This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/1192021e-3904-4115-af5e-3edb713baa14/0/C24FD85D1F493383773D253EBB38BED908305E45.mft
File:                     C24FD85D1F493383773D253EBB38BED908305E45.mft (raw, json)
Hash identifier:          9p8gAkS5cvKk/wR4PpBWCFjfxMawbPCaUXksy64Daw4=
Subject key identifier:   72:F6:ED:F5:78:51:6A:84:B5:5B:F5:1A:44:46:6B:64:05:B0:E8:6F
Authority key identifier: C2:4F:D8:5D:1F:49:33:83:77:3D:25:3E:BB:38:BE:D9:08:30:5E:45
Certificate issuer:       /CN=C24FD85D1F493383773D253EBB38BED908305E45
Certificate serial:       50FBA1582D7E7608427228CB17FCF66BAE87EBE7
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C24FD85D1F493383773D253EBB38BED908305E45.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/1192021e-3904-4115-af5e-3edb713baa14/0/C24FD85D1F493383773D253EBB38BED908305E45.mft
Manifest number:          027B
Signing time:             Sat 31 Jan 2026 22:21:05 +0000
Manifest this update:     Sat 31 Jan 2026 22:16:05 +0000
Manifest next update:     Wed 04 Feb 2026 06:16:05 +0000
Files and hashes:         1: 323430373a613563303a313a3a2f34382d3438203d3e20313432333339.roa (hash: uev3miSgW3ZPH8225ZsPIsE3cXJFEhdn0RKfMczyL+Q=)
                          2: 323430373a613563303a31343a3a2f34382d3438203d3e20313432333339.roa (hash: JsI09r/ZNnEPFeCt6WLBPTMEkxJRdrp4JE3T6ebsTQM=)
                          3: 323430373a613563303a3a2f33322d3332203d3e20313432333339.roa (hash: 7KHGCRWZOjkL1VAY0QoUCT7SgQgusxdAgE4yokAO21g=)
                          4: 3130332e3136392e3134392e302f32342d3234203d3e20313432333339.roa (hash: FZgWhwDV11eis/PBOFUSnOmvx9HizVeVS1+vHaVIVOU=)
                          5: C24FD85D1F493383773D253EBB38BED908305E45.crl (hash: IgJbotor2MEnTEZOS9P86CXPFDeiwJwV9zD4+Q4E+WY=)
                          6: 323430373a613563303a3a2f34382d3438203d3e20313432333339.roa (hash: /W9eJzZVpyB/z5tgobQScs/0TG2lb+p8hosfeUn800Q=)
                          7: 3130332e3136392e3134382e302f32342d3234203d3e20313432333339.roa (hash: NWVwsgB2dXAzGfRzRtWC/6x1tcqD7Irs7AzETBCx59Q=)
                          8: 3130332e3136392e3134382e302f32332d3233203d3e20313432333339.roa (hash: gJAqHQjFUTPg0AFGSgF8qhY2vJwwNEihrQ5zJgvbzfU=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/1192021e-3904-4115-af5e-3edb713baa14/0/C24FD85D1F493383773D253EBB38BED908305E45.crl
                          rsync://repo-rpki.idnic.net/repo/1192021e-3904-4115-af5e-3edb713baa14/0/C24FD85D1F493383773D253EBB38BED908305E45.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C24FD85D1F493383773D253EBB38BED908305E45.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 04 Feb 2026 06:16:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:fb:a1:58:2d:7e:76:08:42:72:28:cb:17:fc:f6:6b:ae:87:eb:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C24FD85D1F493383773D253EBB38BED908305E45
        Validity
            Not Before: Jan 31 22:16:05 2026 GMT
