This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/6cb2928e-9b39-4a90-97d2-04cf65fe9578/0/2EA5E66251DD591E7F1F4855AF4BAFBB644B08A9.mft
File:                     2EA5E66251DD591E7F1F4855AF4BAFBB644B08A9.mft (raw, json)
Hash identifier:          OSAdZ9ujEPfob3rjZRDntapaUkuRmoOParufiBCLMSE=
Subject key identifier:   E9:0F:14:7F:81:B3:A8:CB:B4:E6:65:58:8F:FF:FF:FF:95:C4:4F:1D
Authority key identifier: 2E:A5:E6:62:51:DD:59:1E:7F:1F:48:55:AF:4B:AF:BB:64:4B:08:A9
Certificate issuer:       /CN=2EA5E66251DD591E7F1F4855AF4BAFBB644B08A9
Certificate serial:       C870E801BF6C0168E5630470E29D080C38AD30
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2EA5E66251DD591E7F1F4855AF4BAFBB644B08A9.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/6cb2928e-9b39-4a90-97d2-04cf65fe9578/0/2EA5E66251DD591E7F1F4855AF4BAFBB644B08A9.mft
Manifest number:          026B
Signing time:             Sun 01 Feb 2026 16:52:07 +0000
Manifest this update:     Sun 01 Feb 2026 16:47:07 +0000
Manifest next update:     Wed 04 Feb 2026 22:15:07 +0000
Files and hashes:         1: 2EA5E66251DD591E7F1F4855AF4BAFBB644B08A9.crl (hash: bvFUuApu5VLP33fVlXQB05Krr+tTtxptS21TgSYnZSM=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/6cb2928e-9b39-4a90-97d2-04cf65fe9578/0/2EA5E66251DD591E7F1F4855AF4BAFBB644B08A9.crl
                          rsync://repo-rpki.idnic.net/repo/6cb2928e-9b39-4a90-97d2-04cf65fe9578/0/2EA5E66251DD591E7F1F4855AF4BAFBB644B08A9.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2EA5E66251DD591E7F1F4855AF4BAFBB644B08A9.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 04 Feb 2026 22:15:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            c8:70:e8:01:bf:6c:01:68:e5:63:04:70:e2:9d:08:0c:38:ad:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2EA5E66251DD591E7F1F4855AF4BAFBB644B08A9
        Validity
            Not Before: Feb  1 16:47:07 2026 GMT
            Not After : Feb  4 22:15:07 2026 GMT
        Subject: CN=E90F147F81B3A8CBB4E665588FFFFFFF95C44F1D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:81:84:a2:cb:4f:fb:a2:35:26:89:73:36:e0:
                    cd:50:09:1e:52:8b:e8:51:6a:b1:e3:be:b1:0f:73:
                    21:6b:3a:8c:47:c9:c8:af:26:b3:da:f5:77:7c:73:
                    31:2f:0a:1a:24:e5:44:86:36:27:32:4e:cf:6b:3c:
                    f0:e5:17:54:56:7f:b1:df:8d:53:73:a2:40:1c:69:
                    fa:7b:2d:df:80:85:30:a0:db:58:8f:71:25:b9:7d:
                    95:98:cb:79:68:99:9c:e4:53:88:d5:7b:e3:ff:4a:
                    44:95:94:e9:a9:7d:90:55:69:ff:4f:fa:cf:77:98:
                    71:3e:67:9b:3e:37:34:34:ec:04:a0:0e:7f:7d:56:
                    74:b8:09:16:36:4e:1a:64:cf:99:8f:42:b4:40:67:
                    f6:7a:16:0d:81:23:35:9a:64:39:93:26:94:d9:eb:
                    92:eb:8e:96:14:69:ff:b5:ff:14:ec:b6:3b:6a:0e:
                    6a:19:2d:c3:34:72:73:e5:19:5e:0e:23:22:b7:57:
                    f0:dc:63:39:11:6b:69:ce:43:f3:65:c9:11:40:49:
                    cd:10:6f:90:92:1c:5f:d5:ac:dd:6e:74:8f:b3:9c:
                    c0:ba:67:b2:e6:53:26:bc:e9:e3:51:39:40:d8:95:
                    bd:7b:9f:42:b9:fe:58:df:50:af:31:6d:f5:3c:dc:
                    5c:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:0F:14:7F:81:B3:A8:CB:B4:E6:65:58:8F:FF:FF:FF:95:C4:4F:1D
