This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/f6b5ae1e-be66-4a30-a948-7d478c22ea2b/0/95E800EBFF64709892CB5741D9EDC75EE74E2A6D.mft
File:                     95E800EBFF64709892CB5741D9EDC75EE74E2A6D.mft (raw, json)
Hash identifier:          EhoMaZMHvtFcHpI5acAH/L6lpxD8EaazVaK2jZtnMTA=
Subject key identifier:   06:10:BB:04:6C:2E:1E:67:BD:39:73:9E:FE:E9:23:61:C8:BB:7E:8F
Authority key identifier: 95:E8:00:EB:FF:64:70:98:92:CB:57:41:D9:ED:C7:5E:E7:4E:2A:6D
Certificate issuer:       /CN=95E800EBFF64709892CB5741D9EDC75EE74E2A6D
Certificate serial:       59172409A0B03D42501C01452B6F9342447D13E2
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/95E800EBFF64709892CB5741D9EDC75EE74E2A6D.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/f6b5ae1e-be66-4a30-a948-7d478c22ea2b/0/95E800EBFF64709892CB5741D9EDC75EE74E2A6D.mft
Manifest number:          0542
Signing time:             Sun 25 Jan 2026 12:41:47 +0000
Manifest this update:     Sun 25 Jan 2026 12:36:47 +0000
Manifest next update:     Wed 28 Jan 2026 18:30:47 +0000
Files and hashes:         1: 3130332e3133342e3130362e302f32332d3233203d3e203633343937.roa (hash: 6u0QjcaXuZCe/xDwNoPsOwMyKh9MBkPufQ0B3cPlReE=)
                          2: 3130332e3133342e3130342e302f32332d3233203d3e203633343937.roa (hash: MowxodGXifPkFbwcnbxmYI86u52XQ+RqEsK4tBHU6Kc=)
                          3: 95E800EBFF64709892CB5741D9EDC75EE74E2A6D.crl (hash: k7BN/38n5SAcdRH4FhDLqwwWRXvtH2YBfjGSlSCbnAY=)
                          4: 3130332e3133342e3130362e302f32342d3234203d3e203633343937.roa (hash: fYXLcgnYZQvFF+Sx+nAnnoQPnhu4qBL7MV7MXCijhoM=)
                          5: 3130332e3133342e3130342e302f32342d3234203d3e203633343937.roa (hash: z8oVsj820WikG58Kg7XuHuFP7zjS3wrrsGJ5kGPWB6k=)
                          6: 3130332e3133342e3130342e302f32322d3232203d3e203633343937.roa (hash: JYyU73FxSsbah75XLPK5+70mS+1BuWT1qs954OCbSn8=)
                          7: 3130332e3133342e3130372e302f32342d3234203d3e203633343937.roa (hash: tJ7W+A0ln7oQ2TKBeYCrxZXeI+2+Ch9yjit0aZIq8qs=)
                          8: 3130332e3133342e3130352e302f32342d3234203d3e203633343937.roa (hash: pnePfPpninK+12GFjtU9XZZuD9qIupgPZ4/SoFot86c=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/f6b5ae1e-be66-4a30-a948-7d478c22ea2b/0/95E800EBFF64709892CB5741D9EDC75EE74E2A6D.crl
                          rsync://repo-rpki.idnic.net/repo/f6b5ae1e-be66-4a30-a948-7d478c22ea2b/0/95E800EBFF64709892CB5741D9EDC75EE74E2A6D.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/95E800EBFF64709892CB5741D9EDC75EE74E2A6D.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 28 Jan 2026 14:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:17:24:09:a0:b0:3d:42:50:1c:01:45:2b:6f:93:42:44:7d:13:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95E800EBFF64709892CB5741D9EDC75EE74E2A6D
        Validity
            Not Before: Jan 25 12:36:47 2026 GMT
