This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/42f39c17-6725-42be-bed4-f0ebbba2d4fd/0/988E0377882A4782CADFC665BEA75BF64BFBAF8E.mft
File:                     988E0377882A4782CADFC665BEA75BF64BFBAF8E.mft (raw, json)
Hash identifier:          PmCqJ68WY9W3UxYyjFZ1Zr9ZEsDgdo74EK8t6tATku0=
Subject key identifier:   DC:43:19:E8:DB:4C:BF:E1:CE:3D:2B:D8:8A:9E:A1:4C:8B:B7:10:79
Authority key identifier: 98:8E:03:77:88:2A:47:82:CA:DF:C6:65:BE:A7:5B:F6:4B:FB:AF:8E
Certificate issuer:       /CN=988E0377882A4782CADFC665BEA75BF64BFBAF8E
Certificate serial:       6A896B353C38896C4C07E74E1230652CD2DDAA17
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/988E0377882A4782CADFC665BEA75BF64BFBAF8E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/42f39c17-6725-42be-bed4-f0ebbba2d4fd/0/988E0377882A4782CADFC665BEA75BF64BFBAF8E.mft
Manifest number:          0302
Signing time:             Sun 01 Feb 2026 19:40:43 +0000
Manifest this update:     Sun 01 Feb 2026 19:35:43 +0000
Manifest next update:     Thu 05 Feb 2026 02:01:43 +0000
Files and hashes:         1: 988E0377882A4782CADFC665BEA75BF64BFBAF8E.crl (hash: quPm7gTjWt7gwLCVG5s84IxYLkW9Zm7j5WIG73Nrl10=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/42f39c17-6725-42be-bed4-f0ebbba2d4fd/0/988E0377882A4782CADFC665BEA75BF64BFBAF8E.crl
                          rsync://repo-rpki.idnic.net/repo/42f39c17-6725-42be-bed4-f0ebbba2d4fd/0/988E0377882A4782CADFC665BEA75BF64BFBAF8E.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/988E0377882A4782CADFC665BEA75BF64BFBAF8E.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 05 Feb 2026 02:01:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:89:6b:35:3c:38:89:6c:4c:07:e7:4e:12:30:65:2c:d2:dd:aa:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=988E0377882A4782CADFC665BEA75BF64BFBAF8E
        Validity
            Not Before: Feb  1 19:35:43 2026 GMT
            Not After : Feb  5 02:01:43 2026 GMT
        Subject: CN=DC4319E8DB4CBFE1CE3D2BD88A9EA14C8BB71079
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:77:34:00:5f:5d:01:6a:e3:2a:6a:95:f5:68:
                    ab:22:1c:79:ca:8b:b1:f2:4c:df:cc:8c:8b:53:e5:
                    b2:55:9f:dc:5e:3e:24:63:53:dc:17:c3:71:81:fd:
                    b9:db:f6:df:6a:c6:f4:1f:0f:1f:d1:d1:06:ef:50:
                    bb:da:9f:b9:fa:12:26:03:13:33:d1:9a:ad:f6:58:
                    d9:6b:50:03:7d:1d:49:8a:e5:44:b4:93:11:e0:66:
                    48:7a:b9:da:7d:d0:5f:d2:d3:79:79:ec:a9:31:f1:
                    92:4c:d7:75:9b:70:5a:21:91:4f:f1:69:a4:93:d9:
                    f5:7b:3c:b1:d6:1b:01:0e:b8:b2:49:bf:ae:b6:ef:
                    3b:cd:8d:4b:b8:ed:2d:9e:a5:8c:85:59:01:79:56:
                    92:13:a5:32:d0:70:a4:c4:37:32:70:1e:57:7d:e4:
                    60:9a:4f:d2:16:c9:f0:41:2c:78:ad:9f:f2:e8:fd:
                    59:61:de:18:a2:50:27:e0:03:c4:30:82:c0:f3:e9:
                    e6:da:e0:de:eb:82:cd:b5:0c:a2:df:58:62:f9:d6:
                    2e:ca:93:07:ac:a0:c4:c7:3f:87:b8:22:f3:2a:80:
                    5b:88:48:34:83:7d:06:8b:dc:28:b9:a1:cf:e0:95:
                    ec:2e:6f:f9:75:a8:fe:6a:37:77:d9:e9:d5:70:9c:
                    cd:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:43:19:E8:DB:4C:BF:E1:CE:3D:2B:D8:8A:9E:A1:4C:8B:B7:10:79
            X509v3 Authority Key Identifier:
                keyid:98:8E:03:77:88:2A:47:82:CA:DF:C6:65:BE:A7:5B:F6:4B:FB:AF:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/42f39c17-6725-42be-bed4-f0ebbba2d4fd/0/988E0377882A4782CADFC665BEA75BF64BFBAF8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/988E0377882A4782CADFC665BEA75BF64BFBAF8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/42f39c17-6725-42be-bed4-f0ebbba2d4fd/0/988E0377882A4782CADFC665BEA75BF64BFBAF8E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:5c:6d:98:e4:eb:61:b5:26:0d:9c:18:bd:02:30:d2:42:e9:
         81:87:29:23:78:cc:e7:6c:dd:35:47:13:75:e4:09:b5:00:c7:
         f4:3b:bb:86:75:6c:06:fa:6a:4f:d6:98:2a:3e:56:53:82:5a:
         3e:1f:6b:62:33:69:38:ff:d7:47:ac:af:a1:fa:08:48:db:8e:
         5f:0d:98:4b:b6:d9:30:a2:d7:86:e7:d1:d6:77:6f:49:91:eb:
         82:7d:13:4b:e0:df:74:a0:bb:f5:a3:71:dd:ec:fb:5a:90:b8:
         56:5c:c5:9f:21:f0:9d:ed:27:20:07:16:50:15:86:c5:6f:7c:
         56:36:3a:0c:19:21:bd:ac:1f:b8:81:e1:a9:11:04:91:8d:96:
         a1:eb:5d:00:09:ca:ea:e4:ad:42:eb:50:68:2b:7a:16:70:78:
         e6:d5:38:76:36:5d:60:2d:ee:f5:7e:a0:60:a8:92:a1:36:ed:
         e6:41:25:74:07:07:bc:1f:25:79:b9:cf:f7:4d:55:57:6e:26:
         5e:bb:51:b6:b4:c0:d5:f0:01:2f:5e:c5:4f:9e:53:a3:31:39:
         a6:c9:92:36:ac:93:ff:18:6d:43:66:a5:42:11:d2:a1:00:c2:
         f0:7e:85:19:6f:45:2b:8f:2d:b8:61:01:a6:9a:95:6b:4e:85:
         26:99:f6:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 09:50:43 2026 by rpki-client