This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/1/4DF3DB3DA21D0022202130736E4CCB048C1D5158.mft
File:                     4DF3DB3DA21D0022202130736E4CCB048C1D5158.mft (raw, json)
Hash identifier:          6PN+OCPdHs+rQ/A04QJeVYhEW7L8vqZuXeRrHLj6tbc=
Subject key identifier:   43:FD:83:6D:CA:D1:FF:45:16:60:D2:FC:0F:56:FF:E4:6E:A5:BA:45
Authority key identifier: 4D:F3:DB:3D:A2:1D:00:22:20:21:30:73:6E:4C:CB:04:8C:1D:51:58
Certificate issuer:       /CN=4DF3DB3DA21D0022202130736E4CCB048C1D5158
Certificate serial:       55D7766669F0EFE5B40FBD36F8BF04131001FA9E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4DF3DB3DA21D0022202130736E4CCB048C1D5158.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/1/4DF3DB3DA21D0022202130736E4CCB048C1D5158.mft
Manifest number:          0115
Signing time:             Tue 20 Jan 2026 15:01:29 +0000
Manifest this update:     Tue 20 Jan 2026 14:56:29 +0000
Manifest next update:     Fri 23 Jan 2026 22:23:29 +0000
Files and hashes:         1: 323430343a393763303a313630303a3a2f34302d3430203d3e20313533303837.roa (hash: xiP480ZV+GHJ2/4depZViI+46Z/6Gy8Oy9ISHx8BOoQ=)
                          2: 323430343a393763303a3230303a3a2f34302d3430203d3e20313533303837.roa (hash: m4Qjt6x6f7mHe4i/Iubt+ryvfk1k2wGsuQa/3iUQfPg=)
                          3: 323430343a393763303a343030303a3a2f33362d3336203d3e20313533303837.roa (hash: jqvg3e8AqoLRJ/K75B/MsSSeNm5CmK8WuhFVMvH1GPY=)
                          4: 4DF3DB3DA21D0022202130736E4CCB048C1D5158.crl (hash: f+B6sLETN1WYenJy9jlS2stJeHlL/wzTEEpRms7gqLc=)
                          5: 323430343a393763303a3937303a3a2f34342d3434203d3e20313533303837.roa (hash: 3REo8lPESzPESEgFYfKabImyxXr3e1MH5zR+5WqeqWA=)
                          6: 323430343a393763303a3130333a3a2f34382d3438203d3e20313533303837.roa (hash: sjFkPQRbAFB+/y9Sh73guddwprpnyTSYhc+NK3cVMUk=)
                          7: 323430343a393763303a663030303a3a2f33362d3336203d3e20313533303837.roa (hash: 6M8Pqc3cx4r9Johealtry1Gw+jVdKKETBKeugC/gwSo=)
                          8: 323430343a393763303a633030303a3a2f33362d3336203d3e20313533303837.roa (hash: BVieKtpjSLtSo/dKiDHRcHA8rEhJMn29aKZFmH29jqw=)
                          9: 323430343a393763303a3a2f33362d3336203d3e20313533303837.roa (hash: /2j20KxiHUqPzb25Ob8Vnswz982vobPobznvUU3v3l0=)
                          10: 323430343a393763303a313030303a3a2f33362d3336203d3e20313533303837.roa (hash: gMiVXZLJ/9DguVi8cY3O9jgAHLxkekctq4KTVNjceI0=)
                          11: 323430343a393763303a333130303a3a2f34302d3430203d3e20313533303837.roa (hash: GtLJlyIT44yOE5pTxubbE+JVbv879K3iwKIQBgBcJ2I=)
                          12: 323430343a393763303a393730303a3a2f34302d3430203d3e20313533303837.roa (hash: 5B2JZlTjn+LkK2wM5nDYDuRQs9xZXGxH5pBH421APJg=)
                          13: 323430343a393763303a323232323a3a2f34382d3438203d3e20313533303837.roa (hash: 6h5ukYFuCno4f7DUxvLhYVLFCjOWP5SiTwkMYTzIF/4=)
                          14: 323430343a393763303a393763303a3a2f34342d3434203d3e20313533303837.roa (hash: jwvNujssv5IpW6wUm1bDQwCkCbwLEP4pJ6+PadQVpUw=)
                          15: 323430343a393763303a623030303a3a2f33362d3336203d3e20313533303837.roa (hash: mn8CNzPntuzIh9ykEoLvol7d+gOHgPTC5fCQWZQ5dbs=)
                          16: 323430343a393763303a3a2f33322d3332203d3e20313533303837.roa (hash: RbbbhN7gQjhRmlONdMhkhAU8C3rOa0UopxhZkN4y+0U=)
