This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/f2e3e981-bf39-42e0-a2f6-cf87c757f827/0/232967D03C1169374A898D1C8991F1ABE7744870.mft
File:                     232967D03C1169374A898D1C8991F1ABE7744870.mft (raw, json)
Hash identifier:          9dne8hyJpsQeHLiTgHS8kiGU1uejP0MUjA8411fgMQE=
Subject key identifier:   F4:4B:AC:BE:57:13:B6:63:25:FE:7F:84:E3:60:02:02:69:27:60:67
Authority key identifier: 23:29:67:D0:3C:11:69:37:4A:89:8D:1C:89:91:F1:AB:E7:74:48:70
Certificate issuer:       /CN=232967D03C1169374A898D1C8991F1ABE7744870
Certificate serial:       67A7BC096FAD070CF957253AE398F99C22EE76AA
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/232967D03C1169374A898D1C8991F1ABE7744870.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/f2e3e981-bf39-42e0-a2f6-cf87c757f827/0/232967D03C1169374A898D1C8991F1ABE7744870.mft
Manifest number:          02D6
Signing time:             Sat 24 Jan 2026 20:21:39 +0000
Manifest this update:     Sat 24 Jan 2026 20:16:39 +0000
Manifest next update:     Tue 27 Jan 2026 23:30:39 +0000
Files and hashes:         1: 3130332e3135362e3233322e302f32332d3234203d3e20313431303938.roa (hash: OrYEci2LXcYUd7zO3w5vMjUiO57zzyli3tlZ6qJrtVM=)
                          2: 232967D03C1169374A898D1C8991F1ABE7744870.crl (hash: 9ZB/81OGdPCCxKIuDLuuqHiKWlGUoua7PMogMHPFhT8=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/f2e3e981-bf39-42e0-a2f6-cf87c757f827/0/232967D03C1169374A898D1C8991F1ABE7744870.crl
                          rsync://repo-rpki.idnic.net/repo/f2e3e981-bf39-42e0-a2f6-cf87c757f827/0/232967D03C1169374A898D1C8991F1ABE7744870.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/232967D03C1169374A898D1C8991F1ABE7744870.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 27 Jan 2026 23:30:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:a7:bc:09:6f:ad:07:0c:f9:57:25:3a:e3:98:f9:9c:22:ee:76:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=232967D03C1169374A898D1C8991F1ABE7744870
        Validity
            Not Before: Jan 24 20:16:39 2026 GMT
            Not After : Jan 27 23:30:39 2026 GMT
        Subject: CN=F44BACBE5713B66325FE7F84E360020269276067
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:2a:47:7d:36:80:ad:d7:74:b4:27:f1:22:69:
                    3d:b7:f5:cf:cd:d0:af:d9:fc:51:3b:12:a5:dd:59:
                    9d:7c:c5:39:fb:ce:ea:a0:be:c8:4b:0f:a3:e4:69:
                    9e:46:55:34:a5:2d:ad:0c:0e:b2:9a:60:c9:3f:2e:
                    28:4f:af:a3:76:4b:40:23:be:42:9b:4c:5f:9c:dd:
                    7c:09:1f:bc:4c:1a:de:49:b4:c7:8d:6a:80:f7:43:
                    db:3f:de:9c:2d:2f:8c:30:1c:dd:ca:eb:99:4c:c1:
                    c5:88:a0:18:a4:62:dc:e6:bb:2a:5d:f4:58:94:cf:
                    de:83:52:39:50:f6:0d:8f:e5:20:7b:7c:f1:1e:f0:
                    3f:b9:0d:f2:50:16:24:9f:8e:ff:7c:52:ca:52:b5:
                    4a:0b:ca:df:54:63:fe:3e:39:3a:a2:3b:0a:f7:e9:
                    7d:a2:1b:e5:4d:1d:35:f4:64:e2:90:c6:00:34:55:
                    10:2d:8b:ab:85:7a:92:9e:66:7f:df:b7:06:da:8d:
                    c9:1e:b6:23:15:2e:10:47:cf:7e:94:0a:ed:11:fc:
                    36:b6:c7:80:22:e2:66:25:07:b6:8c:d2:31:a3:58:
                    ad:30:a9:77:91:c2:d8:ba:c3:38:91:93:c6:6a:4b:
                    cc:6b:88:50:b5:91:26:2a:a7:1c:d9:06:c5:c3:61:
