This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/ff5dd0aa-fa7a-4da4-a1c7-1dbc88b2c169/0/36058F001B4EB8C36AC0C178096CB2C2CB5D6223.mft
File:                     36058F001B4EB8C36AC0C178096CB2C2CB5D6223.mft (raw, json)
Hash identifier:          wgDUcAVtzxWEl0NkfOWU1a1EmdtE36MCY6CcQPtVilc=
Subject key identifier:   31:70:C2:85:8C:F9:80:EA:8A:40:49:B5:21:40:82:5B:C6:A4:77:1D
Authority key identifier: 36:05:8F:00:1B:4E:B8:C3:6A:C0:C1:78:09:6C:B2:C2:CB:5D:62:23
Certificate issuer:       /CN=36058F001B4EB8C36AC0C178096CB2C2CB5D6223
Certificate serial:       6F82B59E1E3161908D534F882D040714FABC425D
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/36058F001B4EB8C36AC0C178096CB2C2CB5D6223.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/ff5dd0aa-fa7a-4da4-a1c7-1dbc88b2c169/0/36058F001B4EB8C36AC0C178096CB2C2CB5D6223.mft
Manifest number:          66
Signing time:             Sat 24 Jan 2026 03:12:25 +0000
Manifest this update:     Sat 24 Jan 2026 03:07:25 +0000
Manifest next update:     Tue 27 Jan 2026 04:15:25 +0000
Files and hashes:         1: 36058F001B4EB8C36AC0C178096CB2C2CB5D6223.crl (hash: Ist58LFzf8V5WigrQ3c+1cOKCfPWlmgpNcfo5abgv78=)
                          2: 3130332e3134352e3232322e302f32332d3233203d3e20313339343533.roa (hash: WfyKy7SGgw1ll4gSjGcypbLZ+xtgURJsabsZ3eqwV20=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/ff5dd0aa-fa7a-4da4-a1c7-1dbc88b2c169/0/36058F001B4EB8C36AC0C178096CB2C2CB5D6223.crl
                          rsync://repo-rpki.idnic.net/repo/ff5dd0aa-fa7a-4da4-a1c7-1dbc88b2c169/0/36058F001B4EB8C36AC0C178096CB2C2CB5D6223.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/36058F001B4EB8C36AC0C178096CB2C2CB5D6223.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 27 Jan 2026 04:15:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:82:b5:9e:1e:31:61:90:8d:53:4f:88:2d:04:07:14:fa:bc:42:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36058F001B4EB8C36AC0C178096CB2C2CB5D6223
        Validity
            Not Before: Jan 24 03:07:25 2026 GMT
            Not After : Jan 27 04:15:25 2026 GMT
        Subject: CN=3170C2858CF980EA8A4049B52140825BC6A4771D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:d4:5f:e8:a7:17:6c:1d:8d:26:14:7b:8c:13:
                    bd:77:de:44:96:fc:34:7e:45:70:58:ac:ba:0b:25:
                    25:b9:56:44:ab:72:c7:ff:c5:8f:d1:5a:80:fc:0b:
                    a4:dc:ae:8c:71:8e:96:4f:3d:09:36:da:af:b9:19:
                    3f:c7:c1:fa:9c:36:6f:99:69:19:a7:87:d8:e5:32:
                    09:7c:6d:7d:ac:4d:6a:a3:41:c0:2c:c5:4a:d1:67:
                    b2:86:84:de:b3:42:e6:ac:8f:73:27:e0:00:e0:11:
                    fa:2d:7e:67:9b:9d:61:bb:ba:0b:68:1f:6f:24:d2:
                    e9:68:f1:cd:7a:4e:26:83:7e:c9:63:0b:1d:4d:57:
                    1e:d6:ee:eb:85:fe:1f:69:e4:1f:6d:ea:82:23:35:
                    71:41:09:3b:44:09:a4:b3:4e:57:7a:ed:a7:ae:23:
                    64:20:3a:b9:e1:51:73:9a:78:7d:37:a8:6b:78:0d:
                    7e:05:ad:eb:67:25:c2:54:18:8f:42:24:ba:d7:78:
                    f2:bc:7e:ac:78:42:29:07:8f:6d:89:14:9e:1f:b6:
                    0b:5a:94:f1:c7:4b:df:cd:a2:40:83:2e:76:f9:cf:
                    fe:f2:27:0f:4a:25:da:ae:35:a5:3f:04:61:a7:31:
                    cb:10:f4:29:28:d6:15:8e:36:f1:02:12:0a:2e:0f:
                    90:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:70:C2:85:8C:F9:80:EA:8A:40:49:B5:21:40:82:5B:C6:A4:77:1D
            X509v3 Authority Key Identifier:
                keyid:36:05:8F:00:1B:4E:B8:C3:6A:C0:C1:78:09:6C:B2:C2:CB:5D:62:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/ff5dd0aa-fa7a-4da4-a1c7-1dbc88b2c169/0/36058F001B4EB8C36AC0C178096CB2C2CB5D6223.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/36058F001B4EB8C36AC0C178096CB2C2CB5D6223.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ff5dd0aa-fa7a-4da4-a1c7-1dbc88b2c169/0/36058F001B4EB8C36AC0C178096CB2C2CB5D6223.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:aa:98:a5:de:15:09:cc:8f:5f:81:21:0d:0d:9c:e8:19:bd:
         0b:e5:b6:fc:88:05:e0:b1:1b:16:89:38:d2:85:29:0d:7b:7a:
         50:34:7f:6e:33:ab:5a:fc:bf:62:3a:27:1a:ab:e9:8c:b2:0f:
         6a:fe:9d:c3:ce:62:97:46:04:4a:f6:13:91:bc:1c:ad:d0:e9:
         79:5e:82:57:1f:55:7d:82:2b:3a:b7:be:e2:b3:5e:70:ed:6a:
         fd:af:95:a5:98:c1:af:11:d9:1b:8f:25:62:de:0b:eb:fa:98:
         80:cf:42:5d:a1:7e:df:b7:cb:c3:d5:e3:d1:04:3e:e6:7c:23:
         25:ac:07:b7:95:49:06:4a:0f:db:09:bf:98:05:68:5f:e1:e9:
         c2:d4:bb:36:82:93:0c:f8:7a:ab:18:92:3f:4a:19:c4:e2:6c:
         ae:cc:59:1a:26:07:af:34:68:d2:ed:8d:de:4b:98:8f:25:a5:
         fb:9c:c9:6e:a4:84:57:9a:6e:63:9a:f4:57:51:46:8c:69:02:
         bd:d8:76:46:13:84:fe:f7:17:e5:3f:7a:93:64:b4:ad:43:ab:
         db:21:21:f8:2d:94:8e:0b:1b:b5:6f:a6:df:c6:29:23:19:08:
         66:e5:e2:c7:3d:00:36:4c:15:34:b7:c4:a3:01:32:1f:2f:ae:
         47:6b:05:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 01:09:55 2026 by rpki-client