This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/6ef0013b-59a6-4733-89f8-28fa3d88579f/0/E0AC9F73542C4FA1E52F9E565EED952D4528ABD5.mft
File:                     E0AC9F73542C4FA1E52F9E565EED952D4528ABD5.mft (raw, json)
Hash identifier:          vib9dOn+jSeDv/m/zD3HmTfMLF3PL+xAFWtrFlVLXfM=
Subject key identifier:   67:82:BB:E2:FD:DE:19:C3:EF:D1:09:C0:87:13:FD:09:F1:AC:D0:BC
Authority key identifier: E0:AC:9F:73:54:2C:4F:A1:E5:2F:9E:56:5E:ED:95:2D:45:28:AB:D5
Certificate issuer:       /CN=E0AC9F73542C4FA1E52F9E565EED952D4528ABD5
Certificate serial:       420A21A62CE57D974EFF80D432A1772F120B5BCA
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E0AC9F73542C4FA1E52F9E565EED952D4528ABD5.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/6ef0013b-59a6-4733-89f8-28fa3d88579f/0/E0AC9F73542C4FA1E52F9E565EED952D4528ABD5.mft
Manifest number:          01D3
Signing time:             Wed 21 Jan 2026 03:42:33 +0000
Manifest this update:     Wed 21 Jan 2026 03:37:33 +0000
Manifest next update:     Sat 24 Jan 2026 07:48:33 +0000
Files and hashes:         1: 3130332e3130312e3231382e302f32332d3234203d3e20313432333437.roa (hash: 2zfFRFwk/C19Fo4LWjVGEDAydcqPi8NpYbWAmcFYAik=)
                          2: E0AC9F73542C4FA1E52F9E565EED952D4528ABD5.crl (hash: yJ2mdhvkVkKfrufE8P3wmUoE6LpyUpPdWaoL/jWjnzs=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/6ef0013b-59a6-4733-89f8-28fa3d88579f/0/E0AC9F73542C4FA1E52F9E565EED952D4528ABD5.crl
                          rsync://repo-rpki.idnic.net/repo/6ef0013b-59a6-4733-89f8-28fa3d88579f/0/E0AC9F73542C4FA1E52F9E565EED952D4528ABD5.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E0AC9F73542C4FA1E52F9E565EED952D4528ABD5.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 24 Jan 2026 07:48:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:0a:21:a6:2c:e5:7d:97:4e:ff:80:d4:32:a1:77:2f:12:0b:5b:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E0AC9F73542C4FA1E52F9E565EED952D4528ABD5
        Validity
            Not Before: Jan 21 03:37:33 2026 GMT
            Not After : Jan 24 07:48:33 2026 GMT
        Subject: CN=6782BBE2FDDE19C3EFD109C08713FD09F1ACD0BC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:07:00:96:97:14:b7:e2:d0:bb:08:37:ac:0e:
                    3f:8d:1e:1e:ce:49:ae:14:5d:ca:c8:3e:d3:b5:4d:
                    7e:06:29:e5:de:05:09:99:56:5b:9a:86:6e:51:4a:
                    a4:86:4f:b2:bb:e9:bb:90:74:0d:29:4b:60:42:2a:
                    4a:2d:aa:f8:a9:b7:09:97:95:4a:6f:ca:b4:5f:0d:
                    d9:5b:fb:2e:89:97:a1:07:3b:a7:37:04:5c:11:a7:
                    0f:03:4f:5b:62:e8:83:a8:05:c6:79:0c:0e:32:1e:
                    db:e4:fe:ce:b9:f6:38:64:5c:20:74:fc:a5:e9:12:
                    64:c0:1e:82:d9:32:5b:de:15:43:2c:24:34:8c:41:
                    17:c4:48:9e:99:d4:cd:c2:d0:6f:13:5e:db:87:45:
                    cb:3c:16:f2:33:b0:1d:f5:a3:8f:86:8d:06:11:4f:
                    94:2d:90:27:16:59:fd:b2:86:93:1b:a1:df:af:37:
                    4b:59:fe:d9:52:4f:8b:b0:da:db:d6:41:ec:be:be:
                    d0:9f:52:5c:49:15:94:70:d1:6f:1b:3e:38:97:5f:
                    46:b4:40:55:14:56:49:16:5d:31:ab:d9:fd:9c:76:
                    08:8c:f6:85:71:ad:1e:92:0b:f4:ce:29:03:87:de:
                    a3:8e:56:69:6c:d8:2d:20:50:c8:9d:00:52:b5:e4:
                    55:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:82:BB:E2:FD:DE:19:C3:EF:D1:09:C0:87:13:FD:09:F1:AC:D0:BC
            X509v3 Authority Key Identifier:
                keyid:E0:AC:9F:73:54:2C:4F:A1:E5:2F:9E:56:5E:ED:95:2D:45:28:AB:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/6ef0013b-59a6-4733-89f8-28fa3d88579f/0/E0AC9F73542C4FA1E52F9E565EED952D4528ABD5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E0AC9F73542C4FA1E52F9E565EED952D4528ABD5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6ef0013b-59a6-4733-89f8-28fa3d88579f/0/E0AC9F73542C4FA1E52F9E565EED952D4528ABD5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bb:11:1c:02:60:6c:0a:28:a9:b6:93:7f:7b:5e:26:e6:0b:1b:
         50:64:6c:df:55:89:b4:80:a7:0d:05:32:5f:93:72:19:0a:07:
         7e:78:23:a2:87:88:54:29:f8:7b:5f:4b:17:a9:90:85:92:bf:
         43:3c:a0:20:55:1c:82:55:1f:20:22:41:d9:70:bc:cb:bf:6b:
         bb:8c:51:c7:6f:1c:83:72:52:b6:be:8a:c8:f1:d0:0c:f3:cb:
         9a:f2:bb:99:c1:83:34:57:30:9b:32:48:ce:39:c3:65:a9:6e:
         a6:31:26:80:05:83:36:67:27:c4:35:5a:5a:01:e8:84:9a:d5:
         1a:21:0c:4a:18:87:11:8e:8d:42:30:17:a6:0a:58:b8:6d:9c:
         13:b9:19:76:76:29:1e:9a:3b:23:bd:8a:59:53:82:c8:d6:2b:
         2e:82:6c:0b:0f:0f:c7:77:7a:27:f8:12:ad:50:18:e2:f2:fd:
         fb:c3:18:ab:38:8c:f9:b0:24:cc:29:12:23:30:e9:aa:5c:ec:
         2e:4c:8a:f5:32:b3:db:f6:f9:23:26:77:ea:72:8a:fb:de:a4:
         d0:09:8a:8e:24:2f:b8:7b:cd:b0:13:0f:1e:23:2a:c5:f4:8c:
         5e:b2:9d:e6:76:f4:a7:52:99:06:5a:f1:14:90:05:5b:b2:e7:
         f4:74:e6:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 14:45:33 2026 by rpki-client