This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/6deef218-0d9b-4d0d-a5c5-f832b8eb5aba/0/A35D0D096727FDBE2A4EED451994708ECB4A5F14.mft
File:                     A35D0D096727FDBE2A4EED451994708ECB4A5F14.mft (raw, json)
Hash identifier:          5KejP78h84VWZFcU1jc7JVTTeQW2c2MzZaKsdwJbitQ=
Subject key identifier:   5F:57:DF:C4:26:79:29:A0:08:BF:E3:BE:87:6F:E4:E2:2E:42:93:6C
Authority key identifier: A3:5D:0D:09:67:27:FD:BE:2A:4E:ED:45:19:94:70:8E:CB:4A:5F:14
Certificate issuer:       /CN=A35D0D096727FDBE2A4EED451994708ECB4A5F14
Certificate serial:       37D6889F3C45279793A8450A81CA835E9D7278CD
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A35D0D096727FDBE2A4EED451994708ECB4A5F14.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/6deef218-0d9b-4d0d-a5c5-f832b8eb5aba/0/A35D0D096727FDBE2A4EED451994708ECB4A5F14.mft
Manifest number:          0168
Signing time:             Sun 01 Feb 2026 22:12:20 +0000
Manifest this update:     Sun 01 Feb 2026 22:07:20 +0000
Manifest next update:     Thu 05 Feb 2026 05:46:20 +0000
Files and hashes:         1: A35D0D096727FDBE2A4EED451994708ECB4A5F14.crl (hash: OTeL6dsQZo+RbZH2is4kQOak1KM5Yly0IvSHiYCEk9E=)
                          2: 3130332e3134322e32302e302f32342d3234203d3e20313531353734.roa (hash: SrZZMNyD+weFJ6GOZ0htogUZ6HrLc/IW65Udx/Gnnmc=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/6deef218-0d9b-4d0d-a5c5-f832b8eb5aba/0/A35D0D096727FDBE2A4EED451994708ECB4A5F14.crl
                          rsync://repo-rpki.idnic.net/repo/6deef218-0d9b-4d0d-a5c5-f832b8eb5aba/0/A35D0D096727FDBE2A4EED451994708ECB4A5F14.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A35D0D096727FDBE2A4EED451994708ECB4A5F14.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 05 Feb 2026 05:24:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:d6:88:9f:3c:45:27:97:93:a8:45:0a:81:ca:83:5e:9d:72:78:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A35D0D096727FDBE2A4EED451994708ECB4A5F14
        Validity
            Not Before: Feb  1 22:07:20 2026 GMT
            Not After : Feb  5 05:46:20 2026 GMT
        Subject: CN=5F57DFC4267929A008BFE3BE876FE4E22E42936C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:6a:4d:4e:10:4e:c8:60:82:64:cc:83:3d:2a:
                    ef:1b:93:50:27:65:da:88:d8:2a:70:ec:18:d1:eb:
                    45:1c:15:7b:7c:77:8a:5d:68:71:fe:98:10:4e:da:
                    d1:35:e7:06:b8:85:b2:98:88:dc:c1:61:12:56:d7:
                    28:e7:41:ca:ed:f5:c1:c7:8e:73:37:9c:64:81:80:
                    2b:cf:30:49:2b:29:07:db:b4:74:d9:b9:40:af:f4:
                    ba:b9:ab:f4:69:cf:ec:94:87:fb:7e:f7:8b:82:ec:
                    00:9b:5a:a4:39:07:40:7d:c5:14:83:7d:1e:c7:c5:
                    6d:87:86:84:69:7e:1d:cf:ee:c3:54:30:c7:22:09:
                    e7:6e:78:7c:35:24:31:cf:e0:cd:94:24:cb:af:a8:
                    c2:2d:7b:fa:37:98:e2:10:be:66:cc:4a:97:2d:80:
                    a7:25:3d:ef:9e:5f:bf:0c:d0:c8:34:f2:e6:6f:28:
                    eb:dc:fc:25:04:88:05:dd:39:b0:45:b2:5a:cf:06:
                    b8:26:8b:22:be:00:5b:30:7b:2e:2e:00:60:5a:e5:
                    8a:93:24:dc:f3:ac:54:08:58:f5:ee:ce:27:d6:2e:
                    7a:b7:ad:f5:42:0c:c5:1f:5a:e4:2f:99:81:d7:31:
                    a4:05:24:2b:1a:ee:cb:c3:b2:bc:11:2a:0c:6b:4d:
