This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/31224247-347f-4a57-a79a-cb2c21c9170e/0/52FA38C22CA0987CE48A3BD5191FFDA2AD39DB3B.mft
File:                     52FA38C22CA0987CE48A3BD5191FFDA2AD39DB3B.mft (raw, json)
Hash identifier:          w63VpvCCjgAUYy4+edyVAomIe/ZLlUb5bKJU1DfKKCE=
Subject key identifier:   54:7A:29:6F:31:7D:91:3D:D1:D8:2F:00:90:20:8D:87:30:92:7B:33
Authority key identifier: 52:FA:38:C2:2C:A0:98:7C:E4:8A:3B:D5:19:1F:FD:A2:AD:39:DB:3B
Certificate issuer:       /CN=52FA38C22CA0987CE48A3BD5191FFDA2AD39DB3B
Certificate serial:       5545445BD47B27319A47EAEF209FF3F38FA9A277
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/52FA38C22CA0987CE48A3BD5191FFDA2AD39DB3B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/31224247-347f-4a57-a79a-cb2c21c9170e/0/52FA38C22CA0987CE48A3BD5191FFDA2AD39DB3B.mft
Manifest number:          0105
Signing time:             Sun 01 Feb 2026 10:32:18 +0000
Manifest this update:     Sun 01 Feb 2026 10:27:18 +0000
Manifest next update:     Wed 04 Feb 2026 11:53:18 +0000
Files and hashes:         1: 52FA38C22CA0987CE48A3BD5191FFDA2AD39DB3B.crl (hash: VA793SP156B3tvvKFlhq9fqEkxfm6RKhmpNsNpuWLgI=)
                          2: 3231302e38372e3132332e302f32342d3234203d3e20313532303634.roa (hash: cxNzmi6v2p99HHhR+ggQ6n1CG/x3GBlPxyYmKXCdmXo=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/31224247-347f-4a57-a79a-cb2c21c9170e/0/52FA38C22CA0987CE48A3BD5191FFDA2AD39DB3B.crl
                          rsync://repo-rpki.idnic.net/repo/31224247-347f-4a57-a79a-cb2c21c9170e/0/52FA38C22CA0987CE48A3BD5191FFDA2AD39DB3B.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/52FA38C22CA0987CE48A3BD5191FFDA2AD39DB3B.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 04 Feb 2026 11:53:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:45:44:5b:d4:7b:27:31:9a:47:ea:ef:20:9f:f3:f3:8f:a9:a2:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52FA38C22CA0987CE48A3BD5191FFDA2AD39DB3B
        Validity
            Not Before: Feb  1 10:27:18 2026 GMT
            Not After : Feb  4 11:53:18 2026 GMT
        Subject: CN=547A296F317D913DD1D82F0090208D8730927B33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:4f:77:c1:f3:23:4d:d8:7a:2c:e9:69:33:8e:
                    bb:6c:0d:d7:d6:64:9a:c1:e6:72:96:ee:f0:63:6a:
                    5f:75:47:c7:e5:69:92:04:89:e4:12:bf:d1:ee:93:
                    07:17:c9:c7:86:35:2d:65:b8:f5:fd:d3:ed:4f:8f:
                    cf:f9:8e:72:5e:40:d9:6b:6a:11:75:79:54:7d:0f:
                    d9:51:bb:a6:d0:59:57:98:e4:42:a9:37:97:80:bb:
                    4f:37:a8:4a:16:ec:d2:cc:90:78:79:eb:ac:cf:44:
                    cc:25:37:7b:e3:1e:04:17:f7:52:8a:cc:37:49:45:
                    f0:95:b4:ea:6d:e7:0d:b4:11:68:af:30:66:37:7a:
                    a8:b6:22:51:6b:fe:a2:70:58:8d:98:d5:70:d6:ff:
                    cb:ed:8d:8f:99:a9:d0:29:90:9d:cb:53:68:45:2f:
                    66:8c:14:38:05:6d:57:39:e6:2c:58:f0:69:27:2d:
                    a8:f5:e8:4d:16:ad:b9:ef:7f:3f:2c:8b:c0:6b:29:
                    8d:cf:e7:fc:6b:df:cd:de:b7:ae:e9:d6:a4:21:62:
                    c1:23:8d:fa:a4:82:d0:c4:2b:e8:d7:aa:24:53:a3:
                    09:c2:1d:a0:33:0a:39:83:5a:fb:3b:79:57:41:b5:
                    ce:8f:14:9a:f9:4d:22:de:e7:89:b4:3d:f1:1a:4d:
