This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/88cac161-f880-4206-8d2c-daa604fe0902/0/06C079105A8A7FB53C97370CDE636B0A22588747.mft
File:                     06C079105A8A7FB53C97370CDE636B0A22588747.mft (raw, json)
Hash identifier:          ApuYRsGnxmwO9pcNVvaek9GaNZKzODIJ4yaaQdPndy0=
Subject key identifier:   E4:8A:DB:3A:A5:B8:C9:50:04:FD:FA:61:DD:7D:DC:53:51:03:B2:B1
Authority key identifier: 06:C0:79:10:5A:8A:7F:B5:3C:97:37:0C:DE:63:6B:0A:22:58:87:47
Certificate issuer:       /CN=06C079105A8A7FB53C97370CDE636B0A22588747
Certificate serial:       66806B4890D6FC64E36DE52D5DE185F540E16D8D
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/06C079105A8A7FB53C97370CDE636B0A22588747.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/88cac161-f880-4206-8d2c-daa604fe0902/0/06C079105A8A7FB53C97370CDE636B0A22588747.mft
Manifest number:          0540
Signing time:             Sun 18 Jan 2026 09:21:44 +0000
Manifest this update:     Sun 18 Jan 2026 09:16:44 +0000
Manifest next update:     Wed 21 Jan 2026 14:16:44 +0000
Files and hashes:         1: 3130332e3132352e3130362e302f32342d3234203d3e20313338313030.roa (hash: O471FrGItpKpChEcl6nEZZ+VhWfwlPd6oBlhCmO1Mik=)
                          2: 3130332e3132352e3130342e302f32322d3232203d3e20323135373237.roa (hash: GbzUlKHr7rDrlUYoTKGF25Sm5zD7miz3Vu+WbVyOym4=)
                          3: 3130332e3132352e3130342e302f32342d3234203d3e20313338313030.roa (hash: /hZNCU+SsofMv92WwnPvYTJr/ZtDqFUwKFLDDf8wL5k=)
                          4: 06C079105A8A7FB53C97370CDE636B0A22588747.crl (hash: mCB/+dCnnQDxub3qp7yw9Tw3G3OmeoSFnvwmtd+AtjU=)
                          5: 3130332e3132352e3130352e302f32342d3234203d3e20313338313030.roa (hash: 9r6qkyVh46PDe4qzV7dFVfeQQXh/RPQyWyaTLtTQJzY=)
                          6: 3130332e3132352e3130372e302f32342d3234203d3e20313338313030.roa (hash: DeqmHETpqpwIXuFW0Sdh83Q7JXnYyPShnBOyuyaIu1g=)
                          7: 3130332e3132352e3130342e302f32322d3232203d3e20313534343130.roa (hash: y1b90kaFvQzDW1q+lhO6VHcA60Uf2b/9f97dmB10t3o=)
                          8: 3130332e3132352e3130342e302f32322d3232203d3e20313338313030.roa (hash: taPeax8+Z3gNHSeP8kwQqd2DAGbwX8VTXsKed/iNt+U=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/88cac161-f880-4206-8d2c-daa604fe0902/0/06C079105A8A7FB53C97370CDE636B0A22588747.crl
                          rsync://repo-rpki.idnic.net/repo/88cac161-f880-4206-8d2c-daa604fe0902/0/06C079105A8A7FB53C97370CDE636B0A22588747.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/06C079105A8A7FB53C97370CDE636B0A22588747.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 21 Jan 2026 14:16:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:80:6b:48:90:d6:fc:64:e3:6d:e5:2d:5d:e1:85:f5:40:e1:6d:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06C079105A8A7FB53C97370CDE636B0A22588747
        Validity
            Not Before: Jan 18 09:16:44 2026 GMT
