This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/89718f6b-b516-43ae-b589-83a25faa30be/0/1160709118182E564A6D9E250FF5000EFA5166A5.mft
File:                     1160709118182E564A6D9E250FF5000EFA5166A5.mft (raw, json)
Hash identifier:          yLOPDKUyx2Vu+oKyFvOBbTZps0wyMYYXaw51D+tOQqU=
Subject key identifier:   D2:4A:E3:4E:04:A6:B8:04:C1:5B:84:6D:88:DE:53:D6:B2:F9:D6:C4
Authority key identifier: 11:60:70:91:18:18:2E:56:4A:6D:9E:25:0F:F5:00:0E:FA:51:66:A5
Certificate issuer:       /CN=1160709118182E564A6D9E250FF5000EFA5166A5
Certificate serial:       1D865D8F68250C4B7E4EB883C58B11ED2F2B6518
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1160709118182E564A6D9E250FF5000EFA5166A5.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/89718f6b-b516-43ae-b589-83a25faa30be/0/1160709118182E564A6D9E250FF5000EFA5166A5.mft
Manifest number:          01D5
Signing time:             Sat 31 Jan 2026 15:51:23 +0000
Manifest this update:     Sat 31 Jan 2026 15:46:23 +0000
Manifest next update:     Wed 04 Feb 2026 03:33:23 +0000
Files and hashes:         1: 3130332e38362e3131372e302f32342d3234203d3e20313530353532.roa (hash: BXImbGD0gQ/N6bJsY3EceoekzYvvly2E1FsJUbVpe+g=)
                          2: 3130332e38362e3131362e302f32342d3234203d3e20313530353532.roa (hash: /s0/dWuKDJ5KcMV4TcCY6m4gQJ9kiuXe231l853zFcE=)
                          3: 1160709118182E564A6D9E250FF5000EFA5166A5.crl (hash: gCq0huw0OpaMyG3Mz1QHLQUURKiK2rpf7idywT6zb0w=)
                          4: 3130332e38362e3131362e302f32332d3233203d3e20313530353532.roa (hash: gK1xwa1IRVWzH9jnWujpMkoyIuM1Zd6H+mqdxxClcIU=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/89718f6b-b516-43ae-b589-83a25faa30be/0/1160709118182E564A6D9E250FF5000EFA5166A5.crl
                          rsync://repo-rpki.idnic.net/repo/89718f6b-b516-43ae-b589-83a25faa30be/0/1160709118182E564A6D9E250FF5000EFA5166A5.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1160709118182E564A6D9E250FF5000EFA5166A5.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 04 Feb 2026 03:33:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:86:5d:8f:68:25:0c:4b:7e:4e:b8:83:c5:8b:11:ed:2f:2b:65:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1160709118182E564A6D9E250FF5000EFA5166A5
        Validity
            Not Before: Jan 31 15:46:23 2026 GMT
            Not After : Feb  4 03:33:23 2026 GMT
        Subject: CN=D24AE34E04A6B804C15B846D88DE53D6B2F9D6C4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:17:f2:4a:6e:78:b1:8c:e4:dc:78:09:35:c5:
                    07:dc:32:ce:e0:e4:88:1a:ad:ad:c4:ca:00:94:d8:
                    12:5f:25:b6:a2:c3:8a:56:e4:21:ac:c8:f0:87:b2:
                    eb:5b:76:e5:ce:52:df:6f:90:2e:0c:82:c6:48:ef:
                    5f:9f:57:80:84:ba:5b:81:43:d2:46:5f:6d:b6:4e:
                    22:87:cc:37:28:07:12:a8:bb:e2:90:8b:fe:ec:e3:
                    7a:bb:c3:7d:b2:4e:77:99:56:4f:9e:d0:ce:7c:71:
                    16:12:7d:0a:8b:17:48:e7:8b:1c:45:36:9c:fc:05:
                    94:61:48:67:69:60:7f:2f:89:31:de:c8:76:dc:3a:
                    43:0a:7d:40:11:c7:7f:3e:f3:8f:51:fa:56:1b:3c:
                    9d:e8:46:37:b5:43:03:0c:01:11:05:7a:48:0d:be:
                    dd:07:ea:de:05:d6:55:ad:df:36:d6:7a:ef:51:d8:
                    c0:9d:d9:10:d0:92:5f:8f:f9:dc:6b:81:0d:30:eb:
                    90:79:be:3d:61:0f:2b:f3:c0:47:0b:8c:dd:f2:91:
                    98:e6:b1:0a:a2:41:78:dd:ef:11:90:5e:ad:da:f7:
                    d4:e3:56:38:b5:ed:12:4d:f4:4f:38:3a:9a:c8:f0:
                    9e:8b:b4:cf:4f:b7:df:f0:3c:7b:6c:89:a8:e0:c5:
                    ef:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:4A:E3:4E:04:A6:B8:04:C1:5B:84:6D:88:DE:53:D6:B2:F9:D6:C4
            X509v3 Authority Key Identifier:
                keyid:11:60:70:91:18:18:2E:56:4A:6D:9E:25:0F:F5:00:0E:FA:51:66:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/89718f6b-b516-43ae-b589-83a25faa30be/0/1160709118182E564A6D9E250FF5000EFA5166A5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1160709118182E564A6D9E250FF5000EFA5166A5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/89718f6b-b516-43ae-b589-83a25faa30be/0/1160709118182E564A6D9E250FF5000EFA5166A5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:53:6c:e5:ac:48:21:c6:c8:5d:09:75:08:2d:84:a5:94:cf:
         ae:cc:e4:68:51:a2:58:b2:35:17:b9:6e:fe:94:79:25:ef:5b:
         d0:fb:64:8f:16:68:2f:93:ee:d5:ca:e9:10:20:36:ee:3a:94:
         86:ca:11:83:07:fb:98:9e:eb:eb:25:90:a3:76:b0:c6:fd:a7:
         fd:87:d1:86:52:2e:9c:e3:88:78:36:8a:11:47:9c:d2:78:21:
         d8:3b:df:c7:29:2f:67:82:49:42:fa:b2:5b:2b:e6:18:aa:d7:
         ed:3e:57:88:4d:d6:79:7b:b4:7a:3c:58:c0:43:20:c1:c1:32:
         48:c9:54:db:3a:e8:93:6b:a0:8d:27:51:96:bb:d0:e4:22:ce:
         39:98:8f:81:23:6d:42:bb:fd:48:03:8c:51:f1:2e:e1:23:29:
         5f:a1:b8:5c:52:3d:19:15:ad:f3:96:c3:b3:c0:72:b5:32:90:
         55:9c:cf:17:13:b6:5c:94:ae:17:c3:a8:15:bc:a5:ac:bd:b5:
         2d:70:d7:4f:e1:bd:6b:13:20:c2:12:1a:69:76:dc:33:df:87:
         36:d2:22:b9:01:9e:dd:8c:80:7c:e7:80:96:37:75:a7:5f:95:
         f8:d1:34:d3:50:df:74:a4:88:f6:cc:fc:00:8c:bc:3f:fb:3f:
         79:eb:83:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 10:06:55 2026 by rpki-client