This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/532c5121-f749-4a54-a9ec-f6c349f34310/0/F075D91933F7B3147C303794D6C498142A2D33C6.mft
File:                     F075D91933F7B3147C303794D6C498142A2D33C6.mft (raw, json)
Hash identifier:          1rL1aNyEkJuHS89HOyTuhJIy5FQfnP2G94acDJDJIPo=
Subject key identifier:   0B:79:77:C5:2D:27:0A:95:E8:8F:63:EC:01:87:63:F1:67:C6:0B:29
Authority key identifier: F0:75:D9:19:33:F7:B3:14:7C:30:37:94:D6:C4:98:14:2A:2D:33:C6
Certificate issuer:       /CN=F075D91933F7B3147C303794D6C498142A2D33C6
Certificate serial:       10662AE7944FDC03C7FACA93159834343E09A2D9
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F075D91933F7B3147C303794D6C498142A2D33C6.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/532c5121-f749-4a54-a9ec-f6c349f34310/0/F075D91933F7B3147C303794D6C498142A2D33C6.mft
Manifest number:          01BC
Signing time:             Mon 02 Feb 2026 03:41:37 +0000
Manifest this update:     Mon 02 Feb 2026 03:36:37 +0000
Manifest next update:     Thu 05 Feb 2026 09:56:37 +0000
Files and hashes:         1: 3130332e3235332e3132342e302f32342d3234203d3e203539313432.roa (hash: XUjYjomn+FDHeFP35eIIQvW7MGG7ocItLx8+BF1P+J0=)
                          2: F075D91933F7B3147C303794D6C498142A2D33C6.crl (hash: G9DBB9/NbX9QVUP5BKkkixtbDYRGDqlKwsasw8i2F6U=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/532c5121-f749-4a54-a9ec-f6c349f34310/0/F075D91933F7B3147C303794D6C498142A2D33C6.crl
                          rsync://repo-rpki.idnic.net/repo/532c5121-f749-4a54-a9ec-f6c349f34310/0/F075D91933F7B3147C303794D6C498142A2D33C6.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F075D91933F7B3147C303794D6C498142A2D33C6.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 05 Feb 2026 05:24:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:66:2a:e7:94:4f:dc:03:c7:fa:ca:93:15:98:34:34:3e:09:a2:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F075D91933F7B3147C303794D6C498142A2D33C6
        Validity
            Not Before: Feb  2 03:36:37 2026 GMT
            Not After : Feb  5 09:56:37 2026 GMT
        Subject: CN=0B7977C52D270A95E88F63EC018763F167C60B29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:a9:8f:6e:11:41:f8:ab:f0:86:83:e5:c2:6c:
                    78:ac:2f:e7:bf:fa:15:0f:99:bc:56:12:c9:be:6d:
                    09:27:3b:0f:13:3a:47:d8:1d:ba:a3:fd:43:57:c1:
                    b0:2b:be:81:1e:da:fa:0f:a3:db:82:c4:b1:dc:fa:
                    fb:6e:55:f2:90:f4:2f:c2:5a:c1:ca:e3:70:6a:1f:
                    77:64:f0:c2:9e:00:01:6d:60:ce:d0:7a:52:bf:d5:
                    bf:bf:1b:e0:d0:49:83:c9:1b:f0:c2:27:cd:b0:29:
                    78:32:cc:48:c1:af:82:f5:56:96:dd:25:fd:91:cf:
                    d7:da:eb:80:d3:02:ba:17:59:d9:69:a9:5c:40:42:
                    81:7d:73:05:53:ab:98:0e:61:c4:e0:41:80:f6:52:
                    b5:82:75:ab:b8:43:d1:be:75:84:93:e5:49:9c:af:
                    d8:5d:bb:2c:34:85:7f:63:f5:aa:13:9d:ef:2c:30:
                    16:85:d3:6b:fb:46:35:08:91:88:58:30:62:12:58:
                    a6:7b:06:89:28:a2:ff:b2:c4:31:cf:60:dd:38:28:
                    2c:bd:fb:ed:62:24:cf:98:23:5a:1f:73:2d:05:39:
                    76:e8:e2:19:85:ca:44:70:05:fc:74:81:cd:cb:3f:
                    50:93:4b:ea:cc:41:61:08:b3:7a:6c:f7:35:a7:3c:
                    7e:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:79:77:C5:2D:27:0A:95:E8:8F:63:EC:01:87:63:F1:67:C6:0B:29
            X509v3 Authority Key Identifier:
                keyid:F0:75:D9:19:33:F7:B3:14:7C:30:37:94:D6:C4:98:14:2A:2D:33:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/532c5121-f749-4a54-a9ec-f6c349f34310/0/F075D91933F7B3147C303794D6C498142A2D33C6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F075D91933F7B3147C303794D6C498142A2D33C6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/532c5121-f749-4a54-a9ec-f6c349f34310/0/F075D91933F7B3147C303794D6C498142A2D33C6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:86:e8:79:3a:51:ee:09:09:de:0f:b4:9f:19:fa:1e:48:26:
         ee:9e:68:3a:21:f8:1a:9b:fe:a6:02:85:45:ed:1c:14:1c:81:
         9f:bb:fa:93:3d:de:6c:57:ee:ea:3a:99:f8:84:21:e2:88:4b:
         82:98:3f:c5:bf:7e:32:e9:aa:4b:df:ce:ca:e1:d1:54:73:a0:
         c2:c1:91:80:4b:ba:1f:e1:d9:eb:0a:60:dd:72:1d:5e:a6:ae:
         4d:ef:0d:2b:d8:20:4e:5b:58:e7:17:b1:db:49:b2:94:90:66:
         fa:2c:6b:d2:a5:26:39:ab:14:b4:16:2d:72:49:8d:e7:59:b9:
         76:3a:49:d6:fe:64:7e:4c:4c:06:1e:93:ed:ef:d8:fe:e8:42:
         29:e9:75:5e:da:f1:db:03:94:33:45:42:1f:c1:e1:9a:8c:47:
         e1:5f:19:e7:d6:97:4b:e6:74:b3:08:bd:de:fa:ac:81:73:14:
         ce:99:dd:2d:dd:7b:3c:af:68:86:17:74:d7:6b:37:e7:d4:a6:
         3f:7c:0d:3a:00:17:fb:f8:f1:1a:59:6c:d5:2d:1f:b6:ba:8d:
         03:39:5a:4f:6e:71:f9:2d:52:a5:bb:d8:5c:c0:4a:ba:38:04:
         46:c1:18:fd:e0:20:a5:30:78:82:2c:32:9e:3f:69:28:7a:0f:
         36:f9:34:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 14:29:17 2026 by rpki-client