This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/16d61135-75e4-46c6-bddd-fba6834dce41/0/D1E28E396E82778793018513BD084854BE663886.mft
File:                     D1E28E396E82778793018513BD084854BE663886.mft (raw, json)
Hash identifier:          IqGyXAKyLxjycOhu2GR/1s4qpEQack18RVPt7T5UWxg=
Subject key identifier:   DF:4C:4D:EF:9F:CB:D9:3A:4A:69:FD:36:63:1A:BE:EC:1E:E5:0F:15
Authority key identifier: D1:E2:8E:39:6E:82:77:87:93:01:85:13:BD:08:48:54:BE:66:38:86
Certificate issuer:       /CN=D1E28E396E82778793018513BD084854BE663886
Certificate serial:       7D7D3FD56BACFB69524F30899BE5592B8DEE9402
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D1E28E396E82778793018513BD084854BE663886.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/16d61135-75e4-46c6-bddd-fba6834dce41/0/D1E28E396E82778793018513BD084854BE663886.mft
Manifest number:          029B
Signing time:             Fri 16 Jan 2026 13:30:49 +0000
Manifest this update:     Fri 16 Jan 2026 13:25:49 +0000
Manifest next update:     Mon 19 Jan 2026 23:51:49 +0000
Files and hashes:         1: D1E28E396E82778793018513BD084854BE663886.crl (hash: 2al2cBTJuOvrnxXgqyXMOIezDGBB9WGoWIy1N1JMP1A=)
                          2: 3130332e3136392e3233302e302f32332d3234203d3e2034383030.roa (hash: dbeooOEymowfTHu7nnG695fAge4T8FaVO8HgIWjN8ng=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/16d61135-75e4-46c6-bddd-fba6834dce41/0/D1E28E396E82778793018513BD084854BE663886.crl
                          rsync://repo-rpki.idnic.net/repo/16d61135-75e4-46c6-bddd-fba6834dce41/0/D1E28E396E82778793018513BD084854BE663886.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D1E28E396E82778793018513BD084854BE663886.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 19 Jan 2026 16:13:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:7d:3f:d5:6b:ac:fb:69:52:4f:30:89:9b:e5:59:2b:8d:ee:94:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D1E28E396E82778793018513BD084854BE663886
        Validity
            Not Before: Jan 16 13:25:49 2026 GMT
            Not After : Jan 19 23:51:49 2026 GMT
        Subject: CN=DF4C4DEF9FCBD93A4A69FD36631ABEEC1EE50F15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:e0:dd:f1:41:93:2b:86:f9:95:43:ce:7a:99:
                    4f:43:c0:57:b1:7e:55:bd:18:4e:fd:a2:22:7e:64:
                    7c:18:28:95:c2:2f:33:b4:8d:d0:57:88:38:92:c6:
                    1f:05:8e:ee:fc:6d:0c:84:4a:69:36:0f:b4:bd:e0:
                    a3:59:ae:c6:64:cd:86:1d:d2:f8:a7:07:0a:54:aa:
                    be:8a:5a:7e:6d:70:e0:da:44:eb:2c:76:37:85:51:
                    f5:e2:80:4a:1f:c2:a3:aa:0d:24:c1:6e:61:1d:92:
                    65:15:a8:b6:07:cd:45:5d:37:aa:43:d3:fe:62:2e:
                    70:2c:49:87:30:d7:45:aa:ce:50:42:cb:43:5c:d2:
                    94:a8:6f:9e:0e:24:3a:12:63:e2:4d:4f:b5:81:d4:
                    19:dd:b5:47:8a:85:8c:b2:2e:4f:e6:89:63:f4:d1:
                    60:cc:cf:f7:1b:dd:c7:84:95:b9:a4:77:7f:00:43:
                    42:5c:85:2b:6c:ba:4f:19:e0:b1:92:f3:68:72:f5:
                    3b:61:6c:0c:ac:99:6a:7d:43:3f:f4:dc:68:2a:f2:
                    26:ad:55:1c:5a:99:50:f7:b7:e8:4d:75:c7:0e:89:
                    83:da:96:ff:a1:6d:78:38:46:5e:f5:19:ac:ee:b5:
                    f6:d3:b4:c5:90:14:d2:46:aa:a8:cd:ac:ea:23:c6:
                    7d:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:4C:4D:EF:9F:CB:D9:3A:4A:69:FD:36:63:1A:BE:EC:1E:E5:0F:15
            X509v3 Authority Key Identifier:
                keyid:D1:E2:8E:39:6E:82:77:87:93:01:85:13:BD:08:48:54:BE:66:38:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/16d61135-75e4-46c6-bddd-fba6834dce41/0/D1E28E396E82778793018513BD084854BE663886.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D1E28E396E82778793018513BD084854BE663886.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/16d61135-75e4-46c6-bddd-fba6834dce41/0/D1E28E396E82778793018513BD084854BE663886.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:a2:be:e2:a4:77:4a:ac:07:3f:6f:01:af:ec:98:7c:6a:e9:
         2d:fb:37:d5:0d:09:b4:9c:c4:fb:bc:9c:bb:2c:23:a8:d8:5b:
         80:f6:72:1b:51:b2:5b:e8:eb:75:6f:72:9d:0c:9e:8a:d0:17:
         a3:a7:c3:d9:ce:13:cb:28:6d:e0:9c:11:f8:b4:b8:32:6a:10:
         90:55:03:97:6a:e7:f9:55:08:a8:ad:35:d0:97:e5:17:c9:eb:
         72:7f:dd:3f:72:59:da:5e:09:9c:6a:e6:26:c8:62:7e:38:f5:
         b9:4d:42:1d:02:ca:2f:35:93:bb:87:35:60:c4:01:f8:6d:e6:
         1c:1c:6a:cc:b9:84:64:48:4c:41:71:83:f2:30:e5:8c:7a:54:
         6e:d3:c5:36:08:17:43:fb:50:76:5a:35:79:5b:a1:f9:54:c9:
         08:63:38:0c:43:7d:4b:c1:c9:c9:07:83:d3:c7:d2:58:ac:aa:
         b6:11:12:20:b1:2e:17:b8:7f:aa:34:72:fd:73:ee:2d:dc:95:
         46:a8:65:96:8c:df:74:4a:7e:02:53:60:1d:c1:e2:ff:63:6d:
         75:e0:4b:06:9f:46:33:23:a4:09:68:a9:e3:50:d9:2d:11:6d:
         88:0b:31:c8:db:fc:59:79:4c:e3:b8:cc:22:74:f8:b2:42:c7:
         ba:5e:33:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 16 17:29:13 2026 by rpki-client