This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/4c7d3cbf-24d6-4b1c-86cb-1d48876f3c6b/0/44106068E5A5FC1973C8043D3B8F00105A9C9710.mft
File:                     44106068E5A5FC1973C8043D3B8F00105A9C9710.mft (raw, json)
Hash identifier:          g9H2/qO54IVRf1+tDHrZVOZ/vTPp/gn4osPO49QpUWU=
Subject key identifier:   DE:07:DC:72:83:E8:98:75:0C:38:CC:E1:4E:FB:97:84:B6:AA:4A:2A
Authority key identifier: 44:10:60:68:E5:A5:FC:19:73:C8:04:3D:3B:8F:00:10:5A:9C:97:10
Certificate issuer:       /CN=44106068E5A5FC1973C8043D3B8F00105A9C9710
Certificate serial:       03342E9EFF929CCDFD4BE9163D1E400950E48517
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44106068E5A5FC1973C8043D3B8F00105A9C9710.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/4c7d3cbf-24d6-4b1c-86cb-1d48876f3c6b/0/44106068E5A5FC1973C8043D3B8F00105A9C9710.mft
Manifest number:          040B
Signing time:             Sat 31 Jan 2026 15:51:08 +0000
Manifest this update:     Sat 31 Jan 2026 15:46:08 +0000
Manifest next update:     Wed 04 Feb 2026 02:54:08 +0000
Files and hashes:         1: 3130332e3135352e3234372e302f32342d3234203d3e20313431303738.roa (hash: NvKxe3HHk9zHNuvCE6DN5lywX6x8QCyX3832DuoeqaY=)
                          2: 323430363a376163303a3a2f33322d3332203d3e20313431303738.roa (hash: L7IP9MHf9lzBvSIuS3oASd3QVP2r70B7eN+5QUqcHUk=)
                          3: 44106068E5A5FC1973C8043D3B8F00105A9C9710.crl (hash: wIpRjjCINId/DOJvDH+/lPcNUyHYJs7erm1xfEa5xX8=)
                          4: 3130332e3135352e3234362e302f32342d3234203d3e20313431303738.roa (hash: cKBPEdRq2LZ2LdyolV1+vPX464R8Bt40w+RS4c175VU=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/4c7d3cbf-24d6-4b1c-86cb-1d48876f3c6b/0/44106068E5A5FC1973C8043D3B8F00105A9C9710.crl
                          rsync://repo-rpki.idnic.net/repo/4c7d3cbf-24d6-4b1c-86cb-1d48876f3c6b/0/44106068E5A5FC1973C8043D3B8F00105A9C9710.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44106068E5A5FC1973C8043D3B8F00105A9C9710.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 04 Feb 2026 02:54:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:34:2e:9e:ff:92:9c:cd:fd:4b:e9:16:3d:1e:40:09:50:e4:85:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44106068E5A5FC1973C8043D3B8F00105A9C9710
        Validity
            Not Before: Jan 31 15:46:08 2026 GMT
            Not After : Feb  4 02:54:08 2026 GMT
        Subject: CN=DE07DC7283E898750C38CCE14EFB9784B6AA4A2A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:21:70:94:11:8b:eb:66:d7:8c:9c:f8:0b:df:
                    98:89:6c:93:f1:fb:72:65:33:e3:8e:83:d9:df:72:
                    6b:61:09:2e:12:a2:cc:32:0c:06:58:96:18:05:0b:
                    6b:9c:21:a3:07:b1:8c:cd:88:78:28:0f:f6:75:8b:
                    3e:88:f0:a1:de:32:4d:9d:44:b5:78:c2:af:4c:bf:
                    b5:63:ee:27:a8:40:69:50:09:7b:fa:39:b9:24:9e:
                    fc:94:68:6a:b0:46:b9:4e:5a:b7:cb:1a:a2:8e:7b:
                    07:7a:7a:41:d8:cd:d7:0b:8d:2f:be:ba:05:1c:14:
                    72:83:14:74:4e:3f:7a:ea:3b:43:0e:25:14:e6:16:
                    ec:ef:cd:d3:62:4c:6f:fb:3f:6f:6a:a8:07:b3:57:
                    41:da:a5:31:dc:62:be:a8:20:3a:72:2d:86:09:dc:
                    72:ff:0f:0e:0d:da:7e:7e:76:f3:bd:83:be:63:07:
                    a8:60:a7:c6:ef:e2:ea:6e:cc:9d:49:87:1e:d6:f4:
                    f4:14:e4:76:83:8e:bd:34:a0:01:bf:28:5f:8b:77:
                    37:0f:b0:3e:bf:69:1e:95:ca:03:0f:16:89:8c:e7:
                    ed:17:f6:e5:34:e9:63:11:57:76:57:0c:a2:ae:54:
                    13:95:6d:91:08:a5:2d:40:d0:0f:c3:9b:62:14:db:
                    3c:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:07:DC:72:83:E8:98:75:0C:38:CC:E1:4E:FB:97:84:B6:AA:4A:2A
            X509v3 Authority Key Identifier:
                keyid:44:10:60:68:E5:A5:FC:19:73:C8:04:3D:3B:8F:00:10:5A:9C:97:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/4c7d3cbf-24d6-4b1c-86cb-1d48876f3c6b/0/44106068E5A5FC1973C8043D3B8F00105A9C9710.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44106068E5A5FC1973C8043D3B8F00105A9C9710.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4c7d3cbf-24d6-4b1c-86cb-1d48876f3c6b/0/44106068E5A5FC1973C8043D3B8F00105A9C9710.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:9d:31:7d:c0:ff:89:60:cb:37:da:61:26:14:08:81:4a:f4:
         d5:b2:f2:dc:a1:4c:2b:23:ac:44:f2:11:ac:b0:cd:73:ad:25:
         14:c5:0c:17:77:13:6d:ab:e0:cf:44:52:d5:00:83:73:b2:1f:
         22:29:ab:34:41:c0:0c:84:4a:4c:1b:b4:12:6b:d0:e3:85:68:
         c8:8d:47:18:e7:c9:c2:a2:e0:f8:96:e8:41:1b:05:43:c6:3e:
         e0:35:a9:97:78:2b:57:6d:5d:49:a1:2f:58:74:09:cb:67:f0:
         6e:08:f9:f5:6f:4e:e0:6b:1f:85:4b:7f:cc:2e:eb:06:89:74:
         be:e4:5c:75:9b:a5:f9:d1:06:24:e8:c0:45:3b:8e:a1:46:65:
         aa:1f:93:06:a5:be:42:71:a9:a0:f7:87:ef:c6:6f:bb:8e:e0:
         da:9e:49:60:b6:1a:22:e8:de:f0:23:c3:d0:8c:db:c7:93:8b:
         5c:66:22:11:f2:bc:90:4d:c7:bd:c4:7d:ce:78:d4:d8:7d:9f:
         6f:28:37:61:d3:e8:fe:b5:31:91:a8:71:25:38:de:6f:43:1e:
         99:10:6a:be:42:2f:31:be:b6:ae:d2:78:94:8e:69:4b:de:65:
         f7:71:5b:fa:ca:e5:a5:71:85:38:d8:8a:c3:36:28:73:83:8b:
         24:43:58:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 12:47:01 2026 by rpki-client