This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/c731fb27-6133-47ea-b7cc-2227e04ca265/0/061A692BFC16B119C1D8FDB07C81CDE0FFEA2159.mft
File:                     061A692BFC16B119C1D8FDB07C81CDE0FFEA2159.mft (raw, json)
Hash identifier:          COwsoWJRIz5XIwhFxkdwabZNseIeEn/GBjG8jIUZELU=
Subject key identifier:   99:D9:00:57:99:39:5C:EA:87:A8:B3:C1:B5:39:3E:19:33:00:B6:DE
Authority key identifier: 06:1A:69:2B:FC:16:B1:19:C1:D8:FD:B0:7C:81:CD:E0:FF:EA:21:59
Certificate issuer:       /CN=061A692BFC16B119C1D8FDB07C81CDE0FFEA2159
Certificate serial:       19CAB104211A3132ACD98AA31F0E9E5264B9286E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/061A692BFC16B119C1D8FDB07C81CDE0FFEA2159.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/c731fb27-6133-47ea-b7cc-2227e04ca265/0/061A692BFC16B119C1D8FDB07C81CDE0FFEA2159.mft
Manifest number:          02EF
Signing time:             Sat 31 Jan 2026 19:41:32 +0000
Manifest this update:     Sat 31 Jan 2026 19:36:32 +0000
Manifest next update:     Wed 04 Feb 2026 06:07:32 +0000
Files and hashes:         1: 061A692BFC16B119C1D8FDB07C81CDE0FFEA2159.crl (hash: 0ICpQPsgPzRPWUDcOZdsPUGHsAq3RHBd5JJI0oJYrbU=)
                          2: 3130332e3137372e3135332e302f32342d3234203d3e20313437313539.roa (hash: HPAI2gh/1HuKjzOsiopIeCg4F+M7JZClMF/J1ZpnE0M=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/c731fb27-6133-47ea-b7cc-2227e04ca265/0/061A692BFC16B119C1D8FDB07C81CDE0FFEA2159.crl
                          rsync://repo-rpki.idnic.net/repo/c731fb27-6133-47ea-b7cc-2227e04ca265/0/061A692BFC16B119C1D8FDB07C81CDE0FFEA2159.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/061A692BFC16B119C1D8FDB07C81CDE0FFEA2159.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 04 Feb 2026 06:07:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:ca:b1:04:21:1a:31:32:ac:d9:8a:a3:1f:0e:9e:52:64:b9:28:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=061A692BFC16B119C1D8FDB07C81CDE0FFEA2159
        Validity
            Not Before: Jan 31 19:36:32 2026 GMT
            Not After : Feb  4 06:07:32 2026 GMT
        Subject: CN=99D9005799395CEA87A8B3C1B5393E193300B6DE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:8b:fa:20:0d:20:8c:8e:13:f2:47:aa:dc:58:
                    b3:ce:0c:33:1d:4e:be:88:d5:4e:2d:88:4e:8c:a7:
                    17:68:f8:6c:dd:0f:20:20:a7:fc:ff:ec:70:10:8f:
                    81:cf:49:d1:50:5a:fb:bc:1c:a1:4b:4e:66:33:e2:
                    47:cc:e4:41:8a:15:dc:be:a6:e5:9d:84:42:d9:b3:
                    ee:87:2c:77:1e:3c:8d:b1:81:d2:7a:2b:80:42:4c:
                    fc:4c:f0:d3:21:eb:f1:f5:90:c2:8e:d5:0f:ee:0f:
                    57:5b:21:0b:80:d2:75:fe:ff:0e:67:13:ba:87:fd:
                    ba:d8:b1:68:09:ae:52:6d:fe:d6:8b:80:6a:4a:e8:
                    b0:c0:96:bd:9c:c9:45:5e:c4:aa:cb:fe:1f:10:d2:
                    71:31:f2:03:7c:b8:0d:94:35:34:de:6c:1c:49:fd:
                    76:3f:36:1f:fe:9e:90:30:c5:fb:72:5e:46:2a:ad:
                    ad:c3:91:8a:2e:ef:a5:f3:bd:8a:50:11:d9:70:36:
                    4a:eb:19:19:d5:ee:66:4b:46:ea:fb:fd:f2:5d:90:
                    5b:c1:64:fc:64:c2:14:57:e0:3f:af:23:12:51:7e:
                    f6:4c:3a:3b:a0:78:e1:33:2c:30:49:86:f6:f0:fa:
                    3a:68:fa:c8:ba:29:01:55:a3:bd:b3:e4:a2:62:04:
                    59:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:D9:00:57:99:39:5C:EA:87:A8:B3:C1:B5:39:3E:19:33:00:B6:DE
            X509v3 Authority Key Identifier:
                keyid:06:1A:69:2B:FC:16:B1:19:C1:D8:FD:B0:7C:81:CD:E0:FF:EA:21:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/c731fb27-6133-47ea-b7cc-2227e04ca265/0/061A692BFC16B119C1D8FDB07C81CDE0FFEA2159.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/061A692BFC16B119C1D8FDB07C81CDE0FFEA2159.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c731fb27-6133-47ea-b7cc-2227e04ca265/0/061A692BFC16B119C1D8FDB07C81CDE0FFEA2159.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:86:c7:28:cd:62:88:17:ce:b5:71:0b:62:45:08:b3:b0:19:
         0b:54:23:c2:fd:90:00:b6:b5:e9:6d:59:04:b6:f5:f3:f5:ae:
         56:7c:0f:54:a4:2b:50:f6:21:6c:69:4f:f8:a4:05:5f:4d:bf:
         a7:fa:24:4b:f2:22:aa:ab:21:b7:cb:67:d5:ad:e1:4c:1a:de:
         66:88:d9:e0:f9:61:8b:86:63:05:c4:c9:87:5d:d2:c4:f1:4c:
         17:a9:af:c7:37:ed:7e:7e:09:90:bc:79:0e:7d:56:32:8e:0f:
         26:09:a0:5d:e6:6c:8e:c3:2d:b5:da:10:ed:dd:53:ca:6d:07:
         d5:0f:4c:7c:4b:c7:cc:d1:bd:1f:c8:12:4f:11:e4:83:45:f1:
         de:f7:cb:2f:36:ea:77:79:2c:f5:54:c1:cb:3c:cc:3c:79:ae:
         e4:dc:77:ce:17:f9:76:c5:f2:7b:b7:3d:55:98:14:8f:f7:a4:
         1f:9a:a9:65:78:18:0d:fb:14:a0:bb:1b:8b:58:7c:18:07:d1:
         8a:8d:f6:34:3c:3b:4e:d1:9c:55:5e:35:12:28:a3:d0:68:b5:
         03:97:13:dd:09:7a:d3:43:ef:22:f3:e6:e8:24:ed:40:20:94:
         11:c0:ea:47:50:63:b8:6e:23:9d:61:4b:28:bf:34:6d:48:91:
         9b:e3:04:60
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUGcqxBCEaMTKs2YqjHw6eUmS5KG4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDYxQTY5MkJGQzE2QjExOUMxRDhGREIwN0M4MUNERTBG
RkVBMjE1OTAeFw0yNjAxMzExOTM2MzJaFw0yNjAyMDQwNjA3MzJaMDMxMTAvBgNV
BAMTKDk5RDkwMDU3OTkzOTVDRUE4N0E4QjNDMUI1MzkzRTE5MzMwMEI2REUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDqi/ogDSCMjhPyR6rcWLPODDMd
Tr6I1U4tiE6Mpxdo+GzdDyAgp/z/7HAQj4HPSdFQWvu8HKFLTmYz4kfM5EGKFdy+
puWdhELZs+6HLHcePI2xgdJ6K4BCTPxM8NMh6/H1kMKO1Q/uD1dbIQuA0nX+/w5n
E7qH/brYsWgJrlJt/taLgGpK6LDAlr2cyUVexKrL/h8Q0nEx8gN8uA2UNTTebBxJ
/XY/Nh/+npAwxftyXkYqra3DkYou76XzvYpQEdlwNkrrGRnV7mZLRur7/fJdkFvB
ZPxkwhRX4D+vIxJRfvZMOjugeOEzLDBJhvbw+jpo+si6KQFVo72z5KJiBFk9AgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUmdkAV5k5XOqHqLPBtTk+GTMAtt4wHwYDVR0j
BBgwFoAUBhppK/wWsRnB2P2wfIHN4P/qIVkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j
NzMxZmIyNy02MTMzLTQ3ZWEtYjdjYy0yMjI3ZTA0Y2EyNjUvMC8wNjFBNjkyQkZD
MTZCMTE5QzFEOEZEQjA3QzgxQ0RFMEZGRUEyMTU5LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMDYxQTY5MkJGQzE2QjExOUMxRDhGREIwN0M4MUNERTBGRkVB
MjE1OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzczMWZiMjctNjEzMy00N2VhLWI3
Y2MtMjIyN2UwNGNhMjY1LzAvMDYxQTY5MkJGQzE2QjExOUMxRDhGREIwN0M4MUNE
RTBGRkVBMjE1OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBADeGxyjNYogXzrVxC2JFCLOwGQtUI8L9kAC2
teltWQS29fP1rlZ8D1SkK1D2IWxpT/ikBV9Nv6f6JEvyIqqrIbfLZ9Wt4Uwa3maI
2eD5YYuGYwXEyYdd0sTxTBepr8c37X5+CZC8eQ59VjKODyYJoF3mbI7DLbXaEO3d
U8ptB9UPTHxLx8zRvR/IEk8R5INF8d73yy826nd5LPVUwcs8zDx5ruTcd84X+XbF
8nu3PVWYFI/3pB+aqWV4GA37FKC7G4tYfBgH0YqN9jQ8O07RnFVeNRIoo9BotQOX
E90JetND7yLz5ugk7UAglBHA6kdQY7huI51hSyi/NG1IkZvjBGA=
-----END CERTIFICATE-----
Generated at Mon Feb 2 10:06:10 2026 by rpki-client