This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/15521099-3ba1-4f91-b5bb-712c3bba6337/0/1D80B161A8871962133619E73EBB98762953ABF1.mft
File:                     1D80B161A8871962133619E73EBB98762953ABF1.mft (raw, json)
Hash identifier:          YmELiMfoM9Khj0677XaHDVvZA25QYYhjitvgZlDShQI=
Subject key identifier:   30:54:2C:9D:AA:D3:4F:D4:91:14:03:B1:E1:A3:7E:D8:94:3B:ED:1F
Authority key identifier: 1D:80:B1:61:A8:87:19:62:13:36:19:E7:3E:BB:98:76:29:53:AB:F1
Certificate issuer:       /CN=1D80B161A8871962133619E73EBB98762953ABF1
Certificate serial:       520B1378FC651A83E327D5BF5BB2A9F043D51585
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D80B161A8871962133619E73EBB98762953ABF1.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/15521099-3ba1-4f91-b5bb-712c3bba6337/0/1D80B161A8871962133619E73EBB98762953ABF1.mft
Manifest number:          01EE
Signing time:             Sun 01 Feb 2026 14:52:20 +0000
Manifest this update:     Sun 01 Feb 2026 14:47:20 +0000
Manifest next update:     Thu 05 Feb 2026 02:35:20 +0000
Files and hashes:         1: 1D80B161A8871962133619E73EBB98762953ABF1.crl (hash: 0qMENys1XmoMqxM7BNQwIFdm6MY+cJaIaoTiKZnCHw4=)
                          2: 3130332e3139302e3130392e302f32342d3234203d3e20313439393033.roa (hash: JnuGg5b3r/smkXr3roy2qXM8iamIrQdBtkbqYsyBWlk=)
                          3: 3130332e3139302e3130382e302f32342d3234203d3e20313439393033.roa (hash: rXoDqSI1fvAdoiQWimGUY2MVnvfq9zYbOGQrUgh6KyM=)
                          4: 3130332e3139302e3130382e302f32332d3234203d3e20313439393033.roa (hash: BnxNSU7GvW8FhzJws2psMwaSALikZLf1ufA7X1GunUU=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/15521099-3ba1-4f91-b5bb-712c3bba6337/0/1D80B161A8871962133619E73EBB98762953ABF1.crl
                          rsync://repo-rpki.idnic.net/repo/15521099-3ba1-4f91-b5bb-712c3bba6337/0/1D80B161A8871962133619E73EBB98762953ABF1.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D80B161A8871962133619E73EBB98762953ABF1.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 05 Feb 2026 02:35:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:0b:13:78:fc:65:1a:83:e3:27:d5:bf:5b:b2:a9:f0:43:d5:15:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1D80B161A8871962133619E73EBB98762953ABF1
        Validity
            Not Before: Feb  1 14:47:20 2026 GMT
            Not After : Feb  5 02:35:20 2026 GMT
        Subject: CN=30542C9DAAD34FD4911403B1E1A37ED8943BED1F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:ac:7d:0f:29:18:66:9b:8c:91:80:ec:b6:9d:
                    bd:6d:a4:96:63:c6:b3:18:1d:cf:17:8e:a8:2a:dd:
                    d2:ac:d9:26:93:ce:2c:4e:a7:e6:4b:3f:ea:6d:35:
                    d7:3a:58:56:19:4c:49:71:ed:70:0c:9f:db:16:3e:
                    c0:80:62:f9:5c:56:3b:6c:22:81:5f:41:62:f5:7f:
                    0d:6d:b1:18:73:93:b8:cb:30:24:0a:d9:5e:48:a1:
                    54:28:6b:5c:04:f8:87:99:74:dd:ee:a0:78:36:42:
                    77:76:7f:12:9e:6b:43:9e:41:a3:79:35:48:0f:cf:
                    8f:08:79:7d:5c:49:54:cb:02:2a:04:e7:06:60:c0:
                    6e:dc:e3:d5:16:c0:eb:89:c1:0a:01:91:20:69:af:
                    4e:f2:b0:27:02:83:ad:b7:fd:a8:38:33:a2:12:8a:
                    ac:5f:40:ba:be:43:65:90:ff:8a:2a:ef:0a:83:56:
                    c7:b2:74:50:c6:54:20:8f:40:a4:4c:81:0f:db:5a:
                    25:0b:fa:a3:70:1d:38:67:cd:d2:93:bd:b6:8a:1e:
                    2c:6d:09:7d:44:ba:67:fc:70:31:09:f5:82:58:23:
                    7d:80:68:34:00:f1:33:72:a1:25:8e:85:ac:a6:f4:
                    13:c7:34:74:f7:f5:cd:41:47:26:44:a0:ee:f3:57:
                    da:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:54:2C:9D:AA:D3:4F:D4:91:14:03:B1:E1:A3:7E:D8:94:3B:ED:1F
            X509v3 Authority Key Identifier:
                keyid:1D:80:B1:61:A8:87:19:62:13:36:19:E7:3E:BB:98:76:29:53:AB:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/15521099-3ba1-4f91-b5bb-712c3bba6337/0/1D80B161A8871962133619E73EBB98762953ABF1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D80B161A8871962133619E73EBB98762953ABF1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/15521099-3ba1-4f91-b5bb-712c3bba6337/0/1D80B161A8871962133619E73EBB98762953ABF1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:01:6f:b7:a3:51:90:eb:e0:27:05:46:c9:27:c7:5b:0e:d4:
         23:23:89:21:dc:1e:01:4e:04:d0:93:22:a8:51:2a:83:ac:1e:
         64:86:7a:4c:3b:81:f5:a9:14:60:48:b3:c9:ac:78:bc:96:e7:
         5d:92:fb:ff:5d:2f:14:4d:05:73:ef:5c:c8:c9:3b:e2:e0:db:
         c9:01:1b:52:97:52:58:6c:b0:0f:62:a6:cb:f7:04:2e:03:7d:
         fa:14:1e:08:ff:ad:bb:b2:c2:c4:25:c6:94:b8:a4:ba:44:40:
         8a:42:69:f1:a4:af:08:13:78:fb:07:99:b6:c8:77:c1:ee:ba:
         9a:a1:9a:89:2e:6b:b2:fa:dd:8b:f2:cb:7f:c0:1e:eb:f7:e7:
         c1:ac:9a:c3:07:f0:57:1d:86:13:f9:60:ea:52:f7:ca:4e:18:
         04:55:0b:c8:d8:40:b3:0c:df:86:02:f2:e5:a7:28:64:ae:1f:
         0c:7f:15:7f:0b:b6:ba:bd:b1:86:7b:a5:6e:e1:a5:ee:c5:e3:
         56:03:03:35:f7:06:2f:62:92:9e:30:a7:7c:41:05:4c:1b:e6:
         89:21:5f:8c:fd:dc:17:04:ab:31:a2:32:f2:a9:8d:7f:aa:0d:
         f3:31:6a:2d:63:96:e4:58:ee:cc:fd:65:f8:25:05:77:ea:1c:
         8f:76:91:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 09:58:36 2026 by rpki-client