This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/0bb29378-45f0-49d3-a6af-573be7dca6d0/0/E014E6ED03537E453565D06E7B8A31AA8A0525A1.mft
File:                     E014E6ED03537E453565D06E7B8A31AA8A0525A1.mft (raw, json)
Hash identifier:          COIxdN52jqedOdmQ3bDPyp1h/uJioeb6qNGILC4ynvQ=
Subject key identifier:   7E:C4:03:C1:8B:D5:88:AB:86:C5:35:6C:12:98:FC:3B:55:AB:EB:A8
Authority key identifier: E0:14:E6:ED:03:53:7E:45:35:65:D0:6E:7B:8A:31:AA:8A:05:25:A1
Certificate issuer:       /CN=E014E6ED03537E453565D06E7B8A31AA8A0525A1
Certificate serial:       71F4C51C953B6DE22A1D5321D60C7ED8BB2B622E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E014E6ED03537E453565D06E7B8A31AA8A0525A1.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/0bb29378-45f0-49d3-a6af-573be7dca6d0/0/E014E6ED03537E453565D06E7B8A31AA8A0525A1.mft
Manifest number:          0309
Signing time:             Sat 17 Jan 2026 15:42:26 +0000
Manifest this update:     Sat 17 Jan 2026 15:37:26 +0000
Manifest next update:     Tue 20 Jan 2026 23:17:26 +0000
Files and hashes:         1: 3130332e3137352e33382e302f32332d3233203d3e20313534343130.roa (hash: CguEl+Lysn/5KkRoQJibPhJwVyvdrOOvzPigdqH+W1o=)
                          2: E014E6ED03537E453565D06E7B8A31AA8A0525A1.crl (hash: PBP6YmGBQJFSGiy8rYgTYCLk3LAOooA3nXSrGaMl+BM=)
                          3: 3130332e3137352e33382e302f32332d3234203d3e20313437313038.roa (hash: JG72NXt605ww3XbVNf9DT18KzObGZzgsJOiqL+ceVSI=)
                          4: 3130332e3137352e33382e302f32342d3234203d3e20313534343130.roa (hash: 6lkF35ri6uYPakCCX2pr0zjkUKU+eMFqvXgf24o+vlE=)
                          5: 3130332e3137352e33382e302f32332d3233203d3e20323135373237.roa (hash: joRtsTzluk9HUnqI3+6HvaybpCq3OAhZ2eSjEhqFFeA=)
                          6: 3130332e3137352e33392e302f32342d3234203d3e20313534343130.roa (hash: r3WK8CrHgCN8V7Zn9QuD1b2cQJfP1EGB1oRF8Yw67HM=)
                          7: 3130332e3137352e33382e302f32342d3234203d3e20323135373237.roa (hash: UUOaSFdZB1gNgfcBiLfpj8+sysFmMb8lGgAOYylAanI=)
                          8: 3130332e3137352e33392e302f32342d3234203d3e20323135373237.roa (hash: uShV8vRhK/SDVf3Twj+hPuhHAzUhqQGJIQPtkavd13M=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/0bb29378-45f0-49d3-a6af-573be7dca6d0/0/E014E6ED03537E453565D06E7B8A31AA8A0525A1.crl
                          rsync://repo-rpki.idnic.net/repo/0bb29378-45f0-49d3-a6af-573be7dca6d0/0/E014E6ED03537E453565D06E7B8A31AA8A0525A1.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E014E6ED03537E453565D06E7B8A31AA8A0525A1.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 20 Jan 2026 23:17:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:f4:c5:1c:95:3b:6d:e2:2a:1d:53:21:d6:0c:7e:d8:bb:2b:62:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E014E6ED03537E453565D06E7B8A31AA8A0525A1
        Validity
            Not Before: Jan 17 15:37:26 2026 GMT
