This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/187d79ba-fb55-49a5-967b-1edc749d0128/0/295CEF87CDB74B1A43287E630C3FE568272D2F33.mft
File:                     295CEF87CDB74B1A43287E630C3FE568272D2F33.mft (raw, json)
Hash identifier:          xdmq+PJZyKIWoIZnUEvHxkwP60D+GEUHfqhsexJfle0=
Subject key identifier:   61:F3:F7:BD:22:A6:FC:07:F6:76:F5:B6:7B:BB:84:11:1A:45:9F:88
Authority key identifier: 29:5C:EF:87:CD:B7:4B:1A:43:28:7E:63:0C:3F:E5:68:27:2D:2F:33
Certificate issuer:       /CN=295CEF87CDB74B1A43287E630C3FE568272D2F33
Certificate serial:       0270DA8D031CCC561FE4C22B55F4810AFAAF4604
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/295CEF87CDB74B1A43287E630C3FE568272D2F33.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/187d79ba-fb55-49a5-967b-1edc749d0128/0/295CEF87CDB74B1A43287E630C3FE568272D2F33.mft
Manifest number:          0553
Signing time:             Sat 31 Jan 2026 17:51:44 +0000
Manifest this update:     Sat 31 Jan 2026 17:46:44 +0000
Manifest next update:     Wed 04 Feb 2026 01:51:44 +0000
Files and hashes:         1: 3230322e3135342e3138342e302f32312d3234203d3e2039343232.roa (hash: S3vWYnYF+l4dhX20RDpIzaZuA3umTZ3b74Itz4An65E=)
                          2: 3130332e3234362e302e302f32322d3234203d3e2039343232.roa (hash: nhGmrbnsJZJKbXEVM2224rOUYqSyOnxXP3J6DVLRP58=)
                          3: 3232332e3133302e32312e302f32342d3234203d3e20313338313238.roa (hash: 73W8GLSa6I8P01k3aFdjjpvb756Sn1uc1jeTJZ00bq4=)
                          4: 3232332e3133302e32322e302f32332d3233203d3e20313338313238.roa (hash: hEy0rDvTYQnHKZCVMINLjOdzcBCjo3uIeSctB/ZGBr8=)
                          5: 3230322e34332e3232382e302f32322d3234203d3e2039343232.roa (hash: pPyEloQMF0TdeYTY5eM6CCjgFQy8xkkymm+/u9Rl4Cw=)
                          6: 3232332e3133302e32302e302f32342d3234203d3e20313338313238.roa (hash: 0qgtJcGFp2PSnsHTLVJD3e7NXsCz70cPkWqnqoXUWi0=)
                          7: 3232332e3133302e32322e302f32342d3234203d3e20313338313238.roa (hash: XnGn/2+w4AJO6NSWZOl6oPCbIBn8oHiJVNfmgtkBLgs=)
                          8: 3232332e3133302e32302e302f32332d3234203d3e20313338313238.roa (hash: 4XaAtrPhzGDBzDHWlHXMB0whCb6rytr+C1+HuznU5f0=)
                          9: 295CEF87CDB74B1A43287E630C3FE568272D2F33.crl (hash: glUQNFXy6IklnB13UVb1pzixXtdPPtGJkqcApzmz4Vo=)
                          10: 34332e3232352e3138342e302f32322d3234203d3e2039343232.roa (hash: 6l4eA4hgKKdV7HePb7GT4qkO7B2rOBXkYrSr+9u6X7c=)
                          11: 3232332e3133302e32332e302f32342d3234203d3e20313338313238.roa (hash: Z00cWWLpoEgJbs9IwwNUQ+8l5Sk95TAHVLqYoXdZIhA=)
                          12: 3130332e3230362e3235322e302f32322d3234203d3e2039343232.roa (hash: PMWu4w2Q+6FhMFUf3/IiRjbR53qP/H9SS7SsSz4BOlo=)
                          13: 3130362e302e34382e302f32322d3234203d3e2039343232.roa (hash: ECzNZR+t4Bdt6LAAlKcBfTJvufVHsod6z7EXxaTCQXQ=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/187d79ba-fb55-49a5-967b-1edc749d0128/0/295CEF87CDB74B1A43287E630C3FE568272D2F33.crl
