This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/f239fdcb-c417-4f3f-b1c9-7e369cde21fd/0/F38108E73D42C7F20A648CA9193FBFB8EFE0EC27.mft
File:                     F38108E73D42C7F20A648CA9193FBFB8EFE0EC27.mft (raw, json)
Hash identifier:          kuJVtcin8AMjexorRrq8yY1+CvLzCCMdTPTiagB060s=
Subject key identifier:   D8:9E:77:E4:9C:E4:DE:EC:93:64:25:B7:1E:3F:6E:CD:93:68:46:F7
Authority key identifier: F3:81:08:E7:3D:42:C7:F2:0A:64:8C:A9:19:3F:BF:B8:EF:E0:EC:27
Certificate issuer:       /CN=F38108E73D42C7F20A648CA9193FBFB8EFE0EC27
Certificate serial:       41E68538D4DBAC45FFC39B0CDCFEE13DB1907051
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F38108E73D42C7F20A648CA9193FBFB8EFE0EC27.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/f239fdcb-c417-4f3f-b1c9-7e369cde21fd/0/F38108E73D42C7F20A648CA9193FBFB8EFE0EC27.mft
Manifest number:          01FE
Signing time:             Sun 25 Jan 2026 14:01:36 +0000
Manifest this update:     Sun 25 Jan 2026 13:56:36 +0000
Manifest next update:     Wed 28 Jan 2026 18:38:36 +0000
Files and hashes:         1: F38108E73D42C7F20A648CA9193FBFB8EFE0EC27.crl (hash: 0zMEX9FKOWFXy2irQxCOGIYz1CkrRMJx4f9QxS3I0YA=)
                          2: 3130332e39372e3233312e302f32342d3234203d3e20313530323831.roa (hash: 12t3q8UKsyUaN7ZPmQ7oKlNAYfCglRtEXGNPube8E5U=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/f239fdcb-c417-4f3f-b1c9-7e369cde21fd/0/F38108E73D42C7F20A648CA9193FBFB8EFE0EC27.crl
                          rsync://repo-rpki.idnic.net/repo/f239fdcb-c417-4f3f-b1c9-7e369cde21fd/0/F38108E73D42C7F20A648CA9193FBFB8EFE0EC27.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F38108E73D42C7F20A648CA9193FBFB8EFE0EC27.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 28 Jan 2026 14:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:e6:85:38:d4:db:ac:45:ff:c3:9b:0c:dc:fe:e1:3d:b1:90:70:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F38108E73D42C7F20A648CA9193FBFB8EFE0EC27
        Validity
            Not Before: Jan 25 13:56:36 2026 GMT
            Not After : Jan 28 18:38:36 2026 GMT
        Subject: CN=D89E77E49CE4DEEC936425B71E3F6ECD936846F7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:39:fb:7d:e4:3b:52:92:d5:cf:2d:82:27:d6:
                    5a:da:96:8b:f0:6a:e4:24:3b:6c:0a:fd:0e:4f:00:
                    dd:28:fe:22:a5:70:91:e3:25:ac:29:63:f9:2f:c3:
                    38:b5:c1:3a:4c:12:6e:43:d8:3b:31:11:ff:ea:d8:
                    1f:eb:1d:29:16:54:5d:bf:7f:75:65:8a:2b:72:7c:
                    32:66:c0:30:70:4a:29:05:ba:0b:35:5d:c4:87:4a:
                    e7:62:b6:4a:f6:93:c2:f7:54:d9:49:80:39:17:a5:
                    02:a5:10:63:54:7e:ee:d0:a3:2a:be:98:8e:59:9f:
                    a6:71:a3:b6:35:f5:5a:cf:64:86:c2:d4:de:2b:eb:
                    a0:75:09:b6:da:6e:eb:80:91:85:d8:2a:18:b7:d8:
                    be:fd:dd:88:7c:bd:27:5a:6f:c2:ca:b6:ac:6f:89:
                    63:b4:e8:e4:0b:12:6c:3f:43:cb:18:54:94:22:e7:
                    d2:67:b8:81:f0:43:c3:8c:44:36:44:2a:07:33:a7:
                    cb:f3:70:2e:7a:19:62:6b:5b:b2:98:87:a8:2e:b0:
                    a9:28:07:eb:73:16:46:fe:85:75:14:6c:01:61:fe:
                    c4:a8:b3:9f:55:08:ad:aa:c1:a2:72:0d:81:d5:9f:
                    3b:fa:18:8e:bf:a0:b1:97:27:06:a4:6a:a7:cf:5e:
