This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/477bc3d2-4ab3-4cfb-9222-66c6ea9447e3/0/2993EFF92300988A33773DD8C4B502F74B907112.mft
File:                     2993EFF92300988A33773DD8C4B502F74B907112.mft (raw, json)
Hash identifier:          ZNS6wBwHxvXDcUbD2e+BZnW3GLZowUhIREe9YN0y56c=
Subject key identifier:   FD:9C:5F:92:62:60:07:6D:85:26:B0:7D:C9:15:04:C5:47:88:A8:38
Authority key identifier: 29:93:EF:F9:23:00:98:8A:33:77:3D:D8:C4:B5:02:F7:4B:90:71:12
Certificate issuer:       /CN=2993EFF92300988A33773DD8C4B502F74B907112
Certificate serial:       3FC614CD4EC83D971DC4AD23F674055ADEADDFD6
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2993EFF92300988A33773DD8C4B502F74B907112.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/477bc3d2-4ab3-4cfb-9222-66c6ea9447e3/0/2993EFF92300988A33773DD8C4B502F74B907112.mft
Manifest number:          0228
Signing time:             Mon 02 Feb 2026 01:04:02 +0000
Manifest this update:     Mon 02 Feb 2026 00:59:02 +0000
Manifest next update:     Thu 05 Feb 2026 04:56:02 +0000
Files and hashes:         1: 3130332e3130352e37362e302f32332d3234203d3e20313336383734.roa (hash: JCzAZhJKrjcnXPRUzXNAKrf8B2XJvFX+OCG60Nl0Dgk=)
                          2: 3130332e3130352e37362e302f32342d3234203d3e20313336383734.roa (hash: MQCiIDyqzNBQYpoR0MRnkXubNFQEv31SOdbwjwRhFAI=)
                          3: 3130332e3130352e37372e302f32342d3234203d3e203535363736.roa (hash: /T3q0aKMlccwCqwpvQMGCHEcfpAgRAD32J67j3q+a2M=)
                          4: 3130332e3130352e37382e302f32342d3234203d3e20313336383734.roa (hash: 8FISrQYbnFOpjiQHBztskExqHRou9e+XROYZoHoylq0=)
                          5: 3130332e3130352e37382e302f32342d3234203d3e203535363736.roa (hash: jFVbs/Ft4bO73kf8lHPUr8+y5jJNNuINBps0Q/t8tqg=)
                          6: 3130332e3130352e37362e302f32342d3234203d3e203535363736.roa (hash: nyiH5XZRu3exSPXepkvkOwB2m2ULxFRKVzAk8qvL/Rg=)
                          7: 3130332e3130352e37392e302f32342d3234203d3e20313336383734.roa (hash: dcc/bwTW1oTsN+Z0h/Aw94q6mQUdzuyzIAdCoesD/EQ=)
                          8: 3130332e3130352e37392e302f32342d3234203d3e203535363736.roa (hash: 8akbgTHcBzy09cH/zWkvU4LNiBkusQqjKfIeLuC7DA4=)
                          9: 323430323a326334303a3a2f34382d3438203d3e203535363736.roa (hash: 9H4P2m2Q86+wvaB6C5BWHbuw5/CMaL6D8SYn5Utxj3g=)
                          10: 323430323a326334303a3a2f34382d3438203d3e20313336383734.roa (hash: u1/FWvhkUX8NdpjOfCEzIQ83rh9KfgiQw+mbq+Uaf5Y=)
                          11: 2993EFF92300988A33773DD8C4B502F74B907112.crl (hash: Uf0qVmPKqhygrE77Dr9f5KQV1TFou6z23BKBlqgKqBo=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/477bc3d2-4ab3-4cfb-9222-66c6ea9447e3/0/2993EFF92300988A33773DD8C4B502F74B907112.crl
                          rsync://repo-rpki.idnic.net/repo/477bc3d2-4ab3-4cfb-9222-66c6ea9447e3/0/2993EFF92300988A33773DD8C4B502F74B907112.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2993EFF92300988A33773DD8C4B502F74B907112.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 05 Feb 2026 04:56:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:c6:14:cd:4e:c8:3d:97:1d:c4:ad:23:f6:74:05:5a:de:ad:df:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2993EFF92300988A33773DD8C4B502F74B907112