            Not After : Jan 28 18:30:47 2026 GMT
        Subject: CN=0610BB046C2E1E67BD39739EFEE92361C8BB7E8F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:e3:17:e1:a3:2b:83:79:2a:5e:af:b4:7b:3c:
                    76:50:11:d6:ab:c7:82:d8:92:48:0d:02:e5:58:08:
                    b3:7d:08:c8:9d:bc:b9:bb:97:54:cc:73:83:4e:f2:
                    7b:54:aa:7c:d2:2f:b7:57:66:f1:52:df:22:c6:54:
                    cc:67:18:33:9d:02:94:85:73:8d:98:33:58:ee:68:
                    19:18:25:5d:63:2f:22:d3:db:19:43:af:b6:cb:03:
                    65:71:78:08:03:57:03:6f:1a:aa:63:4c:78:e0:00:
                    4e:3a:c4:08:fd:97:eb:50:9c:f2:a9:41:58:7a:fb:
                    41:9c:65:9e:28:37:91:50:f7:18:3c:12:fc:d7:23:
                    4d:0d:bd:dc:01:e3:a1:80:51:14:ea:7b:1a:eb:9d:
                    e3:5e:bc:c6:d4:0f:5d:78:c2:fc:1e:90:ac:45:c2:
                    56:a4:09:e0:e9:ac:d7:6e:62:51:4b:86:2c:50:b5:
                    4c:92:d9:f6:46:4d:6f:43:1f:e3:54:49:66:91:4d:
                    ce:84:d6:78:e8:b9:95:85:05:68:fb:9f:28:4a:ec:
                    8d:3f:f2:72:8b:36:1a:c0:9c:ce:c8:61:7b:20:cc:
                    88:4c:8a:ca:f7:8f:7b:91:43:4b:54:ab:75:16:e1:
                    34:84:ec:0d:a1:d4:d6:e4:29:aa:ad:f9:2d:54:19:
                    3e:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:10:BB:04:6C:2E:1E:67:BD:39:73:9E:FE:E9:23:61:C8:BB:7E:8F
            X509v3 Authority Key Identifier:
                keyid:95:E8:00:EB:FF:64:70:98:92:CB:57:41:D9:ED:C7:5E:E7:4E:2A:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/f6b5ae1e-be66-4a30-a948-7d478c22ea2b/0/95E800EBFF64709892CB5741D9EDC75EE74E2A6D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/95E800EBFF64709892CB5741D9EDC75EE74E2A6D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f6b5ae1e-be66-4a30-a948-7d478c22ea2b/0/95E800EBFF64709892CB5741D9EDC75EE74E2A6D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:31:b1:4b:fc:d7:5e:e6:bc:5a:a6:56:7b:77:76:82:24:62:
         a0:79:b2:b7:ff:59:b9:81:09:74:16:e2:3d:ea:32:8a:74:42:
         67:a3:63:31:e1:3b:05:28:24:7f:92:e0:7d:d0:be:2c:ea:59:
         1c:dc:60:f6:a2:9f:c5:96:ee:a5:02:c4:f0:02:d8:fb:4d:c8:
         c1:ec:4a:70:df:4c:19:00:fd:fc:e3:ad:00:34:a9:2e:4a:20:
         4d:2d:96:f1:eb:ef:12:e9:43:e3:c2:01:2e:f5:f3:f1:cb:14:
         72:23:d1:c3:7d:6e:ae:b5:38:93:3b:86:32:dc:e4:d0:1b:0b:
         ce:11:16:2c:8e:bd:fb:eb:59:d3:d7:57:8d:0d:79:86:7c:6d:
         11:24:dc:18:59:0c:35:d4:70:e5:62:fd:62:3d:7a:34:76:e0:
         79:f9:f1:65:af:e3:c8:c0:8e:58:c5:12:ec:6a:55:d5:c3:24:
         92:72:cc:f3:30:ac:fd:ae:22:5a:cb:ed:fd:b3:0b:47:55:93:
         c2:b4:cd:30:62:35:79:82:87:4b:10:63:5c:13:4d:71:70:f1:
         5b:bc:5a:7a:9b:89:24:bf:4b:5b:7b:0f:34:3b:e8:32:95:c2:
         8b:15:1e:a9:6d:e3:4b:58:f2:f7:3e:0e:ae:63:08:ef:45:f2:
         23:ee:94:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 01:04:51 2026 by rpki-client