This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/0fa81e6e-4b16-4b62-8f18-52892e54b90d/0/5C559181306986EE89AADF0A1CFC78EA8A093530.mft
File:                     5C559181306986EE89AADF0A1CFC78EA8A093530.mft (raw, json)
Hash identifier:          xGeS8i56iUJuoqaICKbwP/+kgxjjPoSN3L4Sg9pw6pE=
Subject key identifier:   18:D3:15:EF:35:63:66:C2:C1:CB:A1:00:B9:08:95:D5:80:29:F2:2A
Authority key identifier: 5C:55:91:81:30:69:86:EE:89:AA:DF:0A:1C:FC:78:EA:8A:09:35:30
Certificate issuer:       /CN=5C559181306986EE89AADF0A1CFC78EA8A093530
Certificate serial:       57A811EB0C60FB4C7263F8D13A37865F2BE092B6
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5C559181306986EE89AADF0A1CFC78EA8A093530.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/0fa81e6e-4b16-4b62-8f18-52892e54b90d/0/5C559181306986EE89AADF0A1CFC78EA8A093530.mft
Manifest number:          0173
Signing time:             Sun 01 Feb 2026 00:31:20 +0000
Manifest this update:     Sun 01 Feb 2026 00:26:20 +0000
Manifest next update:     Wed 04 Feb 2026 05:09:20 +0000
Files and hashes:         1: 5C559181306986EE89AADF0A1CFC78EA8A093530.crl (hash: lIdGWXRnk3eRvnUE5QV/4d2B382M5ZWNqocTQSFs2gk=)
                          2: 3130332e3235302e3132392e302f32342d3234203d3e20313531353536.roa (hash: QFsczwBLYtZasUqtJF/xZ2xkrtCRnC+5l41701uTMq4=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/0fa81e6e-4b16-4b62-8f18-52892e54b90d/0/5C559181306986EE89AADF0A1CFC78EA8A093530.crl
                          rsync://repo-rpki.idnic.net/repo/0fa81e6e-4b16-4b62-8f18-52892e54b90d/0/5C559181306986EE89AADF0A1CFC78EA8A093530.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5C559181306986EE89AADF0A1CFC78EA8A093530.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 04 Feb 2026 05:09:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:a8:11:eb:0c:60:fb:4c:72:63:f8:d1:3a:37:86:5f:2b:e0:92:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5C559181306986EE89AADF0A1CFC78EA8A093530
        Validity
            Not Before: Feb  1 00:26:20 2026 GMT
            Not After : Feb  4 05:09:20 2026 GMT
        Subject: CN=18D315EF356366C2C1CBA100B90895D58029F22A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:54:bc:d1:20:d9:b0:b5:37:36:98:41:a7:fe:
                    c6:37:c5:9d:a9:03:0f:92:0e:38:e6:8c:c4:11:da:
                    6a:03:0c:57:c8:40:8c:6d:ad:fb:58:15:54:92:33:
                    86:07:ee:54:2c:57:31:d4:d4:96:2f:30:66:e4:46:
                    ff:ec:31:bd:4e:95:06:84:8e:36:05:7a:ac:d5:fb:
                    56:93:4d:10:0b:c2:48:ae:54:9d:66:c2:7f:d4:f7:
                    df:50:52:7c:2f:8a:3d:86:e0:60:3c:d0:f8:ac:1c:
                    f4:1f:52:8e:21:70:69:f4:2d:2d:71:8f:ef:64:53:
                    42:e3:e4:78:d9:87:d8:ec:38:24:d1:74:19:9c:14:
                    22:4f:a8:d5:3d:5d:83:a1:2d:41:9c:5b:29:3f:ff:
                    be:81:b1:eb:af:6a:07:f7:d1:67:a4:0f:e5:9e:7e:
                    69:b6:bf:f0:27:10:1c:ca:30:0d:e2:cd:6f:c0:83:
                    f1:5e:c3:48:84:71:80:af:51:8d:83:30:55:cf:09:
                    44:21:c3:74:d5:9f:2a:5b:7c:30:10:67:20:0f:9a:
                    17:b4:87:8f:0d:62:b3:a6:44:f7:e3:1e:9b:05:ac:
                    e7:56:5f:46:72:0c:8e:30:38:9a:30:4b:f0:ef:f3:
                    71:7e:b5:99:17:c8:3d:38:92:67:39:33:e4:e6:45:
                    a3:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:D3:15:EF:35:63:66:C2:C1:CB:A1:00:B9:08:95:D5:80:29:F2:2A
            X509v3 Authority Key Identifier:
                keyid:5C:55:91:81:30:69:86:EE:89:AA:DF:0A:1C:FC:78:EA:8A:09:35:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/0fa81e6e-4b16-4b62-8f18-52892e54b90d/0/5C559181306986EE89AADF0A1CFC78EA8A093530.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5C559181306986EE89AADF0A1CFC78EA8A093530.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0fa81e6e-4b16-4b62-8f18-52892e54b90d/0/5C559181306986EE89AADF0A1CFC78EA8A093530.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:3a:e7:d5:41:01:88:ac:09:c2:d1:e4:dd:c6:2c:20:b7:49:
         25:54:76:35:bf:76:8d:06:70:e9:e9:18:6a:b1:72:bd:6b:87:
         7c:96:83:8e:97:90:7d:0b:1d:2e:92:8c:7e:0e:2f:61:4d:a7:
         1b:c4:21:3c:ef:be:3d:b4:f4:c9:a5:b4:fc:f3:aa:6e:5a:8b:
         52:03:a9:e1:da:ac:b5:df:8a:b6:e2:15:be:40:c6:a5:bd:ae:
         ee:8e:9a:5c:7c:35:cc:52:b9:66:83:05:c0:d9:6d:10:d3:88:
         2a:49:67:b8:93:36:20:4b:8d:47:52:e5:1f:2c:87:18:c8:0a:
         f5:aa:80:ee:be:5d:f0:e6:fb:f8:96:d6:84:d1:0c:b9:4a:54:
         2a:8b:10:37:be:2e:79:b1:94:24:71:60:ae:69:e2:2f:c5:73:
         25:d8:66:eb:16:a2:0d:26:02:1d:16:23:98:a6:38:99:8e:35:
         23:04:f1:81:40:dc:1c:10:15:11:ff:71:7d:80:c2:b7:2f:97:
         ad:76:24:db:ef:27:32:ba:c7:1f:70:3b:77:ac:b3:e8:b6:89:
         92:5d:20:45:19:4d:a0:9b:0d:eb:fb:cd:ce:37:5e:be:91:28:
         e0:42:5d:0e:5f:ed:80:05:32:45:bd:97:e6:9c:e1:3b:e2:0b:
         1b:f5:3b:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 09:44:00 2026 by rpki-client