                          17: 323430343a393763303a363030303a3a2f33362d3336203d3e20313533303837.roa (hash: 9sSxWhK1ekW9sX4kW8H5um/xDsKQzfqceGtwbeCUELE=)
                          18: 323430343a393763303a323330303a3a2f34302d3430203d3e20313533303837.roa (hash: 4uXivfruDrV6vIQDaw3CdwZggXYUI8C5CzvO1Aezvw8=)
                          19: 323430343a393763303a333030303a3a2f33362d3336203d3e20313533303837.roa (hash: hFSaz/g1QnbG2lr8TgOJJdh8bcxNOKHTZPQyaXMiTuo=)
                          20: 323430343a393763303a653030303a3a2f33362d3336203d3e20313533303837.roa (hash: odQ4TQODv/Nxx9TjvaaJpyigmRoWi0QI8IwNfXz5bHo=)
                          21: 323430343a393763303a3136323a3a2f34382d3438203d3e20313533303837.roa (hash: xoql0u4cJ/KRzzlhzdPt4uyRXe/QNmDlgTST+s7tLx0=)
                          22: 323430343a393763303a613030303a3a2f33362d3336203d3e20313533303837.roa (hash: N6mGANoBckRU2bg5hxStsxuo2HX2wdIPxHilFclib3s=)
                          23: 323430343a393763303a393763303a3a2f34382d3438203d3e20313533303837.roa (hash: UH1OeEapN00xpdN52GP23gFWyVB860/o2X8O7dKpC+0=)
                          24: 323430343a393763303a643030303a3a2f33362d3336203d3e20313533303837.roa (hash: vK7js0VcvkoTEio6OPE0bIxYoKi2WhD/AFizRZR03iE=)
                          25: 323430343a393763303a353030303a3a2f33362d3336203d3e20313533303837.roa (hash: ajp2RV8pB0t7xjb6AMg24tD94YiYauZ1iojKxpZ1J3o=)
                          26: 323430343a393763303a383030303a3a2f33362d3336203d3e20313533303837.roa (hash: QP61IhleORRzGf5/ZoBkFFGoF5n6EhGqldep0K1H6sA=)
                          27: 323430343a393763303a3232303a3a2f34342d3434203d3e20313533303837.roa (hash: EApvDBvKIpb3TW1OvFKqCBw8otauBBFdv2Yvyf2DIxU=)
                          28: 323430343a393763303a323233303a3a2f34342d3434203d3e20313533303837.roa (hash: x6IB55et7Umm41gvuMH6aPtv2IqrtCDIYQnCW4yZ0Jc=)
                          29: 323430343a393763303a3232333a3a2f34382d3438203d3e20313533303837.roa (hash: CoVHqDze9/9Ad7yystdU0IkQDdi+UUE5paHmjRb7ddU=)
                          30: 323430343a393763303a333132363a3a2f34382d3438203d3e20313533303837.roa (hash: SOe6CNGwh7AV/ME3NGZRGYorNCiEvzdLsEvnR8QiyAQ=)
                          31: 323430343a393763303a323232303a3a2f34342d3434203d3e20313533303837.roa (hash: faTcPr5R7d5SON6aopxvVZHUN4/VFaOooXiyhEzUbUA=)
                          32: 323430343a393763303a323230303a3a2f34302d3430203d3e20313533303837.roa (hash: 8BghnefMyUfpQWuZ7yB+zaBc31qeLaaDPm1YLasmkKU=)
                          33: 323430343a393763303a3136333a3a2f34382d3438203d3e20313533303837.roa (hash: 1NH1eG3Zfl97MOtxtfrsqqGCWGbmYZJJ7WvL5sj1ARU=)
                          34: 323430343a393763303a373030303a3a2f33362d3336203d3e20313533303837.roa (hash: lNdW3pOZi8eT+J9dyaHX5GGSIEb0ecFMMO3Pho99eNg=)
                          35: 323430343a393763303a393030303a3a2f33362d3336203d3e20313533303837.roa (hash: OViwO9PklTzUH02BjuZLXgkeh74Fe3vDWeCkgzs68vI=)
                          36: 323430343a393763303a323030303a3a2f33362d3336203d3e20313533303837.roa (hash: ASP8j+vBPIfNxGlKZjOVhw8wDXvVplT0wShhkxku/nY=)
                          37: 323430343a393763303a3a2f34302d3430203d3e20313533303837.roa (hash: wtGa4g73t3mkeuxwfJNw0nrWS6hzNcTp0PysGI1hEyo=)
                          38: 323430343a393763303a3232323a3a2f34382d3438203d3e20313533303837.roa (hash: wzrRIRPSPMpZXs/6SqbPwUgiCefzNUlDE+HufEdbYVA=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/1/4DF3DB3DA21D0022202130736E4CCB048C1D5158.crl
