This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/64cf632d-d61a-4826-b572-9f1948ae580c/0/9DEEEB0CB9492DADDE47B31629ACDA7241728768.mft
File:                     9DEEEB0CB9492DADDE47B31629ACDA7241728768.mft (raw, json)
Hash identifier:          PPVdSsVpZLzNeanqihlDeQtwkj5JlxLGzeR1NdrC3ts=
Subject key identifier:   EA:AA:00:B9:0C:8B:3C:9F:0D:CE:2C:6B:89:6B:B5:56:3C:D0:50:C4
Authority key identifier: 9D:EE:EB:0C:B9:49:2D:AD:DE:47:B3:16:29:AC:DA:72:41:72:87:68
Certificate issuer:       /CN=9DEEEB0CB9492DADDE47B31629ACDA7241728768
Certificate serial:       2E1B134C422501F6A844626FC40CA5F6402FE27A
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9DEEEB0CB9492DADDE47B31629ACDA7241728768.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/64cf632d-d61a-4826-b572-9f1948ae580c/0/9DEEEB0CB9492DADDE47B31629ACDA7241728768.mft
Manifest number:          0547
Signing time:             Sun 01 Feb 2026 10:51:42 +0000
Manifest this update:     Sun 01 Feb 2026 10:46:42 +0000
Manifest next update:     Wed 04 Feb 2026 19:10:42 +0000
Files and hashes:         1: 323030313a6466373a353330303a3a2f34382d3438203d3e20313338313135.roa (hash: Bf7BsiVAOIoOpjZrq1myZIFa+NHL4UH0RSw6g7HOTug=)
                          2: 3130332e3134372e3135342e302f32342d3234203d3e20313338313135.roa (hash: dkJQYTGEN+d871bmbCtyZrcgdRwxS2PuzfLsM/c0oM0=)
                          3: 3130332e3132362e3232362e302f32342d3234203d3e20313338313135.roa (hash: 5HPmnH87KI1FMg8JnGalALCpcbOZusq5GP+rz9eFFOc=)
                          4: 9DEEEB0CB9492DADDE47B31629ACDA7241728768.crl (hash: RkljxAI+umIt1kaVgwRNSG5Vph20h0bpwkQ+lKvDcN0=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/64cf632d-d61a-4826-b572-9f1948ae580c/0/9DEEEB0CB9492DADDE47B31629ACDA7241728768.crl
                          rsync://repo-rpki.idnic.net/repo/64cf632d-d61a-4826-b572-9f1948ae580c/0/9DEEEB0CB9492DADDE47B31629ACDA7241728768.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9DEEEB0CB9492DADDE47B31629ACDA7241728768.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 04 Feb 2026 19:10:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:1b:13:4c:42:25:01:f6:a8:44:62:6f:c4:0c:a5:f6:40:2f:e2:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9DEEEB0CB9492DADDE47B31629ACDA7241728768
        Validity
            Not Before: Feb  1 10:46:42 2026 GMT
            Not After : Feb  4 19:10:42 2026 GMT
        Subject: CN=EAAA00B90C8B3C9F0DCE2C6B896BB5563CD050C4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:f7:d6:5d:7a:50:6f:34:34:49:50:0c:1f:ca:
                    dc:79:cb:d7:d1:4d:a1:82:2d:e4:c6:3e:5e:90:50:
                    4f:68:09:37:5c:37:24:ca:2e:8e:23:fa:64:e1:ca:
                    c2:a0:fa:83:ad:6d:66:2e:32:a1:80:b5:b0:21:08:
                    7f:18:88:1e:d2:ce:3b:2d:85:e9:80:ee:81:df:21:
                    2d:bf:2b:37:e9:2f:22:c3:84:7c:32:ad:9d:23:09:
                    4f:f4:5b:2d:4e:c8:1b:47:be:fc:14:6e:4d:d1:04:
                    e2:db:2f:65:96:8f:e0:06:18:f6:c2:f4:de:bc:d2:
                    ae:27:6e:09:b5:43:8d:77:9f:32:e3:6b:f4:61:05:
                    b3:fb:ac:da:48:93:1e:5f:9a:6a:1e:c6:e5:8b:dd:
                    5b:37:89:36:af:11:8e:b3:c3:41:52:12:02:d5:cb:
                    00:0f:8c:95:ca:2d:86:1c:ff:27:ad:28:8b:0f:be:
                    00:3c:05:7a:cf:17:99:bb:22:6c:fc:63:54:0f:e3:
                    eb:30:2c:7e:a6:02:14:be:10:b0:66:b8:95:9e:76:
                    75:f9:7f:18:49:d0:ea:61:4f:3e:fb:f3:a5:77:ce:
                    e9:76:41:0a:45:ef:6a:11:76:ca:e4:77:ea:29:35:
                    74:4b:42:e5:17:41:c5:d8:a4:24:83:2e:af:73:49:
                    33:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:AA:00:B9:0C:8B:3C:9F:0D:CE:2C:6B:89:6B:B5:56:3C:D0:50:C4
            X509v3 Authority Key Identifier:
                keyid:9D:EE:EB:0C:B9:49:2D:AD:DE:47:B3:16:29:AC:DA:72:41:72:87:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/64cf632d-d61a-4826-b572-9f1948ae580c/0/9DEEEB0CB9492DADDE47B31629ACDA7241728768.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9DEEEB0CB9492DADDE47B31629ACDA7241728768.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/64cf632d-d61a-4826-b572-9f1948ae580c/0/9DEEEB0CB9492DADDE47B31629ACDA7241728768.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:b4:1d:54:a6:fa:fe:3e:02:1f:d2:67:66:81:95:5d:08:9c:
         56:d6:d4:d1:62:8e:a5:18:a4:37:f5:d9:f9:d7:ec:87:e0:b1:
         ec:9f:c8:d8:2d:cd:bb:0c:12:3a:77:c5:05:bd:7d:63:16:41:
         4c:a0:a8:6b:b7:51:4a:6d:89:be:5e:2c:5a:f9:31:43:95:94:
         01:4e:ef:4e:17:f6:c2:ca:83:00:27:8a:ae:d9:5c:dc:f7:b1:
         c3:4d:8a:20:c1:47:ff:84:62:89:08:3f:36:74:50:9a:f2:f7:
         1a:0e:c1:dc:52:5c:a1:d7:b3:bd:f4:6d:b2:25:04:58:d5:53:
         da:e0:c7:ef:3c:f6:fe:cc:1d:12:7c:46:70:14:c6:f3:9d:aa:
         6a:56:43:29:da:56:1f:47:a8:e3:f6:21:35:a1:63:6c:9f:6b:
         98:c9:42:84:48:da:4e:6a:a1:9c:60:0e:a3:6f:1f:54:79:91:
         d4:28:7b:3c:c3:95:c4:88:9b:ff:2a:ac:4c:8a:92:d5:9a:0c:
         e6:00:41:54:a0:55:5f:9d:d1:88:c6:bb:49:55:6c:4e:a8:29:
         2f:8c:17:43:56:cd:1f:bd:41:76:2c:59:19:bc:8f:19:75:f3:
         58:f0:0d:bb:b4:f9:ff:61:58:43:13:5e:e3:88:ce:e9:f9:e8:
         81:85:46:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 09:49:51 2026 by rpki-client