This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/ff7ae82f-537e-4626-be9e-33394a2dc969/0/E94D4099064713F1C3A5E211E817CFC2A40E6370.mft
File:                     E94D4099064713F1C3A5E211E817CFC2A40E6370.mft (raw, json)
Hash identifier:          gl9dsVxAdw2CLioNhi1/gKvTs0yQTtuHspV15aXzvyU=
Subject key identifier:   F4:56:EF:FD:74:0D:AC:C0:F3:7E:25:84:F4:D4:47:77:24:30:CB:BF
Authority key identifier: E9:4D:40:99:06:47:13:F1:C3:A5:E2:11:E8:17:CF:C2:A4:0E:63:70
Certificate issuer:       /CN=E94D4099064713F1C3A5E211E817CFC2A40E6370
Certificate serial:       5840D1CE25C72606B2EB8263ED7A694F4BC0A85B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E94D4099064713F1C3A5E211E817CFC2A40E6370.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/ff7ae82f-537e-4626-be9e-33394a2dc969/0/E94D4099064713F1C3A5E211E817CFC2A40E6370.mft
Manifest number:          01FC
Signing time:             Sun 25 Jan 2026 12:51:33 +0000
Manifest this update:     Sun 25 Jan 2026 12:46:33 +0000
Manifest next update:     Wed 28 Jan 2026 13:24:33 +0000
Files and hashes:         1: E94D4099064713F1C3A5E211E817CFC2A40E6370.crl (hash: NXheesM5WHz04gYW7qA1iRnY3eQNZsrES6UGjzu9REA=)
                          2: 3130332e3136342e31342e302f32332d3234203d3e20313532303537.roa (hash: TODEDun2Zl+j5gm95jSV7b8fVwk7R83jzCkXAd4YUh0=)
                          3: 34392e302e32342e302f32332d3234203d3e203137393935.roa (hash: G15jhzfZRAvw44ZtH89JpUZ7Q4CGTBRIfeHqxNKeprc=)
                          4: 3131302e39322e37322e302f32332d3234203d3e203137393935.roa (hash: Tj+rZXXICw5VIXsxuWhO+B1070IpmB9rr/NwmKii+rg=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/ff7ae82f-537e-4626-be9e-33394a2dc969/0/E94D4099064713F1C3A5E211E817CFC2A40E6370.crl
                          rsync://repo-rpki.idnic.net/repo/ff7ae82f-537e-4626-be9e-33394a2dc969/0/E94D4099064713F1C3A5E211E817CFC2A40E6370.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E94D4099064713F1C3A5E211E817CFC2A40E6370.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 28 Jan 2026 13:24:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:40:d1:ce:25:c7:26:06:b2:eb:82:63:ed:7a:69:4f:4b:c0:a8:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E94D4099064713F1C3A5E211E817CFC2A40E6370
        Validity
            Not Before: Jan 25 12:46:33 2026 GMT
            Not After : Jan 28 13:24:33 2026 GMT
        Subject: CN=F456EFFD740DACC0F37E2584F4D447772430CBBF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:70:d1:91:6b:75:60:1d:13:7b:a3:61:9d:2b:
                    32:3f:89:53:16:77:22:23:d3:da:ba:52:2e:13:21:
                    90:b7:1c:f8:9c:29:99:a3:c5:46:36:46:18:e6:40:
                    74:cd:63:6a:9d:8f:9b:52:04:12:eb:79:b0:a9:89:
                    dc:ac:fb:98:ff:ad:a4:f9:37:87:97:e4:05:a9:38:
                    c6:41:4b:eb:ec:00:2d:1a:77:7c:9a:08:a8:00:6c:
                    1b:2f:f1:ce:53:8b:83:f5:cb:d0:17:7c:31:ee:ff:
                    59:66:58:bb:e3:5c:fa:af:c3:a6:cb:40:c7:c1:90:
                    a0:64:78:8e:4c:18:a7:7f:79:fb:07:9e:38:49:72:
                    bc:42:07:7d:d0:ff:e9:3d:3f:f1:68:33:4b:53:08:
                    b9:c1:00:93:53:93:a4:b9:df:f0:59:c5:ed:f0:cf:
                    a6:ae:2c:de:a1:21:cd:d2:04:a7:67:f3:43:a1:0e:
                    21:d6:9d:8b:e7:d8:e7:ca:d5:b6:ac:34:06:60:67:
                    88:49:9d:08:44:0e:d9:85:67:6f:15:5a:00:eb:ca:
                    9e:79:f7:df:35:93:98:89:44:ce:fb:af:20:31:3f:
                    18:b9:83:9d:ec:c6:14:aa:b1:83:f3:c3:b3:6a:bd:
                    14:a0:bf:e1:aa:34:fb:f0:45:ad:c8:90:b7:55:5a:
                    e0:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:56:EF:FD:74:0D:AC:C0:F3:7E:25:84:F4:D4:47:77:24:30:CB:BF
            X509v3 Authority Key Identifier:
                keyid:E9:4D:40:99:06:47:13:F1:C3:A5:E2:11:E8:17:CF:C2:A4:0E:63:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/ff7ae82f-537e-4626-be9e-33394a2dc969/0/E94D4099064713F1C3A5E211E817CFC2A40E6370.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E94D4099064713F1C3A5E211E817CFC2A40E6370.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ff7ae82f-537e-4626-be9e-33394a2dc969/0/E94D4099064713F1C3A5E211E817CFC2A40E6370.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:88:3b:d3:12:a4:b7:f1:1b:26:ed:ba:2d:b0:ec:aa:10:19:
         63:48:ce:22:75:f7:af:41:59:e7:b0:9f:bd:c7:97:16:cd:99:
         51:c9:b0:b8:06:e9:7e:b4:ec:09:91:20:74:57:36:b0:50:09:
         f8:c7:67:2f:14:ac:39:50:8b:70:28:56:28:d3:cd:9e:93:81:
         32:10:2e:31:f9:21:b1:f7:bf:8f:6a:c5:7a:53:61:f1:87:80:
         9a:77:0f:ea:25:32:d1:bc:d7:50:70:5d:3a:ca:f0:54:b2:d4:
         7d:5b:25:b9:7e:02:a4:74:b5:c2:a9:1b:92:df:df:65:33:5b:
         44:75:a6:77:77:35:d4:e3:8d:28:a7:0e:2b:41:60:bd:9a:4d:
         72:d1:c6:ef:47:00:7f:4a:b7:51:4b:4a:3c:3d:54:e1:84:9a:
         9f:83:47:c4:a4:10:bc:bc:18:f8:88:07:aa:82:0f:aa:1c:f5:
         18:f3:ea:df:09:1c:38:f8:b6:58:ff:b9:23:97:04:89:47:73:
         12:bd:75:cb:c1:75:09:1c:3d:ef:7b:9e:1a:63:8e:4c:e3:22:
         9f:fc:6c:4c:2d:a7:b1:5d:8c:d6:61:30:53:ba:f9:68:e8:87:
         2e:6f:1e:78:e8:21:54:bd:57:1b:f6:8f:f3:c4:39:63:07:e1:
         91:bc:7a:5e
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUWEDRziXHJgay64Jj7XppT0vAqFswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTk0RDQwOTkwNjQ3MTNGMUMzQTVFMjExRTgxN0NGQzJB
NDBFNjM3MDAeFw0yNjAxMjUxMjQ2MzNaFw0yNjAxMjgxMzI0MzNaMDMxMTAvBgNV
BAMTKEY0NTZFRkZENzQwREFDQzBGMzdFMjU4NEY0RDQ0Nzc3MjQzMENCQkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUcNGRa3VgHRN7o2GdKzI/iVMW
dyIj09q6Ui4TIZC3HPicKZmjxUY2RhjmQHTNY2qdj5tSBBLrebCpidys+5j/raT5
N4eX5AWpOMZBS+vsAC0ad3yaCKgAbBsv8c5Ti4P1y9AXfDHu/1lmWLvjXPqvw6bL
QMfBkKBkeI5MGKd/efsHnjhJcrxCB33Q/+k9P/FoM0tTCLnBAJNTk6S53/BZxe3w
z6auLN6hIc3SBKdn80OhDiHWnYvn2OfK1basNAZgZ4hJnQhEDtmFZ28VWgDryp55
9981k5iJRM77ryAxPxi5g53sxhSqsYPzw7NqvRSgv+GqNPvwRa3IkLdVWuAnAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQU9Fbv/XQNrMDzfiWE9NRHdyQwy78wHwYDVR0j
BBgwFoAU6U1AmQZHE/HDpeIR6BfPwqQOY3AwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m
ZjdhZTgyZi01MzdlLTQ2MjYtYmU5ZS0zMzM5NGEyZGM5NjkvMC9FOTRENDA5OTA2
NDcxM0YxQzNBNUUyMTFFODE3Q0ZDMkE0MEU2MzcwLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvRTk0RDQwOTkwNjQ3MTNGMUMzQTVFMjExRTgxN0NGQzJBNDBF
NjM3MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmY3YWU4MmYtNTM3ZS00NjI2LWJl
OWUtMzMzOTRhMmRjOTY5LzAvRTk0RDQwOTkwNjQ3MTNGMUMzQTVFMjExRTgxN0NG
QzJBNDBFNjM3MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAKuIO9MSpLfxGybtui2w7KoQGWNIziJ1969B
Weewn73HlxbNmVHJsLgG6X607AmRIHRXNrBQCfjHZy8UrDlQi3AoVijTzZ6TgTIQ
LjH5IbH3v49qxXpTYfGHgJp3D+olMtG811BwXTrK8FSy1H1bJbl+AqR0tcKpG5Lf
32UzW0R1pnd3NdTjjSinDitBYL2aTXLRxu9HAH9Kt1FLSjw9VOGEmp+DR8SkELy8
GPiIB6qCD6oc9Rjz6t8JHDj4tlj/uSOXBIlHcxK9dcvBdQkcPe97nhpjjkzjIp/8
bEwtp7FdjNZhMFO6+Wjohy5vHnjoIVS9Vxv2j/PEOWMH4ZG8el4=
-----END CERTIFICATE-----
Generated at Sun Jan 25 23:40:40 2026 by rpki-client