This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/1251d6cf-c7b1-4687-9203-d161cc40b6a2/0/F9C4820743DB001E8F69D44C19320E1BF09F8F88.mft
File:                     F9C4820743DB001E8F69D44C19320E1BF09F8F88.mft (raw, json)
Hash identifier:          qNHtTZzMXrar00o608HMZIFqiRK4wPBPSC2YRwXy4Xg=
Subject key identifier:   56:05:A4:4E:7A:73:0A:C4:2F:DC:2B:C5:AD:58:5F:05:7E:5C:85:7D
Authority key identifier: F9:C4:82:07:43:DB:00:1E:8F:69:D4:4C:19:32:0E:1B:F0:9F:8F:88
Certificate issuer:       /CN=F9C4820743DB001E8F69D44C19320E1BF09F8F88
Certificate serial:       112DD7FDDD1F4DBB9D3F03B7669DD5348F2342B5
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F9C4820743DB001E8F69D44C19320E1BF09F8F88.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/1251d6cf-c7b1-4687-9203-d161cc40b6a2/0/F9C4820743DB001E8F69D44C19320E1BF09F8F88.mft
Manifest number:          F5
Signing time:             Sat 31 Jan 2026 13:11:15 +0000
Manifest this update:     Sat 31 Jan 2026 13:06:15 +0000
Manifest next update:     Wed 04 Feb 2026 00:15:15 +0000
Files and hashes:         1: 3130332e3135342e3137302e302f32332d3234203d3e20313333383331.roa (hash: 4wsZtWGdUSLxalGSdvbsdwhGmX/CaV7PyQsT2ixJWxE=)
                          2: F9C4820743DB001E8F69D44C19320E1BF09F8F88.crl (hash: gnVJBnpD6A7u17hj/4JABFk3sddOBKZ6C2SGK+mcGuo=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/1251d6cf-c7b1-4687-9203-d161cc40b6a2/0/F9C4820743DB001E8F69D44C19320E1BF09F8F88.crl
                          rsync://repo-rpki.idnic.net/repo/1251d6cf-c7b1-4687-9203-d161cc40b6a2/0/F9C4820743DB001E8F69D44C19320E1BF09F8F88.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F9C4820743DB001E8F69D44C19320E1BF09F8F88.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 04 Feb 2026 00:15:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:2d:d7:fd:dd:1f:4d:bb:9d:3f:03:b7:66:9d:d5:34:8f:23:42:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F9C4820743DB001E8F69D44C19320E1BF09F8F88
        Validity
            Not Before: Jan 31 13:06:15 2026 GMT
            Not After : Feb  4 00:15:15 2026 GMT
        Subject: CN=5605A44E7A730AC42FDC2BC5AD585F057E5C857D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:84:8f:a4:68:2f:4e:0d:6e:6f:5c:54:96:13:
                    a8:24:08:28:3f:08:57:57:dc:73:83:55:0d:ef:33:
                    4e:ae:4f:fe:96:a1:93:55:7c:6b:90:92:3a:d3:3b:
                    14:f9:07:2f:5c:6f:3b:9b:38:1a:fd:fb:0a:ad:59:
                    d4:d8:20:97:d1:b3:1a:52:5f:60:db:1c:dc:b0:1c:
                    ef:c6:ea:f0:70:73:2e:8c:01:2d:e5:39:b9:ed:1f:
                    32:d2:67:10:12:d0:41:04:8a:85:b9:11:3c:a3:6c:
                    13:e4:63:94:6f:b1:69:28:7a:f9:e1:19:77:c3:e6:
                    8a:47:5a:af:bd:3b:36:89:90:42:0a:62:60:66:3f:
                    e4:b3:b0:b0:d9:30:fc:04:a5:c7:ad:d2:98:40:e0:
                    40:3c:d2:5c:e9:e1:24:02:b0:8d:8b:b1:34:66:e9:
                    56:76:1a:d8:2a:62:b5:4d:7f:ab:2f:2c:ba:85:ed:
                    d2:e3:6c:b9:6c:09:b7:93:51:f7:6e:50:ca:01:36:
                    c2:14:7e:2a:43:2d:32:e2:c7:c5:5c:6f:d8:8f:3d:
                    ba:3d:b1:9b:94:4a:40:11:a2:96:15:d6:02:14:ea:
                    e7:29:86:88:fe:c7:dc:77:4b:46:30:59:3a:31:43:
                    d3:f4:19:6d:28:3d:eb:69:34:60:bc:64:9d:81:64:
                    03:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:05:A4:4E:7A:73:0A:C4:2F:DC:2B:C5:AD:58:5F:05:7E:5C:85:7D
            X509v3 Authority Key Identifier:
                keyid:F9:C4:82:07:43:DB:00:1E:8F:69:D4:4C:19:32:0E:1B:F0:9F:8F:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/1251d6cf-c7b1-4687-9203-d161cc40b6a2/0/F9C4820743DB001E8F69D44C19320E1BF09F8F88.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F9C4820743DB001E8F69D44C19320E1BF09F8F88.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1251d6cf-c7b1-4687-9203-d161cc40b6a2/0/F9C4820743DB001E8F69D44C19320E1BF09F8F88.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:4a:cb:3f:0a:b2:1a:6b:ac:c7:02:d0:a5:c5:99:a3:d3:c3:
         45:36:64:60:35:06:d1:53:4b:0a:7a:d8:14:27:20:28:9c:5b:
         0c:91:99:b5:56:f6:fd:6c:8e:34:7f:43:22:fe:e1:d6:f4:1e:
         35:cf:14:38:d7:75:c3:03:f6:77:36:cd:24:67:cd:93:89:93:
         09:c9:4e:bf:91:b7:00:84:5f:11:d9:c7:4a:e6:f2:8f:6a:fd:
         29:13:3f:69:36:7d:b2:04:4d:0c:79:98:09:45:5b:be:e8:b2:
         89:5a:b9:b0:09:58:76:02:46:3f:82:6e:40:4b:77:73:06:15:
         52:8b:1c:15:8f:bb:76:36:a1:ab:8c:34:8f:94:82:48:32:5b:
         62:4c:2a:8b:2c:e4:ec:42:36:c3:0d:36:af:65:4f:0a:c7:26:
         f0:47:cd:2f:8e:70:8a:ad:59:05:0c:08:e1:7a:66:65:ee:ee:
         1c:16:2d:c9:fb:71:51:d7:93:b3:69:e8:15:ff:e2:99:81:e8:
         2e:2c:63:5e:55:9d:9a:4c:77:82:8a:1b:e5:70:09:75:1b:62:
         2b:74:1f:09:21:93:29:65:38:c2:e0:c6:00:68:8f:a1:35:b6:
         14:d8:0e:31:ba:00:7b:3f:42:2b:a8:1d:0d:71:5e:42:d6:e2:
         66:c3:2f:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 09:43:59 2026 by rpki-client