This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/4a099adf-7e12-4e83-95c2-dd7f77494788/0/3703AC4154F05B1E642F31DEF71A238407E82D59.mft
File:                     3703AC4154F05B1E642F31DEF71A238407E82D59.mft (raw, json)
Hash identifier:          aKoGUnQk9pDF1cZRvsRAEgoNzCY6R2izVeOUlZrF0Wc=
Subject key identifier:   B9:F0:A3:D4:DD:24:68:BC:F9:38:66:27:05:24:CB:64:7D:DF:88:DB
Authority key identifier: 37:03:AC:41:54:F0:5B:1E:64:2F:31:DE:F7:1A:23:84:07:E8:2D:59
Certificate issuer:       /CN=3703AC4154F05B1E642F31DEF71A238407E82D59
Certificate serial:       764A985C344280CE21B35B42FB8B9B5CDBA75C10
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3703AC4154F05B1E642F31DEF71A238407E82D59.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/4a099adf-7e12-4e83-95c2-dd7f77494788/0/3703AC4154F05B1E642F31DEF71A238407E82D59.mft
Manifest number:          04EE
Signing time:             Sun 01 Feb 2026 06:50:54 +0000
Manifest this update:     Sun 01 Feb 2026 06:45:54 +0000
Manifest next update:     Wed 04 Feb 2026 18:22:54 +0000
Files and hashes:         1: 3130332e3136302e34302e302f32332d3233203d3e20313431353936.roa (hash: RNQYxKN0Nubn/ygqO8rH37j/P4lI+9FQ1kXn5iYtC0w=)
                          2: 3703AC4154F05B1E642F31DEF71A238407E82D59.crl (hash: 8U6W5W5KHf7eIhmADco3y5rR+w7twy9EuzI8tUVWc2g=)
                          3: 3130332e3136302e34302e302f32342d3234203d3e20313431353936.roa (hash: /26G7paj90BYpA/7obbRkQ0e5IpXJm+V8bRm2IMmu/M=)
                          4: 3130332e3136302e34312e302f32342d3234203d3e20313431353936.roa (hash: hTOnvJY78aaZJU0V/ewFlrDahpGLWlt1kXeTr26Q6jE=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/4a099adf-7e12-4e83-95c2-dd7f77494788/0/3703AC4154F05B1E642F31DEF71A238407E82D59.crl
                          rsync://repo-rpki.idnic.net/repo/4a099adf-7e12-4e83-95c2-dd7f77494788/0/3703AC4154F05B1E642F31DEF71A238407E82D59.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3703AC4154F05B1E642F31DEF71A238407E82D59.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 04 Feb 2026 18:22:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:4a:98:5c:34:42:80:ce:21:b3:5b:42:fb:8b:9b:5c:db:a7:5c:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3703AC4154F05B1E642F31DEF71A238407E82D59
        Validity
            Not Before: Feb  1 06:45:54 2026 GMT
            Not After : Feb  4 18:22:54 2026 GMT
        Subject: CN=B9F0A3D4DD2468BCF93866270524CB647DDF88DB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:fe:8e:fb:f3:c8:f1:12:0c:27:73:8e:d9:05:
                    5c:f5:8b:a5:14:f8:57:83:18:a9:b2:e3:e9:a1:84:
                    56:d0:0a:a9:a9:c3:e1:f1:1e:c7:aa:c5:c5:f1:40:
                    80:06:f8:4b:bf:ca:1f:ba:aa:7f:40:be:1d:e1:71:
                    d7:aa:15:1c:d2:a2:8e:06:52:7e:d6:42:36:a2:ae:
                    83:50:33:88:49:f3:c4:7c:6d:be:f7:4a:3a:3a:33:
                    e8:a6:db:59:9a:9e:7a:68:3a:6e:bf:b2:dc:e6:53:
                    07:6e:10:bb:e0:84:8c:9f:f1:be:c7:a9:5b:a0:49:
                    01:aa:1d:36:c2:29:f8:b9:e7:7f:65:95:95:f6:bc:
                    7e:da:df:5e:6f:cb:cd:86:04:70:2f:a2:db:75:fa:
                    26:90:69:2a:26:86:39:40:29:92:2b:72:13:cc:70:
                    25:c7:0e:f1:d3:de:46:d9:6e:d1:68:e9:17:b3:dc:
                    f8:9c:74:40:c5:15:8c:ed:cc:30:0b:81:9f:1f:3c:
                    de:52:71:b3:26:98:89:be:56:ac:9e:06:da:45:16:
                    43:37:12:cf:3c:fe:f1:26:e9:d8:ba:0f:3b:a2:c4:
                    69:95:9b:71:53:56:50:22:41:c7:84:eb:df:8f:fc:
                    c5:99:84:54:bc:03:68:84:1f:a2:79:57:94:cf:06:
                    9c:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:F0:A3:D4:DD:24:68:BC:F9:38:66:27:05:24:CB:64:7D:DF:88:DB
            X509v3 Authority Key Identifier:
                keyid:37:03:AC:41:54:F0:5B:1E:64:2F:31:DE:F7:1A:23:84:07:E8:2D:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/4a099adf-7e12-4e83-95c2-dd7f77494788/0/3703AC4154F05B1E642F31DEF71A238407E82D59.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3703AC4154F05B1E642F31DEF71A238407E82D59.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4a099adf-7e12-4e83-95c2-dd7f77494788/0/3703AC4154F05B1E642F31DEF71A238407E82D59.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:70:51:5e:95:6d:62:60:3e:6b:ee:d4:4f:5e:ec:a0:3e:df:
         23:ee:8d:f9:5c:9e:31:68:72:37:3d:33:a4:7d:a6:9b:4d:32:
         4e:5e:a9:0a:5a:fb:71:7a:15:c9:16:99:ad:ee:d1:ae:15:ab:
         2f:56:01:17:2a:80:b2:d0:f1:c6:8c:8c:f2:14:6b:48:22:f3:
         76:f4:07:4c:d7:8a:d3:af:76:89:b0:7a:0d:a0:47:0b:9a:ce:
         ca:ad:4c:47:ae:cb:4d:cc:f9:a1:e7:02:36:7c:2d:70:a5:e4:
         c0:b5:64:1d:56:31:e8:ac:7a:89:b4:9e:fa:64:58:ca:13:37:
         49:7a:b7:16:c1:18:a7:c2:de:b9:20:db:d4:d9:8c:e5:f5:99:
         71:86:58:f5:1d:a8:e2:be:59:ec:b3:b8:bf:24:f9:f8:12:3e:
         d7:31:5d:1c:2b:75:34:2a:f0:c6:b9:52:f1:ea:0e:d4:fa:6d:
         7c:bb:aa:c8:23:92:8e:e5:91:35:59:74:dd:f1:e2:fb:02:e1:
         92:1e:2f:ff:b6:95:a5:20:28:64:b5:3e:fe:47:af:4c:bc:dd:
         9e:c2:fb:81:01:25:82:2a:58:7b:78:2f:48:52:b4:76:d7:fb:
         cb:bc:67:cf:66:58:32:f1:d1:8b:81:bd:70:de:ad:2f:48:6d:
         3d:4e:36:f2
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUdkqYXDRCgM4hs1tC+4ubXNunXBAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzcwM0FDNDE1NEYwNUIxRTY0MkYzMURFRjcxQTIzODQw
N0U4MkQ1OTAeFw0yNjAyMDEwNjQ1NTRaFw0yNjAyMDQxODIyNTRaMDMxMTAvBgNV
BAMTKEI5RjBBM0Q0REQyNDY4QkNGOTM4NjYyNzA1MjRDQjY0N0RERjg4REIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDP/o7788jxEgwnc47ZBVz1i6UU
+FeDGKmy4+mhhFbQCqmpw+HxHseqxcXxQIAG+Eu/yh+6qn9Avh3hcdeqFRzSoo4G
Un7WQjairoNQM4hJ88R8bb73Sjo6M+im21mannpoOm6/stzmUwduELvghIyf8b7H
qVugSQGqHTbCKfi5539llZX2vH7a315vy82GBHAvott1+iaQaSomhjlAKZIrchPM
cCXHDvHT3kbZbtFo6Rez3PicdEDFFYztzDALgZ8fPN5ScbMmmIm+VqyeBtpFFkM3
Es88/vEm6di6DzuixGmVm3FTVlAiQceE69+P/MWZhFS8A2iEH6J5V5TPBpyjAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUufCj1N0kaLz5OGYnBSTLZH3fiNswHwYDVR0j
BBgwFoAUNwOsQVTwWx5kLzHe9xojhAfoLVkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80
YTA5OWFkZi03ZTEyLTRlODMtOTVjMi1kZDdmNzc0OTQ3ODgvMC8zNzAzQUM0MTU0
RjA1QjFFNjQyRjMxREVGNzFBMjM4NDA3RTgyRDU5LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMzcwM0FDNDE1NEYwNUIxRTY0MkYzMURFRjcxQTIzODQwN0U4
MkQ1OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGEwOTlhZGYtN2UxMi00ZTgzLTk1
YzItZGQ3Zjc3NDk0Nzg4LzAvMzcwM0FDNDE1NEYwNUIxRTY0MkYzMURFRjcxQTIz
ODQwN0U4MkQ1OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBADZwUV6VbWJgPmvu1E9e7KA+3yPujflcnjFo
cjc9M6R9pptNMk5eqQpa+3F6FckWma3u0a4Vqy9WARcqgLLQ8caMjPIUa0gi83b0
B0zXitOvdomweg2gRwuazsqtTEeuy03M+aHnAjZ8LXCl5MC1ZB1WMeiseom0nvpk
WMoTN0l6txbBGKfC3rkg29TZjOX1mXGGWPUdqOK+WeyzuL8k+fgSPtcxXRwrdTQq
8Ma5UvHqDtT6bXy7qsgjko7lkTVZdN3x4vsC4ZIeL/+2laUgKGS1Pv5Hr0y83Z7C
+4EBJYIqWHt4L0hStHbX+8u8Z89mWDLx0YuBvXDerS9IbT1ONvI=
-----END CERTIFICATE-----
Generated at Mon Feb 2 10:05:11 2026 by rpki-client