            Not After : Jan 20 23:17:26 2026 GMT
        Subject: CN=7EC403C18BD588AB86C5356C1298FC3B55ABEBA8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:ac:f9:d6:03:1e:97:84:d3:2b:b9:f0:f1:fa:
                    e6:79:65:cd:e0:41:56:de:59:34:e4:9c:45:c7:e2:
                    08:0c:77:3c:4f:73:6c:7c:4b:7e:53:7a:fb:d1:d4:
                    43:10:f0:8c:13:44:b8:13:c3:3f:c4:cf:42:55:bf:
                    40:de:9d:1f:8f:30:d5:f7:a7:b8:f8:2a:6e:3e:72:
                    f9:40:65:13:34:b1:fc:1b:b0:32:97:71:35:fb:c7:
                    d2:89:ef:56:8f:a4:22:ab:cf:2c:08:2e:9f:0a:6c:
                    93:92:5e:a5:da:77:7a:a7:bf:7e:7a:c0:c2:ef:57:
                    64:64:87:d3:f9:11:3c:80:6c:9b:f4:d8:d6:6a:4e:
                    e4:57:62:dc:a5:90:11:ed:10:a4:c6:95:a5:d3:10:
                    d8:9c:12:ba:af:fa:7d:49:8a:d4:84:1b:61:43:97:
                    ab:08:5e:e4:33:79:63:e8:e6:23:6e:10:4d:97:92:
                    bd:f1:28:a3:c1:5b:aa:7e:b3:8f:90:3f:d8:b2:1d:
                    8d:83:76:af:c4:fb:8a:7a:9f:04:d9:2e:20:31:48:
                    2f:df:20:b2:35:ab:2c:ab:ed:2e:27:31:c7:a0:f0:
                    e0:91:9f:0b:59:23:4e:86:c4:92:83:70:9b:8f:02:
                    a7:7b:a9:32:ff:08:a2:2d:7d:a3:a2:df:ed:0e:45:
                    03:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:C4:03:C1:8B:D5:88:AB:86:C5:35:6C:12:98:FC:3B:55:AB:EB:A8
            X509v3 Authority Key Identifier:
                keyid:E0:14:E6:ED:03:53:7E:45:35:65:D0:6E:7B:8A:31:AA:8A:05:25:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/0bb29378-45f0-49d3-a6af-573be7dca6d0/0/E014E6ED03537E453565D06E7B8A31AA8A0525A1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E014E6ED03537E453565D06E7B8A31AA8A0525A1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0bb29378-45f0-49d3-a6af-573be7dca6d0/0/E014E6ED03537E453565D06E7B8A31AA8A0525A1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:ab:30:36:89:db:71:95:52:a2:0d:61:ff:2c:b6:95:7b:e4:
         97:6a:77:1a:65:52:c0:3f:d9:a6:ff:3f:42:40:10:5d:a0:96:
         46:9c:ba:cc:3b:46:9f:3a:a8:a6:14:d4:5f:79:a3:13:8c:64:
         64:f7:3e:63:38:6f:65:3b:eb:da:fd:f7:c9:c0:d4:0a:cf:ac:
         a3:fe:75:03:78:99:73:c4:db:ad:e3:d8:e2:89:3d:08:d0:8c:
         87:85:01:3a:d3:48:37:10:d8:dd:ad:98:96:7d:f4:c5:a8:10:
         b6:ca:dc:1c:a4:aa:b6:d4:06:70:28:1a:8a:00:8b:20:99:4f:
         66:00:e2:64:30:ec:12:18:3f:96:64:67:70:5f:a6:9f:42:bd:
         15:14:3c:66:cc:54:c7:21:9c:76:ac:3c:09:b2:d9:99:73:5c:
         1e:72:b2:7e:26:e9:c6:74:ed:ce:aa:f7:a1:ef:e8:15:bb:c2:
         11:3d:c4:24:2f:9d:5b:e7:96:57:9d:9d:f3:26:d9:9c:b0:04:
         b5:21:51:e3:b5:62:87:eb:9e:ad:07:ba:f7:df:cd:34:f4:f3:
         52:86:ac:70:11:1f:cc:43:32:53:83:f0:e3:ae:a6:64:53:66:
         b6:de:c9:61:af:c1:34:fa:9d:47:06:05:b1:3a:75:e2:27:ea:
         e9:cd:a2:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 19 20:03:12 2026 by rpki-client