This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/227de071-3aaa-4e2e-974e-a78c81729f06/0/37EECBD045CA279ED50372AC86831099D2FD896F.mft
File:                     37EECBD045CA279ED50372AC86831099D2FD896F.mft (raw, json)
Hash identifier:          Gj+J5hSXf39mkmIwaOyhWNBw9kCg2oImhL4qb/FoqW8=
Subject key identifier:   14:51:82:0E:8C:27:51:CC:74:8F:3A:9F:D7:85:7A:C9:39:53:B3:4A
Authority key identifier: 37:EE:CB:D0:45:CA:27:9E:D5:03:72:AC:86:83:10:99:D2:FD:89:6F
Certificate issuer:       /CN=37EECBD045CA279ED50372AC86831099D2FD896F
Certificate serial:       2BBE5EA57151BF981F726E43C781219590FEACC1
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/37EECBD045CA279ED50372AC86831099D2FD896F.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/227de071-3aaa-4e2e-974e-a78c81729f06/0/37EECBD045CA279ED50372AC86831099D2FD896F.mft
Manifest number:          025B
Signing time:             Mon 02 Feb 2026 00:21:10 +0000
Manifest this update:     Mon 02 Feb 2026 00:16:10 +0000
Manifest next update:     Thu 05 Feb 2026 07:37:10 +0000
Files and hashes:         1: 3130332e3133342e3234352e302f32342d3234203d3e20313331373733.roa (hash: Wq8oI5uJOukII5L3zk611oNE/jiA40kO5VyLfYVxSmQ=)
                          2: 3130332e3133342e3234342e302f32342d3234203d3e20313331373733.roa (hash: 5Bf2jikCN3gYWsYKhxSa01VhTxjotLPuadtMQJAAO+A=)
                          3: 3130332e3133342e3234372e302f32342d3234203d3e20313331373733.roa (hash: 5c0nthd23+j6Ag0gaaZMv9VZhTnQO18ppv18K7deeCc=)
                          4: 37EECBD045CA279ED50372AC86831099D2FD896F.crl (hash: TyhlfWSI2ni1XBiIbWSxWghbeB1p5nZ5G0++kLLx2wM=)
                          5: 3130332e3133342e3234362e302f32342d3234203d3e20313331373733.roa (hash: 54f1hlVAyBoUYAJvfubN5BMRlDVY7RrMT0X14y7mHmo=)
                          6: 3130332e3133342e3234342e302f32322d3232203d3e20313331373733.roa (hash: q5y0x20QRi/wrHXnT1ANwgoYKODaVTFPhwpND9w3YmQ=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/227de071-3aaa-4e2e-974e-a78c81729f06/0/37EECBD045CA279ED50372AC86831099D2FD896F.crl
                          rsync://repo-rpki.idnic.net/repo/227de071-3aaa-4e2e-974e-a78c81729f06/0/37EECBD045CA279ED50372AC86831099D2FD896F.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/37EECBD045CA279ED50372AC86831099D2FD896F.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 05 Feb 2026 05:24:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:be:5e:a5:71:51:bf:98:1f:72:6e:43:c7:81:21:95:90:fe:ac:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37EECBD045CA279ED50372AC86831099D2FD896F
        Validity
            Not Before: Feb  2 00:16:10 2026 GMT
            Not After : Feb  5 07:37:10 2026 GMT
        Subject: CN=1451820E8C2751CC748F3A9FD7857AC93953B34A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:0a:80:27:c2:62:89:06:42:24:7f:76:e3:e3:
                    68:1f:dc:d5:4d:b3:d6:b9:c5:91:6b:b4:a2:4a:16:
                    5e:c0:73:80:66:6a:0a:c1:8d:01:20:76:32:ff:99:
                    3c:a7:94:18:5c:93:b6:6c:91:07:a4:3a:1b:b0:71:
                    35:0f:45:b1:14:4f:58:8a:5f:eb:12:74:aa:45:d1:
                    b9:d5:34:8c:0f:32:1d:76:9f:a8:51:d1:a0:88:9a:
                    4f:8c:53:dc:c9:f5:13:cb:df:5e:4f:d9:5b:b2:ff:
                    d7:b3:3d:53:f2:62:81:46:79:bf:e7:ba:3d:6c:e6:
                    5c:94:10:5d:c6:94:bb:5c:a5:65:9b:3a:be:01:e9:
                    5c:33:ca:d9:bb:48:69:d5:b5:40:ce:c2:7e:f5:53:
                    cb:4c:bd:82:31:23:f0:b3:dc:83:c6:65:8b:fa:ce:
                    e9:bb:6a:d5:87:1c:09:ec:bc:f0:fa:9f:7d:a3:2b:
                    2c:f7:f5:44:12:1d:ab:5e:02:be:3d:7a:78:fe:aa:
                    7f:bf:6a:83:f2:a3:da:66:91:24:b3:64:12:6e:4b:
                    2a:91:90:a2:0a:aa:e4:28:d1:0e:df:12:3f:55:75:
                    2a:06:b0:17:00:99:6b:7b:f1:83:ed:bb:45:87:85:
                    71:af:ac:81:41:f7:6f:7b:e4:8d:e9:d2:06:ac:14:
                    09:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:51:82:0E:8C:27:51:CC:74:8F:3A:9F:D7:85:7A:C9:39:53:B3:4A
            X509v3 Authority Key Identifier:
                keyid:37:EE:CB:D0:45:CA:27:9E:D5:03:72:AC:86:83:10:99:D2:FD:89:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/227de071-3aaa-4e2e-974e-a78c81729f06/0/37EECBD045CA279ED50372AC86831099D2FD896F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/37EECBD045CA279ED50372AC86831099D2FD896F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/227de071-3aaa-4e2e-974e-a78c81729f06/0/37EECBD045CA279ED50372AC86831099D2FD896F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:3f:31:00:77:a6:0e:d4:7f:d8:fb:48:ec:66:4c:1c:4b:ac:
         44:3d:a0:bb:5f:54:50:a0:90:d4:12:ff:bb:e9:fc:4e:b9:3e:
         e0:e1:6d:6f:f3:81:af:a0:27:7a:04:97:cf:37:00:bf:50:1b:
         76:f8:02:e1:fb:ba:19:f5:13:65:f6:73:34:df:ed:68:4d:ad:
         90:ba:4a:60:5b:06:45:a9:54:08:d0:60:dc:59:0d:fe:fd:c2:
         85:b9:a7:94:f4:5c:23:ac:cb:e8:25:d3:32:e2:47:e6:73:87:
         6f:15:3f:47:9b:7e:43:31:76:63:52:65:ad:b3:bd:49:2c:ab:
         8b:a0:fe:44:ab:41:ab:ad:d4:57:54:2e:ef:77:c4:17:e6:33:
         0c:e7:f1:a6:f9:ae:32:68:8a:d8:f5:f4:a2:75:cd:5b:8f:26:
         a6:09:1d:35:ec:13:8a:65:ce:39:89:25:cc:b2:f5:43:51:a8:
         87:19:b8:d8:c1:d6:59:e6:c6:b7:15:4c:78:32:39:1d:f4:52:
         f6:c6:f0:4a:0e:0c:b2:70:26:2a:f3:69:8e:89:97:79:1d:c9:
         f6:2e:2e:4d:b7:70:cc:50:1e:51:58:5e:4c:7e:ce:1a:21:30:
         39:b8:76:ae:ac:93:58:4f:1b:e5:12:64:98:dc:4d:ee:8c:e6:
         38:af:ef:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 10:02:12 2026 by rpki-client