This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/31cd4a67-bc8b-4ad7-81a1-c024c5a62d30/0/DE578F4E4104BC0B17EF2C75FB0E3AD278D2738F.mft
File:                     DE578F4E4104BC0B17EF2C75FB0E3AD278D2738F.mft (raw, json)
Hash identifier:          NbsNqy3IbF/oFTCTPDEPleWPQOeQfNJJLLgaTlwvCmg=
Subject key identifier:   2F:47:BA:9B:B7:06:E2:18:2E:4F:53:28:C8:EE:36:D0:AB:94:64:ED
Authority key identifier: DE:57:8F:4E:41:04:BC:0B:17:EF:2C:75:FB:0E:3A:D2:78:D2:73:8F
Certificate issuer:       /CN=DE578F4E4104BC0B17EF2C75FB0E3AD278D2738F
Certificate serial:       3DAE2931FD2043A8263B2C797C634398E628454C
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DE578F4E4104BC0B17EF2C75FB0E3AD278D2738F.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/31cd4a67-bc8b-4ad7-81a1-c024c5a62d30/0/DE578F4E4104BC0B17EF2C75FB0E3AD278D2738F.mft
Manifest number:          0244
Signing time:             Sat 31 Jan 2026 13:12:33 +0000
Manifest this update:     Sat 31 Jan 2026 13:07:33 +0000
Manifest next update:     Tue 03 Feb 2026 19:46:33 +0000
Files and hashes:         1: DE578F4E4104BC0B17EF2C75FB0E3AD278D2738F.crl (hash: h+lR4Pwh57wqGknNllmdmd94YWMUPWUU07c7/Mh1UP4=)
                          2: 3130332e3138362e38312e302f32342d3234203d3e20313336313235.roa (hash: e4g62pWwoA6jmsCl2EWNbqG1RW6FRJlq4B+h5MuMaQY=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/31cd4a67-bc8b-4ad7-81a1-c024c5a62d30/0/DE578F4E4104BC0B17EF2C75FB0E3AD278D2738F.crl
                          rsync://repo-rpki.idnic.net/repo/31cd4a67-bc8b-4ad7-81a1-c024c5a62d30/0/DE578F4E4104BC0B17EF2C75FB0E3AD278D2738F.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DE578F4E4104BC0B17EF2C75FB0E3AD278D2738F.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 03 Feb 2026 19:46:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:ae:29:31:fd:20:43:a8:26:3b:2c:79:7c:63:43:98:e6:28:45:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DE578F4E4104BC0B17EF2C75FB0E3AD278D2738F
        Validity
            Not Before: Jan 31 13:07:33 2026 GMT
            Not After : Feb  3 19:46:33 2026 GMT
        Subject: CN=2F47BA9BB706E2182E4F5328C8EE36D0AB9464ED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:0e:4e:f4:10:a8:d5:cc:92:06:c4:f0:10:38:
                    5b:5b:b0:a5:f0:96:a9:f3:2d:2c:2c:82:31:1e:2b:
                    1b:d9:9b:db:2a:94:cc:a2:44:5e:fd:70:b8:6e:ad:
                    1b:c0:be:bd:ed:ed:eb:d5:9f:66:dc:08:14:cd:37:
                    eb:1d:bf:23:ab:33:f4:9f:e8:87:e9:b5:a0:8d:b5:
                    f7:cf:03:cd:31:4d:a9:f9:d9:07:f5:a0:69:22:6c:
                    c8:c6:9f:fd:58:19:2c:c8:47:30:ad:9f:83:1d:9d:
                    4b:f7:37:ec:f7:ac:38:d4:b6:87:01:04:a9:06:68:
                    28:00:45:7f:55:66:9b:9e:a3:af:be:df:03:d0:49:
                    23:4a:c8:35:b1:b3:54:0d:d7:fc:3f:14:eb:bc:df:
                    1a:92:ed:74:33:a3:93:1c:3b:d2:54:85:0b:02:f2:
                    9c:8c:c5:4d:38:07:4c:c7:12:8f:28:99:d5:6d:c8:
                    c0:5e:58:f3:86:b1:fd:17:35:f1:18:f1:48:0b:d9:
                    67:1a:59:5e:df:1d:8f:8b:b1:66:03:6d:2c:ab:d3:
                    d6:61:cb:aa:30:a4:15:c5:b5:d7:c7:75:cf:d5:0c:
                    09:0e:12:3e:3a:dc:0f:f6:99:d1:5c:47:f6:67:95:
                    0f:b1:32:b6:44:99:5c:de:82:ab:9a:c0:f2:42:ff:
                    9f:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:47:BA:9B:B7:06:E2:18:2E:4F:53:28:C8:EE:36:D0:AB:94:64:ED
            X509v3 Authority Key Identifier:
                keyid:DE:57:8F:4E:41:04:BC:0B:17:EF:2C:75:FB:0E:3A:D2:78:D2:73:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/31cd4a67-bc8b-4ad7-81a1-c024c5a62d30/0/DE578F4E4104BC0B17EF2C75FB0E3AD278D2738F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DE578F4E4104BC0B17EF2C75FB0E3AD278D2738F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/31cd4a67-bc8b-4ad7-81a1-c024c5a62d30/0/DE578F4E4104BC0B17EF2C75FB0E3AD278D2738F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:6f:81:52:69:3c:e6:5c:c5:97:96:61:a2:cd:15:3f:74:20:
         41:90:c1:20:23:77:bf:3e:1c:bc:68:06:ac:ad:e8:df:12:6a:
         00:e2:93:1f:8f:9b:95:91:c8:28:eb:70:e9:fa:53:f1:23:a2:
         16:d0:fb:21:d3:c9:37:32:a6:ab:47:38:ea:22:16:0c:f4:f9:
         dc:1b:bd:8d:15:d8:4a:e8:42:a8:ab:9f:e2:78:28:73:a2:6e:
         88:67:a2:b5:0c:de:6a:42:f9:b5:a4:29:63:2e:fa:8e:b3:a9:
         0c:61:9e:bd:5f:31:8e:82:14:ea:01:92:5b:c0:33:7a:c0:c5:
         5a:d8:31:1e:72:ed:4b:1a:f9:de:b5:5c:6f:16:60:22:af:d6:
         d5:58:11:53:a2:ca:bc:0e:d4:0b:db:02:ad:49:5c:e9:3e:59:
         e2:4f:63:7e:44:c0:74:c5:2c:16:e8:d6:47:24:16:48:46:db:
         63:de:d2:73:3b:8f:d2:e5:54:b7:c1:cc:c8:c3:88:3d:e6:46:
         b9:43:41:0d:11:36:1b:c2:4e:28:42:f7:9e:dc:98:42:77:22:
         44:91:34:4d:39:a6:75:01:42:1b:2b:3c:61:b4:ce:d2:b9:a2:
         6f:35:3d:37:1e:92:8f:d6:21:c9:80:37:13:6a:b4:35:94:d0:
         d5:22:c9:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 10:05:08 2026 by rpki-client