This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/1AD597D3403FBD137C81429E3DE6D87BC886F1DE.mft
File:                     1AD597D3403FBD137C81429E3DE6D87BC886F1DE.mft (raw, json)
Hash identifier:          TJwv+zMjX3YN/AUBpH0+RDvdDsOhVspli4f5kO7yidg=
Subject key identifier:   96:A4:23:96:D2:A3:68:0D:B0:C9:6F:54:DB:72:35:BD:01:6A:8A:9C
Authority key identifier: 1A:D5:97:D3:40:3F:BD:13:7C:81:42:9E:3D:E6:D8:7B:C8:86:F1:DE
Certificate issuer:       /CN=1AD597D3403FBD137C81429E3DE6D87BC886F1DE
Certificate serial:       2BA2158E0FE55686C7AB2E108D9A73F83C1CAFA5
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1AD597D3403FBD137C81429E3DE6D87BC886F1DE.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/1AD597D3403FBD137C81429E3DE6D87BC886F1DE.mft
Manifest number:          0232
Signing time:             Sun 01 Feb 2026 15:51:40 +0000
Manifest this update:     Sun 01 Feb 2026 15:46:40 +0000
Manifest next update:     Thu 05 Feb 2026 03:19:40 +0000
Files and hashes:         1: 3230322e34332e37352e302f32342d3234203d3e20313337333633.roa (hash: nk9CeskmOhQC6XjBRgYhclCRJwtujNj/cQR4XOqGRuQ=)
                          2: 3138322e31362e3234322e302f32342d3234203d3e203435323938.roa (hash: tIeC9wyFXXPUAxRI7vekXWuC6/hcRWQSf3hEol1GrXs=)
                          3: 3138322e31362e3234372e302f32342d3234203d3e20313337333633.roa (hash: hHyrlzR+Le+OhhKvrAcguDCXcnibJcvGLPFdVbHBstw=)
                          4: 3138322e31362e3235352e302f32342d3234203d3e203435323938.roa (hash: 9ep46STng+HOxh9c8HhUmGX/ItsHhIo20sbDT4SfbmQ=)
                          5: 34392e35302e342e302f32332d3233203d3e203436303234.roa (hash: UYaCog++0gqvsXDea9mZnkKimC89Lnd8uWKZu9Blm80=)
                          6: 3130332e3234372e3234342e302f32342d3234203d3e203435323938.roa (hash: ofYpfyIwrFc3EyGc5HbuOjiaT8PI5lzgpR6J06rc1og=)
                          7: 34392e35302e352e302f32342d3234203d3e203436303234.roa (hash: +bXCaBbua6T2KBv/snNdo+ibMSi47YiRL7LuzmtTWcA=)
                          8: 323430353a3730303a3a2f33322d3332203d3e2039323531.roa (hash: zJMU7QEPzt1Do0d3+Mn+WDUWKKEjrLl9f5m3udavO0Q=)
                          9: 3230332e3230392e3139302e302f32342d3234203d3e203435323938.roa (hash: jIby9s1nINd6rj0OgWJ3XrEYmtSQ3/1M0by0m4EkKEA=)
                          10: 3138322e31362e3235312e302f32342d3234203d3e203435323938.roa (hash: tuJLeEsIMyZFf0T93zoOyKZn9yjy4oU9oMLzTS55h8U=)
                          11: 34332e3234392e3230392e302f32342d3234203d3e203435323938.roa (hash: i7hFR9y7ZN9Dd4gezE+BspWILKeKEoVfjSa55Gcaris=)
                          12: 3138322e31362e3234392e302f32342d3234203d3e203435323938.roa (hash: Gy/bdPPAnwE1EJJewbOkW44uCE/LT49cEeFhDgih3rI=)
                          13: 3230322e34332e37322e302f32342d3234203d3e203435323938.roa (hash: an5W/cXaXaYModPf+N6XOmKZ/Cp6c1fvWdj3PKqPfww=)
                          14: 3138322e31362e3235342e302f32342d3234203d3e203435323938.roa (hash: WHf+vsK6H58iEm7i814JdrFsRDazGTrDW/jhnCRMY5o=)
                          15: 34332e3234392e3231312e302f32342d3234203d3e203435323938.roa (hash: 5Lq+yUimOjMlxXPTxX1EWiQ/SQriMIqGapn1rF0ns70=)
                          16: 3138322e31362e3235332e302f32342d3234203d3e203435333233.roa (hash: rnW674Nfaq+nd+C3AdFWIPPv9a7ZGDzKn3MFfHaiNyU=)
