This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/5713fc17-57f1-4671-8a16-f858ddd7da43/0/48CA7719CE7CE90570E1A1B6F443947AE9CAA74E.mft
File:                     48CA7719CE7CE90570E1A1B6F443947AE9CAA74E.mft (raw, json)
Hash identifier:          TCb+bX4+cVsuGlAdg/oEX7c6QdqbGVjYCtXWvX9lC9E=
Subject key identifier:   D5:56:DC:1E:DF:79:D8:60:1B:D6:19:AB:91:0A:19:AA:A2:ED:30:15
Authority key identifier: 48:CA:77:19:CE:7C:E9:05:70:E1:A1:B6:F4:43:94:7A:E9:CA:A7:4E
Certificate issuer:       /CN=48CA7719CE7CE90570E1A1B6F443947AE9CAA74E
Certificate serial:       24E955B4DA0B4DA88905501EB1B864C1C566BFE9
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/48CA7719CE7CE90570E1A1B6F443947AE9CAA74E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/5713fc17-57f1-4671-8a16-f858ddd7da43/0/48CA7719CE7CE90570E1A1B6F443947AE9CAA74E.mft
Manifest number:          0318
Signing time:             Mon 02 Feb 2026 06:52:25 +0000
Manifest this update:     Mon 02 Feb 2026 06:47:25 +0000
Manifest next update:     Thu 05 Feb 2026 13:23:25 +0000
Files and hashes:         1: 48CA7719CE7CE90570E1A1B6F443947AE9CAA74E.crl (hash: WmqCK4hnYDo9M+fyvfMFj4RWRLLASyY2JGAV/G6BueU=)
                          2: 323430353a363734303a3139303a3a2f34382d3438203d3e20313339343139.roa (hash: h0uU2AKusrQHbjkburXzXPAyds6K64Q0hGEkTa5sQco=)
                          3: 323430353a363734303a3a2f33322d3332203d3e20313339343139.roa (hash: WMxSedPwXIySzWCOaLHGaL4tbNCWdjdUSEo0MBMmwMQ=)
                          4: 3130332e3134342e35342e302f32342d3234203d3e20313339343139.roa (hash: MuxtLH1xVU8aMXuETWAtcXYghvJecFcLSJD0ep6gJ1w=)
                          5: 323430353a363734303a3130303a3a2f34382d3438203d3e20313339343139.roa (hash: N/xuk/uVyqJj7Q+uJ2smPf8FwkyHScFvJet2vyKpC0c=)
                          6: 3130332e3134342e35342e302f32332d3233203d3e20313339343139.roa (hash: xsHtPC0twOAvhdTcGQCC9MWMZnDVbfTtrjCs4k/py0U=)
                          7: 323430353a363734303a61303a3a2f34382d3438203d3e20313339343139.roa (hash: vw3nmxARpsfp0COH4lfcs/BBgNYvJ56RcTx3ubbpe6c=)
                          8: 3130332e3134342e35352e302f32342d3234203d3e20313339343139.roa (hash: RBXBJReRfy8KulVUPCe8Lzlo/vqZ8dUD+VvDoIOdRkI=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/5713fc17-57f1-4671-8a16-f858ddd7da43/0/48CA7719CE7CE90570E1A1B6F443947AE9CAA74E.crl
                          rsync://repo-rpki.idnic.net/repo/5713fc17-57f1-4671-8a16-f858ddd7da43/0/48CA7719CE7CE90570E1A1B6F443947AE9CAA74E.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/48CA7719CE7CE90570E1A1B6F443947AE9CAA74E.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 05 Feb 2026 13:23:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:e9:55:b4:da:0b:4d:a8:89:05:50:1e:b1:b8:64:c1:c5:66:bf:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48CA7719CE7CE90570E1A1B6F443947AE9CAA74E
        Validity
            Not Before: Feb  2 06:47:25 2026 GMT
            Not After : Feb  5 13:23:25 2026 GMT
        Subject: CN=D556DC1EDF79D8601BD619AB910A19AAA2ED3015
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:d1:ab:b2:e1:53:33:df:51:97:d1:74:1b:a0:
                    bc:9a:0d:af:92:be:64:58:c5:0d:72:b3:ba:a9:5c:
                    ec:5c:ff:77:89:9a:53:b1:ad:ec:f1:30:c3:95:50:
                    b0:97:33:cc:bc:56:a8:dc:41:11:db:75:ef:a7:01:
                    6f:e1:d9:0e:a8:de:35:83:d3:32:a2:71:83:1b:c8:
                    f6:89:7a:3c:c5:93:b6:c1:38:45:a2:6b:12:41:31:
                    47:b0:25:6c:38:b2:35:fd:5f:c0:19:ed:5b:13:25:
                    67:79:4d:3a:f7:b5:80:88:6a:d8:3c:7c:59:cb:d6:
                    69:fd:00:33:7c:75:54:de:7e:0e:64:f4:ed:71:a7:
                    9f:df:67:cb:76:36:df:09:7e:1f:c6:ee:a6:d4:75:
                    44:80:b0:f6:dc:c7:7b:d2:61:77:f5:4f:86:da:b4:
                    31:0c:b2:e2:56:f3:0a:82:3f:20:76:28:59:7b:e4:
                    c7:38:aa:5c:7f:fa:6d:e3:53:ac:98:eb:01:e1:ab:
                    82:16:e0:ed:7e:b6:2c:b9:f2:cc:63:f3:80:97:d0:
                    81:4c:a7:93:f7:4e:92:c0:d9:42:18:10:a4:49:1c:
                    dd:63:09:ac:f3:06:81:33:86:3e:cc:4a:17:2f:f7:
                    1b:71:ba:53:74:57:28:c4:71:e0:16:91:ac:19:b9:
                    cc:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:56:DC:1E:DF:79:D8:60:1B:D6:19:AB:91:0A:19:AA:A2:ED:30:15
            X509v3 Authority Key Identifier:
                keyid:48:CA:77:19:CE:7C:E9:05:70:E1:A1:B6:F4:43:94:7A:E9:CA:A7:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/5713fc17-57f1-4671-8a16-f858ddd7da43/0/48CA7719CE7CE90570E1A1B6F443947AE9CAA74E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/48CA7719CE7CE90570E1A1B6F443947AE9CAA74E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5713fc17-57f1-4671-8a16-f858ddd7da43/0/48CA7719CE7CE90570E1A1B6F443947AE9CAA74E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c0:66:18:54:dd:70:79:6a:75:03:dd:e0:6b:46:ba:fb:ec:55:
         6b:89:87:74:ae:d6:97:51:91:fc:5f:d4:f4:59:fc:e5:29:51:
         f1:ab:df:f7:c9:a4:db:6a:ff:bf:b8:b1:9d:13:27:59:44:04:
         c2:3a:f5:ef:73:8a:f2:a7:4c:aa:16:d2:bb:46:97:46:76:bd:
         f3:35:b6:22:25:94:58:a4:19:d3:40:33:27:26:f3:96:ba:b7:
         31:98:f1:39:e4:fc:ed:4a:aa:af:fc:85:f5:a6:79:0c:b6:95:
         d8:46:27:6a:33:4c:d6:73:ae:c5:ca:20:a8:d2:de:d8:8d:56:
         f6:bf:b9:38:f4:00:1f:c4:06:ac:8b:e5:18:7b:4d:b4:17:f9:
         80:f0:71:20:55:23:7b:91:f4:67:d2:e9:9f:96:8d:9d:48:0a:
         b1:d5:09:dc:c2:a8:0a:60:f4:ec:43:be:c6:2e:20:60:c4:11:
         6e:85:3b:55:7c:a0:b1:ca:53:38:94:da:76:dc:8b:16:3b:86:
         61:90:97:b4:db:e2:28:96:3d:59:54:18:fa:05:90:60:f3:45:
         db:3a:45:7a:49:87:a8:d4:5c:27:e6:94:40:ca:b3:22:be:cb:
         2a:6f:d6:ad:7c:37:67:7e:86:b5:ef:7e:32:5c:00:f5:7f:9d:
         30:30:64:2c
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUJOlVtNoLTaiJBVAesbhkwcVmv+kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDhDQTc3MTlDRTdDRTkwNTcwRTFBMUI2RjQ0Mzk0N0FF
OUNBQTc0RTAeFw0yNjAyMDIwNjQ3MjVaFw0yNjAyMDUxMzIzMjVaMDMxMTAvBgNV
BAMTKEQ1NTZEQzFFREY3OUQ4NjAxQkQ2MTlBQjkxMEExOUFBQTJFRDMwMTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCv0auy4VMz31GX0XQboLyaDa+S
vmRYxQ1ys7qpXOxc/3eJmlOxrezxMMOVULCXM8y8VqjcQRHbde+nAW/h2Q6o3jWD
0zKicYMbyPaJejzFk7bBOEWiaxJBMUewJWw4sjX9X8AZ7VsTJWd5TTr3tYCIatg8
fFnL1mn9ADN8dVTefg5k9O1xp5/fZ8t2Nt8Jfh/G7qbUdUSAsPbcx3vSYXf1T4ba
tDEMsuJW8wqCPyB2KFl75Mc4qlx/+m3jU6yY6wHhq4IW4O1+tiy58sxj84CX0IFM
p5P3TpLA2UIYEKRJHN1jCazzBoEzhj7MShcv9xtxulN0VyjEceAWkawZucyTAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQU1VbcHt952GAb1hmrkQoZqqLtMBUwHwYDVR0j
BBgwFoAUSMp3Gc586QVw4aG29EOUeunKp04wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81
NzEzZmMxNy01N2YxLTQ2NzEtOGExNi1mODU4ZGRkN2RhNDMvMC80OENBNzcxOUNF
N0NFOTA1NzBFMUExQjZGNDQzOTQ3QUU5Q0FBNzRFLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNDhDQTc3MTlDRTdDRTkwNTcwRTFBMUI2RjQ0Mzk0N0FFOUNB
QTc0RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTcxM2ZjMTctNTdmMS00NjcxLThh
MTYtZjg1OGRkZDdkYTQzLzAvNDhDQTc3MTlDRTdDRTkwNTcwRTFBMUI2RjQ0Mzk0
N0FFOUNBQTc0RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAMBmGFTdcHlqdQPd4GtGuvvsVWuJh3Su1pdR
kfxf1PRZ/OUpUfGr3/fJpNtq/7+4sZ0TJ1lEBMI69e9zivKnTKoW0rtGl0Z2vfM1
tiIllFikGdNAMycm85a6tzGY8Tnk/O1Kqq/8hfWmeQy2ldhGJ2ozTNZzrsXKIKjS
3tiNVva/uTj0AB/EBqyL5Rh7TbQX+YDwcSBVI3uR9GfS6Z+WjZ1ICrHVCdzCqApg
9OxDvsYuIGDEEW6FO1V8oLHKUziU2nbcixY7hmGQl7Tb4iiWPVlUGPoFkGDzRds6
RXpJh6jUXCfmlEDKsyK+yypv1q18N2d+hrXvfjJcAPV/nTAwZCw=
-----END CERTIFICATE-----
Generated at Mon Feb 2 19:21:13 2026 by rpki-client