This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/3305177a-a500-4996-b3ff-70c144edfece/0/95FC6072A4A690A61A0B5F14B36882B43DA2F098.mft
File:                     95FC6072A4A690A61A0B5F14B36882B43DA2F098.mft (raw, json)
Hash identifier:          mzBRNeFYQ5Xqq/5ZcuNTXJM+2jz4gdVbeV8DGqA3CHg=
Subject key identifier:   1C:F4:96:69:BB:24:C5:28:40:AB:AE:D7:CA:64:47:3D:88:12:A3:28
Authority key identifier: 95:FC:60:72:A4:A6:90:A6:1A:0B:5F:14:B3:68:82:B4:3D:A2:F0:98
Certificate issuer:       /CN=95FC6072A4A690A61A0B5F14B36882B43DA2F098
Certificate serial:       476B7370095CD29DC7D0A4284279170A66655690
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/95FC6072A4A690A61A0B5F14B36882B43DA2F098.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3305177a-a500-4996-b3ff-70c144edfece/0/95FC6072A4A690A61A0B5F14B36882B43DA2F098.mft
Manifest number:          0551
Signing time:             Tue 03 Feb 2026 07:31:44 +0000
Manifest this update:     Tue 03 Feb 2026 07:26:44 +0000
Manifest next update:     Fri 06 Feb 2026 16:33:44 +0000
Files and hashes:         1: 34332e3234382e3231322e302f32342d3234203d3e203538343734.roa (hash: lJiN/1jPk6sVzBu+b+dWtXwNwMFWgXWbUliAdUar1AU=)
                          2: 323430343a666230303a3a2f33322d3332203d3e203538343734.roa (hash: T0GxcffUorQqKvKWvoQBmwT56g/pt1WC0GNCeIbnIXI=)
                          3: 34332e3234382e3231342e302f32342d3234203d3e203538343734.roa (hash: KABMcwwuj0PcVg0DF+2S7mT8pkOrI1Q8USpOkuuxMXI=)
                          4: 3130332e32382e35362e302f32342d3234203d3e203538343734.roa (hash: lS8odvouHADOZvGcEIZX6cESZX3v05ZwGGbLJRnmmPg=)
                          5: 3130332e32382e35372e302f32342d3234203d3e203538343734.roa (hash: RKuA2CS77/iBc1MhX2FD3Oj8MLTo/sw4r4vfbH4WpPI=)
                          6: 3130332e32382e35382e302f32342d3234203d3e203538343734.roa (hash: SVVnOcpEzNW3GyvGQSrBzvX2ix4zPecYqTfJmTpW5Ek=)
                          7: 3130332e32382e35392e302f32342d3234203d3e203538343734.roa (hash: GggD4UAIQuJ2Ici9kI1FCxhBRH2erQ0+Zgb75d0bwAQ=)
                          8: 34332e3234382e3231352e302f32342d3234203d3e203538343734.roa (hash: 2rfcy4tUpo7HgU2cGwZC6pQYZQAR7WSsi/1k28TkJlU=)
                          9: 34332e3234382e3231332e302f32342d3234203d3e203538343734.roa (hash: I3OA1TXXrn7Ho4Bbdaoik2HHmIJMRdT3vdvqOadCgWc=)
                          10: 95FC6072A4A690A61A0B5F14B36882B43DA2F098.crl (hash: DW23c77mOoQiHOPmqGQbz1wHq219sRaWsI05wdRIRpA=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/3305177a-a500-4996-b3ff-70c144edfece/0/95FC6072A4A690A61A0B5F14B36882B43DA2F098.crl
                          rsync://repo-rpki.idnic.net/repo/3305177a-a500-4996-b3ff-70c144edfece/0/95FC6072A4A690A61A0B5F14B36882B43DA2F098.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/95FC6072A4A690A61A0B5F14B36882B43DA2F098.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 06 Feb 2026 16:33:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:6b:73:70:09:5c:d2:9d:c7:d0:a4:28:42:79:17:0a:66:65:56:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95FC6072A4A690A61A0B5F14B36882B43DA2F098
