This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/46e47c6d-e624-477c-ae18-d32f22c96204/0/23132D6AC2A0ED41996F54C00A8A59B23B00EEB6.mft
File:                     23132D6AC2A0ED41996F54C00A8A59B23B00EEB6.mft (raw, json)
Hash identifier:          WF60XZKixqAYr8/AAErO3SgoIIw3JUDdbhrwbT1/88Y=
Subject key identifier:   5B:78:6D:06:F5:5F:05:32:3E:51:8C:59:CE:D3:89:1F:5D:0D:F3:60
Authority key identifier: 23:13:2D:6A:C2:A0:ED:41:99:6F:54:C0:0A:8A:59:B2:3B:00:EE:B6
Certificate issuer:       /CN=23132D6AC2A0ED41996F54C00A8A59B23B00EEB6
Certificate serial:       762BB7716E7BFD70791A84AFD58A65902536A383
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/23132D6AC2A0ED41996F54C00A8A59B23B00EEB6.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/46e47c6d-e624-477c-ae18-d32f22c96204/0/23132D6AC2A0ED41996F54C00A8A59B23B00EEB6.mft
Manifest number:          015B
Signing time:             Mon 02 Feb 2026 06:02:05 +0000
Manifest this update:     Mon 02 Feb 2026 05:57:05 +0000
Manifest next update:     Thu 05 Feb 2026 10:18:05 +0000
Files and hashes:         1: 23132D6AC2A0ED41996F54C00A8A59B23B00EEB6.crl (hash: 7RihnxX97PAXze3dxhvDc4Vjl3AXLUFHJwvkjEhOk8c=)
                          2: 3231302e37392e3133352e302f32342d3234203d3e20313338303936.roa (hash: JvAuAWjeLfp0XViXv+7ZCgiJcBbHkm/DO53vlhMWqfE=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/46e47c6d-e624-477c-ae18-d32f22c96204/0/23132D6AC2A0ED41996F54C00A8A59B23B00EEB6.crl
                          rsync://repo-rpki.idnic.net/repo/46e47c6d-e624-477c-ae18-d32f22c96204/0/23132D6AC2A0ED41996F54C00A8A59B23B00EEB6.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/23132D6AC2A0ED41996F54C00A8A59B23B00EEB6.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 05 Feb 2026 05:24:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:2b:b7:71:6e:7b:fd:70:79:1a:84:af:d5:8a:65:90:25:36:a3:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23132D6AC2A0ED41996F54C00A8A59B23B00EEB6
        Validity
            Not Before: Feb  2 05:57:05 2026 GMT
            Not After : Feb  5 10:18:05 2026 GMT
        Subject: CN=5B786D06F55F05323E518C59CED3891F5D0DF360
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:ee:14:71:7b:e1:95:93:dc:19:a9:23:59:af:
                    24:eb:ef:f4:44:7f:e1:20:51:2b:fc:0a:b2:7f:b8:
                    7e:55:d5:c2:90:88:a2:6f:dc:de:87:d8:26:c8:a9:
                    a9:dc:53:77:de:fc:ad:fc:5f:05:c3:ed:bc:35:8d:
                    26:49:07:be:c0:13:c6:06:1b:09:4b:e7:44:b9:4f:
                    86:2a:c6:b2:fb:a6:03:5b:73:a9:21:77:72:d3:06:
                    a3:ac:bb:af:ca:8b:6a:cf:f9:f6:e4:95:94:f3:65:
                    b0:95:42:6e:6d:ed:62:95:60:82:89:e8:f8:d0:29:
                    d9:75:e5:76:13:ab:cb:79:c7:e8:4e:02:00:91:a4:
                    76:be:04:a0:e0:dc:e6:4e:a3:81:e5:79:9f:37:c8:
                    7d:d4:bf:e2:2b:2d:ac:c7:36:66:1a:44:6a:87:06:
                    d8:ae:e4:89:55:d8:ea:31:f7:04:8d:c6:6f:40:9b:
                    74:26:20:ff:c6:39:64:b2:53:2f:a0:11:2b:cc:3f:
                    c3:1e:fe:60:c2:bc:67:a0:69:36:92:2c:ae:bf:7e:
                    bd:e8:c2:c1:94:93:33:b7:8e:bc:f3:37:b8:a6:8c:
                    4c:3e:72:19:de:0e:ad:6e:41:48:56:3e:2c:9c:5a:
                    c6:b7:59:2d:d9:e5:39:13:6b:bc:0c:c1:1a:0b:32:
                    90:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:78:6D:06:F5:5F:05:32:3E:51:8C:59:CE:D3:89:1F:5D:0D:F3:60
            X509v3 Authority Key Identifier:
                keyid:23:13:2D:6A:C2:A0:ED:41:99:6F:54:C0:0A:8A:59:B2:3B:00:EE:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/46e47c6d-e624-477c-ae18-d32f22c96204/0/23132D6AC2A0ED41996F54C00A8A59B23B00EEB6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/23132D6AC2A0ED41996F54C00A8A59B23B00EEB6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/46e47c6d-e624-477c-ae18-d32f22c96204/0/23132D6AC2A0ED41996F54C00A8A59B23B00EEB6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:69:a0:fe:c8:3c:97:7b:70:3d:bd:ad:26:c8:f3:db:9f:4e:
         d7:e1:e0:81:4c:c4:69:dc:13:84:72:86:c4:bf:89:6d:ef:9c:
         60:5a:67:df:c5:00:41:82:79:ee:ce:34:fa:b4:c7:29:f8:db:
         7a:7a:b0:11:96:42:64:10:fe:fd:db:0e:c4:2b:84:16:b8:6e:
         dd:ae:6a:ff:0a:3f:c3:02:73:7f:2c:37:70:dd:e6:97:78:fc:
         36:4b:de:f2:e8:9a:16:8b:5a:6e:81:3b:f8:05:39:e4:85:cb:
         19:f7:d9:95:d1:77:83:d6:35:3e:17:c6:ed:35:eb:c2:3b:79:
         c6:38:83:bb:aa:9b:01:3b:80:89:80:90:2e:6c:78:4a:53:1d:
         a8:b3:e4:33:dd:df:3c:96:1e:ee:64:d0:ae:d0:25:ad:27:18:
         7a:c4:a5:54:8b:bd:ef:e3:59:d8:f2:d6:12:b8:b6:a5:65:e7:
         2c:3f:01:c5:ff:19:be:4e:6f:42:b0:c0:d2:10:71:f8:12:7e:
         d7:15:63:48:b7:7f:19:52:39:4a:ff:db:91:4c:c6:7a:8a:b2:
         6a:fc:43:7b:ec:e2:f5:e6:5c:dd:91:8e:ff:0a:71:38:d0:f3:
         21:5d:b2:ee:42:52:28:bf:95:42:e0:49:13:81:6a:fc:94:7e:
         4c:4d:38:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 12:48:50 2026 by rpki-client