This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/49eca50b-5722-4918-8314-859d3c1f55a2/0/295131167768CC78482F796BB58CF5A01A014393.mft
File:                     295131167768CC78482F796BB58CF5A01A014393.mft (raw, json)
Hash identifier:          NTVOh+A1dHIjnl1bAgUlWoCggPthPG1YlcV7KvYv0ow=
Subject key identifier:   48:58:CE:46:82:C9:C1:52:34:82:17:B0:21:92:77:F8:57:D5:BF:F5
Authority key identifier: 29:51:31:16:77:68:CC:78:48:2F:79:6B:B5:8C:F5:A0:1A:01:43:93
Certificate issuer:       /CN=295131167768CC78482F796BB58CF5A01A014393
Certificate serial:       336968B6CE70905A559B2FD1A16886D07756E622
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/295131167768CC78482F796BB58CF5A01A014393.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/49eca50b-5722-4918-8314-859d3c1f55a2/0/295131167768CC78482F796BB58CF5A01A014393.mft
Manifest number:          F7
Signing time:             Wed 21 Jan 2026 01:11:33 +0000
Manifest this update:     Wed 21 Jan 2026 01:06:33 +0000
Manifest next update:     Sat 24 Jan 2026 04:58:33 +0000
Files and hashes:         1: 3136302e32352e35312e302f32342d3234203d3e20313439373436.roa (hash: aIfX6W1wJsuWGyj92Zq4X0k5Z/7Dz5tO4tJOY1Wnlo8=)
                          2: 3136302e32352e35302e302f32332d3234203d3e20313533303831.roa (hash: Jp+xzrLLFcNcdbgFIyqYkAF5UwOiimjyD2ApcObjIzI=)
                          3: 3136302e32352e35312e302f32342d3234203d3e20313533303831.roa (hash: uRuK1ozamqcEn31L5IIaIYVkb8/xiqqqwMGA40t+cIA=)
                          4: 3136302e32352e35302e302f32342d3234203d3e20313533303831.roa (hash: AX0lDEH6VgInN8VNyEQZ1Bf7VJ5RuPZOiclQbBxraVk=)
                          5: 3136302e32352e35302e302f32342d3234203d3e20313439373436.roa (hash: 0V0z+LtHyEetsdKzNz3fDG9TWng43zw65Ia1bT84+ig=)
                          6: 3136302e32352e35302e302f32332d3233203d3e20313439373436.roa (hash: ItdPic80wypsThSkca8xGdGFm8YCN4V6loLuyuZH6qY=)
                          7: 295131167768CC78482F796BB58CF5A01A014393.crl (hash: X5jMgD+vuxTXjsw6I1Uc7S4uH4Y8Kbg3raSd0v4EA54=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/49eca50b-5722-4918-8314-859d3c1f55a2/0/295131167768CC78482F796BB58CF5A01A014393.crl
                          rsync://repo-rpki.idnic.net/repo/49eca50b-5722-4918-8314-859d3c1f55a2/0/295131167768CC78482F796BB58CF5A01A014393.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/295131167768CC78482F796BB58CF5A01A014393.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 24 Jan 2026 04:58:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:69:68:b6:ce:70:90:5a:55:9b:2f:d1:a1:68:86:d0:77:56:e6:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=295131167768CC78482F796BB58CF5A01A014393
        Validity
            Not Before: Jan 21 01:06:33 2026 GMT
            Not After : Jan 24 04:58:33 2026 GMT
        Subject: CN=4858CE4682C9C152348217B0219277F857D5BFF5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:a6:c1:07:73:a0:e7:80:c2:b3:f6:5e:8d:84:
                    8c:27:04:e3:5a:07:0f:ae:bb:fd:3c:41:a1:02:3f:
                    27:68:ea:f5:1e:6b:8a:78:3a:fa:84:8e:c3:35:e5:
                    7b:79:18:5d:ec:73:96:a8:ad:2c:11:d1:1f:35:ab:
                    be:69:54:6b:59:d1:60:d4:62:c8:99:d1:74:31:47:
                    1f:f1:6a:b7:8b:7e:9c:55:62:d9:2e:52:3b:d8:fc:
                    65:31:db:8d:8f:96:98:a9:dd:f9:85:8e:16:2d:e5:
                    36:20:76:90:2f:3d:1e:fe:7e:93:cc:46:e1:e5:e1:
                    58:e4:b3:94:90:af:77:b1:e8:4f:64:af:76:37:5d:
                    41:ab:67:23:0c:52:5c:c0:70:5e:a9:2b:0f:7e:ea:
                    f2:22:77:e5:3b:80:e3:0d:f2:a1:67:5d:79:b9:14:
                    5e:70:fa:be:b5:b3:15:b6:38:e5:45:82:ca:b4:f1:
                    cf:a2:06:d0:bc:7b:e3:42:29:d5:71:c7:c6:32:52:
                    48:7d:fc:6c:5c:c4:35:60:ec:76:f5:1b:1b:d5:1d:
                    76:94:c9:09:31:cc:29:e6:0d:25:0e:0a:30:65:51:
                    7d:7d:08:23:da:7f:e5:cc:88:5f:6e:77:35:75:94:
                    6e:48:13:12:5f:40:92:18:a3:4b:f5:10:48:8f:de:
                    95:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:58:CE:46:82:C9:C1:52:34:82:17:B0:21:92:77:F8:57:D5:BF:F5
            X509v3 Authority Key Identifier:
                keyid:29:51:31:16:77:68:CC:78:48:2F:79:6B:B5:8C:F5:A0:1A:01:43:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/49eca50b-5722-4918-8314-859d3c1f55a2/0/295131167768CC78482F796BB58CF5A01A014393.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/295131167768CC78482F796BB58CF5A01A014393.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/49eca50b-5722-4918-8314-859d3c1f55a2/0/295131167768CC78482F796BB58CF5A01A014393.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:d7:c5:b0:c0:8d:91:be:b8:7a:c2:d7:16:43:41:d0:48:34:
         42:4f:a3:ed:e5:2e:69:05:f5:08:4a:8e:b3:e0:6a:b2:8c:e5:
         37:d0:9f:f7:4f:3d:9c:8c:2e:95:c9:b5:12:84:b0:be:72:50:
         43:23:e3:da:f2:50:84:89:1c:3e:52:8a:01:0f:29:55:ef:f5:
         3b:df:06:cd:f8:0b:73:52:f9:5f:7f:c2:3f:10:5e:41:c0:88:
         cd:29:8e:1f:fb:97:5f:44:39:94:59:5c:63:c6:68:70:2a:e1:
         85:fa:a3:c8:0f:d8:75:f9:a3:57:af:e2:60:87:24:58:3f:d2:
         e1:17:26:79:f8:1f:61:d7:69:ef:dd:30:99:fe:9e:19:4a:5a:
         7d:eb:f3:83:ad:76:de:25:34:73:be:ba:40:92:f2:1f:f1:51:
         f8:d2:77:de:69:29:b4:62:c1:40:c1:c4:92:5c:b2:13:a2:1b:
         ad:6b:b0:8f:eb:24:96:6d:2c:5a:07:06:67:00:7c:5f:cf:17:
         a6:e1:58:f1:55:ca:5e:de:8b:ce:92:11:3b:99:c4:cb:20:b9:
         a7:bb:2f:fa:d2:83:80:51:fa:11:58:64:2d:1c:07:71:f6:f9:
         64:7d:48:9e:73:59:d6:2d:ab:2a:54:d5:83:91:3e:14:b0:0f:
         af:83:f0:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 12:03:19 2026 by rpki-client