This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/700aed1d-94c9-49a6-a609-882e03cd07ba/0/919B60E4D7E1171B6624F318ADA1B74502A3A018.mft
File:                     919B60E4D7E1171B6624F318ADA1B74502A3A018.mft (raw, json)
Hash identifier:          hCUf+PfqdSuIt5qt0XMOW5jrRIVig90LIDjtxvwhoRo=
Subject key identifier:   06:39:C0:AD:68:D7:23:43:EA:54:A5:D6:82:D1:3F:B4:6A:40:CE:B9
Authority key identifier: 91:9B:60:E4:D7:E1:17:1B:66:24:F3:18:AD:A1:B7:45:02:A3:A0:18
Certificate issuer:       /CN=919B60E4D7E1171B6624F318ADA1B74502A3A018
Certificate serial:       4B5D2D15932C705114E14B60FD2F2B2947DC4320
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/919B60E4D7E1171B6624F318ADA1B74502A3A018.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/700aed1d-94c9-49a6-a609-882e03cd07ba/0/919B60E4D7E1171B6624F318ADA1B74502A3A018.mft
Manifest number:          0544
Signing time:             Sat 31 Jan 2026 17:10:44 +0000
Manifest this update:     Sat 31 Jan 2026 17:05:44 +0000
Manifest next update:     Tue 03 Feb 2026 22:15:44 +0000
Files and hashes:         1: 3130332e3130362e3131362e302f32342d3234203d3e20313336383836.roa (hash: orZMBlY9QwaffF3Sj5GAYnuUKegFXWi6cel4pBtcO+Y=)
                          2: 919B60E4D7E1171B6624F318ADA1B74502A3A018.crl (hash: oW1P5bzwdeZxX/4tp/FKmtwMqU4at3UoYUzVLfpC3Lk=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/700aed1d-94c9-49a6-a609-882e03cd07ba/0/919B60E4D7E1171B6624F318ADA1B74502A3A018.crl
                          rsync://repo-rpki.idnic.net/repo/700aed1d-94c9-49a6-a609-882e03cd07ba/0/919B60E4D7E1171B6624F318ADA1B74502A3A018.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/919B60E4D7E1171B6624F318ADA1B74502A3A018.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 03 Feb 2026 22:15:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:5d:2d:15:93:2c:70:51:14:e1:4b:60:fd:2f:2b:29:47:dc:43:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=919B60E4D7E1171B6624F318ADA1B74502A3A018
        Validity
            Not Before: Jan 31 17:05:44 2026 GMT
            Not After : Feb  3 22:15:44 2026 GMT
        Subject: CN=0639C0AD68D72343EA54A5D682D13FB46A40CEB9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:59:0f:5f:a7:53:43:5d:39:1b:6a:0f:68:08:
                    a4:b0:c4:48:5f:a3:14:94:31:3b:5b:3e:1d:d1:67:
                    99:9b:b6:d7:b2:dd:0b:6d:a5:37:7f:cc:70:fa:bf:
                    03:3a:f5:5f:68:ad:64:a7:c0:84:9c:fe:02:56:ab:
                    8d:35:ff:6f:ce:15:f2:cb:db:61:2c:14:de:6d:d3:
                    b5:ac:52:fa:8e:13:32:79:69:fd:3d:5c:bb:c6:6e:
                    2f:8a:fd:65:1d:c4:f7:b6:a9:a4:95:71:e6:56:8d:
                    76:df:14:2b:8b:6a:9b:59:8a:0f:78:01:ce:e5:58:
                    bf:dc:e4:23:1f:3e:f8:c1:18:85:64:cf:f4:d8:bd:
                    1f:4d:bf:30:f9:a7:be:c3:35:4b:b7:d3:f7:50:76:
                    a4:6e:5c:35:f7:95:ed:0e:4e:ce:24:35:4b:fb:4e:
                    73:a4:6d:74:0f:7f:7e:68:3b:6c:8b:ce:9e:05:4f:
                    cf:19:2e:42:24:ef:b3:3b:d4:a4:02:4b:54:26:7a:
                    5f:e9:82:19:6e:6a:25:3a:db:a2:82:bf:2c:ba:2f:
                    0b:fb:1f:87:cb:a8:6d:22:ec:b9:33:34:e4:5b:9b:
                    1c:68:0f:cb:25:37:d3:20:75:3d:3f:53:a5:e2:32:
                    6f:48:8d:90:56:cf:7a:e1:e0:0b:82:02:12:42:04:
                    02:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:39:C0:AD:68:D7:23:43:EA:54:A5:D6:82:D1:3F:B4:6A:40:CE:B9
            X509v3 Authority Key Identifier:
                keyid:91:9B:60:E4:D7:E1:17:1B:66:24:F3:18:AD:A1:B7:45:02:A3:A0:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/700aed1d-94c9-49a6-a609-882e03cd07ba/0/919B60E4D7E1171B6624F318ADA1B74502A3A018.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/919B60E4D7E1171B6624F318ADA1B74502A3A018.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/700aed1d-94c9-49a6-a609-882e03cd07ba/0/919B60E4D7E1171B6624F318ADA1B74502A3A018.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:cb:fc:be:85:df:12:2d:dd:14:bc:db:ac:53:e0:e7:03:36:
         01:18:2c:8c:19:3f:04:ab:ea:b0:21:95:14:48:53:fa:8a:2c:
         7c:1e:ca:bc:58:a7:b5:44:f6:73:7a:8a:22:1b:ac:d7:d8:20:
         c0:75:98:e0:46:34:c6:ec:5c:90:35:e8:9c:f7:9d:2d:51:c3:
         9b:f1:1a:0b:63:f6:46:4e:64:94:df:3c:28:e6:a6:a6:be:a9:
         3e:b7:cf:c5:52:e9:ae:17:e3:8c:92:f3:fc:94:bf:89:49:1b:
         5a:60:15:29:e7:46:99:d1:d5:d7:7a:3f:ef:3b:58:1e:a0:13:
         60:99:3e:e3:9f:44:64:54:9c:6b:d9:f6:e8:03:40:a3:a5:fe:
         14:ff:26:9a:73:5d:01:2a:50:7d:f2:0a:6e:d7:82:54:13:5b:
         31:2d:e4:73:01:3d:8f:8e:24:fd:a6:74:7b:8d:93:61:b1:a6:
         72:40:1a:73:d9:ed:9c:1d:01:27:5c:e2:e8:c1:a0:cd:a4:6f:
         b0:36:54:da:4d:b3:14:6f:5c:84:9b:e9:9c:85:80:ce:f9:11:
         8c:f3:34:78:43:95:00:ec:42:aa:5d:00:08:9f:55:23:bb:b3:
         15:09:34:ac:bf:ec:70:bf:c4:d2:d1:f8:c5:9e:d1:59:5e:8a:
         11:32:7e:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 10:05:13 2026 by rpki-client