This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/53f75e98-14ef-4457-94f3-e5b73a922fc5/0/D296B71263A794DB76A99329A0A6CD91F03F997C.mft
File:                     D296B71263A794DB76A99329A0A6CD91F03F997C.mft (raw, json)
Hash identifier:          Y1DWU/Kzv+wuQY4hUCCbEBKztxmJPaSLBBYWXnVimGo=
Subject key identifier:   5A:E3:C0:73:73:85:47:B6:54:C4:45:00:FE:56:6B:47:FD:48:9C:03
Authority key identifier: D2:96:B7:12:63:A7:94:DB:76:A9:93:29:A0:A6:CD:91:F0:3F:99:7C
Certificate issuer:       /CN=D296B71263A794DB76A99329A0A6CD91F03F997C
Certificate serial:       27A0F1EFFBB8141D6AC01AF318CD32FE56E52F10
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D296B71263A794DB76A99329A0A6CD91F03F997C.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/53f75e98-14ef-4457-94f3-e5b73a922fc5/0/D296B71263A794DB76A99329A0A6CD91F03F997C.mft
Manifest number:          0546
Signing time:             Mon 02 Feb 2026 00:10:04 +0000
Manifest this update:     Mon 02 Feb 2026 00:05:04 +0000
Manifest next update:     Thu 05 Feb 2026 07:09:04 +0000
Files and hashes:         1: 3230332e3230372e35322e302f32322d3234203d3e203138333531.roa (hash: GkkNG9FcAuiztsaFs7LArOPHFVmugjMRyr9b42+liyc=)
                          2: D296B71263A794DB76A99329A0A6CD91F03F997C.crl (hash: jvDO2pWGrkx0jjl+Oj1WcpetXYBzxkeXLHWVnO5AFlE=)
                          3: 3130332e3233312e3130382e302f32322d3234203d3e203138333531.roa (hash: H/9gUkMoKOxaM6bJMIhdfazqxPd02FQG7yEvZqg/6f4=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/53f75e98-14ef-4457-94f3-e5b73a922fc5/0/D296B71263A794DB76A99329A0A6CD91F03F997C.crl
                          rsync://repo-rpki.idnic.net/repo/53f75e98-14ef-4457-94f3-e5b73a922fc5/0/D296B71263A794DB76A99329A0A6CD91F03F997C.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D296B71263A794DB76A99329A0A6CD91F03F997C.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 05 Feb 2026 05:24:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:a0:f1:ef:fb:b8:14:1d:6a:c0:1a:f3:18:cd:32:fe:56:e5:2f:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D296B71263A794DB76A99329A0A6CD91F03F997C
        Validity
            Not Before: Feb  2 00:05:04 2026 GMT
            Not After : Feb  5 07:09:04 2026 GMT
        Subject: CN=5AE3C073738547B654C44500FE566B47FD489C03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:12:ee:68:05:f1:56:a3:8a:5f:95:f2:05:7f:
                    c3:9f:41:73:20:e1:4f:f5:19:d7:73:59:c1:ac:a0:
                    2d:04:5a:6c:97:ce:e6:e4:76:13:d6:27:86:f7:33:
                    c0:79:b5:f9:08:de:11:7e:20:c4:13:54:8d:8c:f3:
                    e3:bd:77:b2:24:d5:33:e0:a1:cd:b8:a2:04:74:6c:
                    a2:f7:f4:12:31:d6:6e:a6:ec:d5:a6:66:7d:8b:e2:
                    8c:2d:43:e2:45:d8:cc:5c:af:9c:4c:37:94:d1:e5:
                    30:c7:c5:d9:0a:41:cf:40:c8:aa:8e:be:3d:21:ce:
                    87:26:2b:57:68:89:7a:5c:86:9e:e1:37:d7:03:30:
                    80:17:89:4c:14:3f:96:f3:27:ef:00:70:bf:80:8b:
                    41:f6:91:79:27:16:14:fd:7b:0e:cd:cf:98:14:da:
                    40:fb:2b:e2:d5:70:ff:ed:87:8b:71:1a:f1:c4:d9:
                    b6:5d:d6:af:fc:6a:33:6e:fd:3b:6c:7f:10:91:6b:
                    10:1c:1d:fd:d0:a5:14:ab:60:d2:7c:af:59:9c:e9:
                    8c:99:b5:c6:34:cb:7a:13:22:d8:9e:51:d2:67:dc:
                    07:e3:06:e5:16:38:13:55:a2:29:ed:f9:40:33:cb:
                    3e:f2:fc:c2:26:dc:aa:4a:37:9c:44:3a:c5:b9:f2:
                    94:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:E3:C0:73:73:85:47:B6:54:C4:45:00:FE:56:6B:47:FD:48:9C:03
            X509v3 Authority Key Identifier:
                keyid:D2:96:B7:12:63:A7:94:DB:76:A9:93:29:A0:A6:CD:91:F0:3F:99:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/53f75e98-14ef-4457-94f3-e5b73a922fc5/0/D296B71263A794DB76A99329A0A6CD91F03F997C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D296B71263A794DB76A99329A0A6CD91F03F997C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/53f75e98-14ef-4457-94f3-e5b73a922fc5/0/D296B71263A794DB76A99329A0A6CD91F03F997C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:a5:d5:25:fc:b6:e5:65:2e:c1:67:37:65:01:10:d4:06:9f:
         02:44:be:ba:94:f7:05:26:43:2a:1d:3e:6e:49:22:3e:c1:d0:
         11:4a:07:ff:53:ac:41:90:99:b8:ac:b7:be:f8:09:9d:3d:e4:
         d0:3e:07:41:b9:8f:09:fb:fc:4e:6d:b4:20:fa:ef:ea:15:42:
         e3:f5:9d:d3:ef:20:4d:c6:81:df:48:2c:41:0f:4a:c3:3b:78:
         17:cf:85:d1:2b:ad:e9:db:72:9d:98:11:a5:ba:e0:5e:b5:c3:
         6d:ba:e6:34:ca:6f:14:da:8a:9d:48:f2:53:68:1c:94:c3:96:
         6e:2b:7a:b8:12:b2:01:a8:db:63:8c:a1:06:80:c7:aa:d3:f8:
         bc:b2:dd:9f:4e:86:81:c6:e1:9d:4f:0a:35:65:6f:6d:bd:a4:
         90:69:3c:26:a4:3c:ff:16:03:5e:a0:26:6c:54:4e:71:7d:e9:
         9d:5a:4c:88:31:39:ff:01:d2:ce:3b:2c:9b:e1:9c:5e:be:e1:
         29:08:ce:5b:82:91:c6:db:96:39:84:b4:d0:52:db:67:d1:56:
         e0:d3:32:81:ac:ba:0f:10:e7:8c:f2:59:f9:f6:83:0c:3c:89:
         5a:fb:29:34:0f:2b:6b:07:05:f7:d5:89:1d:7d:52:a9:37:52:
         1d:a3:a4:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 09:43:08 2026 by rpki-client