This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/a1ca9435-7224-47a8-951b-c1b42eb0e2f7/0/316B0D7815A87F5AA07EC9E0D8FC859AC1A76794.mft
File:                     316B0D7815A87F5AA07EC9E0D8FC859AC1A76794.mft (raw, json)
Hash identifier:          f6wGL/iYu3Lgn9Q2POaJrKjjBf6VO1w6lIQFKLBoWAw=
Subject key identifier:   53:48:81:50:AA:FB:7A:D0:A7:4C:BF:30:A7:E9:D0:FE:63:0B:5E:18
Authority key identifier: 31:6B:0D:78:15:A8:7F:5A:A0:7E:C9:E0:D8:FC:85:9A:C1:A7:67:94
Certificate issuer:       /CN=316B0D7815A87F5AA07EC9E0D8FC859AC1A76794
Certificate serial:       12D88334A29E38F5A427D140A0C5444C1606FFBC
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/316B0D7815A87F5AA07EC9E0D8FC859AC1A76794.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/a1ca9435-7224-47a8-951b-c1b42eb0e2f7/0/316B0D7815A87F5AA07EC9E0D8FC859AC1A76794.mft
Manifest number:          04A9
Signing time:             Tue 20 Jan 2026 04:40:48 +0000
Manifest this update:     Tue 20 Jan 2026 04:35:48 +0000
Manifest next update:     Fri 23 Jan 2026 07:32:48 +0000
Files and hashes:         1: 3130332e3136322e36322e302f32332d3234203d3e20313431363432.roa (hash: qCAW9RGYIwqqetHxh1sU75304B2gQRTVVqzCEK/6DVI=)
                          2: 316B0D7815A87F5AA07EC9E0D8FC859AC1A76794.crl (hash: Uy/DfvL3a0g6gY7iU3XAVCC5vmcMxRyM9BfPolzZ8bw=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/a1ca9435-7224-47a8-951b-c1b42eb0e2f7/0/316B0D7815A87F5AA07EC9E0D8FC859AC1A76794.crl
                          rsync://repo-rpki.idnic.net/repo/a1ca9435-7224-47a8-951b-c1b42eb0e2f7/0/316B0D7815A87F5AA07EC9E0D8FC859AC1A76794.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/316B0D7815A87F5AA07EC9E0D8FC859AC1A76794.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 23 Jan 2026 07:32:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:d8:83:34:a2:9e:38:f5:a4:27:d1:40:a0:c5:44:4c:16:06:ff:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=316B0D7815A87F5AA07EC9E0D8FC859AC1A76794
        Validity
            Not Before: Jan 20 04:35:48 2026 GMT
            Not After : Jan 23 07:32:48 2026 GMT
        Subject: CN=53488150AAFB7AD0A74CBF30A7E9D0FE630B5E18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:6f:00:08:75:61:b6:f0:51:f8:3c:94:b7:ef:
                    1d:ba:25:e3:f7:70:54:f1:17:8e:6f:22:42:74:a9:
                    59:4f:91:e8:6c:0a:e2:18:3a:72:47:d6:a3:15:a4:
                    e9:8d:f3:0e:2d:d9:d1:1d:cc:8b:3b:a8:dc:ce:31:
                    ee:c4:6d:57:d7:51:1e:25:67:1a:cd:c3:e4:e3:55:
                    f6:b3:b3:6b:29:eb:24:3b:e4:0a:ef:4f:07:9a:b8:
                    cc:59:e9:79:62:42:9d:bb:69:ce:e8:da:60:79:5f:
                    62:1c:11:4f:4d:8e:ae:f1:84:43:e9:03:63:68:c6:
                    61:4a:63:71:9f:45:c5:87:84:13:b6:0f:f3:e8:b2:
                    6b:42:38:f6:c7:b7:cb:af:91:be:f2:af:36:44:43:
                    04:9e:0e:14:90:c2:28:d8:e8:d8:81:58:5f:66:6e:
                    46:dc:dc:2f:56:ab:fe:5c:ea:93:ef:6c:98:3a:28:
                    6b:eb:49:1e:88:4e:0c:b1:f4:15:36:35:7d:e0:da:
                    cf:2f:4e:54:82:1f:a7:3e:79:d2:ab:67:3b:a1:00:
                    78:30:a2:62:3d:d3:57:7e:ed:b4:69:e6:58:2b:d9:
                    09:16:04:2d:f0:54:45:89:e9:f7:46:3f:8f:5c:4c:
                    a5:e7:e6:cb:ee:de:a9:d8:c8:13:da:b1:03:14:d7:
                    56:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:48:81:50:AA:FB:7A:D0:A7:4C:BF:30:A7:E9:D0:FE:63:0B:5E:18
            X509v3 Authority Key Identifier:
                keyid:31:6B:0D:78:15:A8:7F:5A:A0:7E:C9:E0:D8:FC:85:9A:C1:A7:67:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/a1ca9435-7224-47a8-951b-c1b42eb0e2f7/0/316B0D7815A87F5AA07EC9E0D8FC859AC1A76794.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/316B0D7815A87F5AA07EC9E0D8FC859AC1A76794.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a1ca9435-7224-47a8-951b-c1b42eb0e2f7/0/316B0D7815A87F5AA07EC9E0D8FC859AC1A76794.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:8f:6a:6b:af:e9:37:58:27:d7:02:7e:01:ff:3f:45:02:82:
         2b:78:9e:75:19:ec:26:dc:34:06:28:2a:72:f7:7b:43:af:2d:
         0e:b1:ad:42:66:1c:87:62:af:df:bd:6b:4f:8e:46:20:2c:f2:
         c9:7b:a8:41:bc:d4:61:69:f7:18:78:97:d9:a4:2c:99:ec:0b:
         80:15:45:8a:f1:f0:e7:e5:04:19:e8:8e:98:d3:99:83:6c:98:
         e2:4a:a4:75:b8:5f:95:60:2d:43:7a:58:cd:b5:ca:c1:5c:10:
         02:46:90:a4:b6:fb:69:62:25:35:d5:a8:59:1d:60:a5:ce:d7:
         9a:1e:b2:de:0d:d4:63:84:68:33:94:c9:ac:5e:1c:29:b7:44:
         a4:70:eb:d6:9a:37:b8:78:97:71:12:19:da:c8:9d:c7:fc:0d:
         d9:f6:cf:dc:cc:e1:03:9f:0c:17:26:45:56:ed:3a:be:1d:71:
         47:7c:99:4e:4d:71:66:0e:15:71:bb:7c:f2:54:21:8e:42:3d:
         0f:23:e4:92:0f:ab:4a:1e:a5:24:d5:3f:cf:95:b6:76:32:00:
         1f:3a:45:6f:c1:8f:50:ee:81:a1:47:29:7b:6d:ed:19:6a:dd:
         03:ea:93:e9:60:1e:06:7d:35:fd:ac:08:b6:38:2b:3f:a4:6b:
         52:c0:9e:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 14:45:47 2026 by rpki-client