This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/5ab0a59a-61ba-462e-a82a-a202b7fb80f0/0/507DBCE0DE73C38C3EE975AE23FB7C0C0377011A.mft
File:                     507DBCE0DE73C38C3EE975AE23FB7C0C0377011A.mft (raw, json)
Hash identifier:          +/AR7yybCj0pMQBW42nozkjsvMZD4P3RZnPp3qWaK6o=
Subject key identifier:   46:AB:AD:9F:7E:91:4C:A7:26:15:BA:5F:7B:B4:45:FC:5B:4B:11:E9
Authority key identifier: 50:7D:BC:E0:DE:73:C3:8C:3E:E9:75:AE:23:FB:7C:0C:03:77:01:1A
Certificate issuer:       /CN=507DBCE0DE73C38C3EE975AE23FB7C0C0377011A
Certificate serial:       60B061F0D62D9C69E3116299A13467A38C2E87F1
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/507DBCE0DE73C38C3EE975AE23FB7C0C0377011A.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/5ab0a59a-61ba-462e-a82a-a202b7fb80f0/0/507DBCE0DE73C38C3EE975AE23FB7C0C0377011A.mft
Manifest number:          0556
Signing time:             Sat 31 Jan 2026 10:11:40 +0000
Manifest this update:     Sat 31 Jan 2026 10:06:40 +0000
Manifest next update:     Tue 03 Feb 2026 21:25:40 +0000
Files and hashes:         1: 507DBCE0DE73C38C3EE975AE23FB7C0C0377011A.crl (hash: t5CoZ74U1zStPUadf+L5wbwlrN3Z6c/wT/k1BZ6S7T8=)
                          2: 3130332e3134342e33382e302f32332d3233203d3e20313339343234.roa (hash: XP0ftXtJRKTRnMmM5RHfXvqivFStcWbbL9fTaa1lIQs=)
                          3: 3130332e3134342e33382e302f32342d3234203d3e20313339343234.roa (hash: Z+yI+qBEJQ4HpP+yvfIUbQbmmee7rBGeSeum3wqAtpo=)
                          4: 3130332e3134342e33392e302f32342d3234203d3e20313339343234.roa (hash: MxlZMpoNv5CdONEOPyJ0XCI3HYckgI0HEgji/tMrUdg=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/5ab0a59a-61ba-462e-a82a-a202b7fb80f0/0/507DBCE0DE73C38C3EE975AE23FB7C0C0377011A.crl
                          rsync://repo-rpki.idnic.net/repo/5ab0a59a-61ba-462e-a82a-a202b7fb80f0/0/507DBCE0DE73C38C3EE975AE23FB7C0C0377011A.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/507DBCE0DE73C38C3EE975AE23FB7C0C0377011A.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 03 Feb 2026 21:25:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:b0:61:f0:d6:2d:9c:69:e3:11:62:99:a1:34:67:a3:8c:2e:87:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=507DBCE0DE73C38C3EE975AE23FB7C0C0377011A
        Validity
            Not Before: Jan 31 10:06:40 2026 GMT
            Not After : Feb  3 21:25:40 2026 GMT
        Subject: CN=46ABAD9F7E914CA72615BA5F7BB445FC5B4B11E9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:57:4b:40:f9:28:2d:3f:fc:ab:79:98:20:41:
                    23:af:f3:4f:0d:4f:8e:4d:c7:dd:60:47:b1:43:c5:
                    b3:10:f9:4d:1f:cd:5a:39:44:d5:8e:c6:23:49:45:
                    f1:fb:77:9b:2a:6f:80:2f:9a:44:ec:d3:a6:6f:53:
                    c5:52:6b:75:0a:f8:5c:7f:fd:e9:2b:64:26:b4:92:
                    32:12:f8:26:3d:0a:53:a4:45:92:16:01:ba:d1:d8:
                    73:7b:79:85:4b:01:65:10:f8:b8:e7:f4:61:ca:35:
                    c9:94:1a:31:0a:67:f9:45:c8:2c:64:5f:83:17:0f:
                    a7:66:11:f1:b5:08:c3:72:dd:fc:3e:68:ec:3a:4a:
                    15:d7:75:1b:54:ab:7b:f7:43:b8:9c:33:2a:54:6f:
                    08:09:c0:43:82:01:c3:ae:62:9b:5b:92:71:27:75:
                    60:81:cb:99:31:80:5e:64:cf:c4:82:07:bc:b7:d7:
                    35:3a:6e:e8:b5:5a:7d:2b:c9:17:54:f0:51:18:dc:
                    4f:3b:59:d8:5d:bc:e4:7f:51:eb:4b:70:e4:a3:08:
                    11:dc:68:cf:a0:98:dd:6d:47:3a:dc:de:93:39:54:
                    bf:7e:24:96:b6:87:3a:5d:e3:1f:00:bc:cb:07:a3:
                    ca:e2:5c:7b:c9:8e:4d:1c:d8:61:1f:eb:85:34:ec:
                    68:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:AB:AD:9F:7E:91:4C:A7:26:15:BA:5F:7B:B4:45:FC:5B:4B:11:E9
            X509v3 Authority Key Identifier:
                keyid:50:7D:BC:E0:DE:73:C3:8C:3E:E9:75:AE:23:FB:7C:0C:03:77:01:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/5ab0a59a-61ba-462e-a82a-a202b7fb80f0/0/507DBCE0DE73C38C3EE975AE23FB7C0C0377011A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/507DBCE0DE73C38C3EE975AE23FB7C0C0377011A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5ab0a59a-61ba-462e-a82a-a202b7fb80f0/0/507DBCE0DE73C38C3EE975AE23FB7C0C0377011A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:3b:ad:06:2e:76:cb:8d:ab:89:7b:e9:fd:59:47:e0:b5:b5:
         b3:5b:6a:7c:4f:4a:39:74:4e:24:77:eb:25:83:2e:7c:1c:a9:
         84:4f:a9:01:5d:0e:77:5f:26:6f:8c:4d:c8:9b:b0:b1:1a:c7:
         06:83:10:97:17:07:d9:ec:d5:20:71:32:35:ff:d1:da:78:89:
         a3:a1:9b:ad:f9:0f:c9:92:ff:88:a1:1f:31:41:c8:98:12:e8:
         71:81:be:35:14:8b:fc:f2:04:2c:28:2d:f1:83:fe:cd:cb:f6:
         31:11:b9:3c:b5:7d:ef:0e:df:ab:e7:e5:79:8f:0d:e3:0a:01:
         01:22:eb:ee:ab:91:42:35:5b:b5:74:81:2f:3b:fa:b7:ec:bc:
         75:9c:12:64:49:0b:e8:24:7d:01:38:12:98:c4:b6:a2:c5:43:
         97:28:6b:5b:08:38:af:0c:85:8b:20:fc:63:25:eb:51:bb:91:
         1f:57:03:f0:3d:f4:dc:ea:98:6a:3d:5c:be:88:0e:27:4c:52:
         56:25:d7:cf:30:10:4c:7c:67:c8:1f:68:d1:d7:d3:f5:31:32:
         87:5d:98:f4:af:81:68:5e:99:b8:70:9a:a9:12:59:7c:53:85:
         fe:7f:ab:63:f2:41:81:1b:c6:ab:fc:4b:82:65:4c:5a:16:97:
         59:43:c7:ce
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUYLBh8NYtnGnjEWKZoTRno4wuh/EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTA3REJDRTBERTczQzM4QzNFRTk3NUFFMjNGQjdDMEMw
Mzc3MDExQTAeFw0yNjAxMzExMDA2NDBaFw0yNjAyMDMyMTI1NDBaMDMxMTAvBgNV
BAMTKDQ2QUJBRDlGN0U5MTRDQTcyNjE1QkE1RjdCQjQ0NUZDNUI0QjExRTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuV0tA+SgtP/yreZggQSOv808N
T45Nx91gR7FDxbMQ+U0fzVo5RNWOxiNJRfH7d5sqb4AvmkTs06ZvU8VSa3UK+Fx/
/ekrZCa0kjIS+CY9ClOkRZIWAbrR2HN7eYVLAWUQ+Ljn9GHKNcmUGjEKZ/lFyCxk
X4MXD6dmEfG1CMNy3fw+aOw6ShXXdRtUq3v3Q7icMypUbwgJwEOCAcOuYptbknEn
dWCBy5kxgF5kz8SCB7y31zU6bui1Wn0ryRdU8FEY3E87WdhdvOR/UetLcOSjCBHc
aM+gmN1tRzrc3pM5VL9+JJa2hzpd4x8AvMsHo8riXHvJjk0c2GEf64U07GiBAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQURqutn36RTKcmFbpfe7RF/FtLEekwHwYDVR0j
BBgwFoAUUH284N5zw4w+6XWuI/t8DAN3ARowDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81
YWIwYTU5YS02MWJhLTQ2MmUtYTgyYS1hMjAyYjdmYjgwZjAvMC81MDdEQkNFMERF
NzNDMzhDM0VFOTc1QUUyM0ZCN0MwQzAzNzcwMTFBLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNTA3REJDRTBERTczQzM4QzNFRTk3NUFFMjNGQjdDMEMwMzc3
MDExQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWFiMGE1OWEtNjFiYS00NjJlLWE4
MmEtYTIwMmI3ZmI4MGYwLzAvNTA3REJDRTBERTczQzM4QzNFRTk3NUFFMjNGQjdD
MEMwMzc3MDExQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAFw7rQYudsuNq4l76f1ZR+C1tbNbanxPSjl0
TiR36yWDLnwcqYRPqQFdDndfJm+MTcibsLEaxwaDEJcXB9ns1SBxMjX/0dp4iaOh
m635D8mS/4ihHzFByJgS6HGBvjUUi/zyBCwoLfGD/s3L9jERuTy1fe8O36vn5XmP
DeMKAQEi6+6rkUI1W7V0gS87+rfsvHWcEmRJC+gkfQE4EpjEtqLFQ5coa1sIOK8M
hYsg/GMl61G7kR9XA/A99NzqmGo9XL6IDidMUlYl188wEEx8Z8gfaNHX0/UxModd
mPSvgWhembhwmqkSWXxThf5/q2PyQYEbxqv8S4JlTFoWl1lDx84=
-----END CERTIFICATE-----
Generated at Mon Feb 2 10:02:56 2026 by rpki-client