This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/5fb808eb-c98e-4036-be9a-193bbcc64892/1/11A839F5FB6B345FB1586C56F146C0D80026AB7E.mft
File:                     11A839F5FB6B345FB1586C56F146C0D80026AB7E.mft (raw, json)
Hash identifier:          nDwwFH1CplNUIfJRRSDoB/HgA+QxVeYc4L2BCNDm840=
Subject key identifier:   E8:CC:80:47:3C:CA:EB:96:42:07:51:6D:8F:4C:F6:E6:AE:86:D0:03
Authority key identifier: 11:A8:39:F5:FB:6B:34:5F:B1:58:6C:56:F1:46:C0:D8:00:26:AB:7E
Certificate issuer:       /CN=11A839F5FB6B345FB1586C56F146C0D80026AB7E
Certificate serial:       34B0E52C68FAD1433ED814FCF9AEE608BC44A4A7
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/11A839F5FB6B345FB1586C56F146C0D80026AB7E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/5fb808eb-c98e-4036-be9a-193bbcc64892/1/11A839F5FB6B345FB1586C56F146C0D80026AB7E.mft
Manifest number:          010B
Signing time:             Tue 20 Jan 2026 01:20:55 +0000
Manifest this update:     Tue 20 Jan 2026 01:15:55 +0000
Manifest next update:     Fri 23 Jan 2026 06:41:55 +0000
Files and hashes:         1: 11A839F5FB6B345FB1586C56F146C0D80026AB7E.crl (hash: ieZ5oaGOu8BlJ04bT58Y7exqkS8jn8GoJM1O6QV7nFY=)
                          2: 323030313a6466333a633234303a3a2f34382d3438203d3e20313532343430.roa (hash: 2T9LVqRaEUG/PyNEPNkJKeM+yCzpYg+aQeXewlr7el8=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/5fb808eb-c98e-4036-be9a-193bbcc64892/1/11A839F5FB6B345FB1586C56F146C0D80026AB7E.crl
                          rsync://repo-rpki.idnic.net/repo/5fb808eb-c98e-4036-be9a-193bbcc64892/1/11A839F5FB6B345FB1586C56F146C0D80026AB7E.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/11A839F5FB6B345FB1586C56F146C0D80026AB7E.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 23 Jan 2026 06:41:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:b0:e5:2c:68:fa:d1:43:3e:d8:14:fc:f9:ae:e6:08:bc:44:a4:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11A839F5FB6B345FB1586C56F146C0D80026AB7E
        Validity
            Not Before: Jan 20 01:15:55 2026 GMT
            Not After : Jan 23 06:41:55 2026 GMT
        Subject: CN=E8CC80473CCAEB964207516D8F4CF6E6AE86D003
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:bc:b5:b2:96:7e:d6:d2:f9:d1:f5:88:64:e5:
                    79:64:2e:de:39:dd:65:fb:60:e9:55:62:ad:69:fd:
                    e2:ba:ad:40:08:e7:d0:89:40:3f:7b:87:d1:6f:20:
                    09:8d:82:40:c9:ce:8b:6b:4f:82:f1:95:81:52:4e:
                    25:dd:a5:b5:8a:7a:c9:c8:a2:41:f1:a5:99:e0:14:
                    51:0f:a6:78:5d:b7:0e:aa:a3:83:b8:d3:69:a4:77:
                    cf:4d:12:07:4a:23:30:fd:ea:00:52:80:69:ee:91:
                    22:0e:75:62:41:b8:35:55:cf:79:ed:a5:39:68:42:
                    cc:23:14:49:e0:03:a0:0c:33:3c:22:51:37:f5:d7:
                    0e:48:b4:78:6d:01:5a:0b:9f:21:71:61:33:f4:a7:
                    b6:7d:dd:fa:8b:00:27:51:77:ef:64:e7:4d:84:eb:
                    a8:59:1a:48:eb:84:c5:ed:0d:13:b9:ee:9d:ce:80:
                    1a:40:f8:af:cb:6f:75:c5:7d:59:cd:ae:b8:d6:f2:
                    3b:22:6e:bd:8b:17:11:ad:12:9b:8b:37:f0:e6:46:
                    93:8b:da:f1:d9:aa:54:8e:8c:7a:05:17:cf:44:30:
                    fd:24:80:35:b4:24:39:0d:ea:8b:2f:b3:12:42:da:
                    6f:ec:a6:b1:1d:a4:05:77:30:c7:77:d5:cc:eb:31:
                    72:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:CC:80:47:3C:CA:EB:96:42:07:51:6D:8F:4C:F6:E6:AE:86:D0:03
            X509v3 Authority Key Identifier:
                keyid:11:A8:39:F5:FB:6B:34:5F:B1:58:6C:56:F1:46:C0:D8:00:26:AB:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/5fb808eb-c98e-4036-be9a-193bbcc64892/1/11A839F5FB6B345FB1586C56F146C0D80026AB7E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/11A839F5FB6B345FB1586C56F146C0D80026AB7E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5fb808eb-c98e-4036-be9a-193bbcc64892/1/11A839F5FB6B345FB1586C56F146C0D80026AB7E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:d5:0f:4f:3b:4c:a7:39:22:9c:a1:33:df:6f:04:b1:8e:de:
         2e:6a:13:0d:54:e5:a9:b4:60:a1:b0:2c:76:80:6d:f7:cf:87:
         63:92:2f:76:cd:5e:bc:49:8b:30:73:88:b1:c3:2b:04:ac:23:
         f8:fd:c8:8c:8b:94:cb:59:95:ca:9f:6e:d6:50:5e:2a:e4:d6:
         8d:c6:bf:e9:df:ed:89:1b:24:b4:d2:5e:4b:6d:14:b3:6c:48:
         a9:13:12:94:23:09:93:eb:d8:9e:4f:8b:bf:da:d8:0d:fe:ec:
         f1:a2:04:74:7d:3b:f5:e7:ea:5b:bb:4e:af:4a:5f:48:53:c3:
         fc:4b:c4:bd:9f:26:2e:20:e1:e8:c4:45:cf:2d:6d:1e:6a:40:
         68:ae:72:6a:33:6d:78:ad:79:07:f5:0f:ae:84:11:3a:9e:7a:
         f4:b0:80:30:14:73:f0:e8:17:d9:f2:de:7d:37:93:08:9a:ef:
         bd:be:4e:f0:2c:f8:ee:d6:93:d1:f3:b9:d9:98:67:fe:7d:bc:
         92:90:a6:71:d4:b7:5f:6a:89:a9:c1:87:b5:17:94:31:2d:fb:
         5e:d1:74:97:fa:06:ae:59:73:f5:8f:5f:64:26:d0:1a:db:c1:
         5a:b7:70:b4:cd:94:a4:1a:72:55:6f:eb:9f:f1:cc:c9:29:f9:
         b2:22:42:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 17:55:49 2026 by rpki-client