                    c1:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:57:DF:C4:26:79:29:A0:08:BF:E3:BE:87:6F:E4:E2:2E:42:93:6C
            X509v3 Authority Key Identifier:
                keyid:A3:5D:0D:09:67:27:FD:BE:2A:4E:ED:45:19:94:70:8E:CB:4A:5F:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/6deef218-0d9b-4d0d-a5c5-f832b8eb5aba/0/A35D0D096727FDBE2A4EED451994708ECB4A5F14.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A35D0D096727FDBE2A4EED451994708ECB4A5F14.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6deef218-0d9b-4d0d-a5c5-f832b8eb5aba/0/A35D0D096727FDBE2A4EED451994708ECB4A5F14.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:41:85:be:f7:51:df:8f:2d:8c:3e:92:73:80:01:77:b3:bc:
         99:ff:a9:23:94:1e:4c:c0:e7:33:db:85:94:87:51:30:6f:c8:
         1d:a7:d7:24:31:82:9b:7a:16:8a:27:68:36:6b:a3:35:9a:6d:
         36:d5:9f:9c:0c:97:26:9c:60:09:c7:1a:eb:b1:77:b0:7a:24:
         d4:6c:3f:d7:77:72:8a:8d:ba:70:27:29:4a:75:6c:65:03:0e:
         3c:22:ca:f9:3d:31:db:8c:9b:70:67:ed:cb:50:7c:36:e6:80:
         3f:48:8c:a8:10:ae:00:56:92:49:97:f1:04:bb:af:8e:63:e9:
         33:06:57:dd:0e:a8:41:c2:ea:dc:07:2d:ce:bf:ea:3c:33:23:
         3f:7c:55:ef:2a:78:d1:98:80:5a:c4:d4:dd:6d:c6:0a:ca:ef:
         62:c0:37:94:0d:53:65:2d:c5:b4:76:44:93:19:b0:90:34:e7:
         c7:7c:cc:04:7c:d7:16:f3:49:fb:b1:5e:13:68:a5:ee:96:4a:
         43:86:aa:17:1d:79:2a:e6:03:aa:3d:95:e9:fb:68:53:ed:23:
         b9:9d:ed:d5:1e:d2:99:3f:f6:8b:01:4f:1f:d9:d7:96:c5:6e:
         e0:dc:64:fe:2d:a4:96:a5:cf:c9:1e:a2:df:10:44:61:7e:8c:
         e4:b2:8b:ad
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUN9aInzxFJ5eTqEUKgcqDXp1yeM0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTM1RDBEMDk2NzI3RkRCRTJBNEVFRDQ1MTk5NDcwOEVD
QjRBNUYxNDAeFw0yNjAyMDEyMjA3MjBaFw0yNjAyMDUwNTQ2MjBaMDMxMTAvBgNV
BAMTKDVGNTdERkM0MjY3OTI5QTAwOEJGRTNCRTg3NkZFNEUyMkU0MjkzNkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKak1OEE7IYIJkzIM9Ku8bk1An
ZdqI2Cpw7BjR60UcFXt8d4pdaHH+mBBO2tE15wa4hbKYiNzBYRJW1yjnQcrt9cHH
jnM3nGSBgCvPMEkrKQfbtHTZuUCv9Lq5q/Rpz+yUh/t+94uC7ACbWqQ5B0B9xRSD
fR7HxW2HhoRpfh3P7sNUMMciCedueHw1JDHP4M2UJMuvqMIte/o3mOIQvmbMSpct
gKclPe+eX78M0Mg08uZvKOvc/CUEiAXdObBFslrPBrgmiyK+AFswey4uAGBa5YqT
JNzzrFQIWPXuzifWLnq3rfVCDMUfWuQvmYHXMaQFJCsa7svDsrwRKgxrTcFhAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUX1ffxCZ5KaAIv+O+h2/k4i5Ck2wwHwYDVR0j
BBgwFoAUo10NCWcn/b4qTu1FGZRwjstKXxQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82
ZGVlZjIxOC0wZDliLTRkMGQtYTVjNS1mODMyYjhlYjVhYmEvMC9BMzVEMEQwOTY3
MjdGREJFMkE0RUVENDUxOTk0NzA4RUNCNEE1RjE0LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQTM1RDBEMDk2NzI3RkRCRTJBNEVFRDQ1MTk5NDcwOEVDQjRB
NUYxNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmRlZWYyMTgtMGQ5Yi00ZDBkLWE1
YzUtZjgzMmI4ZWI1YWJhLzAvQTM1RDBEMDk2NzI3RkRCRTJBNEVFRDQ1MTk5NDcw
OEVDQjRBNUYxNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAA9Bhb73Ud+PLYw+knOAAXezvJn/qSOUHkzA
5zPbhZSHUTBvyB2n1yQxgpt6FoonaDZrozWabTbVn5wMlyacYAnHGuuxd7B6JNRs
P9d3coqNunAnKUp1bGUDDjwiyvk9MduMm3Bn7ctQfDbmgD9IjKgQrgBWkkmX8QS7
r45j6TMGV90OqEHC6twHLc6/6jwzIz98Ve8qeNGYgFrE1N1txgrK72LAN5QNU2Ut
xbR2RJMZsJA058d8zAR81xbzSfuxXhNope6WSkOGqhcdeSrmA6o9len7aFPtI7md
7dUe0pk/9osBTx/Z15bFbuDcZP4tpJalz8keot8QRGF+jOSyi60=
-----END CERTIFICATE-----
Generated at Mon Feb 2 09:42:11 2026 by rpki-client