This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/337506c5-5ef1-4294-8902-a4114fdf3b00/0/348D53D52081AB75C21BE292C2A5077DF4B75308.mft
File:                     348D53D52081AB75C21BE292C2A5077DF4B75308.mft (raw, json)
Hash identifier:          /9SI0AWLDq2iG/1XrHkSJBYYQIea9FbqKVLwB0/Kf/0=
Subject key identifier:   9A:1E:FA:1D:48:77:35:AB:6C:09:58:19:02:EA:A4:D3:2A:36:D1:C1
Authority key identifier: 34:8D:53:D5:20:81:AB:75:C2:1B:E2:92:C2:A5:07:7D:F4:B7:53:08
Certificate issuer:       /CN=348D53D52081AB75C21BE292C2A5077DF4B75308
Certificate serial:       6DA3ED1EA2CB557885270954F94BC56997886892
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/348D53D52081AB75C21BE292C2A5077DF4B75308.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/337506c5-5ef1-4294-8902-a4114fdf3b00/0/348D53D52081AB75C21BE292C2A5077DF4B75308.mft
Manifest number:          0544
Signing time:             Sun 25 Jan 2026 23:02:14 +0000
Manifest this update:     Sun 25 Jan 2026 22:57:14 +0000
Manifest next update:     Thu 29 Jan 2026 09:35:14 +0000
Files and hashes:         1: 348D53D52081AB75C21BE292C2A5077DF4B75308.crl (hash: ZRpv02SbbcAN/jmgjN4ir1rNhX9HiEwLcUs846Rp1oQ=)
                          2: 323430353a326334303a3a2f33322d3438203d3e203435373035.roa (hash: KkRsmKRK4mlUrgr5jp8mQgdKGzQ8ZNOBefrXTXHhBQY=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/337506c5-5ef1-4294-8902-a4114fdf3b00/0/348D53D52081AB75C21BE292C2A5077DF4B75308.crl
                          rsync://repo-rpki.idnic.net/repo/337506c5-5ef1-4294-8902-a4114fdf3b00/0/348D53D52081AB75C21BE292C2A5077DF4B75308.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/348D53D52081AB75C21BE292C2A5077DF4B75308.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 29 Jan 2026 09:35:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:a3:ed:1e:a2:cb:55:78:85:27:09:54:f9:4b:c5:69:97:88:68:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=348D53D52081AB75C21BE292C2A5077DF4B75308
        Validity
            Not Before: Jan 25 22:57:14 2026 GMT
            Not After : Jan 29 09:35:14 2026 GMT
        Subject: CN=9A1EFA1D487735AB6C09581902EAA4D32A36D1C1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:ca:91:7b:3d:7f:26:e9:e6:17:d7:b4:c8:8a:
                    a4:e8:e5:13:6e:43:84:35:12:e4:ed:47:01:b6:17:
                    84:0d:f7:38:98:85:db:91:17:71:0a:b7:63:57:d3:
                    fc:1b:9d:be:9d:8f:43:45:8e:54:4d:94:85:37:92:
                    0a:df:1c:50:57:c5:fc:ef:d4:47:45:24:2c:21:4d:
                    b4:d8:05:48:d5:ee:1a:30:8d:ef:e0:b6:2b:80:dd:
                    9b:cc:6c:5e:e0:77:cb:f8:75:47:36:f2:17:44:74:
                    ee:5d:db:bb:5d:e0:db:35:35:21:d3:48:dc:ea:e2:
                    40:b9:4f:7a:67:17:44:a9:76:43:2b:24:65:70:a8:
                    d9:5b:d6:e6:f4:97:fd:5f:97:08:6a:7a:2a:f1:4b:
                    9d:a3:7b:f6:3d:f7:f6:c9:f7:dd:1c:dd:1d:f9:dc:
                    bc:58:e9:40:72:bf:f7:0b:37:3b:06:d6:fb:08:2c:
                    59:e2:e4:7e:9d:a8:66:7c:e1:88:f0:d2:60:8c:55:
                    27:09:24:93:2c:c0:13:16:6a:08:8f:86:d0:ca:67:
                    27:cb:4c:69:e4:d5:7d:7c:01:12:8e:68:d0:6e:63:
                    a9:21:5f:f5:f3:5a:a9:39:20:37:e7:43:37:2d:29:
                    8c:ac:9b:29:62:64:2b:72:21:42:cb:8d:46:f6:76:
                    73:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:1E:FA:1D:48:77:35:AB:6C:09:58:19:02:EA:A4:D3:2A:36:D1:C1
            X509v3 Authority Key Identifier:
                keyid:34:8D:53:D5:20:81:AB:75:C2:1B:E2:92:C2:A5:07:7D:F4:B7:53:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/337506c5-5ef1-4294-8902-a4114fdf3b00/0/348D53D52081AB75C21BE292C2A5077DF4B75308.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/348D53D52081AB75C21BE292C2A5077DF4B75308.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/337506c5-5ef1-4294-8902-a4114fdf3b00/0/348D53D52081AB75C21BE292C2A5077DF4B75308.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:6f:da:bd:98:cd:cf:1c:5a:da:67:62:33:19:e3:37:36:40:
         55:2e:b3:bf:fb:fb:b5:23:2f:b5:1f:ba:36:cd:8a:f0:72:e7:
         b6:bd:de:87:a0:1d:2d:22:45:7b:76:0f:ae:18:19:f9:b9:a8:
         7b:3f:a1:7d:73:1d:66:0e:4c:7e:af:0a:c3:c2:2f:03:d4:61:
         46:7d:ed:cc:6c:c0:a5:e6:7f:e2:6d:fe:36:53:24:d0:55:a0:
         14:a5:3a:c8:db:68:1b:02:02:62:44:ac:a7:f1:eb:2b:3e:40:
         1e:af:1f:31:1a:6c:84:54:69:64:1b:c3:56:63:5a:a7:78:0e:
         43:71:66:b1:6c:77:74:49:9c:df:24:ed:eb:27:67:d7:93:23:
         c6:c1:a9:41:85:b8:53:08:8a:3f:04:88:f9:ff:97:21:0d:75:
         80:66:66:5d:f9:0b:fc:54:de:3b:c8:ca:a3:64:9a:8d:09:49:
         36:8e:fa:b0:72:fe:76:0d:2a:5f:8d:89:35:a5:0a:77:5a:11:
         4b:36:1a:89:63:31:a7:be:1b:39:38:d7:a6:cc:62:b2:37:ae:
         df:0e:e1:d9:f1:e5:7d:f9:ae:6c:4d:6b:a1:6a:33:d8:c3:3c:
         8a:0b:53:1a:7f:8f:20:b0:c9:e8:07:cb:d3:29:6c:6f:4d:0d:
         3f:6a:1c:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 27 02:18:55 2026 by rpki-client