This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/3f7bd944-017a-43a3-94f3-ff47af038980/0/E336CD495C4F480EC4FA92EB0B5942D98DE4B88C.mft
File:                     E336CD495C4F480EC4FA92EB0B5942D98DE4B88C.mft (raw, json)
Hash identifier:          PQrOCQRajzN1OhuZtQPvxQwAMDcCTcge+L7lGOeezR0=
Subject key identifier:   EC:E7:23:31:C7:97:D5:DE:3F:81:24:6B:97:3D:85:11:80:44:BF:3E
Authority key identifier: E3:36:CD:49:5C:4F:48:0E:C4:FA:92:EB:0B:59:42:D9:8D:E4:B8:8C
Certificate issuer:       /CN=E336CD495C4F480EC4FA92EB0B5942D98DE4B88C
Certificate serial:       4C663C2DE0CF80F3651269F3B19DF268459E41CE
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E336CD495C4F480EC4FA92EB0B5942D98DE4B88C.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3f7bd944-017a-43a3-94f3-ff47af038980/0/E336CD495C4F480EC4FA92EB0B5942D98DE4B88C.mft
Manifest number:          0149
Signing time:             Sun 01 Feb 2026 11:22:15 +0000
Manifest this update:     Sun 01 Feb 2026 11:17:15 +0000
Manifest next update:     Wed 04 Feb 2026 21:34:15 +0000
Files and hashes:         1: E336CD495C4F480EC4FA92EB0B5942D98DE4B88C.crl (hash: TTk7u29MxUivLXBue9ay58sHyatNQBTDQ5YkotyGcBs=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/3f7bd944-017a-43a3-94f3-ff47af038980/0/E336CD495C4F480EC4FA92EB0B5942D98DE4B88C.crl
                          rsync://repo-rpki.idnic.net/repo/3f7bd944-017a-43a3-94f3-ff47af038980/0/E336CD495C4F480EC4FA92EB0B5942D98DE4B88C.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E336CD495C4F480EC4FA92EB0B5942D98DE4B88C.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 04 Feb 2026 21:34:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:66:3c:2d:e0:cf:80:f3:65:12:69:f3:b1:9d:f2:68:45:9e:41:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E336CD495C4F480EC4FA92EB0B5942D98DE4B88C
        Validity
            Not Before: Feb  1 11:17:15 2026 GMT
            Not After : Feb  4 21:34:15 2026 GMT
        Subject: CN=ECE72331C797D5DE3F81246B973D85118044BF3E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:1a:35:6e:9b:b4:02:9b:c6:58:95:dc:03:3e:
                    d6:7e:d8:2e:07:2b:30:62:f6:46:40:2d:fe:70:d9:
                    60:98:92:34:b1:ca:a6:16:12:ee:40:b1:b8:d1:23:
                    d6:1c:7f:8b:4a:a4:91:34:51:b7:58:40:eb:c4:ba:
                    a4:0e:f5:ff:6b:00:1e:41:ca:51:b9:11:dd:66:bf:
                    43:1d:99:3c:d7:b2:51:0d:2a:46:85:d9:bb:86:64:
                    7f:9e:f1:89:d7:23:43:9f:53:e7:97:e6:e7:7b:e8:
                    04:43:f5:88:49:c6:32:3e:f1:69:ac:99:ca:f7:1e:
                    00:5a:c5:ec:9d:82:f9:f5:a8:52:df:03:77:d9:8e:
                    6d:de:5d:87:f7:fb:5b:0b:b3:7d:10:51:b2:89:02:
                    3f:fe:c6:ff:f9:72:f6:43:db:f1:16:14:fb:32:af:
                    db:f2:2d:ee:35:cf:1f:3f:47:20:d2:6d:b9:61:8c:
                    b9:14:17:56:a6:fe:45:14:cb:48:24:e1:0e:66:6e:
                    e0:5f:27:cc:a9:73:7d:b0:f4:9e:ed:b4:d5:a5:74:
                    e1:92:78:32:4f:57:de:6d:e7:0f:96:7f:01:3c:99:
                    20:02:79:c2:89:bc:e9:32:23:b7:ba:00:68:e9:b0:
                    d3:27:88:ce:0a:da:32:57:59:dc:03:61:1f:33:56:
                    52:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:E7:23:31:C7:97:D5:DE:3F:81:24:6B:97:3D:85:11:80:44:BF:3E
            X509v3 Authority Key Identifier:
                keyid:E3:36:CD:49:5C:4F:48:0E:C4:FA:92:EB:0B:59:42:D9:8D:E4:B8:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3f7bd944-017a-43a3-94f3-ff47af038980/0/E336CD495C4F480EC4FA92EB0B5942D98DE4B88C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E336CD495C4F480EC4FA92EB0B5942D98DE4B88C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3f7bd944-017a-43a3-94f3-ff47af038980/0/E336CD495C4F480EC4FA92EB0B5942D98DE4B88C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:d8:c9:62:d0:8c:e6:ec:23:8b:fa:4d:15:4f:d6:39:9a:0e:
         b8:fd:bc:63:a5:2c:2d:3d:17:ec:47:24:dc:bf:e6:8b:83:90:
         9a:61:e5:33:93:ee:e2:61:02:33:15:27:d9:de:75:1b:5a:63:
         55:e7:09:74:39:3a:bd:bd:a9:c5:90:2f:10:53:1b:b3:47:64:
         a8:ee:34:30:af:dc:b0:36:5a:1d:10:33:a5:e1:fc:b2:c3:89:
         86:20:24:7a:84:f5:be:a7:23:6f:9d:8c:57:98:0f:df:89:89:
         93:55:f7:47:6b:1e:2c:08:5c:5f:1c:c9:bc:62:79:2f:f6:1c:
         0c:c6:ee:92:69:cc:3e:ef:15:6f:33:ff:73:df:96:be:9c:4f:
         3d:6c:8d:ae:80:80:a7:6e:52:de:c8:15:88:59:0c:0f:01:07:
         c9:4f:1c:2c:7a:01:88:74:e5:b3:28:74:3b:86:bc:38:90:bd:
         3b:81:bd:36:78:2a:56:ad:25:e0:f7:e4:5a:1f:dc:00:fa:2b:
         f5:10:45:5d:f1:83:53:e2:ee:17:d7:53:49:c1:48:3a:4f:ef:
         f2:c5:b7:3f:79:2b:77:ad:8d:de:39:8b:a0:2a:e6:d1:38:93:
         fb:2d:46:cf:a1:bf:b1:40:b3:a9:85:aa:43:1f:75:1f:22:9b:
         3a:5e:8c:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 09:43:58 2026 by rpki-client