                    69:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:4B:AC:BE:57:13:B6:63:25:FE:7F:84:E3:60:02:02:69:27:60:67
            X509v3 Authority Key Identifier:
                keyid:23:29:67:D0:3C:11:69:37:4A:89:8D:1C:89:91:F1:AB:E7:74:48:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/f2e3e981-bf39-42e0-a2f6-cf87c757f827/0/232967D03C1169374A898D1C8991F1ABE7744870.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/232967D03C1169374A898D1C8991F1ABE7744870.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f2e3e981-bf39-42e0-a2f6-cf87c757f827/0/232967D03C1169374A898D1C8991F1ABE7744870.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:a2:c9:b5:92:e2:df:26:95:29:d7:97:10:b4:e2:07:91:37:
         db:13:68:7b:be:72:d8:a6:54:68:88:ad:bb:f4:04:d7:2f:f0:
         ff:66:2e:32:43:32:e9:ff:01:87:a3:9c:38:5c:e7:c8:6a:5b:
         8e:bf:9c:1a:76:02:9c:1c:98:ed:78:78:ae:1b:b1:42:d1:d5:
         a8:2f:8a:35:41:ea:e1:f6:d3:4d:e2:e9:49:a5:bc:77:6f:1b:
         9e:2a:14:e7:47:9e:c6:df:2b:91:80:c7:51:c6:c7:22:8f:0d:
         ac:59:41:58:2c:51:66:6a:9c:10:12:b2:8c:d2:4e:fb:a2:93:
         8e:5e:51:7f:2e:3c:d2:41:68:2a:12:92:7e:9e:15:77:af:35:
         b2:cf:70:ba:e1:42:45:98:19:81:f0:dd:94:ed:7c:18:98:c8:
         b3:89:fc:06:2b:69:c0:01:70:be:78:41:37:f1:3f:3c:3c:02:
         f7:48:dd:40:52:d3:2d:bb:d3:1f:bb:24:b8:22:5d:c0:be:e7:
         5d:4c:43:ac:15:44:5c:af:dd:f3:05:e7:51:ea:6c:b8:1f:10:
         93:0c:98:49:68:41:b8:df:92:e8:de:ed:43:88:33:ab:38:21:
         e6:3d:24:bb:e9:f6:01:a8:ba:39:72:23:e3:75:a8:53:46:35:
         94:50:0c:be
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUZ6e8CW+tBwz5VyU645j5nCLudqowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjMyOTY3RDAzQzExNjkzNzRBODk4RDFDODk5MUYxQUJF
Nzc0NDg3MDAeFw0yNjAxMjQyMDE2MzlaFw0yNjAxMjcyMzMwMzlaMDMxMTAvBgNV
BAMTKEY0NEJBQ0JFNTcxM0I2NjMyNUZFN0Y4NEUzNjAwMjAyNjkyNzYwNjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+Kkd9NoCt13S0J/EiaT239c/N
0K/Z/FE7EqXdWZ18xTn7zuqgvshLD6PkaZ5GVTSlLa0MDrKaYMk/LihPr6N2S0Aj
vkKbTF+c3XwJH7xMGt5JtMeNaoD3Q9s/3pwtL4wwHN3K65lMwcWIoBikYtzmuypd
9FiUz96DUjlQ9g2P5SB7fPEe8D+5DfJQFiSfjv98UspStUoLyt9UY/4+OTqiOwr3
6X2iG+VNHTX0ZOKQxgA0VRAti6uFepKeZn/ftwbajcketiMVLhBHz36UCu0R/Da2
x4Ai4mYlB7aM0jGjWK0wqXeRwti6wziRk8ZqS8xriFC1kSYqpxzZBsXDYWlfAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQU9EusvlcTtmMl/n+E42ACAmknYGcwHwYDVR0j
BBgwFoAUIyln0DwRaTdKiY0ciZHxq+d0SHAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m
MmUzZTk4MS1iZjM5LTQyZTAtYTJmNi1jZjg3Yzc1N2Y4MjcvMC8yMzI5NjdEMDND
MTE2OTM3NEE4OThEMUM4OTkxRjFBQkU3NzQ0ODcwLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMjMyOTY3RDAzQzExNjkzNzRBODk4RDFDODk5MUYxQUJFNzc0
NDg3MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjJlM2U5ODEtYmYzOS00MmUwLWEy
ZjYtY2Y4N2M3NTdmODI3LzAvMjMyOTY3RDAzQzExNjkzNzRBODk4RDFDODk5MUYx
QUJFNzc0NDg3MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAEWiybWS4t8mlSnXlxC04geRN9sTaHu+ctim
VGiIrbv0BNcv8P9mLjJDMun/AYejnDhc58hqW46/nBp2ApwcmO14eK4bsULR1agv
ijVB6uH2003i6UmlvHdvG54qFOdHnsbfK5GAx1HGxyKPDaxZQVgsUWZqnBASsozS
Tvuik45eUX8uPNJBaCoSkn6eFXevNbLPcLrhQkWYGYHw3ZTtfBiYyLOJ/AYracAB
cL54QTfxPzw8AvdI3UBS0y270x+7JLgiXcC+511MQ6wVRFyv3fMF51HqbLgfEJMM
mEloQbjfkuje7UOIM6s4IeY9JLvp9gGoujlyI+N1qFNGNZRQDL4=
-----END CERTIFICATE-----
Generated at Sun Jan 25 23:55:39 2026 by rpki-client