            Not After : Feb  4 06:16:05 2026 GMT
        Subject: CN=72F6EDF578516A84B55BF51A44466B6405B0E86F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:2a:7d:2b:fb:11:d6:1c:a0:b7:61:a9:4f:ee:
                    04:4f:1e:0b:dd:32:18:95:20:17:b8:a8:c5:f2:46:
                    0c:79:69:97:a0:52:15:05:1e:22:ea:2a:1c:b8:75:
                    55:be:70:35:5a:bd:b5:88:56:b4:61:f4:14:af:21:
                    a3:41:b1:3e:b0:a3:56:b9:1e:f1:47:f8:1f:13:fa:
                    14:43:22:13:4c:ea:fa:4e:90:ab:f4:87:bc:46:a1:
                    19:f7:32:07:fd:5e:88:67:3c:8c:26:59:10:79:ce:
                    71:fe:5e:2a:11:03:61:79:c7:77:e9:d4:6e:7b:2d:
                    52:48:cc:af:53:c9:39:5a:a7:19:c8:1c:50:f6:34:
                    2b:86:87:de:04:b3:9b:e1:c4:4f:ae:60:0b:8b:50:
                    28:4a:3a:79:52:08:03:9c:6c:51:0b:20:91:ec:02:
                    31:9a:50:50:35:e6:65:5e:60:e9:eb:55:43:77:83:
                    72:65:dc:b0:7c:f6:fc:48:bb:87:5b:df:17:54:36:
                    41:fb:63:9e:bc:c6:50:00:2c:a4:47:76:a5:bd:c0:
                    7e:5a:ac:22:6e:d4:51:a8:59:4d:d7:83:08:59:f8:
                    d9:7b:be:94:c7:87:f6:42:8b:75:52:09:31:af:9c:
                    c0:b7:e2:b3:56:3c:07:fb:aa:43:85:3c:c6:11:11:
                    72:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:F6:ED:F5:78:51:6A:84:B5:5B:F5:1A:44:46:6B:64:05:B0:E8:6F
            X509v3 Authority Key Identifier:
                keyid:C2:4F:D8:5D:1F:49:33:83:77:3D:25:3E:BB:38:BE:D9:08:30:5E:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/1192021e-3904-4115-af5e-3edb713baa14/0/C24FD85D1F493383773D253EBB38BED908305E45.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C24FD85D1F493383773D253EBB38BED908305E45.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1192021e-3904-4115-af5e-3edb713baa14/0/C24FD85D1F493383773D253EBB38BED908305E45.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:3a:3d:ff:75:13:31:cc:d8:7c:c2:31:9d:d5:5b:01:c3:0f:
         5c:ad:f7:dc:a6:63:03:cf:6c:cf:26:af:83:f5:9b:d6:73:52:
         35:a4:36:14:cc:13:97:ec:c9:36:3a:ef:1a:d7:1c:8d:4d:b0:
         8d:ed:c3:7a:cf:3f:04:e9:89:d2:e4:79:e8:75:bc:c2:9b:2f:
         0e:23:6d:dd:82:76:3a:b4:5c:a9:b3:9c:8b:39:23:ca:c0:28:
         6b:55:11:d1:b0:27:68:28:e6:63:75:a9:6b:66:e2:2a:0d:6a:
         80:00:c8:97:18:c2:4d:22:d8:9b:0c:e3:fd:f7:b2:ff:df:51:
         b3:c5:11:c7:2d:05:33:1f:32:a2:f9:ab:cd:e6:94:37:99:1e:
         80:1c:12:98:65:2a:ec:b7:b6:a8:86:3c:05:dc:21:15:ac:b0:
         23:f7:95:31:33:86:40:a4:42:5e:36:6b:a5:42:a8:ab:5d:ac:
         56:33:a6:2a:28:42:6c:77:ae:68:2f:ab:27:fb:d6:3f:3f:28:
         0c:55:3f:c9:18:89:f4:bd:96:81:c9:ab:54:4f:0b:f4:32:a7:
         9b:94:47:7a:25:89:d3:1a:72:3a:c9:b9:c9:d2:a7:f0:f6:02:
         6a:99:f1:91:6a:ea:d9:d5:88:1f:f4:7a:ea:89:1a:53:f8:04:
         6a:43:bf:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 12:55:51 2026 by rpki-client