This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/62daa95f-2f59-439a-834f-a721c372a74c/0/0D3926ADFB47314F1E7D5B92769131D429FC13A9.mft
File:                     0D3926ADFB47314F1E7D5B92769131D429FC13A9.mft (raw, json)
Hash identifier:          K5Uj4nXSUDYycB2gGyMF8TGAiahsrSTsii0PNqdBRhI=
Subject key identifier:   03:70:38:6C:F2:D1:86:F2:59:90:17:92:19:B0:A0:5C:C4:24:C6:00
Authority key identifier: 0D:39:26:AD:FB:47:31:4F:1E:7D:5B:92:76:91:31:D4:29:FC:13:A9
Certificate issuer:       /CN=0D3926ADFB47314F1E7D5B92769131D429FC13A9
Certificate serial:       5F8D1F7A24269B9AFEADDD8286A3603737CE5B76
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0D3926ADFB47314F1E7D5B92769131D429FC13A9.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/62daa95f-2f59-439a-834f-a721c372a74c/0/0D3926ADFB47314F1E7D5B92769131D429FC13A9.mft
Manifest number:          0518
Signing time:             Tue 20 Jan 2026 04:11:04 +0000
Manifest this update:     Tue 20 Jan 2026 04:06:04 +0000
Manifest next update:     Fri 23 Jan 2026 06:40:04 +0000
Files and hashes:         1: 3130332e3134372e3135362e302f32332d3233203d3e20313432333630.roa (hash: fmJerLM1N0ksnlpj4ELJPPRM1ugJcJpRpXiGiX3LpPI=)
                          2: 3130332e3134372e3135372e302f32342d3234203d3e20313432333630.roa (hash: M2s7m3W15+xAk09EIJ5FeWNhzpPtRKiWLuBNFqsp3KM=)
                          3: 0D3926ADFB47314F1E7D5B92769131D429FC13A9.crl (hash: w4jaXF9fW+cqu8CO68sGKFXgMxwo7N+a5/ldCdVW2H0=)
                          4: 3130332e3134372e3135362e302f32342d3234203d3e20313432333630.roa (hash: PA1MZra2kgeTlH2OybXWdKE8fFAmRO6cgL0fnUFICrM=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/62daa95f-2f59-439a-834f-a721c372a74c/0/0D3926ADFB47314F1E7D5B92769131D429FC13A9.crl
                          rsync://repo-rpki.idnic.net/repo/62daa95f-2f59-439a-834f-a721c372a74c/0/0D3926ADFB47314F1E7D5B92769131D429FC13A9.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0D3926ADFB47314F1E7D5B92769131D429FC13A9.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 23 Jan 2026 06:40:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:8d:1f:7a:24:26:9b:9a:fe:ad:dd:82:86:a3:60:37:37:ce:5b:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D3926ADFB47314F1E7D5B92769131D429FC13A9
        Validity
            Not Before: Jan 20 04:06:04 2026 GMT
            Not After : Jan 23 06:40:04 2026 GMT
        Subject: CN=0370386CF2D186F25990179219B0A05CC424C600
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:88:88:8b:a4:91:d4:51:d4:69:d2:f6:d6:b8:
                    08:04:91:fe:13:95:70:ab:a3:08:b3:4b:cf:90:4b:
                    7d:46:34:48:cc:9c:00:d3:0a:05:0e:d0:b5:b9:38:
                    ec:e3:b2:bc:98:75:39:1b:a7:25:ef:5f:e0:41:ca:
                    96:f2:e3:fc:15:dd:25:5d:7c:a3:04:1b:31:3a:28:
                    3c:ed:a0:7b:95:b6:ea:d2:5c:2d:c2:0b:2d:02:89:
                    1d:80:05:9d:22:3c:38:04:23:83:9d:0d:d5:8c:38:
                    c5:9f:26:af:e6:41:ad:69:cf:ab:2d:0e:70:3a:97:
                    62:4c:03:1a:23:f6:a6:21:40:42:eb:2f:6f:50:33:
                    27:73:5b:12:5f:75:be:9f:c1:f9:54:c7:08:be:43:
                    20:70:30:b2:d8:2e:24:a1:4d:de:0c:34:5f:f7:e5:
                    3a:e4:7f:d0:1b:97:7d:e5:85:55:ac:30:30:ef:bb:
                    ae:e6:15:bf:ab:36:77:1f:0d:62:73:01:dc:b8:e5:
                    a6:46:4a:e7:6f:bb:ed:b8:a2:bd:b2:48:65:42:7b:
                    83:40:ff:4d:c8:35:d8:48:d2:0e:14:f2:2f:7d:d3:
                    a5:f5:71:ba:15:c3:58:5d:17:94:c1:15:55:7f:dd:
                    fa:d5:f2:ac:8d:c3:b7:48:cd:79:9f:90:90:36:c9:
                    5a:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:70:38:6C:F2:D1:86:F2:59:90:17:92:19:B0:A0:5C:C4:24:C6:00
            X509v3 Authority Key Identifier:
                keyid:0D:39:26:AD:FB:47:31:4F:1E:7D:5B:92:76:91:31:D4:29:FC:13:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/62daa95f-2f59-439a-834f-a721c372a74c/0/0D3926ADFB47314F1E7D5B92769131D429FC13A9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0D3926ADFB47314F1E7D5B92769131D429FC13A9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/62daa95f-2f59-439a-834f-a721c372a74c/0/0D3926ADFB47314F1E7D5B92769131D429FC13A9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:f6:f3:6c:0a:7c:de:62:7b:a1:6a:f6:19:9a:ea:8e:e4:f8:
         36:d0:a6:7f:58:f9:6f:bb:2d:86:b6:e5:c2:dc:59:29:8b:cf:
         89:3e:f5:61:f1:fe:5e:46:ce:f4:85:e8:4f:36:00:a2:b8:b7:
         93:3d:4f:a5:af:ed:5f:f8:cb:60:8b:8b:f4:f5:a6:36:a8:97:
         ce:0b:28:23:a3:18:63:4a:88:ee:46:69:13:2e:9e:06:5f:ac:
         58:06:f3:9e:a8:b6:e0:41:8d:98:48:59:52:38:68:41:2a:d6:
         6f:69:29:9b:f3:dd:6b:09:31:4d:51:74:1e:87:dc:d8:b8:c5:
         42:1e:1c:92:2f:31:f7:62:bb:cc:e1:0c:8d:b2:0a:71:e5:a7:
         0e:a9:46:7d:1c:bb:2b:ee:f0:83:05:93:cf:a5:07:c3:0c:e7:
         44:1c:ec:cd:aa:d3:c8:ad:ab:36:9a:01:6d:bf:f1:a9:1d:3d:
         bf:11:bd:ca:f8:fc:e1:71:b8:39:26:22:41:c5:43:76:bc:ad:
         d8:39:e3:52:94:66:95:15:32:c3:05:41:b4:eb:83:81:65:2c:
         18:4e:dd:6b:18:7b:96:0d:a5:93:05:d5:77:4c:a2:3a:e6:e8:
         50:9d:19:68:7a:c7:8f:49:b8:f2:0e:42:72:98:9d:4c:b0:1e:
         68:c0:07:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 22 00:51:39 2026 by rpki-client