This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/11C9BA28534BA44999B4BA5D6B0F28E568DF6E14.mft
File:                     11C9BA28534BA44999B4BA5D6B0F28E568DF6E14.mft (raw, json)
Hash identifier:          AqnwSpcONIWjeeANFMR5qHCHKEgGHZt12u8b5GvQtMw=
Subject key identifier:   35:8A:12:38:4A:51:26:29:32:3C:0D:9C:5D:1D:80:A0:4A:4D:B3:32
Authority key identifier: 11:C9:BA:28:53:4B:A4:49:99:B4:BA:5D:6B:0F:28:E5:68:DF:6E:14
Certificate issuer:       /CN=11C9BA28534BA44999B4BA5D6B0F28E568DF6E14
Certificate serial:       44130740C487F5350FE776590CEB246AF48A44C1
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/11C9BA28534BA44999B4BA5D6B0F28E568DF6E14.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/11C9BA28534BA44999B4BA5D6B0F28E568DF6E14.mft
Manifest number:          03D5
Signing time:             Sat 31 Jan 2026 21:42:07 +0000
Manifest this update:     Sat 31 Jan 2026 21:37:07 +0000
Manifest next update:     Wed 04 Feb 2026 07:38:07 +0000
Files and hashes:         1: 3130332e32392e372e302f32342d3234203d3e203338373533.roa (hash: Cs1FhR7o/qBxHI4fNPxi4IU50g6ybDrSkP7NyP3bQNo=)
                          2: 32372e3133312e352e302f32342d3234203d3e203338373533.roa (hash: mCq1LhkCzWrOGhG5MbyRNiclzoQcIesGYCPt0y/Ulhw=)
                          3: 3131392e3131302e38302e302f32342d3234203d3e203338373533.roa (hash: 3OuFHK1vsOkJYEy4pr9r1DiDI50/ct6ZTcxzpVUtguc=)
                          4: 34352e3131352e36352e302f32342d3234203d3e203338373533.roa (hash: TVRjSFiYZ8Or+LRe+I/SCQgyNtMPNgZNB15fmofkijg=)
                          5: 323430313a616530303a313a3a2f34382d3438203d3e203338373533.roa (hash: wt7eFCCV93S85zolaoxrt66SRsXg924dAmCbnOUMNKw=)
                          6: 34352e3131352e36362e302f32342d3234203d3e203338373533.roa (hash: FpJa+VeYUkTfo5TvgV8I+XtkFNCxtXCWMC2BHQGnMkE=)
                          7: 3130332e31362e3131322e302f32322d3234203d3e20313331373730.roa (hash: Dob9ZAlDUTUnctN4VlTyrKO30gGECPv6HuzZafwSF6g=)
                          8: 323430313a616530303a3130303a3a2f34382d3438203d3e203338373533.roa (hash: SHl2KuSRWHh3Qm2EDWysD7DFG5RufagW3Es1/BAOICY=)
                          9: 32372e3133312e322e302f32332d3233203d3e203338373533.roa (hash: HrCJcI2x/VbUs3+1x2S4nRJKMTf6F0cTaPvOvUGMmVI=)
                          10: 32372e3133312e362e302f32332d3234203d3e203338373533.roa (hash: dknIFheGMMEZ8EU/p94uWnfgerda5Yfc59CEmttZ7uM=)
                          11: 34352e3131352e36372e302f32342d3234203d3e203338373533.roa (hash: c7lx5TwCLEZfRzkDL4S2aG940KIen5Jt1vFEdskw4Kc=)
                          12: 32372e3133312e332e302f32342d3234203d3e203338373533.roa (hash: q3Y4BrPPFOsl+KYWoz07UjToabUEbmm1VTAemn+qiSQ=)
                          13: 323430313a616530303a616530303a3a2f34382d3438203d3e203338373533.roa (hash: WRq926yt9quLkpimzppD9g7PHu8R08Uc+vlpwGqzs4s=)
                          14: 3130332e32392e362e302f32332d3233203d3e203338373533.roa (hash: GivBmEzFmlUVTlJH3GWm5oKMjzGT0BKQ6tbghEu1lTg=)
                          15: 32372e3133312e302e302f32342d3234203d3e203338373533.roa (hash: rwexCzY/uDomcp/J/MkA/1gBpeIeGe5xmjpv6fRZzXU=)
                          16: 3131392e3131302e38352e302f32342d3234203d3e203338373533.roa (hash: tGhUDpPitjiDOYZFb+/EhIpsRqgsxM9yV4s5hfWWwfU=)
                          17: 11C9BA28534BA44999B4BA5D6B0F28E568DF6E14.crl (hash: 49ZDIZIrKpeyijWiKUOTNk+3TY/Ff6gNaTniU9uESXI=)
                          18: 32372e3133312e312e302f32342d3234203d3e203338373533.roa (hash: O16WfTE8MntMc3oInkht1ztDcjpW1Fa+OtvQua35Qz0=)
                          19: 3131392e3131302e38342e302f32332d3233203d3e203338373533.roa (hash: gUsXuOIZb413HlDq1j7jqcAMir0c8bWJTUZJhrjZeqg=)
