This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/1df4164e-74e5-40d6-9a30-b372a4d2a454/0/E2CDAA223BFB6F2B13973EB80353ED211C9F21C9.mft
File:                     E2CDAA223BFB6F2B13973EB80353ED211C9F21C9.mft (raw, json)
Hash identifier:          E3oO81vUfvKCrI2W0qRK4jRwvzDosXGW7bctC2wwBAE=
Subject key identifier:   F9:84:90:0E:BB:1E:F9:AE:82:91:83:08:CA:BE:B8:19:AC:A7:5B:3D
Authority key identifier: E2:CD:AA:22:3B:FB:6F:2B:13:97:3E:B8:03:53:ED:21:1C:9F:21:C9
Certificate issuer:       /CN=E2CDAA223BFB6F2B13973EB80353ED211C9F21C9
Certificate serial:       7B3369BE48FCE5B3DCB063876A383059696AC6E4
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E2CDAA223BFB6F2B13973EB80353ED211C9F21C9.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/1df4164e-74e5-40d6-9a30-b372a4d2a454/0/E2CDAA223BFB6F2B13973EB80353ED211C9F21C9.mft
Manifest number:          022A
Signing time:             Sat 31 Jan 2026 05:51:34 +0000
Manifest this update:     Sat 31 Jan 2026 05:46:34 +0000
Manifest next update:     Tue 03 Feb 2026 08:23:34 +0000
Files and hashes:         1: 3130332e3138392e3234392e302f32342d3234203d3e20313439383838.roa (hash: yz9DrhiZMU3eHWMSo1Oy5Cw6+/2sDeBXKj2G3NoDN0k=)
                          2: E2CDAA223BFB6F2B13973EB80353ED211C9F21C9.crl (hash: Pnw8EMUS7uiw444J2WhW5vSGz/a1Vat1h6ZgIwBuZmQ=)
                          3: 3130332e3138392e3234382e302f32342d3234203d3e20313439383838.roa (hash: r4fgqA47qTlb3GhP6gzYmrPLdVv6QpS/f5hXYEC/f/k=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/1df4164e-74e5-40d6-9a30-b372a4d2a454/0/E2CDAA223BFB6F2B13973EB80353ED211C9F21C9.crl
                          rsync://repo-rpki.idnic.net/repo/1df4164e-74e5-40d6-9a30-b372a4d2a454/0/E2CDAA223BFB6F2B13973EB80353ED211C9F21C9.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E2CDAA223BFB6F2B13973EB80353ED211C9F21C9.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 03 Feb 2026 08:23:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:33:69:be:48:fc:e5:b3:dc:b0:63:87:6a:38:30:59:69:6a:c6:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E2CDAA223BFB6F2B13973EB80353ED211C9F21C9
        Validity
            Not Before: Jan 31 05:46:34 2026 GMT
            Not After : Feb  3 08:23:34 2026 GMT
        Subject: CN=F984900EBB1EF9AE82918308CABEB819ACA75B3D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:97:ad:6a:91:77:0c:bc:0a:c5:76:fc:8a:95:
                    6e:f8:c2:f9:b4:a4:43:d5:52:d2:ea:c2:06:2e:32:
                    00:ce:2b:70:00:02:67:5e:6f:d0:d2:ef:d8:9d:4e:
                    68:49:22:db:2a:ec:e7:99:92:a9:b8:dc:9f:57:10:
                    46:95:22:f2:99:f0:55:fd:d6:c4:33:33:e2:90:16:
                    13:dc:eb:ba:5a:1c:1f:ab:9e:f7:03:c6:93:b7:3a:
                    e7:32:f9:a0:66:c9:a1:37:55:30:4a:92:cf:ba:6a:
                    a0:6a:ad:aa:f2:8f:69:b0:ec:bd:4d:68:e3:7c:a1:
                    58:39:b5:a1:51:40:57:23:78:24:77:53:43:04:f9:
                    10:17:6c:b8:6f:21:25:65:ed:d7:70:25:a6:d0:a5:
                    d2:4e:9e:b5:b8:62:e8:fe:63:2b:d6:05:51:53:ab:
                    8d:8a:79:e0:50:ce:53:3a:fe:87:67:6e:74:49:7c:
                    03:8f:cf:9f:9c:5f:44:d0:c2:77:8a:99:8f:8e:03:
                    09:65:ab:c3:ce:a6:0e:28:1b:4e:d3:4c:0a:c4:39:
                    0d:69:b5:2c:80:bd:57:88:68:50:95:92:db:6e:28:
                    fa:6f:47:65:b3:cd:5d:80:e4:e4:ee:c7:57:e4:e5:
                    4c:58:06:75:18:ad:69:cb:5f:52:e7:3a:0c:25:42:
                    22:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:84:90:0E:BB:1E:F9:AE:82:91:83:08:CA:BE:B8:19:AC:A7:5B:3D
            X509v3 Authority Key Identifier:
                keyid:E2:CD:AA:22:3B:FB:6F:2B:13:97:3E:B8:03:53:ED:21:1C:9F:21:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/1df4164e-74e5-40d6-9a30-b372a4d2a454/0/E2CDAA223BFB6F2B13973EB80353ED211C9F21C9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E2CDAA223BFB6F2B13973EB80353ED211C9F21C9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1df4164e-74e5-40d6-9a30-b372a4d2a454/0/E2CDAA223BFB6F2B13973EB80353ED211C9F21C9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:39:32:8b:fa:32:72:f8:f1:dd:8a:d2:00:20:76:c9:49:e6:
         df:b8:d3:da:ce:4a:d8:89:69:7e:66:41:fa:bd:c2:7b:fc:da:
         25:c9:36:f4:79:c9:1d:9f:b7:10:9a:d4:96:0c:a4:66:cb:10:
         a6:a2:b6:0c:2d:97:f3:9c:4e:2b:63:f7:d8:5a:54:82:c7:88:
         b8:7a:10:39:38:67:f2:69:b7:85:bc:e1:75:95:f0:db:01:ae:
         e8:61:18:6f:fd:d8:aa:f8:19:a3:54:02:97:f0:70:fa:67:f5:
         6a:f7:73:d8:4b:ab:24:42:18:6d:36:db:a8:e7:89:94:1e:1d:
         ce:cf:f7:5c:3e:38:f4:10:2b:e4:df:c4:12:e3:03:3a:96:3e:
         88:17:b6:17:04:f5:cc:31:e7:f8:64:b5:01:4e:6e:41:4b:14:
         f3:64:31:4e:cc:54:a9:7a:db:c7:49:eb:4f:ff:80:98:d2:db:
         00:53:b1:cc:18:43:17:0a:42:0a:08:78:d4:0f:e8:2a:dc:53:
         23:19:69:b1:59:19:52:1f:b4:b8:33:a2:e8:13:c5:30:f7:8c:
         10:7c:54:65:35:0b:70:83:f8:ca:cf:51:0a:ef:a8:cf:ff:3c:
         ab:1b:53:a4:7c:c4:33:2e:c6:ab:9b:20:63:a1:e0:3f:8c:7c:
         1a:48:27:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 10:02:54 2026 by rpki-client