This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/2ae6cd41-2e4c-4cc2-881e-bab44a884fd4/0/5E7E4A63C715B296D597B5AA3FE800609BF3B9F0.mft
File:                     5E7E4A63C715B296D597B5AA3FE800609BF3B9F0.mft (raw, json)
Hash identifier:          QuyPC0zgvzNbLW8sztOUiZQR2lRXrGEKp91u+LGPHRQ=
Subject key identifier:   79:A8:66:60:1A:D5:36:C4:FB:44:4E:1C:38:70:7E:52:4A:8D:6B:F3
Authority key identifier: 5E:7E:4A:63:C7:15:B2:96:D5:97:B5:AA:3F:E8:00:60:9B:F3:B9:F0
Certificate issuer:       /CN=5E7E4A63C715B296D597B5AA3FE800609BF3B9F0
Certificate serial:       3ECBD4927E366C2498E8712F87FEE2E9990BD894
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5E7E4A63C715B296D597B5AA3FE800609BF3B9F0.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/2ae6cd41-2e4c-4cc2-881e-bab44a884fd4/0/5E7E4A63C715B296D597B5AA3FE800609BF3B9F0.mft
Manifest number:          0545
Signing time:             Fri 30 Jan 2026 09:21:55 +0000
Manifest this update:     Fri 30 Jan 2026 09:16:55 +0000
Manifest next update:     Mon 02 Feb 2026 21:01:55 +0000
Files and hashes:         1: 3130332e3133372e38322e302f32332d3234203d3e20313338383238.roa (hash: oPq0eksRu+Qj6e9d7D3QHko1LMTQ6v8EettFrsXT3rc=)
                          2: 5E7E4A63C715B296D597B5AA3FE800609BF3B9F0.crl (hash: cICLmObsMWf0NJsLGVhn3R0BmKo4ErHxMYKW35DLywk=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/2ae6cd41-2e4c-4cc2-881e-bab44a884fd4/0/5E7E4A63C715B296D597B5AA3FE800609BF3B9F0.crl
                          rsync://repo-rpki.idnic.net/repo/2ae6cd41-2e4c-4cc2-881e-bab44a884fd4/0/5E7E4A63C715B296D597B5AA3FE800609BF3B9F0.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5E7E4A63C715B296D597B5AA3FE800609BF3B9F0.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Feb 2026 21:01:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:cb:d4:92:7e:36:6c:24:98:e8:71:2f:87:fe:e2:e9:99:0b:d8:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5E7E4A63C715B296D597B5AA3FE800609BF3B9F0
        Validity
            Not Before: Jan 30 09:16:55 2026 GMT
            Not After : Feb  2 21:01:55 2026 GMT
        Subject: CN=79A866601AD536C4FB444E1C38707E524A8D6BF3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:e6:d2:8e:22:50:ea:69:6e:d6:5d:37:7f:6b:
                    d1:2b:1a:ac:7c:78:79:60:6c:bb:57:ae:17:b1:ca:
                    2b:65:0d:2c:a6:55:b4:1c:d5:a3:4e:f4:30:32:12:
                    b0:65:d1:84:29:e1:39:17:3f:9e:79:6a:e7:8d:3e:
                    ce:20:49:f2:eb:c8:b4:b4:77:7d:b7:1c:b4:e6:6a:
                    c6:c9:b4:64:5a:1a:f0:8c:2b:ab:e1:46:4e:96:ca:
                    12:47:22:b1:3e:37:81:95:5d:00:3d:54:07:ef:40:
                    98:cd:d9:06:2f:0b:e3:e1:c0:62:ba:23:fd:68:78:
                    9b:0f:eb:4d:5c:bb:36:01:70:a4:83:d1:01:ec:2c:
                    01:69:47:58:c4:b7:26:5e:fb:5c:c9:e9:0b:b1:a1:
                    04:ec:d3:7f:9c:98:cb:ec:dc:5f:f4:68:23:92:9c:
                    76:2a:40:1b:53:49:cc:27:aa:16:4e:85:6a:69:0d:
                    af:98:5d:be:53:34:b3:55:ba:82:3f:8d:cb:9c:56:
                    7d:74:19:61:9c:49:aa:ce:57:9e:20:ff:39:80:b5:
                    b4:e5:6c:2e:e3:32:6d:13:0f:88:1b:bb:ca:e3:23:
                    1c:5b:45:d5:74:9a:a8:c4:c1:50:02:a5:37:d0:e7:
                    4f:eb:94:d9:7b:fd:e4:33:e9:ed:2c:26:83:14:9c:
                    61:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:A8:66:60:1A:D5:36:C4:FB:44:4E:1C:38:70:7E:52:4A:8D:6B:F3
            X509v3 Authority Key Identifier:
                keyid:5E:7E:4A:63:C7:15:B2:96:D5:97:B5:AA:3F:E8:00:60:9B:F3:B9:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/2ae6cd41-2e4c-4cc2-881e-bab44a884fd4/0/5E7E4A63C715B296D597B5AA3FE800609BF3B9F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5E7E4A63C715B296D597B5AA3FE800609BF3B9F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2ae6cd41-2e4c-4cc2-881e-bab44a884fd4/0/5E7E4A63C715B296D597B5AA3FE800609BF3B9F0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:89:55:3b:ea:03:01:79:12:15:ae:dc:69:f5:3a:13:00:21:
         55:0b:93:f3:ac:33:5a:3c:af:83:99:5a:b1:53:9d:d9:49:5a:
         c8:93:84:2c:54:d0:ed:f9:bf:73:63:dc:9f:58:48:c0:a1:3f:
         c5:85:87:8d:c8:73:26:e4:8c:33:a0:46:a7:ac:35:ca:86:12:
         3b:b1:62:a7:0c:cc:16:9c:71:86:6b:62:f6:76:b2:cc:35:ca:
         a7:c0:6f:02:0e:f0:7c:8c:46:46:a2:3e:f5:34:55:fb:df:f8:
         73:8c:fe:ff:e1:53:55:8a:c2:11:f8:cb:71:32:f6:71:e4:ed:
         de:9a:c8:7d:06:a0:d6:3c:f7:24:f4:46:5f:2b:52:90:bc:19:
         87:28:37:d1:1d:69:65:db:93:10:e5:a5:52:bb:82:06:59:35:
         4d:80:0d:e7:a0:b1:56:7b:ab:ab:f2:6c:71:b0:db:d7:49:12:
         27:c1:65:fc:55:80:b2:62:aa:c0:f8:5a:a0:05:1c:50:ad:2a:
         77:81:06:ed:1d:a2:c8:2e:eb:01:7c:68:19:8a:82:d5:bf:73:
         4d:f4:e0:29:d3:e1:d4:c1:15:12:e4:b9:06:45:80:4f:cc:8f:
         08:9c:49:1d:35:dd:51:4f:b9:bc:81:b8:30:a5:af:a3:e6:44:
         13:5b:54:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jan 31 13:00:26 2026 by rpki-client