This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/188e3a17-1c91-4793-83c4-211d4210aea8/0/E1FE69A34216C24D1870F5CED3A4309234A0F1B2.mft
File:                     E1FE69A34216C24D1870F5CED3A4309234A0F1B2.mft (raw, json)
Hash identifier:          /Ebzjkmd8j469u+uphwmuVj1HtNIFORR3DOYOK/rknc=
Subject key identifier:   E0:34:04:DB:E9:75:C0:0D:01:C6:02:8E:DC:66:08:73:68:6E:6E:B3
Authority key identifier: E1:FE:69:A3:42:16:C2:4D:18:70:F5:CE:D3:A4:30:92:34:A0:F1:B2
Certificate issuer:       /CN=E1FE69A34216C24D1870F5CED3A4309234A0F1B2
Certificate serial:       14D7873F10A768FBF4CDC817D82245253B42F602
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E1FE69A34216C24D1870F5CED3A4309234A0F1B2.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/188e3a17-1c91-4793-83c4-211d4210aea8/0/E1FE69A34216C24D1870F5CED3A4309234A0F1B2.mft
Manifest number:          016D
Signing time:             Mon 02 Feb 2026 01:04:09 +0000
Manifest this update:     Mon 02 Feb 2026 00:59:09 +0000
Manifest next update:     Thu 05 Feb 2026 04:47:09 +0000
Files and hashes:         1: 323030313a6466313a396563303a3a2f34382d3438203d3e20313439383831.roa (hash: icoM+EmZmnaUSNYe+M3YT7QPi2377uDTJ5GrlCTs7Lw=)
                          2: E1FE69A34216C24D1870F5CED3A4309234A0F1B2.crl (hash: Rde83YYLYb0N867VfoptsHjrGYY1H19Jugb1M0xbOeU=)
                          3: 3130332e3138392e3232332e302f32342d3234203d3e20313439383831.roa (hash: Y71EeD959aIr9ucCZApJALClmCCepz1YWwy1H6B20+w=)
                          4: 3130332e3138392e3232322e302f32342d3234203d3e20313439383831.roa (hash: LJVWK744DaCLalz0/Sl7Gt/PYQWV0FOVmOX8NAlnD4I=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/188e3a17-1c91-4793-83c4-211d4210aea8/0/E1FE69A34216C24D1870F5CED3A4309234A0F1B2.crl
                          rsync://repo-rpki.idnic.net/repo/188e3a17-1c91-4793-83c4-211d4210aea8/0/E1FE69A34216C24D1870F5CED3A4309234A0F1B2.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E1FE69A34216C24D1870F5CED3A4309234A0F1B2.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 05 Feb 2026 04:47:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:d7:87:3f:10:a7:68:fb:f4:cd:c8:17:d8:22:45:25:3b:42:f6:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E1FE69A34216C24D1870F5CED3A4309234A0F1B2
        Validity
            Not Before: Feb  2 00:59:09 2026 GMT
            Not After : Feb  5 04:47:09 2026 GMT
        Subject: CN=E03404DBE975C00D01C6028EDC660873686E6EB3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:c4:f5:17:06:2c:05:ad:5f:d0:32:fb:bd:9c:
                    0f:e4:cb:35:f2:30:0f:7a:de:8b:67:be:00:30:cb:
                    85:64:9b:c6:40:c5:1c:56:44:c9:76:f8:df:1e:0b:
                    56:7b:b2:a9:0d:be:de:16:40:2f:4f:4d:9c:53:ce:
                    70:e2:df:79:4a:59:89:6a:db:fb:63:04:ad:75:f0:
                    77:f1:77:65:2c:ef:dd:5f:e4:77:fc:a7:59:78:99:
                    10:ab:1f:98:e1:85:1a:c3:17:09:bc:51:56:07:62:
                    95:1f:4e:e8:2b:d6:49:a1:41:a4:1f:60:35:dc:d9:
                    5f:f4:23:08:da:07:41:05:6f:42:ae:2b:c0:e5:9f:
                    14:5e:9d:8b:0f:65:0f:ab:57:4c:62:d7:69:66:7f:
                    3f:d8:1e:1d:bc:e9:1b:75:50:46:66:be:ab:b0:37:
                    c2:ab:ea:55:63:09:a5:47:75:c1:21:41:b9:11:33:
                    33:97:54:ab:0c:3d:4f:34:f5:17:54:50:7f:22:1c:
                    b4:39:a5:95:e0:4b:4a:05:cc:68:d3:ee:9f:64:7d:
                    40:be:db:8b:ed:d1:6b:d7:d9:46:fc:9c:9c:14:89:
