This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/724db567-33a8-4ce0-bcff-cb0f0a85c239/0/F07FFF472ED9C70073BC98865A4A5A6C2B0EA35E.mft
File:                     F07FFF472ED9C70073BC98865A4A5A6C2B0EA35E.mft (raw, json)
Hash identifier:          46P0FcPpurW5XEXyHw5vKi81+n2nGzX34XNJAnBv014=
Subject key identifier:   7B:31:6D:F5:34:E7:CC:59:AF:23:6E:F9:76:52:51:73:E3:9F:4F:93
Authority key identifier: F0:7F:FF:47:2E:D9:C7:00:73:BC:98:86:5A:4A:5A:6C:2B:0E:A3:5E
Certificate issuer:       /CN=F07FFF472ED9C70073BC98865A4A5A6C2B0EA35E
Certificate serial:       4DA022BEB0917BFBF1BE48E17B3BF9EE3BD35CF5
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F07FFF472ED9C70073BC98865A4A5A6C2B0EA35E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/724db567-33a8-4ce0-bcff-cb0f0a85c239/0/F07FFF472ED9C70073BC98865A4A5A6C2B0EA35E.mft
Manifest number:          E5
Signing time:             Sun 01 Feb 2026 01:00:03 +0000
Manifest this update:     Sun 01 Feb 2026 00:55:03 +0000
Manifest next update:     Wed 04 Feb 2026 03:05:03 +0000
Files and hashes:         1: F07FFF472ED9C70073BC98865A4A5A6C2B0EA35E.crl (hash: sZ6tdycAFSX0bpJSICww3jIRO5DeVjDjWGpbbRHGcMc=)
                          2: 3130332e3132312e35382e302f32342d3234203d3e20313338303436.roa (hash: qsp//iZceVpeXKSwIm+bVjK6+BteJANtUH8oVA3B3qs=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/724db567-33a8-4ce0-bcff-cb0f0a85c239/0/F07FFF472ED9C70073BC98865A4A5A6C2B0EA35E.crl
                          rsync://repo-rpki.idnic.net/repo/724db567-33a8-4ce0-bcff-cb0f0a85c239/0/F07FFF472ED9C70073BC98865A4A5A6C2B0EA35E.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F07FFF472ED9C70073BC98865A4A5A6C2B0EA35E.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 04 Feb 2026 03:05:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:a0:22:be:b0:91:7b:fb:f1:be:48:e1:7b:3b:f9:ee:3b:d3:5c:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F07FFF472ED9C70073BC98865A4A5A6C2B0EA35E
        Validity
            Not Before: Feb  1 00:55:03 2026 GMT
            Not After : Feb  4 03:05:03 2026 GMT
        Subject: CN=7B316DF534E7CC59AF236EF976525173E39F4F93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:3f:a8:09:d7:bd:50:07:b1:c2:93:5d:0e:9f:
                    ad:7f:83:fd:83:6e:01:93:25:a3:d7:c0:44:df:dd:
                    81:bd:e1:ad:df:76:e2:7b:99:00:94:b2:5b:ef:a9:
                    8b:6a:8c:5d:cc:dc:86:3a:97:04:a5:84:a6:fe:39:
                    22:5a:75:e9:41:b0:cb:9b:ae:8e:72:ae:e8:2d:12:
                    2f:1b:a5:79:5b:ac:c7:2f:f9:28:58:94:85:ca:ab:
                    a2:d2:56:f2:55:a3:d0:87:62:48:e8:51:ac:38:66:
                    bd:c9:be:47:de:37:e6:da:55:5c:aa:3a:02:0e:52:
                    e6:43:77:b2:85:a1:76:b0:1e:79:b8:ec:e1:4e:38:
                    de:d7:6c:64:3e:2e:fd:a8:2d:5a:fb:4b:04:b1:5e:
                    e0:e2:bc:a3:b1:a7:64:df:f0:1e:d2:a0:05:7c:a2:
                    0e:89:7a:33:da:65:ea:87:39:d5:c6:b5:a6:08:33:
                    17:67:d0:83:90:86:9f:0d:b2:69:fc:df:f5:f2:b2:
                    7a:e0:be:7b:ea:8e:dd:c3:b8:69:87:95:34:05:a4:
                    1a:d6:ae:12:70:58:82:9a:09:b1:b3:0e:dc:c5:17:
                    15:bb:3e:16:50:02:d0:45:8e:4e:28:ea:15:f8:4b:
                    92:12:ca:50:1b:d5:88:ec:71:c5:67:21:74:4b:0b:
                    e2:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:31:6D:F5:34:E7:CC:59:AF:23:6E:F9:76:52:51:73:E3:9F:4F:93
            X509v3 Authority Key Identifier:
                keyid:F0:7F:FF:47:2E:D9:C7:00:73:BC:98:86:5A:4A:5A:6C:2B:0E:A3:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/724db567-33a8-4ce0-bcff-cb0f0a85c239/0/F07FFF472ED9C70073BC98865A4A5A6C2B0EA35E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F07FFF472ED9C70073BC98865A4A5A6C2B0EA35E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/724db567-33a8-4ce0-bcff-cb0f0a85c239/0/F07FFF472ED9C70073BC98865A4A5A6C2B0EA35E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:72:da:39:88:6c:df:5b:64:40:7c:a9:1b:67:c8:0c:c5:6a:
         cc:ec:2b:d6:c0:6e:14:c7:39:29:6b:8e:15:9b:df:af:0d:34:
         b5:62:81:4a:97:f5:ee:12:77:6c:71:6e:6e:83:bd:07:88:a8:
         2d:39:f6:77:6a:b1:e5:d0:77:5f:de:8e:9a:7b:50:17:e8:24:
         df:d1:2c:f6:76:4b:9f:b6:a2:90:b0:28:05:9b:c3:5c:ee:7b:
         73:4f:5c:c3:dc:5a:96:96:e8:81:04:42:4f:f4:2a:b4:01:0f:
         92:d7:94:08:c2:7e:6a:29:38:72:75:d6:71:ac:30:b6:ff:e1:
         d9:54:51:09:27:13:08:c2:49:f4:0e:3f:d9:fa:06:03:b6:b1:
         66:38:5d:ca:b9:01:09:f6:40:fc:71:fa:6e:c5:d7:02:a6:fa:
         05:93:59:9b:90:52:36:78:ae:1c:96:ad:e5:45:a1:b7:d0:45:
         53:8e:34:6f:37:5e:24:bb:b6:e0:eb:63:06:58:95:ff:83:6e:
         54:4b:37:64:3f:c3:e5:48:f8:f3:09:f0:eb:14:68:3b:46:dd:
         b9:5a:2b:60:3b:a6:91:23:a8:77:8e:e3:33:bf:79:f3:91:35:
         8f:52:ff:9c:f0:84:2e:3d:18:e9:e4:d6:bf:f5:09:9b:fb:e0:
         3d:05:b5:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 09:43:09 2026 by rpki-client