This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/154b9d32-3c5a-40e2-b788-069de0c3d2de/0/1072AD17A8EDB1513AED95A258088F480ADA492B.mft
File:                     1072AD17A8EDB1513AED95A258088F480ADA492B.mft (raw, json)
Hash identifier:          4nrjALa47OXcE/IBSmJBqoHPZWaNABX03legSxvbFVs=
Subject key identifier:   26:1A:08:94:1E:62:AA:7D:B7:99:E7:41:40:36:43:FA:47:EC:2C:E8
Authority key identifier: 10:72:AD:17:A8:ED:B1:51:3A:ED:95:A2:58:08:8F:48:0A:DA:49:2B
Certificate issuer:       /CN=1072AD17A8EDB1513AED95A258088F480ADA492B
Certificate serial:       73DEC5ABFC2AAEA154A9AC71D21B84B0B8B82960
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1072AD17A8EDB1513AED95A258088F480ADA492B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/154b9d32-3c5a-40e2-b788-069de0c3d2de/0/1072AD17A8EDB1513AED95A258088F480ADA492B.mft
Manifest number:          01DF
Signing time:             Mon 02 Feb 2026 03:40:44 +0000
Manifest this update:     Mon 02 Feb 2026 03:35:44 +0000
Manifest next update:     Thu 05 Feb 2026 13:08:44 +0000
Files and hashes:         1: 1072AD17A8EDB1513AED95A258088F480ADA492B.crl (hash: /otj+DrE4cGH2AggWsu6Tp95o8p+WVtp/GpDr7aiT4g=)
                          2: 3130332e3232302e3131342e302f32332d3234203d3e20313335343436.roa (hash: iOecriuLYOaY71DNd88M3kxYp9C78ZPc3k0drPavCOg=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/154b9d32-3c5a-40e2-b788-069de0c3d2de/0/1072AD17A8EDB1513AED95A258088F480ADA492B.crl
                          rsync://repo-rpki.idnic.net/repo/154b9d32-3c5a-40e2-b788-069de0c3d2de/0/1072AD17A8EDB1513AED95A258088F480ADA492B.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1072AD17A8EDB1513AED95A258088F480ADA492B.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 05 Feb 2026 05:24:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:de:c5:ab:fc:2a:ae:a1:54:a9:ac:71:d2:1b:84:b0:b8:b8:29:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1072AD17A8EDB1513AED95A258088F480ADA492B
        Validity
            Not Before: Feb  2 03:35:44 2026 GMT
            Not After : Feb  5 13:08:44 2026 GMT
        Subject: CN=261A08941E62AA7DB799E741403643FA47EC2CE8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:5e:86:e7:0c:90:e3:c0:8e:13:ad:9c:79:93:
                    e5:a5:b1:78:ad:ed:00:c4:e8:45:76:a6:9f:4d:20:
                    f5:60:aa:ad:db:84:29:64:fd:49:88:0b:73:ee:f3:
                    c9:2e:9a:c3:28:26:c7:31:67:7d:63:06:34:6b:8f:
                    42:6f:74:f0:75:3d:80:3b:67:2d:5b:c2:c4:54:5c:
                    00:b5:92:15:a4:1e:2c:e0:d7:43:15:e9:d0:c2:92:
                    28:cc:bc:cf:25:2a:6e:30:4c:08:8a:22:c0:7e:3d:
                    0d:45:59:fa:aa:3d:fd:31:55:43:86:e2:37:2c:24:
                    a2:93:d0:3a:a9:4c:f8:68:06:ed:94:35:b0:ba:f3:
                    44:91:32:11:07:cd:7a:61:b1:14:3c:e3:90:b4:cc:
                    77:2b:4c:2e:ec:14:aa:fd:ca:d8:47:6e:88:f5:ac:
                    f1:ac:b0:46:d1:1e:c9:e1:01:41:ea:55:eb:d6:ce:
                    72:3a:5a:fa:28:91:6d:cd:f1:04:2b:87:59:f4:f7:
                    ef:fc:b4:cb:18:27:b4:c8:ff:90:b7:e5:c6:b9:75:
                    b3:3f:de:0e:73:d6:90:f3:73:a3:a4:b9:bd:50:c8:
                    79:c7:fe:05:26:a3:ee:9e:a5:21:94:d8:d9:28:6a:
                    6d:0b:69:b5:0b:70:26:7e:40:af:bf:e3:10:8f:98:
                    16:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:1A:08:94:1E:62:AA:7D:B7:99:E7:41:40:36:43:FA:47:EC:2C:E8
            X509v3 Authority Key Identifier:
                keyid:10:72:AD:17:A8:ED:B1:51:3A:ED:95:A2:58:08:8F:48:0A:DA:49:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/154b9d32-3c5a-40e2-b788-069de0c3d2de/0/1072AD17A8EDB1513AED95A258088F480ADA492B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1072AD17A8EDB1513AED95A258088F480ADA492B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/154b9d32-3c5a-40e2-b788-069de0c3d2de/0/1072AD17A8EDB1513AED95A258088F480ADA492B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:ac:0b:da:e3:a4:fa:f5:77:16:8c:a2:b4:12:cd:be:3e:13:
         a3:1e:e4:b8:63:78:71:80:5d:e5:ce:b5:09:01:d7:1e:06:01:
         f6:f5:2c:cc:22:85:29:12:7b:a0:e8:3f:4f:fb:ac:0e:e7:94:
         38:33:01:ad:2f:73:a9:8e:63:b9:10:ba:93:ee:c6:89:1d:67:
         5e:96:5d:dc:c7:14:1e:a2:13:9d:25:fe:ad:6e:bc:56:20:0f:
         17:ac:12:fb:fb:70:87:c7:0a:7f:bc:68:e9:9a:b7:ec:18:96:
         45:b8:22:26:8d:0a:ad:fa:41:8d:87:10:48:38:31:91:a5:23:
         0e:b9:ab:77:8d:c0:4b:da:bf:14:44:86:54:4b:86:20:fd:1d:
         c0:f2:f7:61:aa:c9:16:69:c4:07:60:02:0d:5b:1d:db:aa:eb:
         e3:3e:bd:dc:19:dd:82:d7:31:82:84:a7:69:74:14:f3:cf:56:
         8b:10:32:1a:00:47:09:03:df:42:ba:8f:82:93:6c:5a:f9:fc:
         93:34:32:44:a5:3a:39:0f:a2:72:d3:60:7e:ff:52:38:12:42:
         a1:20:88:1f:e8:9b:16:0e:98:da:62:e6:f3:07:75:45:f2:08:
         8b:70:9c:57:63:fb:b6:1b:ef:4f:21:30:93:9b:5c:bc:1c:52:
         fb:5b:56:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 12:48:53 2026 by rpki-client