This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/221c9cad-c3b9-45a0-beb6-bce48e2b2272/0/3E66628C03CAB8C6D6FCDEDBE0700557A35B0251.mft
File:                     3E66628C03CAB8C6D6FCDEDBE0700557A35B0251.mft (raw, json)
Hash identifier:          J6NmU7kizJRxYD3awRwuO18X6K9jZ8/zIlHi83m+dUM=
Subject key identifier:   B9:85:DF:67:C7:6A:B0:C4:43:1F:B0:7E:56:1C:A6:84:49:4A:AB:13
Authority key identifier: 3E:66:62:8C:03:CA:B8:C6:D6:FC:DE:DB:E0:70:05:57:A3:5B:02:51
Certificate issuer:       /CN=3E66628C03CAB8C6D6FCDEDBE0700557A35B0251
Certificate serial:       2ACCA0E6EEE0041E3D5F4DFB26C67DA5F72B9F0B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E66628C03CAB8C6D6FCDEDBE0700557A35B0251.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/221c9cad-c3b9-45a0-beb6-bce48e2b2272/0/3E66628C03CAB8C6D6FCDEDBE0700557A35B0251.mft
Manifest number:          0262
Signing time:             Sun 18 Jan 2026 17:02:07 +0000
Manifest this update:     Sun 18 Jan 2026 16:57:07 +0000
Manifest next update:     Thu 22 Jan 2026 02:05:07 +0000
Files and hashes:         1: 3132302e32392e3233312e302f32342d3234203d3e203338373634.roa (hash: 3zNl9QPxwFV4edQhVMCJxnLjianzmdRSes5SZUBTIJM=)
                          2: 3132302e32392e3232392e302f32342d3234203d3e203338373634.roa (hash: qDCFFlpgV3kLnT4aXYTKC6LV3pb8e9ELxOyK+x211n0=)
                          3: 3132302e32392e3233302e302f32342d3234203d3e203338373634.roa (hash: 8F55uNQoN3zi97DtY0Vq2ak+DmYZUOFPxOyq8OUlCl0=)
                          4: 3132302e32392e3232372e302f32342d3234203d3e203338373634.roa (hash: kizpm5pMXSzgoWrppvdtyhcaCD0lO2EdJCuHJxptLZU=)
                          5: 3E66628C03CAB8C6D6FCDEDBE0700557A35B0251.crl (hash: iehUb4dwNElFCHYthn+kq8j9SNOi4BHlIkOv3J1qVNA=)
                          6: 3132302e32392e3233302e302f32342d3234203d3e203139393035.roa (hash: eJhmyhXXadCdmI4sMr9QqAto/qcSNuimAa2ijC8e73Y=)
                          7: 3132302e32392e3232382e302f32342d3234203d3e203338373634.roa (hash: RPYaZow5ZwQZRWzcXVmYwaCDDEvxoHSoWyb9lPO3JzQ=)
                          8: 3132302e32392e3232362e302f32342d3234203d3e203338373634.roa (hash: mysGAJlaNM3q0YL8uE3Xz1GWVqbaXG+zqdMdDsNe4Gc=)
                          9: 3132302e32392e3232362e302f32342d3234203d3e203139393035.roa (hash: 3HF7GKrMWvA2HVJvaEA0TLWlABe/FvvXdYdd308g/bM=)
                          10: 3132302e32392e3232392e302f32342d3234203d3e203139393035.roa (hash: VUbT8SHEyKOKmASLTaMwWEhd8ggbwmzz2pEnc4bB2PQ=)
                          11: 3132302e32392e3232382e302f32342d3234203d3e203139393035.roa (hash: qnWaLPQKCclL3KbhPyWf5fv4NRd/K4sQGvE8/3c+X3Y=)
                          12: 3132302e32392e3232352e302f32342d3234203d3e203338373634.roa (hash: iVloZrBIKi8lO+ez3IilhigHeiC4/XBak2SIy/5eYbE=)
