27DE4AFF43CC246058A2B9E15950AEC
        Validity
            Not Before: Jan 23 11:05:50 2026 GMT
            Not After : Jan 26 20:47:50 2026 GMT
        Subject: CN=4DA422CB5F54CA9929DAE30345646CAB57BD623A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:45:fd:7a:59:fc:3a:0d:e9:a7:7c:05:98:1d:
                    7d:66:a8:f4:7c:46:ee:28:3d:ad:3d:fa:28:b6:72:
                    22:be:4a:b2:f9:34:5e:25:b1:1e:54:91:db:ff:8c:
                    bd:e6:08:4a:f7:24:f0:64:16:e1:54:3a:13:ea:d3:
                    f8:ac:df:9e:ea:dd:9b:7a:ee:d3:72:78:98:c3:56:
                    4c:dd:f5:d4:17:7a:29:0b:40:b9:7f:9f:d6:7a:cc:
                    03:63:1e:3b:00:74:68:f9:29:a1:0f:62:4e:40:9f:
                    3d:72:2b:ba:af:f7:fa:a8:f3:73:1d:19:ac:25:a4:
                    b3:48:ae:2b:7f:48:01:59:d6:a6:d2:02:13:40:e3:
                    06:c4:d1:fd:11:88:c0:0c:7a:0c:b1:02:45:56:30:
                    2c:5e:a6:17:ed:55:a1:96:c2:95:de:f9:c0:2a:ea:
                    31:82:cb:32:df:84:61:d6:0a:e4:c5:b2:df:3f:db:
                    97:31:80:79:63:51:5a:ab:76:e9:1a:d2:1e:52:09:
                    70:92:1d:c4:7c:89:ef:32:b9:56:b9:0b:01:c5:26:
                    7d:d3:c1:4c:63:19:1c:c0:3b:47:87:93:a9:79:cf:
                    c1:e5:e0:33:4b:2b:6c:90:09:73:9f:5f:59:36:dc:
                    63:9f:fd:fe:7c:37:89:20:6a:03:08:53:18:70:3b:
                    e7:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:A4:22:CB:5F:54:CA:99:29:DA:E3:03:45:64:6C:AB:57:BD:62:3A
            X509v3 Authority Key Identifier:
                keyid:19:75:F0:B2:F2:7D:E4:AF:F4:3C:C2:46:05:8A:2B:9E:15:95:0A:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/f03362e2-9765-42bd-b59b-68d43cadeb5c/0/1975F0B2F27DE4AFF43CC246058A2B9E15950AEC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1975F0B2F27DE4AFF43CC246058A2B9E15950AEC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f03362e2-9765-42bd-b59b-68d43cadeb5c/0/1975F0B2F27DE4AFF43CC246058A2B9E15950AEC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:a3:b2:6b:a0:09:4c:82:4e:86:40:bc:c7:4b:4d:53:82:48:
         3a:7c:d0:dd:3c:2f:fe:58:e6:7f:e8:7b:66:cf:1f:ea:ba:6d:
         df:76:be:ff:c1:0f:88:08:45:1f:87:5a:3a:de:3c:ff:83:f1:
         bd:a6:f7:4d:6e:41:0f:c6:19:37:3a:9a:5b:4f:26:b0:17:a5:
         0d:3c:8c:a5:49:e2:4a:82:ca:60:08:6a:b2:53:2b:7b:78:c2:
         a4:9f:57:e1:cc:7e:32:a9:6d:3a:53:22:98:dd:e9:01:6c:d2:
         5e:72:9e:c8:8b:0d:43:32:a4:88:59:61:79:6c:18:c1:d7:8a:
         e7:89:48:d9:99:7c:b2:0b:ba:16:52:68:af:41:2a:b4:8d:9f:
         b4:87:6a:c0:91:a1:4c:2c:91:96:97:7c:f5:62:1a:b8:92:bb:
         6e:a8:e1:6f:24:cd:d8:49:11:c5:6b:2f:2a:22:f1:c6:34:4b:
         43:01:ea:e4:4e:f5:1f:5c:7e:4d:1b:23:26:d7:e4:93:57:b3:
         ee:e6:44:20:3c:0a:1e:7d:a1:af:69:1c:c8:2c:0a:d1:df:e2:
         18:88:14:b0:b7:55:fd:ee:a1:81:da:4f:73:cb:d2:85:a1:7b:
         10:d2:47:bf:66:27:d3:17:ee:e4:e9:c9:08:87:ab:1d:56:c7:
         ce:c5:2d:78
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUdxzoqxIjx0NXpjirNRw8NuZ6AH8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTk3NUYwQjJGMjdERTRBRkY0M0NDMjQ2MDU4QTJCOUUx
NTk1MEFFQzAeFw0yNjAxMjMxMTA1NTBaFw0yNjAxMjYyMDQ3NTBaMDMxMTAvBgNV
BAMTKDREQTQyMkNCNUY1NENBOTkyOURBRTMwMzQ1NjQ2Q0FCNTdCRDYyM0EwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDORf16Wfw6DemnfAWYHX1mqPR8
Ru4oPa09+ii2ciK+SrL5NF4lsR5Ukdv/jL3mCEr3JPBkFuFUOhPq0/is357q3Zt6
7tNyeJjDVkzd9dQXeikLQLl/n9Z6zANjHjsAdGj5KaEPYk5Anz1yK7qv9/qo83Md
GawlpLNIrit/SAFZ1qbSAhNA4wbE0f0RiMAMegyxAkVWMCxephftVaGWwpXe+cAq
6jGCyzLfhGHWCuTFst8/25cxgHljUVqrduka0h5SCXCSHcR8ie8yuVa5CwHFJn3T
wUxjGRzAO0eHk6l5z8Hl4DNLK2yQCXOfX1k23GOf/f58N4kgagMIUxhwO+ezAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUTaQiy19Uypkp2uMDRWRsq1e9YjowHwYDVR0j
BBgwFoAUGXXwsvJ95K/0PMJGBYornhWVCuwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m
MDMzNjJlMi05NzY1LTQyYmQtYjU5Yi02OGQ0M2NhZGViNWMvMC8xOTc1RjBCMkYy
N0RFNEFGRjQzQ0MyNDYwNThBMkI5RTE1OTUwQUVDLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMTk3NUYwQjJGMjdERTRBRkY0M0NDMjQ2MDU4QTJCOUUxNTk1
MEFFQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjAzMzYyZTItOTc2NS00MmJkLWI1
OWItNjhkNDNjYWRlYjVjLzAvMTk3NUYwQjJGMjdERTRBRkY0M0NDMjQ2MDU4QTJC
OUUxNTk1MEFFQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAECjsmugCUyCToZAvMdLTVOCSDp80N08L/5Y
5n/oe2bPH+q6bd92vv/BD4gIRR+HWjrePP+D8b2m901uQQ/GGTc6mltPJrAXpQ08
jKVJ4kqCymAIarJTK3t4wqSfV+HMfjKpbTpTIpjd6QFs0l5ynsiLDUMypIhZYXls
GMHXiueJSNmZfLILuhZSaK9BKrSNn7SHasCRoUwskZaXfPViGriSu26o4W8kzdhJ
EcVrLyoi8cY0S0MB6uRO9R9cfk0bIybX5JNXs+7mRCA8Ch59oa9pHMgsCtHf4hiI
FLC3Vf3uoYHaT3PL0oWhexDSR79mJ9MX7uTpyQiHqx1Wx87FLXg=
-----END CERTIFICATE-----
Generated at Sun Jan 25 18:37:24 2026 by rpki-client