This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/4d6ffad2-20bc-4246-8293-44666ce1cfe0/0/C2E929DFB05F81B91880BC808154365AECAC27D2.mft
File:                     C2E929DFB05F81B91880BC808154365AECAC27D2.mft (raw, json)
Hash identifier:          W3irn9pR05KEE1eayH4XnC5OYeN8X3JKBSKMB3YLufQ=
Subject key identifier:   D2:CC:F2:FB:BA:AB:3D:6E:00:73:15:AE:C7:87:12:0A:B9:36:22:ED
Authority key identifier: C2:E9:29:DF:B0:5F:81:B9:18:80:BC:80:81:54:36:5A:EC:AC:27:D2
Certificate issuer:       /CN=C2E929DFB05F81B91880BC808154365AECAC27D2
Certificate serial:       502E44C330F49FB71922975459464224ADBC5F42
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C2E929DFB05F81B91880BC808154365AECAC27D2.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/4d6ffad2-20bc-4246-8293-44666ce1cfe0/0/C2E929DFB05F81B91880BC808154365AECAC27D2.mft
Manifest number:          0167
Signing time:             Sat 31 Jan 2026 18:01:48 +0000
Manifest this update:     Sat 31 Jan 2026 17:56:48 +0000
Manifest next update:     Tue 03 Feb 2026 21:52:48 +0000
Files and hashes:         1: 3230322e34372e3138362e302f32342d3234203d3e20313532303234.roa (hash: dATjFz2GgCuZI7do22WaaBEM9mGMyqKI+2l7xnlR/rA=)
                          2: C2E929DFB05F81B91880BC808154365AECAC27D2.crl (hash: koZ2PM+Adn4ldtgXl7UEfYpSG6S6WL7XDyHquPYi8qY=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/4d6ffad2-20bc-4246-8293-44666ce1cfe0/0/C2E929DFB05F81B91880BC808154365AECAC27D2.crl
                          rsync://repo-rpki.idnic.net/repo/4d6ffad2-20bc-4246-8293-44666ce1cfe0/0/C2E929DFB05F81B91880BC808154365AECAC27D2.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C2E929DFB05F81B91880BC808154365AECAC27D2.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 03 Feb 2026 21:52:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:2e:44:c3:30:f4:9f:b7:19:22:97:54:59:46:42:24:ad:bc:5f:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C2E929DFB05F81B91880BC808154365AECAC27D2
        Validity
            Not Before: Jan 31 17:56:48 2026 GMT
            Not After : Feb  3 21:52:48 2026 GMT
        Subject: CN=D2CCF2FBBAAB3D6E007315AEC787120AB93622ED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:cd:d9:d4:21:20:b9:8d:93:47:14:e3:ff:d9:
                    49:ee:14:4d:e5:6a:01:88:ec:34:58:4c:09:e6:df:
                    b4:f2:2d:57:64:1d:23:0a:30:73:f3:26:64:bf:1d:
                    32:d1:0e:ab:68:44:7d:ad:eb:59:1b:db:8a:1d:f7:
                    9c:5e:61:68:3a:35:d0:a1:08:ff:26:d3:44:f9:02:
                    73:65:54:a2:b5:cd:e4:3f:38:47:01:d3:41:99:cf:
                    ac:b5:3b:1e:cf:9d:33:be:a6:ee:f2:e5:f1:7e:1f:
                    24:ed:34:4a:8a:82:9f:4a:f0:53:7e:4e:9f:88:41:
                    99:c1:dc:92:98:22:14:c8:76:f8:c3:2d:21:2d:00:
                    06:a6:0a:b2:88:95:53:7e:c5:8d:6f:3c:85:67:05:
                    f9:30:b4:75:b1:6a:5c:45:ca:40:8f:61:d7:1d:46:
                    1d:84:91:b4:15:3d:ee:26:a2:d3:12:97:2c:7d:94:
                    d4:48:3e:23:66:7d:7e:85:e5:77:a6:4c:64:a7:1d:
                    e4:35:8d:a0:6a:2a:74:af:d8:77:02:1a:d1:8c:82:
                    69:7b:8b:4c:9a:fd:26:a2:3d:37:e3:73:8d:24:2d:
                    6a:d3:ff:f2:3d:dc:45:e6:7d:b8:62:bd:8b:17:7e:
                    b3:c3:df:54:68:71:04:29:c7:7e:82:67:0e:da:76:
                    3e:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:CC:F2:FB:BA:AB:3D:6E:00:73:15:AE:C7:87:12:0A:B9:36:22:ED
            X509v3 Authority Key Identifier:
                keyid:C2:E9:29:DF:B0:5F:81:B9:18:80:BC:80:81:54:36:5A:EC:AC:27:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/4d6ffad2-20bc-4246-8293-44666ce1cfe0/0/C2E929DFB05F81B91880BC808154365AECAC27D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C2E929DFB05F81B91880BC808154365AECAC27D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4d6ffad2-20bc-4246-8293-44666ce1cfe0/0/C2E929DFB05F81B91880BC808154365AECAC27D2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:dc:84:5e:9b:a4:32:9d:be:45:8f:a3:72:7e:5c:a0:10:a4:
         b1:33:ba:d0:9b:cf:e2:f5:e1:97:42:3e:9e:db:0f:13:69:e5:
         c1:c0:b6:13:4b:7a:b5:da:c7:26:22:62:05:9f:e5:fe:d1:25:
         80:6a:7f:15:04:5f:08:e3:8b:02:16:8b:f7:7f:81:65:84:87:
         03:9b:90:7e:d2:6a:da:c4:31:2c:9a:7f:13:43:c7:01:b5:c5:
         30:a3:5f:9f:a9:e5:c8:06:76:43:5b:78:b8:0e:3e:66:ad:32:
         dd:7d:cb:32:2d:da:67:22:96:c3:8a:65:c6:22:6d:fa:b3:33:
         74:da:ee:79:f5:b5:98:df:63:32:14:c5:f3:49:2c:d0:2c:12:
         79:6c:b6:65:a1:00:0d:b7:27:b5:38:f1:6c:5d:9b:f3:f4:c9:
         44:cf:2c:d4:81:94:42:2f:c2:5c:04:50:06:3f:eb:f2:ca:bf:
         2e:45:ad:56:5b:78:48:93:6c:1c:2c:6f:8f:63:77:d8:6e:36:
         85:67:a8:88:7c:f3:0a:2f:3e:ad:94:33:4e:80:0f:4b:9a:a6:
         8d:78:3c:3c:3a:50:aa:f1:70:be:09:c8:e7:d0:c7:80:74:13:
         ba:33:92:bd:cd:22:70:15:70:58:e2:96:46:92:af:ee:23:d9:
         1b:17:82:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 09:45:14 2026 by rpki-client