                          13: 3132302e32392e3233312e302f32342d3234203d3e203139393035.roa (hash: r2yKO3KrSmkrfjQ84qnMxwLYCnCinVawrYAR52ueF/A=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/221c9cad-c3b9-45a0-beb6-bce48e2b2272/0/3E66628C03CAB8C6D6FCDEDBE0700557A35B0251.crl
                          rsync://repo-rpki.idnic.net/repo/221c9cad-c3b9-45a0-beb6-bce48e2b2272/0/3E66628C03CAB8C6D6FCDEDBE0700557A35B0251.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E66628C03CAB8C6D6FCDEDBE0700557A35B0251.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 22 Jan 2026 02:05:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:cc:a0:e6:ee:e0:04:1e:3d:5f:4d:fb:26:c6:7d:a5:f7:2b:9f:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3E66628C03CAB8C6D6FCDEDBE0700557A35B0251
        Validity
            Not Before: Jan 18 16:57:07 2026 GMT
            Not After : Jan 22 02:05:07 2026 GMT
        Subject: CN=B985DF67C76AB0C4431FB07E561CA684494AAB13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:ea:8a:23:e2:61:a3:55:6e:85:92:b5:e8:bf:
                    e2:5f:69:aa:4f:78:9e:f0:17:d4:b9:82:aa:23:9f:
                    50:9e:06:65:fb:7d:0e:5e:ff:4c:63:4c:86:f1:c3:
                    60:79:3c:de:f3:39:83:85:e5:6f:6e:9d:9c:a0:b8:
                    2f:ae:5e:e5:ce:69:fa:3c:12:4c:ee:48:52:c5:c1:
                    a4:84:ef:53:1a:85:e0:3f:74:46:2c:35:26:23:e5:
                    15:d4:f6:1f:e6:5f:2f:65:8e:f2:7a:ab:2b:1e:e7:
                    9b:9f:6a:55:b7:c4:39:b0:cf:45:02:bd:50:37:69:
                    32:57:f1:94:e4:3d:e3:1f:06:84:e3:36:07:64:87:
                    4a:6b:98:a5:a5:cd:3f:8c:fb:40:17:49:9a:9e:84:
                    85:6e:78:08:16:0f:1a:27:73:82:be:10:1d:ac:c4:
                    b8:69:ad:bc:85:18:bf:18:3c:1f:63:7c:1d:27:f7:
                    20:c4:59:4d:ee:57:13:eb:88:47:fe:a5:09:6e:76:
                    57:ff:6e:56:29:15:22:97:e5:64:bb:d4:de:38:93:
                    7b:af:7c:77:fe:b1:49:d1:b2:fe:77:1d:24:2c:15:
                    7a:f9:8b:98:53:d6:c8:6e:75:b0:98:e7:4a:7f:92:
                    1c:aa:ce:b3:9b:ff:d2:f0:19:01:9f:da:3a:d4:2e:
                    de:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:85:DF:67:C7:6A:B0:C4:43:1F:B0:7E:56:1C:A6:84:49:4A:AB:13
            X509v3 Authority Key Identifier:
                keyid:3E:66:62:8C:03:CA:B8:C6:D6:FC:DE:DB:E0:70:05:57:A3:5B:02:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/221c9cad-c3b9-45a0-beb6-bce48e2b2272/0/3E66628C03CAB8C6D6FCDEDBE0700557A35B0251.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E66628C03CAB8C6D6FCDEDBE0700557A35B0251.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/221c9cad-c3b9-45a0-beb6-bce48e2b2272/0/3E66628C03CAB8C6D6FCDEDBE0700557A35B0251.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:46:2a:75:2c:4d:cc:cc:b4:0b:25:64:9e:0f:8b:1b:85:14:
         7d:c8:d2:99:b1:e4:92:39:78:7e:b9:6a:3b:69:96:9d:55:dd:
         3b:57:ee:76:b7:09:c7:a3:88:81:ac:7a:7a:2e:9d:33:a3:1b:
         29:71:a3:20:95:5b:bc:6f:68:53:be:1f:54:26:69:e6:07:4c:
         d5:93:29:e9:dc:96:03:2d:c2:9a:4c:3a:74:14:38:ae:d6:1a:
         a4:7f:0f:66:95:2c:6b:e9:47:7a:bd:00:42:43:0c:1d:f7:25:
         eb:24:12:60:4e:3e:b7:e4:3f:03:a3:eb:c2:8d:3e:1c:96:96:
         7e:ab:df:22:7a:98:a3:5a:4e:6c:22:19:5e:d9:df:77:f9:b2:
         83:8e:94:b2:90:1a:76:e3:ff:55:6a:d7:0f:c4:83:0c:1e:b0:
         39:ba:8a:61:75:ef:f4:6d:1c:2e:cb:14:16:53:c6:ee:b9:9b:
         a6:ff:a1:da:a3:24:fe:3e:8e:7f:03:87:95:c8:76:66:ed:79:
         75:a8:58:dc:35:47:21:05:e6:0d:e0:9b:b1:ac:40:ac:d8:da:
         f1:60:a1:0c:00:a5:10:5f:eb:14:5d:58:e2:88:1f:c6:6a:9b:
         ab:07:9a:6e:ee:2c:1b:40:98:ed:09:ac:6e:c0:b5:a0:1a:22:
         fb:b5:9c:96
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUKsyg5u7gBB49X037JsZ9pfcrnwswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0U2NjYyOEMwM0NBQjhDNkQ2RkNERURCRTA3MDA1NTdB
MzVCMDI1MTAeFw0yNjAxMTgxNjU3MDdaFw0yNjAxMjIwMjA1MDdaMDMxMTAvBgNV
BAMTKEI5ODVERjY3Qzc2QUIwQzQ0MzFGQjA3RTU2MUNBNjg0NDk0QUFCMTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCj6ooj4mGjVW6FkrXov+JfaapP
eJ7wF9S5gqojn1CeBmX7fQ5e/0xjTIbxw2B5PN7zOYOF5W9unZyguC+uXuXOafo8
EkzuSFLFwaSE71MaheA/dEYsNSYj5RXU9h/mXy9ljvJ6qyse55ufalW3xDmwz0UC
vVA3aTJX8ZTkPeMfBoTjNgdkh0prmKWlzT+M+0AXSZqehIVueAgWDxonc4K+EB2s
xLhprbyFGL8YPB9jfB0n9yDEWU3uVxPriEf+pQludlf/blYpFSKX5WS71N44k3uv
fHf+sUnRsv53HSQsFXr5i5hT1shudbCY50p/khyqzrOb/9LwGQGf2jrULt5JAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUuYXfZ8dqsMRDH7B+VhymhElKqxMwHwYDVR0j
BBgwFoAUPmZijAPKuMbW/N7b4HAFV6NbAlEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y
MjFjOWNhZC1jM2I5LTQ1YTAtYmViNi1iY2U0OGUyYjIyNzIvMC8zRTY2NjI4QzAz
Q0FCOEM2RDZGQ0RFREJFMDcwMDU1N0EzNUIwMjUxLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvM0U2NjYyOEMwM0NBQjhDNkQ2RkNERURCRTA3MDA1NTdBMzVC
MDI1MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjIxYzljYWQtYzNiOS00NWEwLWJl
YjYtYmNlNDhlMmIyMjcyLzAvM0U2NjYyOEMwM0NBQjhDNkQ2RkNERURCRTA3MDA1
NTdBMzVCMDI1MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBALZGKnUsTczMtAslZJ4PixuFFH3I0pmx5JI5
eH65ajtplp1V3TtX7na3CcejiIGsenounTOjGylxoyCVW7xvaFO+H1QmaeYHTNWT
KenclgMtwppMOnQUOK7WGqR/D2aVLGvpR3q9AEJDDB33JeskEmBOPrfkPwOj68KN
PhyWln6r3yJ6mKNaTmwiGV7Z33f5soOOlLKQGnbj/1Vq1w/EgwwesDm6imF17/Rt
HC7LFBZTxu65m6b/odqjJP4+jn8Dh5XIdmbteXWoWNw1RyEF5g3gm7GsQKzY2vFg
oQwApRBf6xRdWOKIH8Zqm6sHmm7uLBtAmO0JrG7AtaAaIvu1nJY=
-----END CERTIFICATE-----
Generated at Tue Jan 20 03:01:51 2026 by rpki-client