This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/10c73af5-a2c0-424d-862e-112c58b7270e/0/D6E54AF6C437868899B99F4312CD3DBB493B5D29.mft
File:                     D6E54AF6C437868899B99F4312CD3DBB493B5D29.mft (raw, json)
Hash identifier:          wMYP8in+jQM5yihi7Wqa52pa+gwcH0FRkFiMrvPEjbc=
Subject key identifier:   6E:64:CC:E1:5F:40:A3:87:A3:FB:9A:9B:BE:8F:DD:10:AE:04:D3:FA
Authority key identifier: D6:E5:4A:F6:C4:37:86:88:99:B9:9F:43:12:CD:3D:BB:49:3B:5D:29
Certificate issuer:       /CN=D6E54AF6C437868899B99F4312CD3DBB493B5D29
Certificate serial:       2EEBA46D5C1B5264C0F45316E7C00958F808C7C1
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D6E54AF6C437868899B99F4312CD3DBB493B5D29.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/10c73af5-a2c0-424d-862e-112c58b7270e/0/D6E54AF6C437868899B99F4312CD3DBB493B5D29.mft
Manifest number:          01FD
Signing time:             Sun 01 Feb 2026 17:22:24 +0000
Manifest this update:     Sun 01 Feb 2026 17:17:24 +0000
Manifest next update:     Thu 05 Feb 2026 04:54:24 +0000
Files and hashes:         1: D6E54AF6C437868899B99F4312CD3DBB493B5D29.crl (hash: eQUfqec1phg2H8oUejFV8xNzCb6CVlhAXPXU/QQ+ipg=)
                          2: 3130332e33392e37322e302f32342d3234203d3e20313530343838.roa (hash: PWfgrIEAW5Ka7/l46DQwRT/6uSCPsoFbZO34zUTjWEM=)
                          3: 3130332e33392e37332e302f32342d3234203d3e20313530343838.roa (hash: qhQA0cj7kuBqIGVwCLG9U/r/eXfYDiDRD7UKEazkyf0=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/10c73af5-a2c0-424d-862e-112c58b7270e/0/D6E54AF6C437868899B99F4312CD3DBB493B5D29.crl
                          rsync://repo-rpki.idnic.net/repo/10c73af5-a2c0-424d-862e-112c58b7270e/0/D6E54AF6C437868899B99F4312CD3DBB493B5D29.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D6E54AF6C437868899B99F4312CD3DBB493B5D29.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 05 Feb 2026 04:54:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:eb:a4:6d:5c:1b:52:64:c0:f4:53:16:e7:c0:09:58:f8:08:c7:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D6E54AF6C437868899B99F4312CD3DBB493B5D29
        Validity
            Not Before: Feb  1 17:17:24 2026 GMT
            Not After : Feb  5 04:54:24 2026 GMT
        Subject: CN=6E64CCE15F40A387A3FB9A9BBE8FDD10AE04D3FA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:51:54:10:7b:63:71:bc:10:c9:70:f5:40:58:
                    95:2f:8a:90:f5:8c:82:76:88:a8:12:c5:23:e1:8c:
                    52:f2:40:6b:cf:72:d8:75:07:33:eb:23:26:6a:82:
                    74:35:b2:31:85:00:90:d4:f9:36:34:a7:33:fc:73:
                    77:d4:66:3b:cf:38:86:4d:82:0c:d9:3d:d4:36:c3:
                    ff:4b:d6:1b:f7:ef:f1:cc:ff:4f:86:43:f7:b0:1e:
                    13:b2:ce:1c:56:b9:33:99:6b:01:38:5f:c7:43:fe:
                    ec:1c:3c:bf:6d:d3:42:f5:b1:09:01:fe:4b:aa:3a:
                    98:e4:ab:72:05:8c:a1:96:f6:c2:fe:6f:0d:65:69:
                    70:21:f2:f4:6b:1f:11:d3:eb:bf:9a:16:4d:59:92:
                    0b:b6:1d:26:c6:b1:97:e7:03:a1:8c:87:f6:69:43:
                    de:54:72:7d:c9:74:81:00:c0:9b:43:7a:bb:2e:fc:
                    ab:bf:a4:5a:0d:27:bb:d6:99:3a:25:e5:f9:19:ab:
                    e8:49:08:fa:42:6f:9e:49:40:eb:6b:5b:f3:84:a2:
                    9f:f9:29:aa:46:08:38:4a:06:d8:57:ce:57:ee:45:
                    99:24:29:17:8a:21:ef:24:01:f0:98:b1:35:2b:5d:
                    17:9c:d2:97:92:d0:4a:b9:72:43:f1:4e:79:63:5c:
                    ae:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:64:CC:E1:5F:40:A3:87:A3:FB:9A:9B:BE:8F:DD:10:AE:04:D3:FA
            X509v3 Authority Key Identifier:
                keyid:D6:E5:4A:F6:C4:37:86:88:99:B9:9F:43:12:CD:3D:BB:49:3B:5D:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/10c73af5-a2c0-424d-862e-112c58b7270e/0/D6E54AF6C437868899B99F4312CD3DBB493B5D29.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D6E54AF6C437868899B99F4312CD3DBB493B5D29.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/10c73af5-a2c0-424d-862e-112c58b7270e/0/D6E54AF6C437868899B99F4312CD3DBB493B5D29.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:16:d3:98:a5:ad:ac:f0:1a:c9:41:28:10:1c:2f:30:ab:09:
         70:26:c0:ba:ce:4b:78:15:12:82:83:b5:de:a8:b1:de:e1:44:
         b7:af:9f:00:51:92:b7:38:69:e7:1b:19:79:c5:c5:93:6c:ee:
         be:d0:db:8d:78:37:cb:be:8e:54:b3:32:5c:2a:d7:03:14:ec:
         a7:df:3e:3c:94:b5:29:a6:dc:b1:c2:62:c1:6c:cd:76:5a:43:
         3a:42:13:73:7c:bd:05:cd:2f:e1:78:42:34:fb:03:65:02:2b:
         ee:17:15:49:de:ca:96:16:2e:8e:46:18:37:0e:14:0c:19:e5:
         89:f9:6b:8a:d4:99:06:e0:62:24:ec:d0:af:bb:25:cb:ef:a6:
         48:a1:04:59:4f:8a:fc:8f:5d:f9:74:96:20:8d:47:df:c5:01:
         9c:f4:fc:80:43:fa:78:d6:24:21:bb:18:be:f0:48:5b:80:aa:
         aa:2d:1d:3f:cc:46:44:98:76:70:23:95:73:f8:8e:ab:2b:fa:
         f9:f1:45:b2:45:1f:5a:1d:f2:46:ea:92:62:3a:19:e7:d1:3c:
         9f:33:38:24:c9:44:ef:cf:ad:ed:16:c5:ca:0d:a0:9f:2e:8a:
         de:1c:c0:5f:cd:4e:b3:f8:3b:c9:ae:5e:d1:bb:27:0f:93:81:
         fe:9c:7a:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 09:42:15 2026 by rpki-client