This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/2bd30587-a7ca-4195-a359-0c0f627af8da/0/798944F7FBC57D5CFBF5F1BB680F2D73CAD26DD5.mft
File:                     798944F7FBC57D5CFBF5F1BB680F2D73CAD26DD5.mft (raw, json)
Hash identifier:          nDhLfG7QPEJ09TQ+bFV/ODIYPO0sE4VE6+cinold88s=
Subject key identifier:   37:04:42:DE:35:6C:86:DD:C6:9E:AE:F8:CD:53:B5:0F:7C:C9:0F:73
Authority key identifier: 79:89:44:F7:FB:C5:7D:5C:FB:F5:F1:BB:68:0F:2D:73:CA:D2:6D:D5
Certificate issuer:       /CN=798944F7FBC57D5CFBF5F1BB680F2D73CAD26DD5
Certificate serial:       4A6CABB9D13309D8AAA19853CDA7F1C2D775D5E2
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/798944F7FBC57D5CFBF5F1BB680F2D73CAD26DD5.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/2bd30587-a7ca-4195-a359-0c0f627af8da/0/798944F7FBC57D5CFBF5F1BB680F2D73CAD26DD5.mft
Manifest number:          023F
Signing time:             Mon 02 Feb 2026 08:11:30 +0000
Manifest this update:     Mon 02 Feb 2026 08:06:30 +0000
Manifest next update:     Thu 05 Feb 2026 14:54:30 +0000
Files and hashes:         1: 798944F7FBC57D5CFBF5F1BB680F2D73CAD26DD5.crl (hash: 4kgthGhBlnUjsvxMm3z/le58+bJMFNNdwhYXj/I9pHA=)
                          2: 3130332e3135372e36332e302f32342d3234203d3e20313439393736.roa (hash: MSA3Izjg6KzN5Q+MKwDBM7mghQbhoAUxxHKShKe7LT0=)
                          3: 3130332e3135372e36322e302f32342d3234203d3e20313439393736.roa (hash: umdrRzgp8Ciqeng1bs/crkT4xOCEEqpUSt3z8J2SnuY=)
                          4: 3130332e3135372e36322e302f32332d3233203d3e20313439393736.roa (hash: Z+uPltjZGSJJVlVHwNz2NCUXUIEBHK05ylu6rUY+FMs=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/2bd30587-a7ca-4195-a359-0c0f627af8da/0/798944F7FBC57D5CFBF5F1BB680F2D73CAD26DD5.crl
                          rsync://repo-rpki.idnic.net/repo/2bd30587-a7ca-4195-a359-0c0f627af8da/0/798944F7FBC57D5CFBF5F1BB680F2D73CAD26DD5.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/798944F7FBC57D5CFBF5F1BB680F2D73CAD26DD5.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 05 Feb 2026 05:24:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:6c:ab:b9:d1:33:09:d8:aa:a1:98:53:cd:a7:f1:c2:d7:75:d5:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=798944F7FBC57D5CFBF5F1BB680F2D73CAD26DD5
        Validity
            Not Before: Feb  2 08:06:30 2026 GMT
            Not After : Feb  5 14:54:30 2026 GMT
        Subject: CN=370442DE356C86DDC69EAEF8CD53B50F7CC90F73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:c8:01:ea:af:78:a4:94:d0:83:9d:7d:46:f6:
                    80:ec:25:87:b6:b3:ca:08:d9:f5:e9:f2:ad:15:07:
                    09:66:51:b8:ec:c1:2d:c3:9f:2b:16:c6:3c:79:8a:
                    2f:22:36:e9:bd:b3:91:c9:bd:4e:92:50:01:85:7f:
                    fa:e7:48:bc:95:a5:e0:21:d4:f3:24:4f:42:45:43:
                    40:41:db:b7:73:4b:2a:4a:2b:60:32:fb:cd:d5:22:
                    10:de:87:3e:80:98:eb:1c:6b:36:7c:6f:2d:22:9a:
                    6c:b5:57:fe:02:be:a3:7e:72:7b:d1:d2:65:1e:e1:
                    19:bb:5b:38:fd:57:dd:08:58:70:8a:1b:23:a4:22:
                    59:5f:8a:57:bd:19:4b:a5:28:df:69:af:14:36:86:
                    d8:ee:6a:d0:e7:9f:54:16:b5:01:7f:a3:ed:23:fd:
                    22:36:dc:c5:08:af:24:1a:ed:99:21:29:e7:d7:7f:
                    f8:07:7b:d5:15:6a:83:f1:05:ff:c3:ba:08:fd:6c:
                    9d:ec:dc:40:58:92:4c:7e:e1:02:1d:05:24:40:ea:
                    49:d7:d5:8a:cb:4f:c3:78:00:a0:63:a4:13:2c:01:
                    68:b9:26:cb:7c:6d:58:00:72:f7:00:59:73:6e:2c:
                    58:06:1f:ca:f1:d2:1d:36:d2:83:f4:03:ba:ad:9d:
                    e0:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:04:42:DE:35:6C:86:DD:C6:9E:AE:F8:CD:53:B5:0F:7C:C9:0F:73
            X509v3 Authority Key Identifier:
                keyid:79:89:44:F7:FB:C5:7D:5C:FB:F5:F1:BB:68:0F:2D:73:CA:D2:6D:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/2bd30587-a7ca-4195-a359-0c0f627af8da/0/798944F7FBC57D5CFBF5F1BB680F2D73CAD26DD5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/798944F7FBC57D5CFBF5F1BB680F2D73CAD26DD5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2bd30587-a7ca-4195-a359-0c0f627af8da/0/798944F7FBC57D5CFBF5F1BB680F2D73CAD26DD5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c8:0e:da:f3:82:1d:34:f7:9e:76:9f:a3:0b:7e:a9:49:58:19:
         6a:51:4a:d4:55:29:36:4d:df:ca:bf:ca:ef:bc:e9:55:c8:f8:
         af:00:67:8d:4c:42:e7:93:ba:7b:ba:98:39:2c:77:8c:8d:40:
         63:6f:fb:cd:dc:51:c6:b8:dd:c5:ec:5b:4b:81:86:7f:b0:41:
         3e:c0:61:81:28:5e:02:28:1c:1d:66:9a:ee:0c:be:b9:73:c0:
         02:b3:58:f1:99:10:d7:54:ff:ec:11:71:36:13:15:26:b5:45:
         be:04:1f:c7:1d:77:f9:c0:e2:35:a6:6a:96:a2:14:61:d7:53:
         06:41:47:3e:e2:a3:75:9a:b7:aa:f5:66:56:9e:d1:0b:c1:a1:
         ca:e6:e6:63:0a:f4:5a:4d:d0:a9:67:21:fd:3a:ad:90:f1:f8:
         7d:97:9b:7c:94:ed:24:5a:bd:c6:32:50:dd:f5:c8:9a:53:36:
         99:83:20:47:53:ce:5f:cd:db:4e:c1:75:27:80:f8:92:67:3e:
         29:bb:ba:e1:0f:ae:fe:b9:52:94:80:51:7e:1f:da:5d:b4:0b:
         fc:f1:f1:ac:b9:e9:78:0d:eb:d5:30:1c:e0:fb:c0:86:5b:b5:
         84:20:ea:27:82:eb:ed:c9:3e:88:5f:81:86:b0:f6:3a:a5:a4:
         6c:ce:90:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 12:49:00 2026 by rpki-client