This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/43a52045-a6fc-45b1-be59-825735c96f54/0/945AD192B10F71CE48362295A9C6281FE3395786.mft
File:                     945AD192B10F71CE48362295A9C6281FE3395786.mft (raw, json)
Hash identifier:          9mdmuigbJ+ZlZDD8d0YVhxROPMxd/3CqSqX7HOcsJLM=
Subject key identifier:   49:37:CD:39:34:4F:81:92:05:7B:A3:6C:51:B4:9D:4A:0C:6E:96:61
Authority key identifier: 94:5A:D1:92:B1:0F:71:CE:48:36:22:95:A9:C6:28:1F:E3:39:57:86
Certificate issuer:       /CN=945AD192B10F71CE48362295A9C6281FE3395786
Certificate serial:       40C237E39BFE885ADB203BF0DA47397A0E200C00
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/945AD192B10F71CE48362295A9C6281FE3395786.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/43a52045-a6fc-45b1-be59-825735c96f54/0/945AD192B10F71CE48362295A9C6281FE3395786.mft
Manifest number:          0246
Signing time:             Thu 15 Jan 2026 02:12:20 +0000
Manifest this update:     Thu 15 Jan 2026 02:07:20 +0000
Manifest next update:     Sun 18 Jan 2026 10:24:20 +0000
Files and hashes:         1: 945AD192B10F71CE48362295A9C6281FE3395786.crl (hash: 1ZUgys2t3GsY8NtUTIEfpplTPUnHEB5Q+E08Ry+loJw=)
                          2: 3130332e3138392e39342e302f32332d3234203d3e2034383030.roa (hash: HzhAdkWVPqyzjRfrKdf+sGJ5e8Q6OGeF8fvX/eoLEO8=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/43a52045-a6fc-45b1-be59-825735c96f54/0/945AD192B10F71CE48362295A9C6281FE3395786.crl
                          rsync://repo-rpki.idnic.net/repo/43a52045-a6fc-45b1-be59-825735c96f54/0/945AD192B10F71CE48362295A9C6281FE3395786.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/945AD192B10F71CE48362295A9C6281FE3395786.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 18 Jan 2026 10:24:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:c2:37:e3:9b:fe:88:5a:db:20:3b:f0:da:47:39:7a:0e:20:0c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=945AD192B10F71CE48362295A9C6281FE3395786
        Validity
            Not Before: Jan 15 02:07:20 2026 GMT
            Not After : Jan 18 10:24:20 2026 GMT
        Subject: CN=4937CD39344F8192057BA36C51B49D4A0C6E9661
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:67:36:b7:c2:93:38:d3:3b:7e:bc:14:5d:7e:
                    39:1c:34:77:f6:fe:15:29:8a:ed:32:45:61:ef:74:
                    7d:62:60:a5:07:4d:88:8a:94:55:a6:46:4b:30:76:
                    21:7f:53:dc:d2:ca:7b:2e:1e:f8:55:3c:aa:7b:6c:
                    1f:e5:7c:84:ef:06:dc:98:de:55:c1:65:a1:c0:9d:
                    e3:a1:99:94:ed:9c:e5:6b:c1:e0:cc:46:01:58:8a:
                    88:d7:6a:63:f9:90:d8:7d:b5:f9:8c:a6:4d:3d:fc:
                    1d:d4:db:29:94:37:0e:36:d9:21:28:2a:bd:fd:e5:
                    fc:9f:7b:47:e9:88:8f:c3:6e:fc:8a:c1:d5:86:bb:
                    4a:19:51:a8:12:8b:4a:03:26:32:40:45:8f:88:8d:
                    39:0f:17:92:6d:63:4b:cd:41:3f:a8:b8:1a:69:7d:
                    21:f1:47:95:2c:f3:86:8d:bf:eb:10:82:ae:92:ef:
                    8f:14:72:b0:72:69:53:8f:90:06:55:4e:5e:98:57:
                    91:36:3c:d9:07:68:79:f8:ab:e8:ca:85:0e:77:ad:
                    a3:0e:8d:b1:81:a3:77:4e:d6:6c:ef:08:d8:12:fc:
                    70:4d:f6:fc:13:34:8c:0d:85:fd:4e:ba:ff:c7:79:
                    9c:79:a1:32:63:bb:ef:30:5e:62:ef:86:54:fc:19:
                    89:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:37:CD:39:34:4F:81:92:05:7B:A3:6C:51:B4:9D:4A:0C:6E:96:61
            X509v3 Authority Key Identifier:
                keyid:94:5A:D1:92:B1:0F:71:CE:48:36:22:95:A9:C6:28:1F:E3:39:57:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/43a52045-a6fc-45b1-be59-825735c96f54/0/945AD192B10F71CE48362295A9C6281FE3395786.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/945AD192B10F71CE48362295A9C6281FE3395786.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/43a52045-a6fc-45b1-be59-825735c96f54/0/945AD192B10F71CE48362295A9C6281FE3395786.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:51:ac:ec:3a:dd:a7:dd:f2:3a:8f:97:5c:b9:72:de:2e:e6:
         6c:9e:c0:e2:0f:bd:6b:87:ef:c4:70:d8:34:18:df:be:89:dc:
         fd:ff:bf:65:63:1e:ee:ca:88:22:51:b8:4b:d7:d5:1d:34:a1:
         07:27:96:59:60:59:e6:2e:ce:4f:13:04:ad:44:90:29:7a:67:
         d9:34:44:91:83:b0:83:87:42:8f:25:b3:41:d0:9f:62:c7:ea:
         6a:19:41:1d:f7:fe:51:0d:f9:ca:65:ed:e0:09:b0:cf:2b:62:
         58:4e:5c:3c:c1:f3:da:6e:e4:be:d0:f7:c5:90:70:f0:d7:64:
         7e:2d:9f:cd:30:70:03:ea:d5:6d:2b:8d:05:4f:fa:b7:7d:4b:
         1c:85:96:d9:76:69:37:97:d6:7e:f9:1e:29:0a:e7:3c:35:25:
         70:bf:b4:21:db:7c:5b:fe:92:c1:85:8d:22:78:89:b0:07:05:
         dd:fa:41:cb:b0:63:48:0c:8d:54:a5:4c:20:45:40:57:b7:0b:
         55:30:d1:a8:a5:30:89:21:3c:a9:6c:05:ed:d9:9c:24:40:8a:
         4c:c5:00:21:c8:ac:76:04:19:08:b0:81:7b:6f:8d:89:e2:6d:
         f0:a4:59:a1:35:a5:b3:4d:6a:99:42:9e:fa:35:01:c6:42:ca:
         32:56:5b:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 16 17:26:20 2026 by rpki-client