                    95:02:3b:73:ba:9d:9f:da:46:56:5d:34:07:c7:98:
                    a6:bb:cb:35:8a:c4:58:12:c4:df:b4:bd:63:8c:3b:
                    dc:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:34:04:DB:E9:75:C0:0D:01:C6:02:8E:DC:66:08:73:68:6E:6E:B3
            X509v3 Authority Key Identifier:
                keyid:E1:FE:69:A3:42:16:C2:4D:18:70:F5:CE:D3:A4:30:92:34:A0:F1:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/188e3a17-1c91-4793-83c4-211d4210aea8/0/E1FE69A34216C24D1870F5CED3A4309234A0F1B2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E1FE69A34216C24D1870F5CED3A4309234A0F1B2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/188e3a17-1c91-4793-83c4-211d4210aea8/0/E1FE69A34216C24D1870F5CED3A4309234A0F1B2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:0d:78:99:ce:f0:9e:c4:77:13:c0:ad:33:35:df:58:e1:d4:
         1e:e2:0c:82:40:bf:32:b1:12:6c:e5:58:85:be:b5:30:68:7e:
         bd:e2:e2:78:91:af:c9:0a:70:e7:cb:e0:cb:c3:6a:ab:01:e1:
         5d:40:27:36:8d:ce:ea:26:45:79:bb:11:aa:d3:d6:a9:21:e7:
         17:67:1e:84:4e:0c:7c:95:f5:a0:84:23:83:3e:c9:8c:c7:94:
         5a:a0:0a:16:c4:9f:7a:b7:08:4a:f5:ba:bf:36:d5:be:a3:6d:
         63:48:97:1a:a0:10:f2:e5:d9:45:e6:e1:67:3c:c0:43:66:cc:
         42:33:33:09:96:e4:c5:81:1a:1f:a2:60:a3:08:9a:3e:98:88:
         96:a3:8b:bb:c7:8b:64:30:2e:8f:0a:74:98:f2:66:56:f5:14:
         c9:33:e4:4e:2d:2d:3f:c7:f8:4c:a1:32:07:a8:5e:5a:6b:7d:
         40:af:b3:8d:b3:21:84:1b:68:3f:ca:57:44:91:0c:a1:e4:f3:
         92:e0:2c:8d:11:71:35:a4:23:85:48:a7:ab:86:f1:8a:da:f3:
         c7:77:b9:bd:cb:c7:1d:3b:02:f2:ce:8f:bc:4c:0a:fe:a1:d7:
         cb:3c:9e:7a:d1:da:b5:a7:58:a0:d1:88:6b:b8:be:0b:63:cf:
         11:a2:93:90
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUFNeHPxCnaPv0zcgX2CJFJTtC9gIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTFGRTY5QTM0MjE2QzI0RDE4NzBGNUNFRDNBNDMwOTIz
NEEwRjFCMjAeFw0yNjAyMDIwMDU5MDlaFw0yNjAyMDUwNDQ3MDlaMDMxMTAvBgNV
BAMTKEUwMzQwNERCRTk3NUMwMEQwMUM2MDI4RURDNjYwODczNjg2RTZFQjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSxPUXBiwFrV/QMvu9nA/kyzXy
MA963otnvgAwy4Vkm8ZAxRxWRMl2+N8eC1Z7sqkNvt4WQC9PTZxTznDi33lKWYlq
2/tjBK118Hfxd2Us791f5Hf8p1l4mRCrH5jhhRrDFwm8UVYHYpUfTugr1kmhQaQf
YDXc2V/0IwjaB0EFb0KuK8DlnxRenYsPZQ+rV0xi12lmfz/YHh286Rt1UEZmvquw
N8Kr6lVjCaVHdcEhQbkRMzOXVKsMPU809RdUUH8iHLQ5pZXgS0oFzGjT7p9kfUC+
24vt0WvX2Ub8nJwUiZUCO3O6nZ/aRlZdNAfHmKa7yzWKxFgSxN+0vWOMO9wBAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQU4DQE2+l1wA0BxgKO3GYIc2hubrMwHwYDVR0j
BBgwFoAU4f5po0IWwk0YcPXO06QwkjSg8bIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x
ODhlM2ExNy0xYzkxLTQ3OTMtODNjNC0yMTFkNDIxMGFlYTgvMC9FMUZFNjlBMzQy
MTZDMjREMTg3MEY1Q0VEM0E0MzA5MjM0QTBGMUIyLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvRTFGRTY5QTM0MjE2QzI0RDE4NzBGNUNFRDNBNDMwOTIzNEEw
RjFCMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTg4ZTNhMTctMWM5MS00NzkzLTgz
YzQtMjExZDQyMTBhZWE4LzAvRTFGRTY5QTM0MjE2QzI0RDE4NzBGNUNFRDNBNDMw
OTIzNEEwRjFCMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAKUNeJnO8J7EdxPArTM131jh1B7iDIJAvzKx
EmzlWIW+tTBofr3i4niRr8kKcOfL4MvDaqsB4V1AJzaNzuomRXm7EarT1qkh5xdn
HoRODHyV9aCEI4M+yYzHlFqgChbEn3q3CEr1ur821b6jbWNIlxqgEPLl2UXm4Wc8
wENmzEIzMwmW5MWBGh+iYKMImj6YiJaji7vHi2QwLo8KdJjyZlb1FMkz5E4tLT/H
+EyhMgeoXlprfUCvs42zIYQbaD/KV0SRDKHk85LgLI0RcTWkI4VIp6uG8Yra88d3
ub3Lxx07AvLOj7xMCv6h18s8nnrR2rWnWKDRiGu4vgtjzxGik5A=
-----END CERTIFICATE-----
Generated at Mon Feb 2 10:06:36 2026 by rpki-client