This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/3a406cdb-1791-478d-9d28-9e37a6f809cc/0/2D0745D26E59440CB71FAFE996834493DA753248.mft
File:                     2D0745D26E59440CB71FAFE996834493DA753248.mft (raw, json)
Hash identifier:          crJBvuI/Ov3xyZOWmHL2MDoU1qG4h2q3oS9eNpX/ElE=
Subject key identifier:   62:8D:61:5D:3A:CC:17:16:48:A9:E7:2D:3D:B0:96:5C:51:A0:AF:52
Authority key identifier: 2D:07:45:D2:6E:59:44:0C:B7:1F:AF:E9:96:83:44:93:DA:75:32:48
Certificate issuer:       /CN=2D0745D26E59440CB71FAFE996834493DA753248
Certificate serial:       541C0FD576C64E4178F1E28756872D12EA1DF038
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2D0745D26E59440CB71FAFE996834493DA753248.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3a406cdb-1791-478d-9d28-9e37a6f809cc/0/2D0745D26E59440CB71FAFE996834493DA753248.mft
Manifest number:          0219
Signing time:             Sat 31 Jan 2026 13:40:53 +0000
Manifest this update:     Sat 31 Jan 2026 13:35:53 +0000
Manifest next update:     Tue 03 Feb 2026 15:54:53 +0000
Files and hashes:         1: 3130332e37332e3135392e302f32342d3234203d3e20313338383836.roa (hash: nxYZnXzCnu/G6Di5JhS1WLXdlQHk8fuEdbh3UpU3Jf8=)
                          2: 2D0745D26E59440CB71FAFE996834493DA753248.crl (hash: /uAsuVmWja0E6ZYAfIvkrmOou9kp7HjvZHYbg8zc0Gg=)
                          3: 3130332e37332e3135382e302f32342d3234203d3e203234343239.roa (hash: s7xt6atAlnuk0NCp/3UKrnkCS/YpsE7vKEiGKhHlUBE=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/3a406cdb-1791-478d-9d28-9e37a6f809cc/0/2D0745D26E59440CB71FAFE996834493DA753248.crl
                          rsync://repo-rpki.idnic.net/repo/3a406cdb-1791-478d-9d28-9e37a6f809cc/0/2D0745D26E59440CB71FAFE996834493DA753248.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2D0745D26E59440CB71FAFE996834493DA753248.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 03 Feb 2026 15:54:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:1c:0f:d5:76:c6:4e:41:78:f1:e2:87:56:87:2d:12:ea:1d:f0:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2D0745D26E59440CB71FAFE996834493DA753248
        Validity
            Not Before: Jan 31 13:35:53 2026 GMT
            Not After : Feb  3 15:54:53 2026 GMT
        Subject: CN=628D615D3ACC171648A9E72D3DB0965C51A0AF52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:12:c9:04:12:21:0b:87:4f:c7:6d:78:83:1f:
                    57:a9:15:ac:44:13:5a:33:43:69:95:05:59:6d:7f:
                    b4:07:fd:d1:f6:ef:ae:9c:a9:b8:da:19:ac:aa:3f:
                    31:d4:5c:49:f0:77:0b:27:c8:a5:c0:34:be:1b:b4:
                    c6:9f:f3:b5:90:74:ae:3f:5b:94:bc:ec:bb:a0:58:
                    be:7c:b9:9e:88:70:a3:8d:a6:3c:58:0c:63:03:9f:
                    64:64:09:20:d1:ba:97:7b:91:25:0c:de:c7:03:39:
                    6a:18:36:7a:f0:5e:d2:54:10:18:a9:03:f0:1a:67:
                    8f:0e:cd:71:23:5f:9b:d7:78:ed:cb:b5:3c:d0:f9:
                    32:d5:c3:56:86:03:fe:91:2c:3f:1f:08:92:d3:0f:
                    31:2d:27:1d:b6:de:99:7c:2b:51:27:ff:a2:b8:75:
                    0f:d4:e7:01:7c:db:8f:74:a3:45:93:8e:5c:b4:fc:
                    d1:57:19:46:c7:ab:6c:93:80:f7:1b:01:24:8b:a0:
                    5a:d6:db:14:a0:7f:22:f1:53:2d:00:9b:12:c8:9b:
                    45:01:61:d1:84:08:bb:14:dd:72:59:07:dc:3f:36:
                    39:53:f8:c2:b2:df:d8:f6:e6:e0:82:82:fc:93:20:
