This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/2626639a-9a1c-4c0e-ba17-f679f0506cbc/0/579618DB6FFA608F5998FCD968B270AE61BDB97C.mft
File:                     579618DB6FFA608F5998FCD968B270AE61BDB97C.mft (raw, json)
Hash identifier:          Q+m17CquxD2xaHoIwF3n09+63Cc7Gv4Nfz4vApq/d4k=
Subject key identifier:   F6:CD:27:E8:26:94:9D:50:4F:5D:D4:60:70:D0:28:B3:7D:B8:16:0B
Authority key identifier: 57:96:18:DB:6F:FA:60:8F:59:98:FC:D9:68:B2:70:AE:61:BD:B9:7C
Certificate issuer:       /CN=579618DB6FFA608F5998FCD968B270AE61BDB97C
Certificate serial:       28AECC0D1FEF8E5886280F01C674C59832E53907
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/579618DB6FFA608F5998FCD968B270AE61BDB97C.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/2626639a-9a1c-4c0e-ba17-f679f0506cbc/0/579618DB6FFA608F5998FCD968B270AE61BDB97C.mft
Manifest number:          0233
Signing time:             Sun 01 Feb 2026 17:52:19 +0000
Manifest this update:     Sun 01 Feb 2026 17:47:19 +0000
Manifest next update:     Thu 05 Feb 2026 05:11:19 +0000
Files and hashes:         1: 323430333a613163303a3a2f33322d3332203d3e20313338303732.roa (hash: sIMuid2cN98YAJ+u3L+3la7IfjwgED+cUwmpS2iHGMw=)
                          2: 3130332e3132332e3132302e302f32342d3234203d3e20313338303732.roa (hash: etcdt1rptra2wpD632iI4CEj+HZk7gKrmvWLBgXFbpI=)
                          3: 579618DB6FFA608F5998FCD968B270AE61BDB97C.crl (hash: amMVTPisQJzlNVgjvKsY8a/YXJJsV0kCH6hhIWmSqIE=)
                          4: 3130332e3132332e3132312e302f32342d3234203d3e20313338303730.roa (hash: kHWm0ElDQFUg3ddfCvb6B3R6hoVD6v/wMJbHPMOHCH8=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/2626639a-9a1c-4c0e-ba17-f679f0506cbc/0/579618DB6FFA608F5998FCD968B270AE61BDB97C.crl
                          rsync://repo-rpki.idnic.net/repo/2626639a-9a1c-4c0e-ba17-f679f0506cbc/0/579618DB6FFA608F5998FCD968B270AE61BDB97C.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/579618DB6FFA608F5998FCD968B270AE61BDB97C.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 05 Feb 2026 05:11:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:ae:cc:0d:1f:ef:8e:58:86:28:0f:01:c6:74:c5:98:32:e5:39:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=579618DB6FFA608F5998FCD968B270AE61BDB97C
        Validity
            Not Before: Feb  1 17:47:19 2026 GMT
            Not After : Feb  5 05:11:19 2026 GMT
        Subject: CN=F6CD27E826949D504F5DD46070D028B37DB8160B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:4e:27:4a:d7:1d:a9:54:e4:5a:45:71:3d:29:
                    4e:b8:d0:40:b9:7d:8d:10:a4:9c:5e:c0:07:f2:a2:
                    94:82:d4:3e:0f:1b:39:88:76:e1:73:de:50:f8:9b:
                    38:58:ee:1a:8c:2c:22:85:ee:ae:1d:67:80:90:73:
                    d2:f1:99:28:6c:af:2f:e6:2b:5e:d8:76:d2:9d:89:
                    1b:d1:03:0e:f9:3a:f8:b0:26:47:44:f3:20:d0:84:
                    b7:a1:6b:27:72:75:07:ea:3f:4a:66:0e:c0:64:ba:
                    b4:26:33:8c:3e:2f:70:81:8e:cb:15:e1:11:54:a2:
                    62:db:64:9a:f1:92:07:d2:20:a5:cd:e4:53:c9:67:
                    07:72:35:f2:42:04:df:b2:83:8b:b2:46:d6:e1:ee:
                    e8:60:8a:06:c0:c5:4f:03:d1:aa:a8:13:1e:c0:cf:
                    fc:7a:2a:46:5b:e3:62:3c:6e:cb:99:16:e9:19:9f:
                    88:62:e3:99:9c:b0:40:2d:82:94:84:29:8d:69:f3:
                    41:5b:35:84:ce:56:b5:f6:50:4f:dc:6c:08:66:59:
                    9e:c1:ca:a4:db:5e:55:61:64:00:49:91:4a:aa:2a:
                    50:28:ae:c1:b9:a3:e8:ae:66:04:10:cb:01:d6:40:
                    2e:c8:b2:80:eb:eb:73:53:ce:92:18:e5:55:8d:e4:
                    2e:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:CD:27:E8:26:94:9D:50:4F:5D:D4:60:70:D0:28:B3:7D:B8:16:0B
            X509v3 Authority Key Identifier:
                keyid:57:96:18:DB:6F:FA:60:8F:59:98:FC:D9:68:B2:70:AE:61:BD:B9:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/2626639a-9a1c-4c0e-ba17-f679f0506cbc/0/579618DB6FFA608F5998FCD968B270AE61BDB97C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/579618DB6FFA608F5998FCD968B270AE61BDB97C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2626639a-9a1c-4c0e-ba17-f679f0506cbc/0/579618DB6FFA608F5998FCD968B270AE61BDB97C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:14:64:bd:16:17:5b:26:e7:5c:a7:7b:4b:21:59:01:f3:03:
         90:f1:4a:8c:ad:e6:1c:92:bb:63:89:39:5c:b7:40:f4:dd:3f:
         d2:bf:f8:e6:2e:df:87:c4:aa:5a:09:fa:be:15:d7:f9:54:28:
         46:14:ce:f4:04:d3:ac:22:b5:bf:cd:91:95:04:74:0d:97:11:
         80:93:76:71:dc:84:2a:71:4c:e9:21:b0:59:9b:dc:34:3f:d8:
         a1:2d:42:d6:9c:25:5b:54:d3:92:ea:62:1d:cd:31:ed:36:52:
         46:2a:4e:27:e1:68:a3:b5:bc:6b:97:14:15:66:0b:58:df:b0:
         7b:c2:26:9b:8c:db:c8:2e:78:7f:f8:61:dd:70:ac:ae:18:40:
         0c:d1:c8:e1:87:12:8b:7a:54:5a:92:87:b3:36:30:01:05:9e:
         1f:0c:66:84:31:5f:41:05:c5:18:50:4e:6a:c1:a6:0f:d9:40:
         69:a3:ac:3b:82:6f:b2:d5:36:9b:6a:5c:4f:c7:ad:20:ec:06:
         58:e8:7c:06:8c:4d:6b:f3:cf:69:9c:db:52:e3:fe:e3:5b:d8:
         cb:4b:d4:3b:37:e3:c7:bf:ae:e5:48:cf:e9:35:c0:cf:11:eb:
         29:24:80:a7:52:62:aa:6b:13:75:29:ef:65:70:33:90:fe:76:
         82:1e:61:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 12:54:42 2026 by rpki-client