                          17: 3138322e31362e3234372e302f32342d3234203d3e203435323938.roa (hash: AtrdEbBV5DShM2mzws5DP5xaMV8dfYRa04OIV3075t0=)
                          18: 3138322e31362e3235322e302f32342d3234203d3e203435323938.roa (hash: rL0yA2eg2dpCd9nph1t0CwiHstByILDunVuD3ZpaeRA=)
                          19: 3230322e34332e37332e302f32342d3234203d3e203435323938.roa (hash: hBeqiHGxmy6NCMgmNV6p5ha99Si74kGBcjRNx7S7+Rw=)
                          20: 3138322e31362e3234332e302f32342d3234203d3e203435323938.roa (hash: yzViDUy15p7n4BcCRqTTglbGa8IcIW7RyWumPNJDvqo=)
                          21: 3138322e31362e3234352e302f32342d3234203d3e203435323938.roa (hash: HmndDe5qVshUrqKXy6c3lSUKP2kS5fO5we4iEJUBxwY=)
                          22: 3130332e3235332e3130372e302f32342d3234203d3e2039323531.roa (hash: 9GPvbzS14nrsGqBa86Psp3VYtnnpTdNwmEPZ8WpOVfk=)
                          23: 3230322e34332e37342e302f32342d3234203d3e203435323938.roa (hash: i+PnRRnUxlVeVQWYK+xvxmyT3h6ABZPSD9MUCiKy2nc=)
                          24: 3138322e31362e3234382e302f32342d3234203d3e203435323938.roa (hash: X2MWoYk15EbtUusvVf62LOnsk/5nadLOVJxwILgNrpw=)
                          25: 3138322e31362e3234302e302f32342d3234203d3e203435323938.roa (hash: qXhqvNvwuShzZJIh5ULCs68p+eXdblwycqng954jYDU=)
                          26: 3138322e31362e3234362e302f32342d3234203d3e203435323938.roa (hash: FjDJ58MGH2Kic7+guQjA1l9znFMPxD6S25vaDbSNElQ=)
                          27: 3130332e3234372e3234352e302f32342d3234203d3e203435323938.roa (hash: bHqpsq84uIhoWcWxe7oYJq3JF/6gomerkmgGc5KSkIk=)
                          28: 34392e35302e342e302f32342d3234203d3e203436303234.roa (hash: ZHh4TwmNkfiSfrilBWgPwnleDnUmWbiEe9KNZbEdlK8=)
                          29: 1AD597D3403FBD137C81429E3DE6D87BC886F1DE.crl (hash: /lbvJbAEh0GldqGF8OJ8bQcukgCgJksgXU/iWUsFQXE=)
                          30: 3230322e34332e37352e302f32342d3234203d3e203435323938.roa (hash: i6/PHdchDVzNOn1ijGjOYuOBRtdGd0SlcF2ajlTzVgU=)
                          31: 3130332e3235332e3130362e302f32332d3233203d3e2039323531.roa (hash: mn89fCBpa1L+r4Zi4IcWuFHARAg3/d1uhObCHoGGpiQ=)
                          32: 34332e3234392e3231302e302f32342d3234203d3e203435323938.roa (hash: UekkDKgU/YAhXJ6R9+NFWqKcbGGHHXyI8VU8wt8dut8=)
                          33: 3138322e31362e3235302e302f32342d3234203d3e203435323938.roa (hash: BD8EvM/xRr4bdqKJsAUI6YPxWjmEz7aV4WUFP92DPxQ=)
                          34: 3138322e31362e3234312e302f32342d3234203d3e203435323938.roa (hash: wY7i4EqwqdRyPK3tA7Ai92los6YnXZwhh+FXLbFVJSQ=)
                          35: 3138322e31362e3234342e302f32342d3234203d3e203435323938.roa (hash: rWcyY6h+WeyKitdTgCaLhWornePj5xcoNPCsRnNqZB8=)
                          36: 34332e3234392e3230382e302f32342d3234203d3e203435323938.roa (hash: kir6HzO6TsF3UBXe2ZlqXSSUm84/f99k2Bf6oJ5BbWE=)
                          37: 3130332e3235332e3130362e302f32342d3234203d3e2039323531.roa (hash: 76H0qrG4Uy5/8aWW6KHmL8OdUAxhoKIYB8VrEwRt7hA=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/1AD597D3403FBD137C81429E3DE6D87BC886F1DE.crl