                    b1:c0:59:3f:2b:97:51:ab:47:4a:18:5b:ce:5a:c7:
                    fa:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:8D:61:5D:3A:CC:17:16:48:A9:E7:2D:3D:B0:96:5C:51:A0:AF:52
            X509v3 Authority Key Identifier:
                keyid:2D:07:45:D2:6E:59:44:0C:B7:1F:AF:E9:96:83:44:93:DA:75:32:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3a406cdb-1791-478d-9d28-9e37a6f809cc/0/2D0745D26E59440CB71FAFE996834493DA753248.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2D0745D26E59440CB71FAFE996834493DA753248.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3a406cdb-1791-478d-9d28-9e37a6f809cc/0/2D0745D26E59440CB71FAFE996834493DA753248.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:9c:fb:e3:2c:09:6b:67:ae:3e:ab:3c:5b:3d:6c:71:5c:a2:
         ca:9b:a2:fb:33:8a:46:5c:10:bb:8d:1b:75:7e:4c:04:58:47:
         98:9c:84:2b:a3:95:7e:6d:ea:7c:2e:fd:0c:c3:de:38:04:c7:
         21:88:fe:11:37:57:35:6a:89:83:86:16:f8:96:4d:5b:1c:10:
         e4:19:f8:77:b0:89:50:de:64:c4:c9:c2:03:90:e0:11:0c:27:
         59:e8:75:1e:9e:c3:49:23:2b:ca:84:9e:03:2c:24:7b:bc:9e:
         cd:93:6b:ae:c6:d8:37:bb:8d:66:c5:7f:b8:84:f9:ed:8c:b1:
         98:92:13:3b:95:88:79:9c:98:4a:6b:ca:7d:54:b7:9e:85:1c:
         3c:5f:72:4a:e2:f1:07:c3:70:71:a5:e3:d4:52:18:5c:07:e4:
         47:35:0c:7c:4b:21:86:70:40:bf:ae:82:ff:e4:7a:af:a0:8a:
         d6:b5:19:20:4a:87:92:60:10:80:4a:9e:b3:7d:68:b6:22:c1:
         60:71:8f:1d:ed:3d:bd:92:cf:f9:39:d9:1f:e4:cc:af:85:1c:
         6e:2d:d3:95:96:4a:0d:0f:93:f2:b6:d8:ea:b5:6f:35:f7:ec:
         b9:76:5e:d6:ae:de:b8:f7:4e:5d:7b:b6:d4:fd:2e:99:79:03:
         f9:58:45:3d
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUVBwP1XbGTkF48eKHVoctEuod8DgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkQwNzQ1RDI2RTU5NDQwQ0I3MUZBRkU5OTY4MzQ0OTNE
QTc1MzI0ODAeFw0yNjAxMzExMzM1NTNaFw0yNjAyMDMxNTU0NTNaMDMxMTAvBgNV
BAMTKDYyOEQ2MTVEM0FDQzE3MTY0OEE5RTcyRDNEQjA5NjVDNTFBMEFGNTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIEskEEiELh0/HbXiDH1epFaxE
E1ozQ2mVBVltf7QH/dH2766cqbjaGayqPzHUXEnwdwsnyKXANL4btMaf87WQdK4/
W5S87LugWL58uZ6IcKONpjxYDGMDn2RkCSDRupd7kSUM3scDOWoYNnrwXtJUEBip
A/AaZ48OzXEjX5vXeO3LtTzQ+TLVw1aGA/6RLD8fCJLTDzEtJx223pl8K1En/6K4
dQ/U5wF82490o0WTjly0/NFXGUbHq2yTgPcbASSLoFrW2xSgfyLxUy0AmxLIm0UB
YdGECLsU3XJZB9w/NjlT+MKy39j25uCCgvyTILHAWT8rl1GrR0oYW85ax/qJAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUYo1hXTrMFxZIqectPbCWXFGgr1IwHwYDVR0j
BBgwFoAULQdF0m5ZRAy3H6/ploNEk9p1MkgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z
YTQwNmNkYi0xNzkxLTQ3OGQtOWQyOC05ZTM3YTZmODA5Y2MvMC8yRDA3NDVEMjZF
NTk0NDBDQjcxRkFGRTk5NjgzNDQ5M0RBNzUzMjQ4LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMkQwNzQ1RDI2RTU5NDQwQ0I3MUZBRkU5OTY4MzQ0OTNEQTc1
MzI0OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2E0MDZjZGItMTc5MS00NzhkLTlk
MjgtOWUzN2E2ZjgwOWNjLzAvMkQwNzQ1RDI2RTU5NDQwQ0I3MUZBRkU5OTY4MzQ0
OTNEQTc1MzI0OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBADec++MsCWtnrj6rPFs9bHFcosqbovszikZc
ELuNG3V+TARYR5ichCujlX5t6nwu/QzD3jgExyGI/hE3VzVqiYOGFviWTVscEOQZ
+HewiVDeZMTJwgOQ4BEMJ1nodR6ew0kjK8qEngMsJHu8ns2Ta67G2De7jWbFf7iE
+e2MsZiSEzuViHmcmEpryn1Ut56FHDxfckri8QfDcHGl49RSGFwH5Ec1DHxLIYZw
QL+ugv/keq+gita1GSBKh5JgEIBKnrN9aLYiwWBxjx3tPb2Sz/k52R/kzK+FHG4t
05WWSg0Pk/K22Oq1bzX37Ll2Xtau3rj3Tl17ttT9Lpl5A/lYRT0=
-----END CERTIFICATE-----
Generated at Mon Feb 2 10:05:05 2026 by rpki-client