This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/130dc140-6cd4-4a59-b25c-3a141851c9ec/0/C451166D49539649063AF8F493F51CB1ACE0AB09.mft
File:                     C451166D49539649063AF8F493F51CB1ACE0AB09.mft (raw, json)
Hash identifier:          8ij08CreUcj5vBgXQcUygmdef/FODFVZAKo+4bOA4IY=
Subject key identifier:   F8:F5:94:27:7A:B9:E9:B2:5E:9F:9C:E1:45:4A:3C:12:A8:E6:AC:E1
Authority key identifier: C4:51:16:6D:49:53:96:49:06:3A:F8:F4:93:F5:1C:B1:AC:E0:AB:09
Certificate issuer:       /CN=C451166D49539649063AF8F493F51CB1ACE0AB09
Certificate serial:       6119970838E561B0F28F908C6DF9EB5A2FCF054C
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C451166D49539649063AF8F493F51CB1ACE0AB09.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/130dc140-6cd4-4a59-b25c-3a141851c9ec/0/C451166D49539649063AF8F493F51CB1ACE0AB09.mft
Manifest number:          020F
Signing time:             Wed 07 Jan 2026 19:31:02 +0000
Manifest this update:     Wed 07 Jan 2026 19:26:02 +0000
Manifest next update:     Sat 10 Jan 2026 19:46:02 +0000
Files and hashes:         1: 3230322e35352e3137322e302f32342d3234203d3e203137373639.roa (hash: IjrbLlYEZOkT769gFvToei/FjO23eUDwwXgDIinpfEU=)
                          2: 3230322e35352e3137302e302f32342d3234203d3e203137373639.roa (hash: FcauiWQCAo10b4251JHpBxlXw/DF6Tp3LqTDNrIkFZE=)
                          3: 3230322e35352e3136312e302f32342d3234203d3e203137373639.roa (hash: E6giWYKilOtzuxxyRR5Bf2onxUq+uVzIL/QgDucECFM=)
                          4: 3230322e35352e3136302e302f32342d3234203d3e203137373639.roa (hash: p+Uf34Mmlfgto2vZAGmKX9zPbb85GAX+5DX29eoUl2g=)
                          5: 3230322e35352e3136362e302f32342d3234203d3e203137373639.roa (hash: rh4Hq0+PJnkMYodh0EEu2Rh0F1326cFssYTeQOpe6mo=)
                          6: 3230322e35352e3137342e302f32342d3234203d3e203137373639.roa (hash: AZl1WqvrrGaN/Hqm3PzVhhQNyD550/D+bGuAXNwzmmo=)
                          7: 3230322e35352e3137332e302f32342d3234203d3e203137373639.roa (hash: 39FnZF9lwp6Zy6W9tvLZyBge1M+UPl6WPVxqAcRECPc=)
                          8: 3230322e35352e3136352e302f32342d3234203d3e203137373639.roa (hash: g5FIe96NvzXk1l3G1SZk+E0uR323nS4gh8FFBV8v4lc=)
                          9: C451166D49539649063AF8F493F51CB1ACE0AB09.crl (hash: fH310xLTTSCy2Ov7MqtDWnBDVGmkCjXJx4pbjXpd9Cg=)
                          10: 3230322e35352e3136392e302f32342d3234203d3e203137373639.roa (hash: E22Utfr9APhC4z7JcllyNf8HweB95Yf5C8me+CdvyFE=)
                          11: 3230322e35352e3136322e302f32342d3234203d3e203137373639.roa (hash: T5jlMftgO+al5AvueUPJMaV5GzIbWRKqrYOhtXYmc+8=)
                          12: 3230322e35352e3137352e302f32342d3234203d3e203137373639.roa (hash: 6C+M2mKjL0ChxPYmBY/5rPDruxQaFvTx4uNnx5SBd5k=)
                          13: 3230322e35352e3136342e302f32342d3234203d3e203137373639.roa (hash: 9n+k1wYDMgpMgw+A5gACjEnWZSRILaiiNarAGXe5WNY=)
                          14: 3230322e35352e3136372e302f32342d3234203d3e203137373639.roa (hash: cWz9uXSlQWLa9Ng0/c4IO1YEuQsv0PGxvtj/Shq2axY=)
                          15: 3230322e35352e3136332e302f32342d3234203d3e203137373639.roa (hash: fj4+D3FnvWC2jZGh29lA6NhBfEm+9p3F5NFsLJJnOOA=)
                          16: 3230322e35352e3137312e302f32342d3234203d3e203137373639.roa (hash: s4QV2LJdIkwWHWXsfO0kzma2mgtldKYGhA7Yd0ZrUKw=)
                          17: 3230322e35352e3136382e302f32342d3234203d3e203137373639.roa (hash: GjZ1cbaTXfnbMXe6NXLIE1G8vG8knT78bA2UOSSfXJY=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/130dc140-6cd4-4a59-b25c-3a141851c9ec/0/C451166D49539649063AF8F493F51CB1ACE0AB09.crl