            Not After : Jan 21 14:16:44 2026 GMT
        Subject: CN=E48ADB3AA5B8C95004FDFA61DD7DDC535103B2B1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:d8:63:c4:07:8c:ad:8d:c1:56:82:bc:e0:e7:
                    81:9a:0d:09:97:72:7d:30:65:07:ea:59:2b:77:18:
                    33:42:cb:93:d9:d6:ce:b0:14:0e:b8:8e:88:50:a3:
                    e4:26:f3:18:2d:61:29:94:d2:d8:fa:b1:d9:7b:5a:
                    44:b0:24:f2:e6:78:4e:26:2a:e5:20:84:44:b1:2e:
                    56:df:65:23:b4:f0:eb:3d:a7:14:b9:ad:be:b5:a3:
                    86:68:9f:fc:ff:0e:ce:86:5c:9f:f7:78:0b:08:6f:
                    ae:6e:da:e8:59:38:87:45:dd:bc:32:e3:8d:3a:7e:
                    4f:b9:5c:85:66:a3:4d:f1:eb:08:54:69:72:83:af:
                    11:6c:13:ff:9d:40:65:39:d3:dd:ea:9f:39:1c:7c:
                    af:46:85:7d:44:21:f9:14:39:71:3c:d1:39:0a:93:
                    0f:f2:4e:96:00:7b:cd:6c:04:aa:8c:c1:88:d6:91:
                    38:33:e5:69:d3:94:34:f0:7a:8f:93:3c:2c:4b:6f:
                    68:fc:1a:67:e9:e1:75:c8:78:c9:3a:36:95:7a:f6:
                    9a:6c:c8:22:5a:06:c0:8e:56:53:d3:2c:26:3e:c1:
                    bb:94:10:00:09:97:3b:dc:18:26:ae:2b:5d:3f:74:
                    1d:cb:00:ba:bf:44:90:cc:fe:71:c5:28:55:c2:54:
                    b8:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:8A:DB:3A:A5:B8:C9:50:04:FD:FA:61:DD:7D:DC:53:51:03:B2:B1
            X509v3 Authority Key Identifier:
                keyid:06:C0:79:10:5A:8A:7F:B5:3C:97:37:0C:DE:63:6B:0A:22:58:87:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/88cac161-f880-4206-8d2c-daa604fe0902/0/06C079105A8A7FB53C97370CDE636B0A22588747.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/06C079105A8A7FB53C97370CDE636B0A22588747.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/88cac161-f880-4206-8d2c-daa604fe0902/0/06C079105A8A7FB53C97370CDE636B0A22588747.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:16:37:fe:97:e3:7c:62:a6:58:96:ed:74:37:51:82:91:d8:
         03:ed:dd:31:9d:f1:b7:51:72:28:97:22:af:f8:53:70:12:42:
         58:32:10:64:1b:11:ad:b5:a3:02:a8:e0:39:21:42:ac:6c:22:
         b1:9e:0a:a3:fa:3e:9e:71:31:f9:f6:27:1e:9d:55:7f:ec:fd:
         5f:b4:16:09:d2:f3:fe:af:1c:8e:3d:12:94:42:55:2c:44:72:
         67:a6:b8:67:ce:9a:63:57:de:95:ff:e2:35:ca:02:0f:8d:55:
         0e:db:cc:fc:55:06:a7:e6:27:d2:d1:33:e1:9e:d1:91:56:d8:
         e8:b4:c6:d3:30:df:42:86:20:e7:78:6d:06:17:6f:b3:27:4a:
         d2:00:f0:76:c9:30:4f:9f:ce:a2:6c:9a:98:b1:25:d9:59:9e:
         63:d0:15:b5:d0:51:04:7e:12:e6:7c:e4:1b:97:49:94:0b:d0:
         46:be:2b:88:99:80:b1:6b:df:27:a3:cc:ce:70:15:5f:e1:41:
         27:50:3a:c7:34:b8:ab:a9:2c:1c:c5:f0:a4:a2:aa:2b:4a:c0:
         13:0a:4f:38:59:6d:d4:0d:89:30:f8:6a:fc:e7:65:2d:84:0f:
         2f:e9:51:50:ec:63:2a:9f:26:75:c9:fc:60:6f:6c:06:dc:ec:
         78:bc:69:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 19 20:03:07 2026 by rpki-client