This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/3900208b-32ac-4a26-9d92-609ad76183c1/0/22825A0BEE926683AC41A0486AEF55AF8C1C228F.mft
File:                     22825A0BEE926683AC41A0486AEF55AF8C1C228F.mft (raw, json)
Hash identifier:          qOHvlognlG5zTZCsvzcuxkH0fEzPEkOgr3OG9dYoI6M=
Subject key identifier:   FC:02:82:D6:F7:DA:27:62:BD:94:ED:2E:67:BA:0C:5B:4B:03:77:29
Authority key identifier: 22:82:5A:0B:EE:92:66:83:AC:41:A0:48:6A:EF:55:AF:8C:1C:22:8F
Certificate issuer:       /CN=22825A0BEE926683AC41A0486AEF55AF8C1C228F
Certificate serial:       7512348A62A29BC997DA83C3D1CD09B6B2E81C00
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/22825A0BEE926683AC41A0486AEF55AF8C1C228F.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3900208b-32ac-4a26-9d92-609ad76183c1/0/22825A0BEE926683AC41A0486AEF55AF8C1C228F.mft
Manifest number:          01E7
Signing time:             Sun 01 Feb 2026 14:10:49 +0000
Manifest this update:     Sun 01 Feb 2026 14:05:49 +0000
Manifest next update:     Thu 05 Feb 2026 00:56:49 +0000
Files and hashes:         1: 3130332e3133392e3137352e302f32342d3234203d3e20313331373435.roa (hash: /z/ZhPaw5F3TCZQvmgqcleuF3rFMMJYxb+Mr//w9yXY=)
                          2: 22825A0BEE926683AC41A0486AEF55AF8C1C228F.crl (hash: MRzyIPIUivjnbLB6bSGN8LrIHyk2+byUZBtVg/VXG1c=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/3900208b-32ac-4a26-9d92-609ad76183c1/0/22825A0BEE926683AC41A0486AEF55AF8C1C228F.crl
                          rsync://repo-rpki.idnic.net/repo/3900208b-32ac-4a26-9d92-609ad76183c1/0/22825A0BEE926683AC41A0486AEF55AF8C1C228F.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/22825A0BEE926683AC41A0486AEF55AF8C1C228F.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 05 Feb 2026 00:56:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:12:34:8a:62:a2:9b:c9:97:da:83:c3:d1:cd:09:b6:b2:e8:1c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22825A0BEE926683AC41A0486AEF55AF8C1C228F
        Validity
            Not Before: Feb  1 14:05:49 2026 GMT
            Not After : Feb  5 00:56:49 2026 GMT
        Subject: CN=FC0282D6F7DA2762BD94ED2E67BA0C5B4B037729
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:83:67:55:bf:42:1b:30:8a:62:21:39:44:11:
                    f1:33:47:38:f5:0b:d6:1f:e2:2f:17:6e:80:3f:b1:
                    8f:ab:a7:1a:f3:f6:e2:01:97:94:6a:03:f7:60:45:
                    c9:5a:5d:a2:8b:55:96:3f:aa:47:43:00:fc:f7:ac:
                    87:3f:87:85:5d:c3:c3:9a:6b:3b:f0:16:83:dd:e7:
                    e6:96:3f:63:4d:09:6e:ec:73:a5:75:20:bb:78:42:
                    52:be:2e:5e:c5:0b:a4:f5:63:d1:6b:0f:e5:72:1c:
                    fa:54:e0:47:35:64:14:40:5a:bd:a3:7b:90:9f:b0:
                    57:0d:fc:1d:ae:62:ba:09:27:86:61:b4:1e:68:3f:
                    b3:09:40:68:ce:c7:96:96:61:80:c8:37:6e:ed:66:
                    a7:31:ab:6a:5f:4b:0d:ed:11:fa:46:88:1b:58:79:
                    1e:81:06:6a:be:1f:c3:ff:7b:74:d5:33:c6:ec:31:
                    fd:e3:14:c6:5e:63:bb:66:0e:e8:b0:76:13:dc:77:
                    11:15:80:bc:e3:f1:10:39:b8:c7:89:8d:db:e0:f7:
                    b2:d8:7b:21:dd:af:0c:ea:40:aa:79:a9:d4:c2:71:
                    4c:c5:95:f5:6f:bb:1b:27:e6:eb:a2:9f:a7:4e:a8:
                    0f:a1:f1:85:da:34:21:c9:c3:a7:1f:67:02:0e:67:
                    10:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:02:82:D6:F7:DA:27:62:BD:94:ED:2E:67:BA:0C:5B:4B:03:77:29
            X509v3 Authority Key Identifier:
                keyid:22:82:5A:0B:EE:92:66:83:AC:41:A0:48:6A:EF:55:AF:8C:1C:22:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3900208b-32ac-4a26-9d92-609ad76183c1/0/22825A0BEE926683AC41A0486AEF55AF8C1C228F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/22825A0BEE926683AC41A0486AEF55AF8C1C228F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3900208b-32ac-4a26-9d92-609ad76183c1/0/22825A0BEE926683AC41A0486AEF55AF8C1C228F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:e6:37:96:bb:1b:7b:90:36:4b:c0:f2:cb:84:21:b3:18:f6:
         8a:7e:88:7a:bd:62:c9:8f:2b:81:a0:29:4c:3f:e5:7b:df:28:
         e6:01:92:2e:a0:9f:89:34:15:ca:ec:3a:5f:ea:36:37:79:3f:
         30:8d:26:2b:a7:15:d9:41:d3:29:7b:92:b9:bb:26:fb:6c:01:
         1d:98:6a:9d:34:3d:3f:2f:1f:f2:27:c0:38:55:08:23:92:3e:
         f1:7a:70:3e:58:0c:22:a7:8b:96:8f:7b:a1:e6:5b:17:1a:22:
         03:58:64:cf:c5:85:58:d7:3f:69:92:98:55:42:64:09:e3:b8:
         c1:41:dd:2f:1f:6f:41:a3:33:8c:08:b4:ab:c9:70:1b:16:12:
         0e:bc:63:15:78:28:aa:0c:d6:dc:52:c6:41:59:97:d3:c6:15:
         ca:7f:21:7e:32:a6:8d:26:6b:f8:69:b4:d9:f3:bc:15:73:f4:
         a1:05:f9:41:da:77:da:47:5c:a3:23:a0:2d:38:23:2e:62:f0:
         9b:b8:b1:4d:7e:ce:cf:7b:a6:4b:2f:42:ff:e6:2c:51:8f:bf:
         bc:40:66:96:de:ef:69:f5:25:af:3d:38:20:c3:c9:27:c3:c3:
         1c:8c:23:27:3f:da:44:26:a7:39:20:d3:2a:6b:7d:fd:c3:c7:
         5c:ee:9a:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 12:50:47 2026 by rpki-client