This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/30a392dc-2e4e-4770-8f68-bc61f80b74a7/0/5509BA3B36B8E5C809C09949749272FEF605F530.mft
File:                     5509BA3B36B8E5C809C09949749272FEF605F530.mft (raw, json)
Hash identifier:          NJASXtW8t8K4NIl7WUZjTi3qSrjjETHT42W7eOoE9RE=
Subject key identifier:   0A:21:8F:54:18:01:00:6B:98:3C:BF:5C:DB:B8:4D:B5:6B:55:EC:A2
Authority key identifier: 55:09:BA:3B:36:B8:E5:C8:09:C0:99:49:74:92:72:FE:F6:05:F5:30
Certificate issuer:       /CN=5509BA3B36B8E5C809C09949749272FEF605F530
Certificate serial:       12DFC2A182DD800B6E07A657F0D397F5BA364711
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5509BA3B36B8E5C809C09949749272FEF605F530.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/30a392dc-2e4e-4770-8f68-bc61f80b74a7/0/5509BA3B36B8E5C809C09949749272FEF605F530.mft
Manifest number:          01EA
Signing time:             Mon 02 Feb 2026 05:31:25 +0000
Manifest this update:     Mon 02 Feb 2026 05:26:25 +0000
Manifest next update:     Thu 05 Feb 2026 10:34:25 +0000
Files and hashes:         1: 5509BA3B36B8E5C809C09949749272FEF605F530.crl (hash: PuYWLLbe49NABxyjcLNpZvmDu4lecWZg7zb0oNCbL3c=)
                          2: 3130332e3133302e3230362e302f32342d3234203d3e20313338303937.roa (hash: GpDEKCgBX9XD+jiRaKE2yJjAbdJ9JvSIqiEv2cy9Py0=)
                          3: 323030313a6466363a656630303a3a2f34382d3438203d3e20313338303937.roa (hash: fswipt2GzpbLxNVSKLJNBtjumryj1H079NPKIHEQz6g=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/30a392dc-2e4e-4770-8f68-bc61f80b74a7/0/5509BA3B36B8E5C809C09949749272FEF605F530.crl
                          rsync://repo-rpki.idnic.net/repo/30a392dc-2e4e-4770-8f68-bc61f80b74a7/0/5509BA3B36B8E5C809C09949749272FEF605F530.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5509BA3B36B8E5C809C09949749272FEF605F530.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 05 Feb 2026 05:24:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:df:c2:a1:82:dd:80:0b:6e:07:a6:57:f0:d3:97:f5:ba:36:47:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5509BA3B36B8E5C809C09949749272FEF605F530
        Validity
            Not Before: Feb  2 05:26:25 2026 GMT
            Not After : Feb  5 10:34:25 2026 GMT
        Subject: CN=0A218F541801006B983CBF5CDBB84DB56B55ECA2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:39:3f:34:cc:63:e2:d0:6b:c0:f1:71:63:9e:
                    70:c9:53:52:eb:36:bf:3e:80:da:38:4b:76:37:1e:
                    12:d3:9e:ee:bc:7c:94:62:3f:98:bf:c8:3a:62:16:
                    ed:66:54:c3:3e:ce:31:93:13:2a:ec:70:4d:f5:eb:
                    04:c6:69:e5:0c:a3:16:61:e2:75:a9:7e:d7:d5:da:
                    a3:c1:29:76:8c:51:ed:aa:22:d8:46:9e:14:a4:11:
                    90:96:ec:29:b1:fd:a5:93:d7:c4:6d:16:a5:46:1e:
                    9a:2e:34:40:06:b9:70:fe:89:ec:91:07:e1:09:2b:
                    a4:90:fc:a1:57:57:47:30:d5:9f:7f:70:fe:82:7f:
                    6b:36:20:e4:13:a0:d1:de:90:1f:f9:c3:95:d4:7e:
                    78:b3:c6:51:ff:b0:ce:85:16:8a:f0:5a:d8:fe:e8:
                    58:bc:28:34:96:f3:c0:1d:93:5a:63:8c:f1:63:ea:
                    22:4a:77:ce:52:16:e0:2b:e6:32:c5:46:27:54:89:
                    93:be:40:50:1a:9c:a0:de:b7:7a:72:a4:b9:98:86:
                    01:ff:81:db:80:3a:be:d1:82:08:5a:fb:39:e7:08:
                    0c:71:fe:b0:05:68:d9:5c:ca:45:0e:eb:42:49:15:
                    60:22:dd:d4:70:04:b5:d1:c2:52:8c:b3:39:34:1c:
                    1c:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:21:8F:54:18:01:00:6B:98:3C:BF:5C:DB:B8:4D:B5:6B:55:EC:A2
            X509v3 Authority Key Identifier:
                keyid:55:09:BA:3B:36:B8:E5:C8:09:C0:99:49:74:92:72:FE:F6:05:F5:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/30a392dc-2e4e-4770-8f68-bc61f80b74a7/0/5509BA3B36B8E5C809C09949749272FEF605F530.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5509BA3B36B8E5C809C09949749272FEF605F530.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/30a392dc-2e4e-4770-8f68-bc61f80b74a7/0/5509BA3B36B8E5C809C09949749272FEF605F530.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:94:fb:50:87:bb:43:de:6c:45:0f:03:00:51:92:27:e9:91:
         2e:25:e8:83:2a:33:9b:ba:5e:d3:e3:b6:04:d8:5d:36:30:25:
         23:ff:2d:8a:ca:cc:08:c4:a4:b0:e5:bf:bf:5f:bd:a0:11:b1:
         e1:c4:36:19:6d:55:33:77:12:f6:3b:aa:18:a9:fc:54:ea:93:
         39:66:24:18:66:13:e3:58:93:c2:84:e1:c6:66:a0:6e:e9:14:
         19:c3:e2:9c:ca:c3:b0:1a:ca:06:cf:c4:98:17:1a:91:c4:1f:
         28:1e:fb:9a:28:47:32:03:4c:a5:c0:fc:cd:34:cf:5e:61:5a:
         07:0b:2d:ee:53:4a:30:cd:25:c1:14:37:38:d9:57:1f:68:b3:
         b0:e9:1a:af:3b:ee:b3:ec:56:18:ce:11:f3:32:e4:5e:96:ab:
         22:82:e9:bb:60:b7:d5:a3:3e:47:74:cf:33:48:a7:16:43:31:
         28:95:4e:39:e6:1f:b9:79:31:ec:ea:a5:3c:4c:a1:83:1b:88:
         d1:7d:8e:37:c0:d9:37:69:ae:dd:dc:b0:04:83:ab:ce:bb:9c:
         62:11:94:5b:d1:5a:d0:73:94:90:34:d1:32:f1:35:65:93:b5:
         a2:06:c5:62:41:3e:c8:d6:0c:5c:d8:76:8b:86:ea:fa:c3:1b:
         f8:78:66:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 12:48:46 2026 by rpki-client