                          20: 3131392e3131302e38332e302f32342d3234203d3e203338373533.roa (hash: w93kG5sb7gvijp/vgs9vEf25oeJx1faj91WKNlL4/BM=)
                          21: 3130332e32392e342e302f32342d3234203d3e203338373533.roa (hash: N+iF+GQSxaVEL0rnsleH957ue+LrcgSG1//ZspjzW7Q=)
                          22: 3131392e3131302e38322e302f32342d3234203d3e203338373533.roa (hash: D2sNCbIXN+cjPjPImyT/4ptF48HW4pRKcGe6Syc6luA=)
                          23: 323430313a616530303a3a2f34382d3438203d3e203338373533.roa (hash: lCkk60deKpIyk2+URSWpsIxSx+TemC7/bF8ihLvR4/M=)
                          24: 3131392e3131302e38362e302f32342d3234203d3e203338373533.roa (hash: yqUv0AOhCRZbCK6iB07qF8S+vPKTTJ32MVzsXvnxnlI=)
                          25: 3130332e32392e352e302f32342d3234203d3e203338373533.roa (hash: Gzil5h/RWqBAFpXoAA8mS6nklC4iLaAtX8kVa/PhqPs=)
                          26: 3131392e3131302e38302e302f32332d3233203d3e203338373533.roa (hash: sF2pvtMqQhexo25+okDiGN+Eo4amfx8U7xhODcO4dOk=)
                          27: 323430313a616530303a3a2f33322d3438203d3e203338373533.roa (hash: r2tM11CkA2+KnMeY8FHfYzCrXaFuevx9K115bLTbcyE=)
                          28: 3130332e32392e342e302f32332d3233203d3e203338373533.roa (hash: ZkhYkzVtq81XABJqvLnT7l2LGdKJfgSAWlXb3DM5Me8=)
                          29: 34352e3131352e36342e302f32342d3234203d3e203338373533.roa (hash: r/qs8zANRWASo5Sg3aTAUn0WPEM4fto0Wfw0bhBdkSE=)
                          30: 32372e3133312e342e302f32332d3233203d3e203338373533.roa (hash: 5fNTIg7YTE2LAubtcnkV2bzMFwDB3tfkuzlP7/lDyWs=)
                          31: 34352e3131352e36342e302f32332d3233203d3e203338373533.roa (hash: yYnHwJTysEq/R+AHpU1RZ6TbqPOKGDBM0+AwxU3rM4s=)
                          32: 3131392e3131302e38322e302f32332d3233203d3e203338373533.roa (hash: x/q4U6FBU994kF8r7Nhz1Cck9rBDgZJ3pJ5+3sY2OUM=)
                          33: 32372e3133312e342e302f32342d3234203d3e203338373533.roa (hash: yK9js0Za9g0CYaU92xRmsaC/y3JiDfzVc1kxsipt5uo=)
                          34: 3131392e3131302e38372e302f32342d3234203d3e203338373533.roa (hash: JY1xg08noXq/UjBIy0Ia4KN/OxupR8wDlqiLTAIRtk4=)
                          35: 3131392e3131302e38342e302f32342d3234203d3e203338373533.roa (hash: tZ1ODq/9H60oPGvN0O/nHKWlK/Im1KiWc/eaMemuuQw=)
                          36: 34352e3131352e36362e302f32332d3233203d3e203338373533.roa (hash: 9++l08KZW1/42zUX2Ep2yuwdvdDkJ0rNmSYCMZ5xoKQ=)
                          37: 32372e3133312e372e302f32342d3234203d3e203338373533.roa (hash: sTHfP5O3S2KxBmau09iW9GDCei/fHQPBdaVSshl5ezg=)
                          38: 323430313a616530303a383a3a2f34382d3438203d3e203338373533.roa (hash: PolrkWULjB2Ejpi+c92er3yQ/SMsCIVyscFF78+jHLI=)
                          39: 32372e3133312e302e302f32332d3233203d3e203338373533.roa (hash: W+haTzNqgvNz2qrA/eoEh4D1XIw+kOsH/6ZeB4i/vYc=)
                          40: 32372e3133312e322e302f32342d3234203d3e203338373533.roa (hash: wshumI9mgN3UjxRKMrKs4BHGeNuO8tLyPjhhR2o9cBA=)
                          41: 3131392e3131302e38362e302f32332d3233203d3e203338373533.roa (hash: X03M+5Z5sE+Qy+6uY+tE6Ai0XMCMqH2tyQTmAgoRdHs=)
                          42: 3131392e3131302e38312e302f32342d3234203d3e203338373533.roa (hash: X94iHmC78hqkg+a5g/HydKqZH7tnCEVEqG54QZAuC80=)
                          43: 3130332e32392e362e302f32342d3234203d3e203338373533.roa (hash: Hy5R4p5o6et8f62BtbDCXhCSEFq0mCwU4waJVDpWT2c=)
