This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/50d00718-5210-4438-b64d-62ec1f3ebcd0/0/94F6C26027B9F72AA8701D1296627FA57809A6F3.mft
File:                     94F6C26027B9F72AA8701D1296627FA57809A6F3.mft (raw, json)
Hash identifier:          JFu7xRGsOwJ0p7+b/YSicktNWvx+LQiX6svvHLgW9qc=
Subject key identifier:   C6:1E:7F:0A:33:C3:05:5D:28:92:16:DC:B0:57:8B:ED:3C:6A:31:A0
Authority key identifier: 94:F6:C2:60:27:B9:F7:2A:A8:70:1D:12:96:62:7F:A5:78:09:A6:F3
Certificate issuer:       /CN=94F6C26027B9F72AA8701D1296627FA57809A6F3
Certificate serial:       45F3E14D6670E7D84C83E996245A831DAD509C3F
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/94F6C26027B9F72AA8701D1296627FA57809A6F3.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/50d00718-5210-4438-b64d-62ec1f3ebcd0/0/94F6C26027B9F72AA8701D1296627FA57809A6F3.mft
Manifest number:          0142
Signing time:             Sat 31 Jan 2026 06:12:33 +0000
Manifest this update:     Sat 31 Jan 2026 06:07:33 +0000
Manifest next update:     Tue 03 Feb 2026 12:38:33 +0000
Files and hashes:         1: 3130332e3131332e3132342e302f32342d3234203d3e20313337333433.roa (hash: H1YJopF0jR3qbbFBf67x3xHiCTJIJCzCPaxyU4NRgn4=)
                          2: 3130332e3131332e3132342e302f32322d3232203d3e20313337333433.roa (hash: aaZsaFHRmagSUTCNOmerQAtXa1pDWPPdaWED4yLbNMI=)
                          3: 94F6C26027B9F72AA8701D1296627FA57809A6F3.crl (hash: jxGADKdqCVUqeMx7+Jz619T5h5Lwk1nBfw/ALxWPg/o=)
                          4: 3130332e3131332e3132342e302f32322d3234203d3e20313337333433.roa (hash: ChY3ilufuzDt2M3sKZA8AjK4T57K+5mOlYRLYaVsNtA=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/50d00718-5210-4438-b64d-62ec1f3ebcd0/0/94F6C26027B9F72AA8701D1296627FA57809A6F3.crl
                          rsync://repo-rpki.idnic.net/repo/50d00718-5210-4438-b64d-62ec1f3ebcd0/0/94F6C26027B9F72AA8701D1296627FA57809A6F3.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/94F6C26027B9F72AA8701D1296627FA57809A6F3.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 03 Feb 2026 12:38:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:f3:e1:4d:66:70:e7:d8:4c:83:e9:96:24:5a:83:1d:ad:50:9c:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=94F6C26027B9F72AA8701D1296627FA57809A6F3
        Validity
            Not Before: Jan 31 06:07:33 2026 GMT
            Not After : Feb  3 12:38:33 2026 GMT
        Subject: CN=C61E7F0A33C3055D289216DCB0578BED3C6A31A0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:40:32:e5:19:4e:05:f0:fc:54:a6:70:d9:d5:
                    11:e1:94:f0:da:91:22:a5:b5:a7:15:42:89:23:19:
                    69:07:8c:a0:d9:37:56:4f:67:9a:ab:9a:4d:a7:26:
                    08:06:a7:20:a2:ae:6a:8d:3e:8b:ba:bd:11:07:ad:
                    aa:27:2d:9c:d4:93:66:ec:fb:6a:d0:1b:86:0c:ab:
                    d6:5f:f4:dc:92:fe:b3:12:b5:48:ce:24:c0:05:b2:
                    e4:aa:ea:a9:02:35:9d:fb:f3:0c:26:f6:b3:5e:df:
                    59:06:17:48:80:d2:69:c6:0d:b1:ca:56:32:c7:8b:
                    3f:41:ca:4f:45:35:32:25:38:c1:a7:29:75:b1:50:
                    a1:c8:f7:ea:0d:e5:c7:65:47:5d:94:be:a9:da:46:
                    7e:3a:33:be:17:1d:16:56:98:7c:24:c1:7c:8f:4a:
                    7a:2c:fb:d3:00:45:aa:ed:0f:50:fb:49:13:37:0b:
                    7c:26:08:06:50:1b:bf:c5:f8:47:c5:03:32:d3:8f:
                    21:3b:57:cf:0a:17:3c:61:b4:50:1d:82:25:24:30:
                    c7:db:a8:5c:e0:08:b4:79:68:09:c9:11:ff:05:0b:
                    cd:80:0f:39:7d:55:e0:a1:3f:c6:25:52:a5:e1:8b:
                    a1:64:f8:2d:42:f0:04:85:1a:2e:ac:a2:2c:ca:73:
                    91:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:1E:7F:0A:33:C3:05:5D:28:92:16:DC:B0:57:8B:ED:3C:6A:31:A0
            X509v3 Authority Key Identifier:
                keyid:94:F6:C2:60:27:B9:F7:2A:A8:70:1D:12:96:62:7F:A5:78:09:A6:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/50d00718-5210-4438-b64d-62ec1f3ebcd0/0/94F6C26027B9F72AA8701D1296627FA57809A6F3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/94F6C26027B9F72AA8701D1296627FA57809A6F3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/50d00718-5210-4438-b64d-62ec1f3ebcd0/0/94F6C26027B9F72AA8701D1296627FA57809A6F3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:d3:c3:7e:2f:12:2b:91:da:10:6e:09:c1:52:5d:2c:7b:2d:
         27:bf:86:04:b7:96:aa:ff:65:1d:c8:ba:07:86:82:e4:1a:77:
         08:6c:20:05:65:c3:8a:80:9f:f6:a8:cc:fe:f2:ef:da:e6:ab:
         ff:98:d1:88:50:7d:f4:34:f2:e1:b0:6e:89:19:28:c9:bf:04:
         59:9c:52:31:2c:19:a7:9e:5c:c7:8d:aa:ed:e7:ea:06:71:12:
         5c:18:f8:78:53:60:ae:7a:da:af:4b:74:f7:21:04:f3:6c:ca:
         32:b8:9a:54:73:b0:2d:92:03:51:08:91:08:4c:ae:f1:24:90:
         fc:bd:d9:dd:9a:26:d7:05:7e:4e:7f:ad:4c:10:55:77:58:70:
         66:06:7f:7a:4e:44:37:f4:77:57:cd:33:66:03:9b:9b:91:22:
         be:d5:18:71:d0:53:8b:de:9c:30:3b:bf:61:87:d9:ea:ab:7f:
         b7:17:f8:02:43:ec:78:eb:da:16:86:54:57:d3:8f:12:8f:bf:
         66:23:4a:51:e4:79:06:9d:a8:a2:51:e4:95:0c:82:37:0f:22:
         17:c0:c7:d7:58:a2:e1:06:80:72:d1:0f:db:39:44:96:bd:da:
         b4:f2:e4:45:ef:56:3e:cb:92:80:53:44:a6:65:6a:23:4d:bd:
         e7:23:37:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 10:05:25 2026 by rpki-client