            X509v3 Authority Key Identifier:
                keyid:2E:A5:E6:62:51:DD:59:1E:7F:1F:48:55:AF:4B:AF:BB:64:4B:08:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/6cb2928e-9b39-4a90-97d2-04cf65fe9578/0/2EA5E66251DD591E7F1F4855AF4BAFBB644B08A9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2EA5E66251DD591E7F1F4855AF4BAFBB644B08A9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6cb2928e-9b39-4a90-97d2-04cf65fe9578/0/2EA5E66251DD591E7F1F4855AF4BAFBB644B08A9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:72:96:7e:8f:f9:3c:d0:1d:20:7b:0e:bc:54:73:6e:bf:7f:
         2e:7b:8f:d5:bb:3e:f5:8b:39:3d:46:d0:7f:6d:84:26:d6:b5:
         7c:26:d5:0e:62:5f:19:fe:75:e3:11:73:34:fb:84:a6:7f:46:
         9c:1e:76:a8:07:70:b4:17:e1:b7:98:97:06:a2:8b:23:93:d1:
         72:0d:16:05:f1:08:41:2e:aa:52:d0:a8:84:f2:36:a6:6a:5f:
         6f:dd:43:f2:0d:c0:47:50:91:6c:f5:bd:fc:d2:4c:5b:0b:8c:
         0f:52:63:6a:79:af:5f:2b:aa:e2:78:3e:fc:89:13:a2:f9:2a:
         ef:90:ea:89:8e:18:74:e7:e9:9e:d1:8d:fb:1d:6e:99:73:77:
         c2:14:ef:47:b5:85:50:34:0a:d2:9a:53:74:20:9d:00:23:7a:
         f9:93:4e:4c:b4:7b:8d:c7:a4:50:2c:f2:0a:ad:76:fc:18:83:
         51:82:28:e1:f4:c8:bc:da:a4:13:3f:b2:4d:0c:c4:0b:3b:a4:
         01:ac:4d:9c:13:00:95:4a:56:95:bf:93:a6:93:f1:bf:e6:5d:
         68:a8:c2:e9:bd:e1:cb:d3:05:68:b9:8c:de:a2:60:69:2c:d3:
         30:8f:ef:d7:73:46:68:5e:87:66:01:8a:22:ff:a5:c8:d4:c7:
         4e:db:f0:8a
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUAMhw6AG/bAFo5WMEcOKdCAw4rTAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkVBNUU2NjI1MURENTkxRTdGMUY0ODU1QUY0QkFGQkI2
NDRCMDhBOTAeFw0yNjAyMDExNjQ3MDdaFw0yNjAyMDQyMjE1MDdaMDMxMTAvBgNV
BAMTKEU5MEYxNDdGODFCM0E4Q0JCNEU2NjU1ODhGRkZGRkZGOTVDNDRGMUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhgYSiy0/7ojUmiXM24M1QCR5S
i+hRarHjvrEPcyFrOoxHycivJrPa9Xd8czEvChok5USGNicyTs9rPPDlF1RWf7Hf
jVNzokAcafp7Ld+AhTCg21iPcSW5fZWYy3lomZzkU4jVe+P/SkSVlOmpfZBVaf9P
+s93mHE+Z5s+NzQ07ASgDn99VnS4CRY2Thpkz5mPQrRAZ/Z6Fg2BIzWaZDmTJpTZ
65LrjpYUaf+1/xTstjtqDmoZLcM0cnPlGV4OIyK3V/DcYzkRa2nOQ/NlyRFASc0Q
b5CSHF/VrN1udI+znMC6Z7LmUya86eNROUDYlb17n0K5/ljfUK8xbfU83FxJAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQU6Q8Uf4GzqMu05mVYj////5XETx0wHwYDVR0j
BBgwFoAULqXmYlHdWR5/H0hVr0uvu2RLCKkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82
Y2IyOTI4ZS05YjM5LTRhOTAtOTdkMi0wNGNmNjVmZTk1NzgvMC8yRUE1RTY2MjUx
REQ1OTFFN0YxRjQ4NTVBRjRCQUZCQjY0NEIwOEE5LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMkVBNUU2NjI1MURENTkxRTdGMUY0ODU1QUY0QkFGQkI2NDRC
MDhBOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmNiMjkyOGUtOWIzOS00YTkwLTk3
ZDItMDRjZjY1ZmU5NTc4LzAvMkVBNUU2NjI1MURENTkxRTdGMUY0ODU1QUY0QkFG
QkI2NDRCMDhBOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAJxyln6P+TzQHSB7DrxUc26/fy57j9W7PvWL
OT1G0H9thCbWtXwm1Q5iXxn+deMRczT7hKZ/RpwedqgHcLQX4beYlwaiiyOT0XIN
FgXxCEEuqlLQqITyNqZqX2/dQ/INwEdQkWz1vfzSTFsLjA9SY2p5r18rquJ4PvyJ
E6L5Ku+Q6omOGHTn6Z7Rjfsdbplzd8IU70e1hVA0CtKaU3QgnQAjevmTTky0e43H
pFAs8gqtdvwYg1GCKOH0yLzapBM/sk0MxAs7pAGsTZwTAJVKVpW/k6aT8b/mXWio
wum94cvTBWi5jN6iYGks0zCP79dzRmheh2YBiiL/pcjUx07b8Io=
-----END CERTIFICATE-----
Generated at Mon Feb 2 09:48:10 2026 by rpki-client