This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/621f3fae-d0cb-4a17-a548-1ba6631b1e09/0/3E648E6A8623C5C5DDF001526D0FDC0FF200F613.mft
File:                     3E648E6A8623C5C5DDF001526D0FDC0FF200F613.mft (raw, json)
Hash identifier:          COUCtI+udggkVn8SJXYcj6bR9Dar1F9cpEnQ2Hf0s8w=
Subject key identifier:   BC:E1:B8:42:7A:38:3C:8E:33:E3:45:24:13:FD:23:67:24:0E:35:2F
Authority key identifier: 3E:64:8E:6A:86:23:C5:C5:DD:F0:01:52:6D:0F:DC:0F:F2:00:F6:13
Certificate issuer:       /CN=3E648E6A8623C5C5DDF001526D0FDC0FF200F613
Certificate serial:       6ED28EFDD8782D996F7A55221A4C40702D2BD9AB
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E648E6A8623C5C5DDF001526D0FDC0FF200F613.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/621f3fae-d0cb-4a17-a548-1ba6631b1e09/0/3E648E6A8623C5C5DDF001526D0FDC0FF200F613.mft
Manifest number:          0238
Signing time:             Sun 01 Feb 2026 13:41:28 +0000
Manifest this update:     Sun 01 Feb 2026 13:36:28 +0000
Manifest next update:     Wed 04 Feb 2026 18:31:28 +0000
Files and hashes:         1: 3E648E6A8623C5C5DDF001526D0FDC0FF200F613.crl (hash: zomuPpURRwv54anfXqUVOm34tVeJo4fBm76psJALUSU=)
                          2: 3130332e3139312e3134312e302f32342d3234203d3e20313439393232.roa (hash: QZrvNrtpXCKPjhSgsC8kdyvVzWQ/ADZleC5w3ZKWFT4=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/621f3fae-d0cb-4a17-a548-1ba6631b1e09/0/3E648E6A8623C5C5DDF001526D0FDC0FF200F613.crl
                          rsync://repo-rpki.idnic.net/repo/621f3fae-d0cb-4a17-a548-1ba6631b1e09/0/3E648E6A8623C5C5DDF001526D0FDC0FF200F613.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E648E6A8623C5C5DDF001526D0FDC0FF200F613.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 04 Feb 2026 18:31:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:d2:8e:fd:d8:78:2d:99:6f:7a:55:22:1a:4c:40:70:2d:2b:d9:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3E648E6A8623C5C5DDF001526D0FDC0FF200F613
        Validity
            Not Before: Feb  1 13:36:28 2026 GMT
            Not After : Feb  4 18:31:28 2026 GMT
        Subject: CN=BCE1B8427A383C8E33E3452413FD2367240E352F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:48:ee:21:14:b8:0b:e3:da:da:4f:c1:fd:02:
                    8a:98:12:94:be:ae:51:04:1c:d0:b1:37:56:14:37:
                    7e:84:47:08:af:70:b4:da:bc:13:e9:49:4d:ee:78:
                    9a:2a:38:13:aa:9a:50:f0:35:b5:41:b2:e0:c2:22:
                    39:5f:c2:11:1d:7a:54:c1:3a:2f:38:f7:73:3a:5c:
                    24:41:0b:22:88:bc:df:26:a5:99:12:b7:5f:60:1b:
                    fd:0f:74:92:ef:8b:a2:6a:8a:a0:d8:3a:2c:16:61:
                    dc:4d:a1:79:ba:01:dc:c9:3c:4e:55:3c:0f:99:31:
                    20:aa:e8:08:77:51:7e:d9:93:e4:0e:11:89:7a:6d:
                    1b:2c:f2:e5:ca:43:72:cc:d1:5a:cc:98:a2:d1:1e:
                    2d:9d:60:6d:09:06:00:cb:1b:91:b1:93:c5:aa:4a:
                    e0:66:2b:9d:27:e3:a9:29:d6:fd:14:87:e7:c8:90:
                    d5:41:57:cf:a2:3c:83:af:7e:f6:52:8a:bc:a9:a0:
                    c6:e0:43:ff:61:3f:83:cf:5b:2c:fb:83:b1:f3:fd:
                    4d:31:c8:70:cd:84:6e:4c:43:dd:80:1f:ee:da:84:
                    fc:f4:61:5a:52:b6:71:20:7e:87:25:b0:1f:5e:02:
                    b2:b4:b3:b4:6f:fa:c5:11:aa:0f:2c:c2:b4:d7:d6:
                    37:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:E1:B8:42:7A:38:3C:8E:33:E3:45:24:13:FD:23:67:24:0E:35:2F
            X509v3 Authority Key Identifier:
                keyid:3E:64:8E:6A:86:23:C5:C5:DD:F0:01:52:6D:0F:DC:0F:F2:00:F6:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/621f3fae-d0cb-4a17-a548-1ba6631b1e09/0/3E648E6A8623C5C5DDF001526D0FDC0FF200F613.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E648E6A8623C5C5DDF001526D0FDC0FF200F613.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/621f3fae-d0cb-4a17-a548-1ba6631b1e09/0/3E648E6A8623C5C5DDF001526D0FDC0FF200F613.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:9c:9a:2c:d7:32:d2:ca:9b:d5:66:dd:e4:80:fb:56:9b:5b:
         ac:74:1b:3b:72:6f:ea:21:98:e1:d3:b9:a6:24:f5:31:e1:96:
         ef:87:16:25:0f:b1:f6:df:27:33:dc:9d:31:0e:f0:d4:99:d5:
         dc:e6:7e:7e:c7:da:7b:40:06:e2:91:69:bb:a2:a3:08:fc:78:
         23:39:90:bb:e4:ff:ea:e2:e7:19:e1:91:d4:34:59:41:46:76:
         01:ba:f7:28:9e:ac:ab:23:85:58:4b:14:09:e0:e5:9c:3d:fd:
         dd:34:ef:47:c3:93:4c:5e:07:ce:cd:65:35:34:29:02:ae:8d:
         73:7d:eb:02:6f:ea:b1:59:6c:08:f6:92:a4:bf:1e:21:34:8b:
         5b:62:d4:a8:84:c2:1e:f3:64:21:9e:17:ea:0e:7c:ff:ff:18:
         1e:1e:cd:0f:15:90:60:da:23:59:bf:85:cd:79:0b:a5:66:ab:
         fc:c6:8d:00:87:69:bc:ec:0c:b6:13:b3:5a:e2:a5:26:a1:11:
         57:70:de:f6:74:59:c3:1e:2e:b6:7c:c0:10:25:5d:ba:be:00:
         a7:58:e2:d2:3b:c6:7a:b7:6b:04:05:cd:b1:bb:8c:f1:e9:d5:
         3c:1c:5d:ad:14:70:8b:d4:52:ea:b2:62:bd:6e:85:95:3d:d4:
         82:ea:79:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 09:43:51 2026 by rpki-client