                          rsync://repo-rpki.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/1AD597D3403FBD137C81429E3DE6D87BC886F1DE.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1AD597D3403FBD137C81429E3DE6D87BC886F1DE.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 05 Feb 2026 03:19:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:a2:15:8e:0f:e5:56:86:c7:ab:2e:10:8d:9a:73:f8:3c:1c:af:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1AD597D3403FBD137C81429E3DE6D87BC886F1DE
        Validity
            Not Before: Feb  1 15:46:40 2026 GMT
            Not After : Feb  5 03:19:40 2026 GMT
        Subject: CN=96A42396D2A3680DB0C96F54DB7235BD016A8A9C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:5c:2d:5f:3f:b2:05:b5:c6:e0:ed:ac:0f:f2:
                    17:59:b9:55:a8:82:40:36:a9:32:f9:e0:88:62:3a:
                    25:cc:5e:53:2e:86:a6:a6:4a:5d:8d:47:fd:a8:ff:
                    56:4b:af:1b:3d:bd:a8:b1:c9:07:1d:e6:ea:99:53:
                    37:a0:ef:e5:90:2b:80:a3:f8:95:da:98:78:5d:27:
                    e7:5c:8c:a8:9a:9d:43:8e:af:53:58:85:02:37:d0:
                    a8:ba:eb:4e:7e:de:0e:da:c9:f1:11:62:6e:51:eb:
                    38:10:c7:04:d8:44:3e:e6:fa:a9:88:18:8a:9f:6b:
                    dc:53:2c:22:4b:c0:75:05:aa:26:25:d5:ca:db:c5:
                    e3:01:0c:e4:93:f0:3a:ac:ba:5e:38:f0:93:e2:e7:
                    0c:3b:79:c5:57:1e:ba:02:31:9c:b1:83:d6:6b:0e:
                    be:26:79:7f:a7:45:95:d5:ac:b9:46:8f:f9:1a:14:
                    42:f6:82:ee:ca:46:71:fa:f2:fe:96:a8:36:11:32:
                    e9:8e:11:e6:b1:93:c0:09:73:ea:c4:b8:c5:de:33:
                    cd:db:bb:05:6b:34:af:29:af:ba:6c:fa:c3:66:ff:
                    80:66:37:86:2e:92:d4:5a:32:e9:cc:67:27:e3:97:
                    82:b4:bd:fe:da:13:f9:78:b7:65:14:73:e4:02:94:
                    d0:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:A4:23:96:D2:A3:68:0D:B0:C9:6F:54:DB:72:35:BD:01:6A:8A:9C
            X509v3 Authority Key Identifier:
                keyid:1A:D5:97:D3:40:3F:BD:13:7C:81:42:9E:3D:E6:D8:7B:C8:86:F1:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/1AD597D3403FBD137C81429E3DE6D87BC886F1DE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1AD597D3403FBD137C81429E3DE6D87BC886F1DE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/1AD597D3403FBD137C81429E3DE6D87BC886F1DE.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:27:15:88:ac:0d:cb:09:b9:f4:b6:dd:76:8f:c8:6f:69:b8:
         eb:23:2a:a0:b3:70:68:c3:65:5b:78:8e:64:cc:6e:a9:bc:33:
         cf:d7:0a:7e:98:46:fe:c3:39:b3:b5:66:f7:a5:30:3a:75:e8:
         6c:a5:85:45:f3:7e:f5:d5:b7:45:4a:88:e9:3d:1a:24:f3:34:
         7d:51:27:73:9b:03:ad:bf:ba:a8:0b:8c:35:59:c0:4f:81:da:
         a9:07:51:77:1d:45:2f:4d:de:dd:09:b3:4c:67:f6:b2:62:11:
         63:87:53:2a:ef:77:fb:5e:46:7c:36:06:80:a4:9d:ab:3d:e9:
         35:df:16:c9:e2:4e:d1:eb:bb:7d:16:55:05:23:71:75:11:88:
         17:51:1f:7b:6b:8c:43:32:ce:eb:32:92:1a:43:cb:4d:43:ed:
         90:92:b2:d0:0d:53:f7:aa:c3:2d:a2:c6:7d:a7:c4:16:91:2f:
         d9:11:70:de:0a:56:e8:6a:68:e8:6a:7e:f4:d4:06:6a:46:c6:
         c4:d4:ac:91:28:fc:65:c9:29:d1:9a:89:3a:18:05:c8:47:14:
         20:f7:97:e2:9f:cc:0e:8b:07:cb:c2:80:3f:6f:43:4c:33:3a:
         40:51:3c:d1:57:f1:84:0a:fc:8b:2a:6b:2f:1a:e9:5f:9c:e8:
         66:3b:30:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 09:52:05 2026 by rpki-client