                          rsync://repo-rpki.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/1/4DF3DB3DA21D0022202130736E4CCB048C1D5158.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4DF3DB3DA21D0022202130736E4CCB048C1D5158.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 23 Jan 2026 22:23:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:d7:76:66:69:f0:ef:e5:b4:0f:bd:36:f8:bf:04:13:10:01:fa:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4DF3DB3DA21D0022202130736E4CCB048C1D5158
        Validity
            Not Before: Jan 20 14:56:29 2026 GMT
            Not After : Jan 23 22:23:29 2026 GMT
        Subject: CN=43FD836DCAD1FF451660D2FC0F56FFE46EA5BA45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:3d:84:e6:e7:7b:a9:11:ba:2b:80:52:36:f7:
                    3e:e4:bf:69:9d:14:97:24:95:b7:59:83:46:9a:17:
                    bd:3c:a5:f6:3d:4c:81:e8:6d:32:b9:47:e5:29:d6:
                    76:8f:16:ef:33:ff:07:c8:f7:83:d2:5c:5c:c6:c5:
                    5b:22:46:f6:9b:cb:87:f3:40:f6:04:ff:ff:d6:ec:
                    01:35:b4:a7:14:0d:34:8c:0a:03:36:e9:2b:3b:7d:
                    36:75:89:60:19:8e:22:cc:e5:97:5a:e3:00:4e:32:
                    a0:fd:34:3e:b3:e1:9d:8b:e1:55:eb:6f:1f:13:10:
                    8d:b3:47:f1:c5:94:37:9b:c6:07:fb:88:9a:78:43:
                    40:81:ff:d8:81:8b:14:c3:ed:30:90:04:08:fe:61:
                    40:a3:ad:41:2e:78:9d:9e:a3:9f:bb:ab:bd:ea:32:
                    4f:96:d4:f0:5c:42:38:94:42:c9:f0:ab:83:89:3a:
                    53:77:ea:e2:ab:07:15:07:24:30:9c:fa:d3:89:6d:
                    20:3a:61:77:b5:1c:1c:9f:d6:e7:92:5d:a4:e0:8a:
                    1a:af:45:2e:2b:8a:e1:e3:f6:22:53:3c:95:c4:53:
                    b4:e2:76:ca:55:8f:66:76:41:91:5a:41:71:b8:ed:
                    53:04:ae:06:9d:ae:46:b1:ea:2e:5e:9a:0d:33:b1:
                    e4:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:FD:83:6D:CA:D1:FF:45:16:60:D2:FC:0F:56:FF:E4:6E:A5:BA:45
            X509v3 Authority Key Identifier:
                keyid:4D:F3:DB:3D:A2:1D:00:22:20:21:30:73:6E:4C:CB:04:8C:1D:51:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/1/4DF3DB3DA21D0022202130736E4CCB048C1D5158.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4DF3DB3DA21D0022202130736E4CCB048C1D5158.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/1/4DF3DB3DA21D0022202130736E4CCB048C1D5158.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c2:68:45:8a:f2:32:ec:a7:70:8d:72:9c:c4:d2:e4:da:23:95:
         12:de:7a:48:55:40:2e:b2:f7:91:dc:35:47:02:21:a1:01:6e:
         20:72:31:ee:0b:50:6b:17:12:a1:b9:fe:d5:6c:8f:73:1d:66:
         22:4e:0d:16:53:e9:a4:ac:24:7b:d2:17:cc:aa:eb:6c:5a:15:
         8e:96:c0:e7:7c:84:e8:53:0b:54:ff:75:08:84:00:fd:8f:7c:
         f9:35:01:ed:6c:fd:52:f8:bd:75:ea:40:0e:cb:4a:db:ab:b5:
         0f:7a:4b:00:ed:ee:be:16:db:a5:26:4b:c1:91:33:dd:7d:c9:
         a1:5f:c6:88:de:42:54:4f:81:7a:92:14:86:8e:8c:a4:db:e0:
         22:f5:7a:6c:19:b3:f6:d7:74:58:f1:ab:fc:80:48:0a:52:cd:
         14:6d:a3:fa:2a:c4:d7:23:b8:ad:ea:80:97:36:59:8a:09:ca:
         8a:b7:28:a6:13:e9:11:c0:71:1a:50:eb:23:6b:7e:fe:9c:0d:
         58:5a:d1:5e:69:e8:8c:5f:85:45:9b:02:07:ab:18:5a:2f:13:
         9f:01:02:6d:0c:b9:5c:d8:40:15:b0:40:37:76:73:3b:e3:c2:
         1e:68:c0:a3:e3:20:9e:1b:79:66:5f:db:a3:77:b3:e6:01:01:
         cd:24:f3:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 17:55:09 2026 by rpki-client