                    de:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:7A:29:6F:31:7D:91:3D:D1:D8:2F:00:90:20:8D:87:30:92:7B:33
            X509v3 Authority Key Identifier:
                keyid:52:FA:38:C2:2C:A0:98:7C:E4:8A:3B:D5:19:1F:FD:A2:AD:39:DB:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/31224247-347f-4a57-a79a-cb2c21c9170e/0/52FA38C22CA0987CE48A3BD5191FFDA2AD39DB3B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/52FA38C22CA0987CE48A3BD5191FFDA2AD39DB3B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/31224247-347f-4a57-a79a-cb2c21c9170e/0/52FA38C22CA0987CE48A3BD5191FFDA2AD39DB3B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:18:ed:12:af:fd:73:77:6c:e5:4f:35:03:40:0a:3f:5a:6e:
         50:49:28:9c:61:be:e7:eb:11:09:ad:af:50:48:b2:b0:3d:fa:
         65:21:bf:7b:6d:de:82:d9:97:a7:87:f9:cd:bf:15:da:46:b1:
         98:ee:5a:9d:e5:be:5b:a2:41:0e:e8:17:05:5b:69:cc:85:06:
         d4:8d:a4:8f:e2:1a:9b:f1:42:45:61:5f:6f:bf:b0:ce:51:c8:
         ad:97:7d:cc:9c:40:fc:7e:d6:68:e7:68:95:32:62:64:2e:b7:
         ce:10:c2:ed:86:26:98:be:98:6f:0c:18:09:7a:b8:c8:01:64:
         76:39:8e:47:e3:d2:76:e5:6b:c8:96:ff:b8:eb:c1:e2:c2:19:
         f3:af:4c:02:6d:f5:64:90:12:f5:c9:7b:9d:16:56:36:50:03:
         1e:b6:4d:65:fa:90:01:d7:94:ac:7f:15:42:b2:31:09:05:ed:
         47:44:69:b6:79:0a:e7:52:bf:e5:d5:c4:e9:7c:d3:b5:3e:42:
         8d:f9:c6:4f:38:47:cc:42:37:e4:46:02:74:40:22:44:6c:19:
         08:1d:b2:d9:9b:23:d0:1f:e8:19:01:de:27:0c:6f:b3:4e:0f:
         1e:c0:20:8e:29:b4:a2:51:0c:d6:29:19:20:cc:dd:bf:7e:c9:
         8a:d0:61:e8
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUVUVEW9R7JzGaR+rvIJ/z84+poncwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTJGQTM4QzIyQ0EwOTg3Q0U0OEEzQkQ1MTkxRkZEQTJB
RDM5REIzQjAeFw0yNjAyMDExMDI3MThaFw0yNjAyMDQxMTUzMThaMDMxMTAvBgNV
BAMTKDU0N0EyOTZGMzE3RDkxM0REMUQ4MkYwMDkwMjA4RDg3MzA5MjdCMzMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/T3fB8yNN2Hos6WkzjrtsDdfW
ZJrB5nKW7vBjal91R8flaZIEieQSv9HukwcXyceGNS1luPX90+1Pj8/5jnJeQNlr
ahF1eVR9D9lRu6bQWVeY5EKpN5eAu083qEoW7NLMkHh566zPRMwlN3vjHgQX91KK
zDdJRfCVtOpt5w20EWivMGY3eqi2IlFr/qJwWI2Y1XDW/8vtjY+ZqdApkJ3LU2hF
L2aMFDgFbVc55ixY8GknLaj16E0Wrbnvfz8si8BrKY3P5/xr383et67p1qQhYsEj
jfqkgtDEK+jXqiRTownCHaAzCjmDWvs7eVdBtc6PFJr5TSLe54m0PfEaTd4dAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUVHopbzF9kT3R2C8AkCCNhzCSezMwHwYDVR0j
BBgwFoAUUvo4wiygmHzkijvVGR/9oq052zswDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z
MTIyNDI0Ny0zNDdmLTRhNTctYTc5YS1jYjJjMjFjOTE3MGUvMC81MkZBMzhDMjJD
QTA5ODdDRTQ4QTNCRDUxOTFGRkRBMkFEMzlEQjNCLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNTJGQTM4QzIyQ0EwOTg3Q0U0OEEzQkQ1MTkxRkZEQTJBRDM5
REIzQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzEyMjQyNDctMzQ3Zi00YTU3LWE3
OWEtY2IyYzIxYzkxNzBlLzAvNTJGQTM4QzIyQ0EwOTg3Q0U0OEEzQkQ1MTkxRkZE
QTJBRDM5REIzQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAEMY7RKv/XN3bOVPNQNACj9ablBJKJxhvufr
EQmtr1BIsrA9+mUhv3tt3oLZl6eH+c2/FdpGsZjuWp3lvluiQQ7oFwVbacyFBtSN
pI/iGpvxQkVhX2+/sM5RyK2XfcycQPx+1mjnaJUyYmQut84Qwu2GJpi+mG8MGAl6
uMgBZHY5jkfj0nbla8iW/7jrweLCGfOvTAJt9WSQEvXJe50WVjZQAx62TWX6kAHX
lKx/FUKyMQkF7UdEabZ5CudSv+XVxOl807U+Qo35xk84R8xCN+RGAnRAIkRsGQgd
stmbI9Af6BkB3icMb7NODx7AII4ptKJRDNYpGSDM3b9+yYrQYeg=
-----END CERTIFICATE-----
Generated at Mon Feb 2 10:03:40 2026 by rpki-client