This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/dac801a0-7912-4b01-a281-88024624a2d4/0/196DBD061B4577EF848600B17A266D689F5A70B5.mft
File:                     196DBD061B4577EF848600B17A266D689F5A70B5.mft (raw, json)
Hash identifier:          GvYNVyLeFZTsMNXho63R4O3ZA3Pd+BGcE9a7nQe7l28=
Subject key identifier:   01:D2:E4:6A:38:7E:64:C6:8A:D6:03:30:16:BC:03:3B:4C:49:C5:5D
Authority key identifier: 19:6D:BD:06:1B:45:77:EF:84:86:00:B1:7A:26:6D:68:9F:5A:70:B5
Certificate issuer:       /CN=196DBD061B4577EF848600B17A266D689F5A70B5
Certificate serial:       32495BD73CE0AD321DF7D61BFE36E210D4F1A479
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/196DBD061B4577EF848600B17A266D689F5A70B5.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/dac801a0-7912-4b01-a281-88024624a2d4/0/196DBD061B4577EF848600B17A266D689F5A70B5.mft
Manifest number:          0234
Signing time:             Sat 31 Jan 2026 03:51:38 +0000
Manifest this update:     Sat 31 Jan 2026 03:46:38 +0000
Manifest next update:     Tue 03 Feb 2026 13:29:38 +0000
Files and hashes:         1: 3130332e3138302e3139382e302f32342d3234203d3e20313439333638.roa (hash: 5lY4f9V94dB+03La5b3P91qI5RBjwa5CSpgEJJRGvxc=)
                          2: 196DBD061B4577EF848600B17A266D689F5A70B5.crl (hash: anT0g8JzgzuYOraiKb6KC4X4939aCk3+IEA/GT/voO8=)
                          3: 3130332e3138302e3139382e302f32332d3234203d3e20313439333638.roa (hash: EDPK0eOxqBPQlG42EiZMre0RjhVvjul6NQmz0+X17bE=)
                          4: 3130332e3138302e3139392e302f32342d3234203d3e20313439333638.roa (hash: 34/R8QTjCFJsUx7prL6eX2eJ9Y/fnEucfem7nusLMB8=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/dac801a0-7912-4b01-a281-88024624a2d4/0/196DBD061B4577EF848600B17A266D689F5A70B5.crl
                          rsync://repo-rpki.idnic.net/repo/dac801a0-7912-4b01-a281-88024624a2d4/0/196DBD061B4577EF848600B17A266D689F5A70B5.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/196DBD061B4577EF848600B17A266D689F5A70B5.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 03 Feb 2026 13:29:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:49:5b:d7:3c:e0:ad:32:1d:f7:d6:1b:fe:36:e2:10:d4:f1:a4:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=196DBD061B4577EF848600B17A266D689F5A70B5
        Validity
            Not Before: Jan 31 03:46:38 2026 GMT
            Not After : Feb  3 13:29:38 2026 GMT
        Subject: CN=01D2E46A387E64C68AD6033016BC033B4C49C55D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:4e:b5:f6:e1:02:e2:dc:1f:ee:05:af:a9:92:
                    7f:1d:57:2e:42:cc:67:22:18:44:80:0a:cb:7a:85:
                    2b:93:95:c8:c0:d3:c9:13:71:6f:e4:78:1b:8e:02:
                    08:fd:8f:5e:1b:95:f2:31:97:5b:6b:3e:8c:0c:62:
                    bd:0e:49:34:7c:58:77:fb:80:04:a0:53:f4:4d:a5:
                    eb:2e:27:53:8f:bc:cd:64:44:d3:d8:36:2c:62:bf:
                    7a:6b:37:fa:f7:d0:8c:5c:5e:fa:ae:1a:1d:fa:96:
                    36:9e:38:83:9d:35:d5:f0:17:99:1d:82:60:c5:80:
                    be:5b:9c:39:97:4b:37:72:b0:db:66:6b:50:03:b1:
                    10:47:db:b1:86:87:93:db:67:a5:f9:2c:59:41:98:
                    07:94:6f:01:1e:bb:9b:58:30:65:ce:16:84:e0:bd:
                    89:59:19:11:f3:00:d7:86:0e:ee:e4:eb:76:a1:77:
                    64:97:42:5b:16:54:b0:69:d0:83:23:e7:33:7e:c2:
                    c7:ba:66:f1:33:d3:fc:2e:1b:7f:57:29:c2:cf:53:
                    a1:f5:5e:ba:4e:bd:84:9b:e6:bf:c6:bf:be:ee:87:
                    2c:02:90:8d:46:95:9f:85:a0:e4:4b:b7:4c:ef:47:
                    6a:86:02:8c:10:d5:e6:ca:f3:07:7b:fa:5e:85:fe:
                    d7:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:D2:E4:6A:38:7E:64:C6:8A:D6:03:30:16:BC:03:3B:4C:49:C5:5D
            X509v3 Authority Key Identifier:
                keyid:19:6D:BD:06:1B:45:77:EF:84:86:00:B1:7A:26:6D:68:9F:5A:70:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/dac801a0-7912-4b01-a281-88024624a2d4/0/196DBD061B4577EF848600B17A266D689F5A70B5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/196DBD061B4577EF848600B17A266D689F5A70B5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dac801a0-7912-4b01-a281-88024624a2d4/0/196DBD061B4577EF848600B17A266D689F5A70B5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:e4:57:ff:9f:92:fe:82:d3:4d:bb:f5:1b:64:a9:96:3d:9a:
         a9:97:e7:04:23:3c:65:55:a7:b6:77:dd:5f:67:44:01:47:f0:
         33:24:46:96:88:be:15:60:fb:4b:7f:8c:28:d4:e2:41:cb:50:
         55:1a:3e:64:dc:04:7c:c9:e2:19:8f:4f:1e:fc:d4:9a:63:ba:
         8f:98:4d:77:ae:83:47:2d:06:b7:57:fb:d0:8d:a6:8f:9c:03:
         75:84:7f:11:ab:47:3f:8b:f0:0d:34:e5:96:1e:24:f9:5c:b2:
         4a:f4:f1:bf:4e:f9:84:1e:7a:4f:c1:22:e7:85:d5:76:cc:43:
         c1:4d:bd:a5:01:92:ad:2f:95:dd:a2:c3:0f:6b:75:fd:c0:77:
         74:eb:3f:e0:82:8a:c8:f2:03:cd:e4:11:af:b3:25:ce:36:b5:
         b8:a4:a6:ac:5c:4e:c6:e0:d8:5e:cf:52:6b:c0:28:13:cc:e6:
         dc:1c:df:73:da:50:74:1a:7d:70:f6:64:5c:54:73:10:4b:2d:
         4c:06:11:16:38:9c:cd:0e:fa:ba:ad:e6:44:4a:d7:92:44:4c:
         2b:8f:48:a7:cd:13:22:0d:0c:cf:85:24:36:10:80:3a:9f:0c:
         5c:8c:56:7a:be:b4:3c:5e:d0:24:46:ff:80:bd:5c:ce:cb:6d:
         a4:c2:8b:ee
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUMklb1zzgrTId99Yb/jbiENTxpHkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTk2REJEMDYxQjQ1NzdFRjg0ODYwMEIxN0EyNjZENjg5
RjVBNzBCNTAeFw0yNjAxMzEwMzQ2MzhaFw0yNjAyMDMxMzI5MzhaMDMxMTAvBgNV
BAMTKDAxRDJFNDZBMzg3RTY0QzY4QUQ2MDMzMDE2QkMwMzNCNEM0OUM1NUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+TrX24QLi3B/uBa+pkn8dVy5C
zGciGESACst6hSuTlcjA08kTcW/keBuOAgj9j14blfIxl1trPowMYr0OSTR8WHf7
gASgU/RNpesuJ1OPvM1kRNPYNixiv3prN/r30IxcXvquGh36ljaeOIOdNdXwF5kd
gmDFgL5bnDmXSzdysNtma1ADsRBH27GGh5PbZ6X5LFlBmAeUbwEeu5tYMGXOFoTg
vYlZGRHzANeGDu7k63ahd2SXQlsWVLBp0IMj5zN+wse6ZvEz0/wuG39XKcLPU6H1
XrpOvYSb5r/Gv77uhywCkI1GlZ+FoORLt0zvR2qGAowQ1ebK8wd7+l6F/tczAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUAdLkajh+ZMaK1gMwFrwDO0xJxV0wHwYDVR0j
BBgwFoAUGW29BhtFd++EhgCxeiZtaJ9acLUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k
YWM4MDFhMC03OTEyLTRiMDEtYTI4MS04ODAyNDYyNGEyZDQvMC8xOTZEQkQwNjFC
NDU3N0VGODQ4NjAwQjE3QTI2NkQ2ODlGNUE3MEI1LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMTk2REJEMDYxQjQ1NzdFRjg0ODYwMEIxN0EyNjZENjg5RjVB
NzBCNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGFjODAxYTAtNzkxMi00YjAxLWEy
ODEtODgwMjQ2MjRhMmQ0LzAvMTk2REJEMDYxQjQ1NzdFRjg0ODYwMEIxN0EyNjZE
Njg5RjVBNzBCNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAAPkV/+fkv6C00279RtkqZY9mqmX5wQjPGVV
p7Z33V9nRAFH8DMkRpaIvhVg+0t/jCjU4kHLUFUaPmTcBHzJ4hmPTx781Jpjuo+Y
TXeug0ctBrdX+9CNpo+cA3WEfxGrRz+L8A005ZYeJPlcskr08b9O+YQeek/BIueF
1XbMQ8FNvaUBkq0vld2iww9rdf3Ad3TrP+CCisjyA83kEa+zJc42tbikpqxcTsbg
2F7PUmvAKBPM5twc33PaUHQafXD2ZFxUcxBLLUwGERY4nM0O+rqt5kRK15JETCuP
SKfNEyINDM+FJDYQgDqfDFyMVnq+tDxe0CRG/4C9XM7LbaTCi+4=
-----END CERTIFICATE-----
Generated at Mon Feb 2 09:45:00 2026 by rpki-client