                    e8:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:9E:77:E4:9C:E4:DE:EC:93:64:25:B7:1E:3F:6E:CD:93:68:46:F7
            X509v3 Authority Key Identifier:
                keyid:F3:81:08:E7:3D:42:C7:F2:0A:64:8C:A9:19:3F:BF:B8:EF:E0:EC:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/f239fdcb-c417-4f3f-b1c9-7e369cde21fd/0/F38108E73D42C7F20A648CA9193FBFB8EFE0EC27.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F38108E73D42C7F20A648CA9193FBFB8EFE0EC27.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f239fdcb-c417-4f3f-b1c9-7e369cde21fd/0/F38108E73D42C7F20A648CA9193FBFB8EFE0EC27.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:1c:f7:57:47:89:67:bb:47:36:a6:4f:51:85:c9:d2:f7:19:
         09:f5:8b:b3:64:f9:55:60:d1:9a:71:56:fe:d8:78:06:77:aa:
         09:64:b9:6b:eb:5b:ae:ff:40:c5:43:ab:44:14:a8:ab:19:ee:
         23:6d:a5:a9:7c:50:de:66:4b:95:9a:08:47:d0:23:72:25:ff:
         80:6f:38:fc:c5:d9:18:22:20:e1:e1:47:51:6f:e9:fd:4d:f6:
         cd:aa:a6:1d:b3:4b:28:f0:ad:34:6f:1b:bc:f4:fe:32:d1:32:
         34:c0:2b:38:b5:9d:2f:7f:4b:83:b4:04:90:0a:52:2d:62:21:
         44:33:ff:8d:47:c1:69:da:2d:71:ae:fb:b8:ba:2b:5a:6d:76:
         0d:fd:a9:3f:e4:fe:4a:9b:08:8c:a5:a7:bd:02:ce:ba:9a:0e:
         90:8d:d4:06:b9:34:07:61:54:9e:5e:b7:34:a8:cf:4e:03:8d:
         34:c4:90:55:58:97:a4:7f:28:ab:0b:9a:bc:c8:bb:73:c6:d2:
         79:97:ea:36:28:9a:a2:25:1a:aa:f0:1a:f7:5c:b2:fa:cc:25:
         5a:1f:28:11:68:f8:ec:c7:b2:46:57:fd:1d:7f:c5:3e:e8:59:
         cd:5b:83:c9:67:bb:96:4d:8a:5e:eb:c2:1f:02:56:71:65:28:
         72:e6:22:39
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUQeaFONTbrEX/w5sM3P7hPbGQcFEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjM4MTA4RTczRDQyQzdGMjBBNjQ4Q0E5MTkzRkJGQjhF
RkUwRUMyNzAeFw0yNjAxMjUxMzU2MzZaFw0yNjAxMjgxODM4MzZaMDMxMTAvBgNV
BAMTKEQ4OUU3N0U0OUNFNERFRUM5MzY0MjVCNzFFM0Y2RUNEOTM2ODQ2RjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClOft95DtSktXPLYIn1lralovw
auQkO2wK/Q5PAN0o/iKlcJHjJawpY/kvwzi1wTpMEm5D2DsxEf/q2B/rHSkWVF2/
f3VliityfDJmwDBwSikFugs1XcSHSuditkr2k8L3VNlJgDkXpQKlEGNUfu7Qoyq+
mI5Zn6Zxo7Y19VrPZIbC1N4r66B1CbbabuuAkYXYKhi32L793Yh8vSdab8LKtqxv
iWO06OQLEmw/Q8sYVJQi59JnuIHwQ8OMRDZEKgczp8vzcC56GWJrW7KYh6gusKko
B+tzFkb+hXUUbAFh/sSos59VCK2qwaJyDYHVnzv6GI6/oLGXJwakaqfPXujhAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQU2J535Jzk3uyTZCW3Hj9uzZNoRvcwHwYDVR0j
BBgwFoAU84EI5z1Cx/IKZIypGT+/uO/g7CcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m
MjM5ZmRjYi1jNDE3LTRmM2YtYjFjOS03ZTM2OWNkZTIxZmQvMC9GMzgxMDhFNzNE
NDJDN0YyMEE2NDhDQTkxOTNGQkZCOEVGRTBFQzI3LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvRjM4MTA4RTczRDQyQzdGMjBBNjQ4Q0E5MTkzRkJGQjhFRkUw
RUMyNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjIzOWZkY2ItYzQxNy00ZjNmLWIx
YzktN2UzNjljZGUyMWZkLzAvRjM4MTA4RTczRDQyQzdGMjBBNjQ4Q0E5MTkzRkJG
QjhFRkUwRUMyNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAH8c91dHiWe7RzamT1GFydL3GQn1i7Nk+VVg
0ZpxVv7YeAZ3qglkuWvrW67/QMVDq0QUqKsZ7iNtpal8UN5mS5WaCEfQI3Il/4Bv
OPzF2RgiIOHhR1Fv6f1N9s2qph2zSyjwrTRvG7z0/jLRMjTAKzi1nS9/S4O0BJAK
Ui1iIUQz/41HwWnaLXGu+7i6K1ptdg39qT/k/kqbCIylp70CzrqaDpCN1Aa5NAdh
VJ5etzSoz04DjTTEkFVYl6R/KKsLmrzIu3PG0nmX6jYomqIlGqrwGvdcsvrMJVof
KBFo+OzHskZX/R1/xT7oWc1bg8lnu5ZNil7rwh8CVnFlKHLmIjk=
-----END CERTIFICATE-----
Generated at Mon Jan 26 01:12:14 2026 by rpki-client