                          rsync://repo-rpki.idnic.net/repo/130dc140-6cd4-4a59-b25c-3a141851c9ec/0/C451166D49539649063AF8F493F51CB1ACE0AB09.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C451166D49539649063AF8F493F51CB1ACE0AB09.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 10 Jan 2026 19:46:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:19:97:08:38:e5:61:b0:f2:8f:90:8c:6d:f9:eb:5a:2f:cf:05:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C451166D49539649063AF8F493F51CB1ACE0AB09
        Validity
            Not Before: Jan  7 19:26:02 2026 GMT
            Not After : Jan 10 19:46:02 2026 GMT
        Subject: CN=F8F594277AB9E9B25E9F9CE1454A3C12A8E6ACE1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:a2:20:bf:04:9f:d4:59:c5:51:9f:54:d2:12:
                    0b:9a:18:45:75:6b:db:e8:cd:2b:86:e1:84:26:93:
                    47:7d:08:cc:eb:1d:32:83:a6:b0:be:4c:4d:0b:4a:
                    94:b6:76:30:93:e9:35:d6:0c:0a:06:25:e6:c2:43:
                    8b:b0:84:af:be:e2:7a:0d:5a:80:58:56:d6:1e:7a:
                    72:7c:b1:bb:09:7c:1a:2e:f5:c6:a2:5d:34:08:89:
                    7c:5d:eb:ad:d0:5e:90:49:64:b2:91:a8:b7:be:bc:
                    2c:34:9e:73:d0:32:09:26:c6:c7:49:72:a5:72:0a:
                    f0:4c:ad:66:60:02:c8:1f:e3:3c:b2:a2:45:c0:71:
                    77:02:34:c7:72:26:29:f5:fe:2c:7b:a4:93:49:4e:
                    b6:13:43:d2:a7:e2:77:03:68:9b:0a:91:e2:b9:31:
                    a6:ca:69:cc:5f:a4:08:1e:42:13:97:35:26:61:d9:
                    a3:29:87:39:2c:19:f1:a9:db:0a:4c:8d:cb:6e:d8:
                    a8:95:49:a7:b7:4b:b4:8a:58:18:c2:80:54:40:f1:
                    35:62:1a:03:a6:9a:b4:a9:e3:b3:0c:4a:e3:72:8c:
                    cf:3b:d3:1a:e3:cc:ee:8b:70:95:38:f0:b4:89:49:
                    22:6a:ff:1a:dc:c5:b4:d4:bb:12:ba:7c:bd:60:8f:
                    96:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:F5:94:27:7A:B9:E9:B2:5E:9F:9C:E1:45:4A:3C:12:A8:E6:AC:E1
            X509v3 Authority Key Identifier:
                keyid:C4:51:16:6D:49:53:96:49:06:3A:F8:F4:93:F5:1C:B1:AC:E0:AB:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/130dc140-6cd4-4a59-b25c-3a141851c9ec/0/C451166D49539649063AF8F493F51CB1ACE0AB09.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C451166D49539649063AF8F493F51CB1ACE0AB09.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/130dc140-6cd4-4a59-b25c-3a141851c9ec/0/C451166D49539649063AF8F493F51CB1ACE0AB09.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b7:55:4c:69:99:d3:ea:b7:9c:fa:0a:c8:17:fc:aa:ec:a0:06:
         36:0c:f1:13:d3:c0:69:72:6b:91:f3:a2:bb:21:da:74:fe:59:
         af:26:7b:3c:9d:e4:e9:80:fd:12:dc:ea:0c:39:ac:ab:bc:a9:
         ac:da:89:f9:53:99:39:fb:52:5d:3d:de:89:21:04:ef:44:00:
         09:5a:20:2a:ba:a7:e2:8b:44:1f:7b:5b:5a:00:36:94:7b:ae:
         2c:14:2f:34:ea:36:49:36:fd:59:88:dc:85:cc:1b:f0:98:1a:
         b0:a4:88:11:b2:5c:f9:b6:02:95:85:fd:45:a3:0a:c6:97:8a:
         20:ab:19:b3:ed:13:1d:d8:35:08:cf:6d:36:7e:0d:4e:9a:4b:
         ca:8a:41:07:3c:59:2e:d2:87:89:66:8f:4f:de:8b:a6:cc:c8:
         1b:5a:71:c5:77:ab:66:53:1c:fb:84:00:ee:8a:ee:20:7e:e5:
         b7:10:ab:1d:a7:2f:9c:d3:dc:eb:e1:a0:77:b0:70:37:f9:4e:
         c7:4f:13:e9:8d:43:98:66:ca:ef:e6:0c:b8:ac:de:72:2d:3f:
         d6:10:17:93:01:2d:2d:66:4b:a4:13:a7:ad:f4:2f:90:59:20:
         b3:64:2b:f0:17:bc:ae:06:cc:1c:96:2b:52:f5:78:12:c1:36:
         9b:30:28:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 8 03:12:28 2026 by rpki-client