This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/6cd24b05-269e-4784-b935-f27665830fda/0/E074B9AA718C37F8B126243F2E30DA35F43C0DD2.mft
File:                     E074B9AA718C37F8B126243F2E30DA35F43C0DD2.mft (raw, json)
Hash identifier:          1QVWm4etyUBBIoFFTH+lo3mlrGyKGRrsJL5gGeQ74A0=
Subject key identifier:   DC:40:5E:FE:9B:C3:DA:95:B8:67:38:83:9A:8F:C0:50:F5:7E:4F:11
Authority key identifier: E0:74:B9:AA:71:8C:37:F8:B1:26:24:3F:2E:30:DA:35:F4:3C:0D:D2
Certificate issuer:       /CN=E074B9AA718C37F8B126243F2E30DA35F43C0DD2
Certificate serial:       013DFF20B371548C9BB68C959119A8EA20B18E03
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E074B9AA718C37F8B126243F2E30DA35F43C0DD2.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/6cd24b05-269e-4784-b935-f27665830fda/0/E074B9AA718C37F8B126243F2E30DA35F43C0DD2.mft
Manifest number:          01F1
Signing time:             Sun 01 Feb 2026 19:02:05 +0000
Manifest this update:     Sun 01 Feb 2026 18:57:05 +0000
Manifest next update:     Thu 05 Feb 2026 00:18:05 +0000
Files and hashes:         1: 3130332e3132362e32362e302f32342d3234203d3e20313530353038.roa (hash: dOmtQ8xQIM/OxqNbVqEyr7os+kU4sc0vVqyQb/jy+M4=)
                          2: E074B9AA718C37F8B126243F2E30DA35F43C0DD2.crl (hash: SRcwc6Xxj21yavUdgpoOVY0eZ4wjBX+J71l2WVUGR2w=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/6cd24b05-269e-4784-b935-f27665830fda/0/E074B9AA718C37F8B126243F2E30DA35F43C0DD2.crl
                          rsync://repo-rpki.idnic.net/repo/6cd24b05-269e-4784-b935-f27665830fda/0/E074B9AA718C37F8B126243F2E30DA35F43C0DD2.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E074B9AA718C37F8B126243F2E30DA35F43C0DD2.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 05 Feb 2026 00:18:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:3d:ff:20:b3:71:54:8c:9b:b6:8c:95:91:19:a8:ea:20:b1:8e:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E074B9AA718C37F8B126243F2E30DA35F43C0DD2
        Validity
            Not Before: Feb  1 18:57:05 2026 GMT
            Not After : Feb  5 00:18:05 2026 GMT
        Subject: CN=DC405EFE9BC3DA95B86738839A8FC050F57E4F11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:f8:07:e2:53:1e:b2:b0:1d:49:3d:c8:54:38:
                    39:a6:12:91:71:e0:58:04:86:59:54:f0:25:1c:81:
                    b5:d1:b3:35:d1:c3:a4:5f:8c:41:43:2e:8d:6a:a0:
                    19:3b:72:dd:a3:cf:2f:13:a7:7b:96:1d:da:b4:f4:
                    3c:00:e9:59:79:3c:f1:55:b6:83:a3:bd:f0:d7:24:
                    60:fe:8c:ba:5d:e6:5e:0a:87:25:62:4a:c7:38:aa:
                    55:1e:42:c4:81:d0:12:67:89:d2:f6:eb:88:43:99:
                    64:b9:08:69:9f:68:45:87:b0:73:e9:b6:0e:74:86:
                    b8:07:ef:dc:e9:ac:9d:ba:71:99:b3:ee:26:0c:46:
                    f3:72:6d:11:cb:c3:ea:72:79:a3:2d:c3:0d:78:a0:
                    ce:67:6f:0c:34:dd:da:30:24:73:6e:0f:a3:fd:8e:
                    c9:c5:ad:08:92:a0:51:71:c0:27:21:f3:f3:bc:07:
                    05:5f:be:de:5b:8e:88:72:3a:91:ac:a0:4c:37:ca:
                    3f:1c:d2:9a:52:95:7e:72:00:c7:7e:74:12:a8:fe:
                    20:ea:06:ad:16:8e:05:e0:32:5a:ad:83:02:2b:e7:
                    5f:de:f9:5d:d4:01:16:af:7e:a7:89:80:6b:84:83:
                    00:00:a8:32:5c:02:fb:fe:62:6a:b9:96:12:d7:a5:
