This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/ca96f458-ce5e-41a2-a232-9964f4988a06/0/0D800491C03BFB579D58FFC7A24CAA8710845A9C.mft
File:                     0D800491C03BFB579D58FFC7A24CAA8710845A9C.mft (raw, json)
Hash identifier:          3qxhX94z2Crn3y1jpPmPzw4msNX429hFq5jvu9VJDA0=
Subject key identifier:   69:CF:96:37:FD:F6:90:80:A3:3D:0E:F0:F2:0A:E0:F9:20:26:33:FE
Authority key identifier: 0D:80:04:91:C0:3B:FB:57:9D:58:FF:C7:A2:4C:AA:87:10:84:5A:9C
Certificate issuer:       /CN=0D800491C03BFB579D58FFC7A24CAA8710845A9C
Certificate serial:       182E4C123FD9E4604922511BDD788A6D74E7DB5C
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0D800491C03BFB579D58FFC7A24CAA8710845A9C.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/ca96f458-ce5e-41a2-a232-9964f4988a06/0/0D800491C03BFB579D58FFC7A24CAA8710845A9C.mft
Manifest number:          016E
Signing time:             Sat 31 Jan 2026 13:21:32 +0000
Manifest this update:     Sat 31 Jan 2026 13:16:32 +0000
Manifest next update:     Tue 03 Feb 2026 20:28:32 +0000
Files and hashes:         1: 3130332e3134342e3132392e302f32342d3234203d3e20313339343333.roa (hash: vmmdKTzGdj+WW7oR5Y7BlF5cHcjcyn2ZeY0vBD9tiWM=)
                          2: 3130332e3134342e3132382e302f32332d3233203d3e20313339343333.roa (hash: +5s73n1GRDKOs1PLsu8AmlmjjmE1TE3hQKNaKdkD1e0=)
                          3: 3130332e3134342e3132382e302f32342d3234203d3e20313339343333.roa (hash: DWfEMEPWxsUozNiwbgr8ihU7QhgizyAKxGEXUL32Nzc=)
                          4: 0D800491C03BFB579D58FFC7A24CAA8710845A9C.crl (hash: ksBkaeR+VLmLLJ7EZ5pc4APVJ9MfM9BB6gDjZrPDsEY=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/ca96f458-ce5e-41a2-a232-9964f4988a06/0/0D800491C03BFB579D58FFC7A24CAA8710845A9C.crl
                          rsync://repo-rpki.idnic.net/repo/ca96f458-ce5e-41a2-a232-9964f4988a06/0/0D800491C03BFB579D58FFC7A24CAA8710845A9C.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0D800491C03BFB579D58FFC7A24CAA8710845A9C.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 03 Feb 2026 20:28:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:2e:4c:12:3f:d9:e4:60:49:22:51:1b:dd:78:8a:6d:74:e7:db:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D800491C03BFB579D58FFC7A24CAA8710845A9C
        Validity
            Not Before: Jan 31 13:16:32 2026 GMT
            Not After : Feb  3 20:28:32 2026 GMT
        Subject: CN=69CF9637FDF69080A33D0EF0F20AE0F9202633FE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:e7:f8:20:bc:f6:5b:0e:d6:89:e6:15:f3:99:
                    37:d7:39:30:ef:ff:5b:e7:77:eb:b3:f8:9c:20:8f:
                    28:f9:5b:85:f1:35:0c:74:90:e4:da:6c:0e:a8:6a:
                    4e:95:1d:82:22:3c:0e:55:cc:52:1e:48:fb:6e:01:
                    b8:83:f5:cf:86:e3:7e:04:1e:36:24:91:58:69:84:
                    ef:07:0f:fb:44:29:05:d0:80:e2:fb:a1:0a:44:5c:
                    a9:56:ca:85:f8:20:a0:28:18:d8:b6:69:58:13:8e:
                    b0:ff:c7:05:55:6e:d4:7d:3e:80:d7:e2:8d:2b:9f:
                    0a:97:5e:24:5b:93:73:24:27:f3:30:75:d4:e6:27:
                    7d:60:ca:40:fd:1b:a7:9e:5e:9a:23:b7:d5:a1:c2:
                    2a:56:c8:9b:4f:42:58:48:8c:10:8f:66:dd:40:79:
                    17:81:76:ad:41:6d:6e:d8:e3:b9:fd:6d:46:f2:6a:
                    56:f3:86:8c:27:46:3b:84:72:4e:80:2c:b0:c7:93:
                    4b:37:75:94:a8:c6:03:d4:09:ec:3f:99:ca:03:f4:
                    7b:e4:00:60:2a:9e:e6:46:f2:31:d6:bf:f5:a1:55:
                    16:07:33:8b:61:b5:b3:0e:c5:3f:df:a6:ff:6f:38:
                    7a:54:2e:74:df:dd:07:65:78:0f:60:96:9b:69:70:
                    64:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:CF:96:37:FD:F6:90:80:A3:3D:0E:F0:F2:0A:E0:F9:20:26:33:FE
            X509v3 Authority Key Identifier:
                keyid:0D:80:04:91:C0:3B:FB:57:9D:58:FF:C7:A2:4C:AA:87:10:84:5A:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/ca96f458-ce5e-41a2-a232-9964f4988a06/0/0D800491C03BFB579D58FFC7A24CAA8710845A9C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0D800491C03BFB579D58FFC7A24CAA8710845A9C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ca96f458-ce5e-41a2-a232-9964f4988a06/0/0D800491C03BFB579D58FFC7A24CAA8710845A9C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:a5:20:00:b9:2b:01:5b:bb:35:ce:40:98:e6:8f:5f:01:f8:
         01:f7:ab:86:bb:a9:ea:9a:c7:93:1d:5f:a4:ab:0d:e8:7b:bf:
         16:fe:14:cb:5c:36:ff:50:7b:63:b7:00:95:7d:87:44:82:fc:
         bd:4d:3b:e8:e4:9c:d2:38:43:55:6a:27:2f:53:8d:b3:2d:f4:
         84:da:d9:15:cb:84:03:41:50:31:8a:84:b0:1a:bb:6a:f6:73:
         27:37:b8:f1:60:6c:c8:7a:3a:6e:ac:91:9e:18:25:dd:b2:e8:
         28:09:bf:7d:2f:8e:e8:5d:53:2c:ac:ac:9b:c2:d6:db:c7:16:
         34:7e:75:ff:58:5f:7a:d6:c5:65:41:fa:ff:b6:3f:c1:f5:f4:
         c2:6c:e4:f3:22:88:a3:91:36:b5:3d:69:6a:46:22:e1:04:0d:
         e0:73:30:1e:e3:83:60:7e:f3:9c:d2:af:d1:8e:54:a4:63:e8:
         dd:d3:97:fb:ef:db:7c:b5:7b:2b:35:aa:70:de:ad:6c:f7:12:
         e2:19:ff:5c:84:db:b1:b8:e5:72:cf:ad:d2:08:57:63:64:e5:
         d0:76:c0:7a:f5:4d:12:a2:62:e9:ea:7a:3d:f1:84:4f:48:9a:
         fa:93:dc:19:57:fb:f8:0b:2b:53:b7:0d:76:d9:98:69:f9:69:
         9c:9b:f6:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 15:58:43 2026 by rpki-client