This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/36e40a98-93ef-4af8-a436-469740154782/0/19B904DED71657E1E79F9B50507DCCCB817E9635.mft
File:                     19B904DED71657E1E79F9B50507DCCCB817E9635.mft (raw, json)
Hash identifier:          i/05t7bJGC8G9CloZRfiOTpvoeZ7Yhiqg3H+Dda8FBM=
Subject key identifier:   D0:6C:29:5C:6F:BE:6A:1C:CC:30:A3:F1:B9:04:9C:CC:7F:FB:FC:7F
Authority key identifier: 19:B9:04:DE:D7:16:57:E1:E7:9F:9B:50:50:7D:CC:CB:81:7E:96:35
Certificate issuer:       /CN=19B904DED71657E1E79F9B50507DCCCB817E9635
Certificate serial:       44D4679554BC7D7A51E94FCC21CF7BEF4ACF3FAC
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/19B904DED71657E1E79F9B50507DCCCB817E9635.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/36e40a98-93ef-4af8-a436-469740154782/0/19B904DED71657E1E79F9B50507DCCCB817E9635.mft
Manifest number:          0203
Signing time:             Sat 31 Jan 2026 14:21:24 +0000
Manifest this update:     Sat 31 Jan 2026 14:16:24 +0000
Manifest next update:     Tue 03 Feb 2026 21:59:24 +0000
Files and hashes:         1: 3130332e38332e38342e302f32342d3234203d3e20313530323533.roa (hash: rxQ2JaYw7ULxDCv5OE6MiX+tQg4bCcbyeQJKcyeV4Tw=)
                          2: 19B904DED71657E1E79F9B50507DCCCB817E9635.crl (hash: t/Aj8LRIK1YJKvditv/twAK5XYR3bh00kcQgOptYzY8=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/36e40a98-93ef-4af8-a436-469740154782/0/19B904DED71657E1E79F9B50507DCCCB817E9635.crl
                          rsync://repo-rpki.idnic.net/repo/36e40a98-93ef-4af8-a436-469740154782/0/19B904DED71657E1E79F9B50507DCCCB817E9635.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/19B904DED71657E1E79F9B50507DCCCB817E9635.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 03 Feb 2026 21:59:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:d4:67:95:54:bc:7d:7a:51:e9:4f:cc:21:cf:7b:ef:4a:cf:3f:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19B904DED71657E1E79F9B50507DCCCB817E9635
        Validity
            Not Before: Jan 31 14:16:24 2026 GMT
            Not After : Feb  3 21:59:24 2026 GMT
        Subject: CN=D06C295C6FBE6A1CCC30A3F1B9049CCC7FFBFC7F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:d0:27:f7:d8:fe:28:6d:1d:14:46:44:cb:2e:
                    b0:b9:d9:47:6d:52:49:e3:b7:18:4e:83:af:1b:2d:
                    a2:bf:43:7f:45:32:91:1c:e4:54:37:d9:15:55:b0:
                    ab:bc:df:ee:cf:eb:06:f1:1a:85:74:8f:a6:37:fe:
                    8c:e1:e7:4e:64:bb:67:5f:d2:14:71:eb:fa:58:dc:
                    aa:e7:db:54:66:76:b8:db:8c:3f:13:e9:cf:e0:98:
                    bc:c9:e2:9f:04:dc:19:45:d0:c0:49:17:b7:6d:86:
                    e0:31:68:51:9b:fd:2d:58:55:cc:19:22:ec:b4:a1:
                    a1:4f:92:a1:69:53:90:02:59:8d:cb:7a:f6:c9:b9:
                    ed:38:c3:d8:5d:ad:b9:f6:01:d3:c9:a0:a6:18:1b:
                    17:83:3b:68:e2:8c:17:8f:d4:34:41:aa:51:bd:a9:
                    82:8b:29:e5:8f:7e:f9:89:bb:c0:d7:fb:50:a7:c1:
                    47:db:69:8d:8a:b8:dc:c4:97:f2:ce:a7:8c:ad:40:
                    29:19:eb:3c:82:d3:c9:ad:66:67:47:27:e4:eb:59:
                    b4:ec:42:7b:92:6e:d8:e3:8d:1b:63:92:35:99:43:
                    57:d2:10:0b:cd:42:3b:3a:48:78:83:75:d5:09:56:
                    44:3d:bc:ed:8e:a9:25:cb:32:64:88:bb:de:d3:d6:
                    8e:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:6C:29:5C:6F:BE:6A:1C:CC:30:A3:F1:B9:04:9C:CC:7F:FB:FC:7F
            X509v3 Authority Key Identifier:
                keyid:19:B9:04:DE:D7:16:57:E1:E7:9F:9B:50:50:7D:CC:CB:81:7E:96:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/36e40a98-93ef-4af8-a436-469740154782/0/19B904DED71657E1E79F9B50507DCCCB817E9635.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/19B904DED71657E1E79F9B50507DCCCB817E9635.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/36e40a98-93ef-4af8-a436-469740154782/0/19B904DED71657E1E79F9B50507DCCCB817E9635.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:38:60:f7:1a:3d:2d:64:87:d0:e5:d2:46:2e:73:13:06:ee:
         8c:62:36:31:10:63:1b:ba:12:2b:90:29:fb:0e:61:d9:4f:3c:
         75:04:ae:d9:f0:01:1f:7d:9b:e5:31:26:46:41:9b:98:80:0f:
         a3:d0:7d:aa:2c:d1:d1:e2:5e:18:66:11:f4:1b:30:ee:2d:8e:
         0a:49:37:e4:3c:69:af:cc:76:d8:a3:97:76:e6:eb:e0:a5:df:
         45:a5:70:ee:41:78:ed:c7:bc:72:22:aa:f6:7b:9e:85:e8:e3:
         cc:4f:e8:fa:18:0b:8e:fa:5f:c0:7b:62:ba:25:11:b1:33:37:
         86:75:f3:d4:61:9f:56:da:9a:56:f2:a1:a9:96:79:99:a6:e9:
         f6:ea:7d:f1:bf:81:fa:21:8c:24:b9:a6:7f:12:5d:6e:eb:37:
         be:12:b5:e8:12:1f:ee:98:cd:2e:04:fc:10:12:8f:e7:23:8d:
         7b:ec:7c:dc:d5:10:ce:5f:a3:09:f0:f5:86:8b:74:be:bb:e7:
         51:d9:a8:a5:0e:1f:f0:71:5c:5e:4c:8f:3a:da:7e:19:70:f5:
         77:5d:cf:01:69:eb:5f:dd:40:c2:9a:58:32:21:a2:1f:da:a1:
         5c:1d:98:4a:3f:d3:c9:bb:ca:42:84:cf:95:ba:29:2a:6e:8b:
         76:33:e9:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 10:06:52 2026 by rpki-client