This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/53b858f6-de20-4121-bcea-9076edccc097/0/90317E269FFE9F713F20CFBACE642A6F60F78FCA.mft
File:                     90317E269FFE9F713F20CFBACE642A6F60F78FCA.mft (raw, json)
Hash identifier:          LYZzZIb7NyXjFUWWzKDJVtHA3yJr5CpGD4f1yH/Q8PQ=
Subject key identifier:   D6:24:3C:00:1C:44:1A:FB:E3:32:4D:8A:D9:DD:85:0E:98:25:8B:B6
Authority key identifier: 90:31:7E:26:9F:FE:9F:71:3F:20:CF:BA:CE:64:2A:6F:60:F7:8F:CA
Certificate issuer:       /CN=90317E269FFE9F713F20CFBACE642A6F60F78FCA
Certificate serial:       2C37E9B4F6016D95682DE5DAC79A9C1A1174619A
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/90317E269FFE9F713F20CFBACE642A6F60F78FCA.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/53b858f6-de20-4121-bcea-9076edccc097/0/90317E269FFE9F713F20CFBACE642A6F60F78FCA.mft
Manifest number:          F1
Signing time:             Mon 02 Feb 2026 00:50:05 +0000
Manifest this update:     Mon 02 Feb 2026 00:45:05 +0000
Manifest next update:     Thu 05 Feb 2026 01:45:05 +0000
Files and hashes:         1: 3130332e33362e3235302e302f32342d3234203d3e20313431303538.roa (hash: 1HxtFIC2mDpdIVeFSCE5SBjVAm1XOnzukjpVGUq9Opw=)
                          2: 3130332e3135352e3131332e302f32342d3234203d3e20313431303538.roa (hash: eDVLkqfk43S08o9qz9LRiZEdW7qlzbDriZ0upji6wSE=)
                          3: 323430313a633432303a3a2f33322d3438203d3e20313431303538.roa (hash: Ys/Ac2N5+uLGmk3R0LquRKwlaYjjmhHi3Oz1JgWuapk=)
                          4: 90317E269FFE9F713F20CFBACE642A6F60F78FCA.crl (hash: U0mfwjSYvjrVW9EmH1MximdJd+C4X1n2pgt1UsR15Lo=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/53b858f6-de20-4121-bcea-9076edccc097/0/90317E269FFE9F713F20CFBACE642A6F60F78FCA.crl
                          rsync://repo-rpki.idnic.net/repo/53b858f6-de20-4121-bcea-9076edccc097/0/90317E269FFE9F713F20CFBACE642A6F60F78FCA.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/90317E269FFE9F713F20CFBACE642A6F60F78FCA.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 05 Feb 2026 01:45:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:37:e9:b4:f6:01:6d:95:68:2d:e5:da:c7:9a:9c:1a:11:74:61:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90317E269FFE9F713F20CFBACE642A6F60F78FCA
        Validity
            Not Before: Feb  2 00:45:05 2026 GMT
            Not After : Feb  5 01:45:05 2026 GMT
        Subject: CN=D6243C001C441AFBE3324D8AD9DD850E98258BB6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:0f:fd:fc:ed:cc:d1:f5:4b:f4:53:93:cf:35:
                    36:f9:fc:08:0e:65:6c:82:16:19:1c:cf:0c:21:de:
                    c8:c6:54:13:4c:1a:13:18:6c:51:f3:bb:db:32:e9:
                    5b:b1:57:9b:b7:1b:d0:69:9c:89:29:dd:2c:1e:12:
                    83:39:3f:48:c7:72:f8:14:94:e1:9d:38:d2:c4:b3:
                    81:fe:36:1d:43:6d:2b:2d:1e:70:74:bc:64:20:ad:
                    fd:13:9b:e7:c6:40:e0:63:ff:28:9a:35:0f:e5:8b:
                    00:68:d1:3f:5b:0d:b7:ab:ef:23:3e:32:4c:9c:30:
                    31:5e:13:eb:a9:1e:04:86:ee:0c:a6:0f:dc:48:fe:
                    c2:74:d2:1e:d3:a6:83:76:ce:dd:d1:69:e7:a1:b5:
                    f3:da:14:ac:d9:ea:3b:2d:37:2a:1c:64:cb:de:de:
                    db:21:08:eb:4a:27:7f:d3:78:5a:9c:8d:8a:bb:82:
                    94:62:35:e8:4e:47:f3:eb:56:54:5f:3f:d9:26:c8:
                    53:b5:b1:78:7f:51:ac:84:a2:26:34:1c:4a:8c:28:
                    24:ae:88:9b:be:7c:65:4c:4d:2a:6a:73:36:82:5f:
                    ea:3a:70:fe:4d:64:2e:08:25:2d:b5:f1:14:12:8d:
                    7c:43:f4:b7:ba:97:58:24:95:d8:3c:a4:30:93:29:
                    ec:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:24:3C:00:1C:44:1A:FB:E3:32:4D:8A:D9:DD:85:0E:98:25:8B:B6
            X509v3 Authority Key Identifier:
                keyid:90:31:7E:26:9F:FE:9F:71:3F:20:CF:BA:CE:64:2A:6F:60:F7:8F:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/53b858f6-de20-4121-bcea-9076edccc097/0/90317E269FFE9F713F20CFBACE642A6F60F78FCA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/90317E269FFE9F713F20CFBACE642A6F60F78FCA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/53b858f6-de20-4121-bcea-9076edccc097/0/90317E269FFE9F713F20CFBACE642A6F60F78FCA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:4b:c8:e1:e6:82:e0:40:a9:e7:73:87:e8:63:53:e8:0c:3f:
         d3:55:f6:f2:69:41:0b:9e:dc:96:d1:65:b5:39:dd:0e:61:71:
         df:9b:97:50:d1:99:81:b5:d2:2c:fc:5b:e2:1b:0d:ae:66:22:
         df:4f:ea:65:e4:f5:65:07:e1:ae:17:d4:ed:13:26:6a:fc:3d:
         23:82:eb:86:46:d1:08:c6:c8:d3:c9:59:e8:a6:23:fc:03:ed:
         02:9e:9c:15:b5:11:ce:99:d5:cf:e2:c9:c4:d0:86:b4:7b:70:
         16:b6:fc:d4:22:d0:43:78:66:6a:81:2a:c0:c3:e6:00:c1:31:
         d5:47:6a:fd:a9:e8:cc:f4:d3:c2:58:4d:38:c1:38:42:9a:93:
         c7:8e:f4:e7:3d:d0:ec:ad:ca:1f:1c:d9:9c:13:df:f4:68:bc:
         0e:c7:ad:20:ed:3f:70:42:5e:fa:65:8d:ca:89:7f:42:93:e9:
         a5:b9:24:fb:52:f3:70:d9:71:74:22:d4:b1:b3:a6:9e:cb:73:
         ed:d6:70:42:52:53:8a:7d:6d:54:48:45:5e:d9:38:af:7b:72:
         6f:61:5a:38:1c:0e:8a:f8:ee:f6:a7:f2:e8:a3:de:17:df:3f:
         09:b4:68:c9:ea:0b:3c:3c:e1:32:3f:45:71:7c:1d:15:d7:4c:
         02:1b:14:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 14:27:01 2026 by rpki-client