        Validity
            Not Before: Feb  3 07:26:44 2026 GMT
            Not After : Feb  6 16:33:44 2026 GMT
        Subject: CN=1CF49669BB24C52840ABAED7CA64473D8812A328
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:c2:9e:0d:9e:7b:7d:dd:fa:82:d9:93:2d:15:
                    cc:00:8e:0d:5e:83:22:db:99:d4:4d:8d:f5:35:2f:
                    c2:84:67:21:3c:b3:77:17:78:9e:85:cb:8d:96:a3:
                    e9:27:df:36:3c:5a:0d:ef:61:53:e6:8e:a5:5e:f2:
                    46:98:c3:21:f6:15:bf:93:40:47:46:02:34:99:32:
                    e5:48:02:72:1b:37:29:3f:a1:7f:70:e9:d4:9a:89:
                    b0:53:5f:a0:8b:82:02:4c:b3:88:3f:97:72:82:f3:
                    5d:f3:c4:f0:b4:5c:df:15:0f:b4:84:32:ca:f6:6a:
                    2e:8e:a5:3c:28:71:b3:e4:66:cb:4e:c9:dd:cf:dd:
                    e0:dc:87:e4:f3:f6:0b:22:a8:01:e3:7c:b8:9b:6c:
                    d4:5a:1a:6d:c6:2c:fb:14:a2:b9:2d:b9:ad:24:06:
                    1b:ed:b9:88:ff:bf:ec:a9:24:82:80:db:81:a9:b6:
                    8b:a0:ed:d4:b7:13:7a:80:0a:d7:23:51:8a:5d:20:
                    96:44:29:dc:05:4d:72:9a:af:97:b7:55:4c:81:bc:
                    8e:d8:a2:92:93:e5:c5:cb:95:b6:52:78:11:cb:18:
                    85:09:2d:48:59:66:37:97:59:2c:dd:51:4f:69:c9:
                    cf:e5:a2:f7:09:1a:76:5e:97:2b:22:35:c6:0a:28:
                    ee:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:F4:96:69:BB:24:C5:28:40:AB:AE:D7:CA:64:47:3D:88:12:A3:28
            X509v3 Authority Key Identifier:
                keyid:95:FC:60:72:A4:A6:90:A6:1A:0B:5F:14:B3:68:82:B4:3D:A2:F0:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3305177a-a500-4996-b3ff-70c144edfece/0/95FC6072A4A690A61A0B5F14B36882B43DA2F098.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/95FC6072A4A690A61A0B5F14B36882B43DA2F098.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3305177a-a500-4996-b3ff-70c144edfece/0/95FC6072A4A690A61A0B5F14B36882B43DA2F098.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:3a:5a:6e:c7:02:32:c4:e6:c1:8e:ea:a2:b8:69:76:59:b6:
         16:21:43:83:07:95:46:a9:8a:58:15:99:98:45:ae:5c:8c:cb:
         79:eb:86:20:26:13:77:f1:e8:18:e8:e4:9d:7d:c2:28:ad:9e:
         b4:90:db:31:7f:1e:5c:44:18:66:b8:b3:b8:a9:30:99:19:49:
         26:26:17:1a:46:0d:a2:3d:35:06:03:6a:37:c2:75:f0:bc:f7:
         30:09:81:0b:e8:32:5a:37:90:d0:5b:7a:49:49:bc:37:b0:be:
         05:47:3e:15:f1:39:2c:72:70:b2:f7:3f:f7:61:0f:12:77:8a:
         d3:a8:67:a7:49:f4:64:27:0d:47:00:e2:2f:5d:76:d6:00:5c:
         1b:77:f7:e2:a8:ed:67:bd:68:31:02:b3:44:c9:f9:ca:83:45:
         27:64:26:81:b6:1a:50:ca:20:1c:b2:b7:05:3c:ad:cc:4c:4c:
         c1:d7:60:5b:eb:cf:82:df:00:3a:d4:8e:0d:59:cb:41:9b:f2:
         ff:58:b7:11:e4:52:10:73:b1:2d:cb:72:61:0c:d5:06:da:d1:
         06:ac:f2:fc:66:c0:bf:f3:d5:60:77:7c:43:bf:e7:4a:9b:b1:
         bf:66:e0:3c:94:98:2d:3e:18:c3:b4:a9:74:95:e3:92:43:cf:
         8f:4e:d6:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 4 23:57:53 2026 by rpki-client