                    0b:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:40:5E:FE:9B:C3:DA:95:B8:67:38:83:9A:8F:C0:50:F5:7E:4F:11
            X509v3 Authority Key Identifier:
                keyid:E0:74:B9:AA:71:8C:37:F8:B1:26:24:3F:2E:30:DA:35:F4:3C:0D:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/6cd24b05-269e-4784-b935-f27665830fda/0/E074B9AA718C37F8B126243F2E30DA35F43C0DD2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E074B9AA718C37F8B126243F2E30DA35F43C0DD2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6cd24b05-269e-4784-b935-f27665830fda/0/E074B9AA718C37F8B126243F2E30DA35F43C0DD2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:a8:39:93:f6:e6:63:28:47:a2:c5:25:25:4c:88:94:f9:12:
         30:ca:94:4f:f7:2a:ec:a5:02:74:af:e3:00:c7:f8:bb:dc:d7:
         d5:20:3a:63:39:70:4e:7a:96:31:4f:3b:2d:60:f5:73:18:59:
         f3:54:49:e1:1c:fc:dd:38:fc:1e:38:9c:62:94:4a:18:4b:f7:
         41:d2:0d:4e:9e:0e:92:bf:45:29:25:27:e7:3b:32:c6:dc:5f:
         6d:85:74:8d:da:03:af:ab:0e:8e:fd:1f:08:f9:c7:db:6e:4d:
         8b:ba:69:c7:17:1c:6c:63:d0:96:fd:93:2f:f8:aa:fa:06:2d:
         81:4d:9e:c1:9b:5b:39:c4:ec:17:08:a4:ef:64:88:f7:f9:e2:
         7a:98:f8:8e:8c:34:b6:e9:0a:7d:10:f4:28:46:78:1f:67:b0:
         60:8e:d8:fb:6f:0b:3f:64:c3:5b:ed:ba:87:51:53:14:57:c9:
         00:c4:a7:d2:25:4a:a4:0e:1f:f4:e2:0f:91:fd:c7:4b:83:c7:
         a7:65:e1:b0:63:ad:d3:fe:7f:5b:ab:60:e3:9e:f2:86:ac:72:
         73:40:92:a8:13:7c:ce:ae:c3:7f:e0:97:f7:0a:80:d2:e4:f8:
         4c:70:10:0c:e7:35:8a:49:05:c4:c6:75:35:1c:fa:6f:86:1f:
         3f:83:99:8b
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUAT3/ILNxVIybtoyVkRmo6iCxjgMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTA3NEI5QUE3MThDMzdGOEIxMjYyNDNGMkUzMERBMzVG
NDNDMEREMjAeFw0yNjAyMDExODU3MDVaFw0yNjAyMDUwMDE4MDVaMDMxMTAvBgNV
BAMTKERDNDA1RUZFOUJDM0RBOTVCODY3Mzg4MzlBOEZDMDUwRjU3RTRGMTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6+AfiUx6ysB1JPchUODmmEpFx
4FgEhllU8CUcgbXRszXRw6RfjEFDLo1qoBk7ct2jzy8Tp3uWHdq09DwA6Vl5PPFV
toOjvfDXJGD+jLpd5l4KhyViSsc4qlUeQsSB0BJnidL264hDmWS5CGmfaEWHsHPp
tg50hrgH79zprJ26cZmz7iYMRvNybRHLw+pyeaMtww14oM5nbww03dowJHNuD6P9
jsnFrQiSoFFxwCch8/O8BwVfvt5bjohyOpGsoEw3yj8c0ppSlX5yAMd+dBKo/iDq
Bq0WjgXgMlqtgwIr51/e+V3UARavfqeJgGuEgwAAqDJcAvv+Ymq5lhLXpQvLAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQU3EBe/pvD2pW4ZziDmo/AUPV+TxEwHwYDVR0j
BBgwFoAU4HS5qnGMN/ixJiQ/LjDaNfQ8DdIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82
Y2QyNGIwNS0yNjllLTQ3ODQtYjkzNS1mMjc2NjU4MzBmZGEvMC9FMDc0QjlBQTcx
OEMzN0Y4QjEyNjI0M0YyRTMwREEzNUY0M0MwREQyLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvRTA3NEI5QUE3MThDMzdGOEIxMjYyNDNGMkUzMERBMzVGNDND
MEREMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmNkMjRiMDUtMjY5ZS00Nzg0LWI5
MzUtZjI3NjY1ODMwZmRhLzAvRTA3NEI5QUE3MThDMzdGOEIxMjYyNDNGMkUzMERB
MzVGNDNDMEREMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAHuoOZP25mMoR6LFJSVMiJT5EjDKlE/3Kuyl
AnSv4wDH+Lvc19UgOmM5cE56ljFPOy1g9XMYWfNUSeEc/N04/B44nGKUShhL90HS
DU6eDpK/RSklJ+c7MsbcX22FdI3aA6+rDo79Hwj5x9tuTYu6accXHGxj0Jb9ky/4
qvoGLYFNnsGbWznE7BcIpO9kiPf54nqY+I6MNLbpCn0Q9ChGeB9nsGCO2PtvCz9k
w1vtuodRUxRXyQDEp9IlSqQOH/TiD5H9x0uDx6dl4bBjrdP+f1urYOOe8oascnNA
kqgTfM6uw3/gl/cKgNLk+ExwEAznNYpJBcTGdTUc+m+GHz+DmYs=
-----END CERTIFICATE-----
Generated at Mon Feb 2 09:45:06 2026 by rpki-client