                          44: 323430313a616530303a3130313a3a2f34382d3438203d3e203338373533.roa (hash: 4oCUSPhSvQ/qW/xfqhJL3UjfHVQg/H0a7iGQXOIO2Vo=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/11C9BA28534BA44999B4BA5D6B0F28E568DF6E14.crl
                          rsync://repo-rpki.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/11C9BA28534BA44999B4BA5D6B0F28E568DF6E14.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/11C9BA28534BA44999B4BA5D6B0F28E568DF6E14.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 04 Feb 2026 07:38:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:13:07:40:c4:87:f5:35:0f:e7:76:59:0c:eb:24:6a:f4:8a:44:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11C9BA28534BA44999B4BA5D6B0F28E568DF6E14
        Validity
            Not Before: Jan 31 21:37:07 2026 GMT
            Not After : Feb  4 07:38:07 2026 GMT
        Subject: CN=358A12384A512629323C0D9C5D1D80A04A4DB332
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:90:2b:78:8c:9d:5e:bd:6d:52:31:ec:87:4b:
                    7d:a5:bb:e9:1e:ac:30:92:3d:a6:89:02:83:47:86:
                    7a:23:df:02:e5:d1:3a:d8:64:1f:85:65:e0:a1:c0:
                    43:3e:9e:5f:41:ed:50:c1:bf:d3:50:35:62:a3:de:
                    84:97:80:aa:26:8c:21:71:55:9a:a9:6a:8f:75:db:
                    52:a6:53:33:2c:6d:2d:af:36:bd:92:31:e3:06:ad:
                    88:0c:77:60:55:a0:fc:d2:a6:4f:bd:76:45:70:ba:
                    65:aa:49:7c:b0:79:70:b8:c4:f1:dd:d5:cb:07:d8:
                    e7:5c:86:c6:30:fb:02:60:02:0d:98:26:77:cb:cb:
                    b2:90:54:d0:f0:b1:0c:90:8f:07:91:2f:a5:d0:eb:
                    75:22:a8:e6:8c:1c:57:d1:17:92:40:64:55:05:f4:
                    5f:33:a6:d5:02:c3:65:b3:02:0f:d3:b9:27:28:b5:
                    ce:5a:cd:77:cf:2d:aa:85:b6:64:5b:08:de:9f:cb:
                    b3:ac:e1:c8:1c:2e:d7:86:4e:92:4f:57:31:3b:aa:
                    67:6f:9e:c3:78:00:4b:cd:07:fa:74:46:34:47:44:
                    0a:df:09:c8:e1:fe:4b:dc:2a:34:33:e3:eb:2c:8b:
                    e9:a1:b0:80:55:15:b5:db:78:fb:52:0a:81:43:41:
                    2e:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:8A:12:38:4A:51:26:29:32:3C:0D:9C:5D:1D:80:A0:4A:4D:B3:32
            X509v3 Authority Key Identifier:
                keyid:11:C9:BA:28:53:4B:A4:49:99:B4:BA:5D:6B:0F:28:E5:68:DF:6E:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/11C9BA28534BA44999B4BA5D6B0F28E568DF6E14.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/11C9BA28534BA44999B4BA5D6B0F28E568DF6E14.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/11C9BA28534BA44999B4BA5D6B0F28E568DF6E14.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:df:5b:52:e9:45:d6:a7:7b:5e:02:9c:09:b1:e0:47:66:3c:
         a1:54:76:ff:a8:7f:fc:f3:5e:18:d4:b1:fa:70:6e:0f:0d:18:
         98:3a:af:1f:6b:81:ec:4f:a3:97:6c:60:be:fa:dd:46:6c:50:
         e6:fe:48:3c:47:44:a2:02:41:05:79:31:f1:ff:9d:c3:20:4b:
         ef:b9:42:56:ee:4b:fb:42:d3:90:44:60:c4:e9:3e:06:5c:5d:
         0c:fc:e6:65:dc:78:27:70:79:f5:57:c6:80:66:b3:f2:e1:83:
         16:76:f4:c5:52:4c:a5:04:97:ac:94:32:2e:cb:4c:4c:1e:be:
         14:6e:65:47:3d:9e:59:13:ff:bb:64:b3:48:02:9e:aa:f4:fe:
         cf:ea:5f:80:db:7f:d2:fc:0e:04:3e:71:ba:19:b0:07:92:9d:
         1e:6a:25:b2:df:65:89:e0:74:d1:f5:79:33:ba:1a:4d:bf:8e:
         97:74:42:3f:e8:91:f7:af:f3:f0:7a:82:ec:7d:85:b4:fd:59:
         2b:b8:ea:65:10:6f:52:4d:cc:3e:6c:be:e3:cd:78:2c:e6:32:
         b7:46:e8:c8:04:c3:04:52:ad:4c:15:f6:66:e3:b7:68:c5:f2:
         ac:81:8b:fe:13:a6:3b:7d:a8:6f:c1:fc:6d:b7:cf:29:ac:ff:
         41:15:01:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 12:50:39 2026 by rpki-client