                          rsync://repo-rpki.idnic.net/repo/187d79ba-fb55-49a5-967b-1edc749d0128/0/295CEF87CDB74B1A43287E630C3FE568272D2F33.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/295CEF87CDB74B1A43287E630C3FE568272D2F33.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 04 Feb 2026 01:51:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:70:da:8d:03:1c:cc:56:1f:e4:c2:2b:55:f4:81:0a:fa:af:46:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=295CEF87CDB74B1A43287E630C3FE568272D2F33
        Validity
            Not Before: Jan 31 17:46:44 2026 GMT
            Not After : Feb  4 01:51:44 2026 GMT
        Subject: CN=61F3F7BD22A6FC07F676F5B67BBB84111A459F88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:ee:3b:1c:c6:f5:ac:79:a9:b5:0b:54:eb:1c:
                    22:99:6a:f2:6e:97:30:70:ec:4b:a3:b7:a1:6f:74:
                    85:48:ee:c9:d5:1e:56:dc:c2:ad:72:77:77:b3:a3:
                    02:05:70:5c:68:0f:ea:71:ef:52:71:ad:e5:21:fd:
                    17:7e:1f:5f:9e:cc:13:48:1d:77:c7:27:69:d5:7e:
                    bf:69:51:32:fc:63:0f:94:82:d0:4c:8e:36:a4:1d:
                    9e:af:5f:4c:62:19:bc:25:20:6d:8e:e1:2e:a5:f1:
                    9c:b2:42:f7:fa:54:fd:b2:d4:82:7a:23:39:a6:f2:
                    38:e6:c3:d6:d0:2c:00:a7:76:20:06:88:4b:87:34:
                    3b:82:94:89:12:a3:41:ca:aa:37:59:38:12:80:f9:
                    3e:79:7e:42:df:8d:55:f6:1e:86:a2:e1:4b:08:76:
                    e5:7a:bd:19:ca:4d:02:06:ea:bf:ca:5e:8f:83:7a:
                    cf:c5:9d:eb:34:9c:46:6e:ee:c0:97:0e:94:ee:57:
                    4b:38:cd:aa:2e:18:19:43:ba:c6:ea:ac:5e:d7:f2:
                    af:1b:b6:ed:d8:a7:ac:6c:69:80:dc:db:9c:36:b6:
                    a0:3d:8f:13:ea:a4:35:ed:0a:47:7e:b1:bd:34:f2:
                    64:41:5a:df:89:e2:e3:93:ea:27:d4:3b:b2:a7:95:
                    e8:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:F3:F7:BD:22:A6:FC:07:F6:76:F5:B6:7B:BB:84:11:1A:45:9F:88
            X509v3 Authority Key Identifier:
                keyid:29:5C:EF:87:CD:B7:4B:1A:43:28:7E:63:0C:3F:E5:68:27:2D:2F:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/187d79ba-fb55-49a5-967b-1edc749d0128/0/295CEF87CDB74B1A43287E630C3FE568272D2F33.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/295CEF87CDB74B1A43287E630C3FE568272D2F33.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/187d79ba-fb55-49a5-967b-1edc749d0128/0/295CEF87CDB74B1A43287E630C3FE568272D2F33.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:01:65:13:36:f1:30:34:84:4e:4b:fe:30:4e:c5:7a:99:34:
         5b:0d:4c:e0:45:1c:6b:3a:77:ae:43:4f:ca:6d:c9:34:1f:66:
         20:3f:e5:86:48:6e:90:90:ad:c3:9c:6c:0c:1f:f8:73:7f:bc:
         5f:37:7f:6f:75:38:e7:b5:3c:52:d0:8c:fe:92:e3:ef:a9:92:
         62:c2:9d:bb:f9:ea:54:96:85:8a:79:ec:39:d2:30:53:f0:6a:
         08:a1:a0:f5:b4:e5:c2:17:57:9f:05:3a:08:57:46:e7:3a:14:
         bb:ce:91:ff:ca:a1:d5:a5:2d:74:1d:07:f0:48:65:79:b0:af:
         8f:bd:28:61:ab:30:d3:e1:e8:da:39:9c:72:f1:19:3b:54:ca:
         4d:db:d6:13:bd:1c:ec:38:2c:2c:7f:91:26:cd:b7:8d:b7:67:
         04:f5:73:79:75:b7:38:5c:11:25:f2:7e:73:dc:fb:f5:25:dc:
         dd:f6:61:9f:4a:0a:b1:c2:44:e9:34:0a:ef:e5:f7:13:29:32:
         19:1e:4c:4d:94:7e:33:a5:f6:71:07:8a:ac:13:96:e9:2f:0c:
         4c:55:ac:3d:c2:56:96:12:b9:e2:40:eb:b7:46:fa:b3:fc:93:
         98:ac:ab:cc:f7:2b:f5:08:1d:80:ff:f9:08:d5:3b:d9:31:68:
         fa:43:f5:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 10:05:30 2026 by rpki-client