        Validity
            Not Before: Feb  2 00:59:02 2026 GMT
            Not After : Feb  5 04:56:02 2026 GMT
        Subject: CN=FD9C5F926260076D8526B07DC91504C54788A838
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:01:56:7f:fb:d9:18:79:18:de:ea:b9:ed:da:
                    d3:df:c7:81:6c:2b:8d:b4:7a:07:ac:39:74:b6:48:
                    58:54:3a:c7:70:c7:31:8e:a2:94:75:fe:e4:5b:ba:
                    e3:b7:4e:95:76:39:8a:31:9b:70:58:32:a9:44:02:
                    ac:75:d2:8e:84:34:31:66:9b:98:06:35:1e:4d:69:
                    5e:6a:39:72:b0:8f:35:c0:c5:64:d7:8d:76:2e:b8:
                    94:64:7c:4b:56:81:c0:e9:87:00:9d:bb:57:fd:ca:
                    b0:28:c5:00:0c:6f:96:1b:01:de:97:65:e1:d0:66:
                    31:93:da:da:f1:b5:69:9c:63:86:20:d7:01:f8:39:
                    84:ed:51:d8:93:ca:5f:8b:d4:4f:dc:9e:d6:77:ca:
                    2e:01:2e:4b:71:05:50:86:61:2a:03:62:5c:d5:a1:
                    25:64:b6:a0:2f:a6:a5:66:14:2c:77:d5:87:ac:0f:
                    1c:48:2a:1c:21:6e:9b:2d:95:85:62:a8:0f:df:69:
                    f7:26:2f:1c:fb:0b:1a:43:df:3d:77:6c:2b:6f:dc:
                    29:68:76:84:13:22:b9:04:3f:ac:5a:1d:b7:d0:51:
                    22:8a:0f:2f:96:85:8a:16:a4:3d:f7:d2:1e:00:ab:
                    56:b0:aa:be:3d:a4:ff:6c:dc:66:68:44:54:e0:2a:
                    73:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:9C:5F:92:62:60:07:6D:85:26:B0:7D:C9:15:04:C5:47:88:A8:38
            X509v3 Authority Key Identifier:
                keyid:29:93:EF:F9:23:00:98:8A:33:77:3D:D8:C4:B5:02:F7:4B:90:71:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/477bc3d2-4ab3-4cfb-9222-66c6ea9447e3/0/2993EFF92300988A33773DD8C4B502F74B907112.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2993EFF92300988A33773DD8C4B502F74B907112.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/477bc3d2-4ab3-4cfb-9222-66c6ea9447e3/0/2993EFF92300988A33773DD8C4B502F74B907112.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:d1:24:22:3c:9b:ed:aa:c8:d1:3c:f0:b5:97:a1:f7:51:d9:
         65:36:e0:5f:20:0e:4c:36:8e:bd:05:e3:40:a6:0b:63:35:ad:
         88:a4:be:f3:b4:c4:23:ce:f6:99:63:0f:98:a8:a9:5f:0a:21:
         ef:c5:14:1e:8b:14:5c:8a:59:97:12:f8:58:19:1d:b8:d3:55:
         93:9b:29:bc:b6:03:97:ad:0c:34:b7:d3:91:21:3e:4e:bd:cf:
         9a:ef:6d:51:bf:b9:f1:6a:fe:b0:63:dd:ac:0c:36:c8:52:ef:
         84:ce:5e:40:ef:94:00:e3:c7:cf:f7:ec:2e:18:29:79:d0:7e:
         f4:fd:80:66:b5:7e:b7:81:cc:7b:df:b2:76:50:17:f5:32:56:
         e0:25:86:f0:61:25:52:bc:f4:41:d5:75:50:6b:36:c0:5c:50:
         07:55:71:d3:1a:aa:f9:92:51:77:33:83:1c:55:90:28:44:bf:
         b3:37:c7:a7:19:4b:b3:8d:0c:39:a9:f6:39:e6:de:16:96:ea:
         ed:59:02:ba:77:68:9a:5d:90:a7:ba:49:85:91:18:d2:26:5b:
         ff:5c:74:9d:94:42:df:0c:18:0e:45:66:51:d4:d6:0f:02:50:
         4d:ce:bf:f9:e3:e8:21:b9:f3:8a:87:c2:67:3a:9e:79:34:1a:
         68:b8:07:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 15:59:20 2026 by rpki-client