This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/316aa54f-7158-43af-b336-be4714816fad/0/6A9DC566C8CBF1D7CEB17FC9917ACD582E5C0A95.mft
File:                     6A9DC566C8CBF1D7CEB17FC9917ACD582E5C0A95.mft (raw, json)
Hash identifier:          StQUZdo2vzcSj67Ov9G6UAROdXiXKQFAWBvAM+kl2L0=
Subject key identifier:   0F:B2:20:F8:37:89:5F:57:F1:4E:CC:4C:0B:0A:E8:70:65:45:99:9A
Authority key identifier: 6A:9D:C5:66:C8:CB:F1:D7:CE:B1:7F:C9:91:7A:CD:58:2E:5C:0A:95
Certificate issuer:       /CN=6A9DC566C8CBF1D7CEB17FC9917ACD582E5C0A95
Certificate serial:       4D28A3305C21EA4A061AD61855E4B594448B766F
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6A9DC566C8CBF1D7CEB17FC9917ACD582E5C0A95.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/316aa54f-7158-43af-b336-be4714816fad/0/6A9DC566C8CBF1D7CEB17FC9917ACD582E5C0A95.mft
Manifest number:          053D
Signing time:             Thu 08 Jan 2026 06:32:15 +0000
Manifest this update:     Thu 08 Jan 2026 06:27:15 +0000
Manifest next update:     Sun 11 Jan 2026 13:50:15 +0000
Files and hashes:         1: 3130332e3130352e3235322e302f32322d3234203d3e20313336383835.roa (hash: 78aRtA03tdL6oV14dW3aN00qRLjvVDFQ6jhLRcjVdxc=)
                          2: 6A9DC566C8CBF1D7CEB17FC9917ACD582E5C0A95.crl (hash: 77gqK4AVhTy4T3nWI/eLshitxXY7Ij6vKxmGZH5XjDI=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/316aa54f-7158-43af-b336-be4714816fad/0/6A9DC566C8CBF1D7CEB17FC9917ACD582E5C0A95.crl
                          rsync://repo-rpki.idnic.net/repo/316aa54f-7158-43af-b336-be4714816fad/0/6A9DC566C8CBF1D7CEB17FC9917ACD582E5C0A95.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6A9DC566C8CBF1D7CEB17FC9917ACD582E5C0A95.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 11 Jan 2026 04:51:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:28:a3:30:5c:21:ea:4a:06:1a:d6:18:55:e4:b5:94:44:8b:76:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6A9DC566C8CBF1D7CEB17FC9917ACD582E5C0A95
        Validity
            Not Before: Jan  8 06:27:15 2026 GMT
            Not After : Jan 11 13:50:15 2026 GMT
        Subject: CN=0FB220F837895F57F14ECC4C0B0AE8706545999A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:88:83:f4:db:b7:dd:e0:0f:fa:ee:27:cd:91:
                    c0:98:a6:7d:de:ae:1b:c9:70:8f:39:0b:a4:2e:a5:
                    d0:cc:c4:44:02:8d:d5:58:f7:71:cc:ca:45:a2:77:
                    9e:f7:d9:b9:da:87:df:01:df:a8:04:54:57:03:5b:
                    85:2c:82:35:d4:65:7a:e7:7d:62:69:fc:e7:08:45:
                    75:1a:48:af:e0:13:ef:2c:af:8b:bc:85:45:b1:b5:
                    af:8a:09:2b:cd:ae:43:a1:df:13:c9:14:cc:1d:69:
                    93:92:6f:8e:9e:71:f0:e1:2d:ea:64:1d:c1:72:91:
                    7c:d9:9d:f6:a4:86:3b:6e:5c:fc:ee:8e:6a:87:35:
                    c8:93:42:d6:8e:97:e3:a5:13:b4:d5:92:6a:b9:2d:
                    f6:97:6c:0a:86:91:7d:d0:ef:dd:64:d9:fe:7f:71:
                    ae:09:a0:e8:b5:66:ac:b4:dd:ab:77:67:0a:aa:be:
                    7a:95:91:00:8f:55:fa:dd:bb:53:a6:dc:b4:d2:30:
                    2e:66:bf:79:62:23:31:58:9b:65:66:f3:4c:32:15:
                    ac:5f:4c:3f:05:00:ad:58:96:71:81:2f:54:c1:62:
                    8f:7c:4f:dd:0c:18:a4:7e:dd:24:b3:ed:0f:53:6d:
                    d8:f8:30:8e:c3:a1:08:8a:7e:95:79:fb:17:4c:aa:
                    db:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:B2:20:F8:37:89:5F:57:F1:4E:CC:4C:0B:0A:E8:70:65:45:99:9A
            X509v3 Authority Key Identifier:
                keyid:6A:9D:C5:66:C8:CB:F1:D7:CE:B1:7F:C9:91:7A:CD:58:2E:5C:0A:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/316aa54f-7158-43af-b336-be4714816fad/0/6A9DC566C8CBF1D7CEB17FC9917ACD582E5C0A95.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6A9DC566C8CBF1D7CEB17FC9917ACD582E5C0A95.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/316aa54f-7158-43af-b336-be4714816fad/0/6A9DC566C8CBF1D7CEB17FC9917ACD582E5C0A95.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:97:61:4d:75:7b:72:69:de:27:9a:48:60:d9:03:56:8c:0f:
         7c:57:79:70:ae:29:30:da:44:6d:e7:b3:42:47:91:0f:2a:10:
         2c:c4:a7:35:f4:49:fa:d4:93:26:35:6b:25:1c:1e:2a:09:31:
         a9:de:9e:0b:45:dc:d3:b7:d1:17:bf:b5:fa:f8:cc:7c:34:88:
         a1:4f:a9:7d:7a:d0:db:48:d6:e8:59:dc:af:92:a4:c4:fd:5e:
         0a:ee:7b:f1:fd:82:19:8b:09:b2:7b:ae:a0:92:1b:40:bc:9c:
         61:07:29:17:f2:e5:52:9d:43:14:ac:2d:47:0e:d6:84:6f:bb:
         d5:0b:17:e1:06:ef:6a:b7:0c:f8:4e:32:ea:58:b8:6c:b1:ba:
         71:34:92:5b:3c:6a:4c:0d:b4:c7:10:03:26:4a:56:14:e3:27:
         72:d1:e6:03:de:e1:a5:bd:38:47:bf:e1:86:cc:2b:94:32:b6:
         54:1f:04:2a:47:ba:67:28:12:1c:fe:e7:2c:0e:7c:d9:7e:9b:
         ea:ad:36:49:5a:46:09:6a:ab:fc:17:9f:e0:9d:24:9e:66:84:
         17:2c:92:15:bc:72:bd:60:2f:29:fd:21:53:20:96:e5:af:10:
         b8:e1:89:32:dc:13:3d:79:b8:49:64:ca:48:41:ee:e1:54:ff:
         ad:11:f6:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 8 17:27:34 2026 by rpki-client