This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/7488d4c0-dc92-4aa8-b169-52cab2a61ba1/0/247D705AC2F14A763F3EB87E2E41158A251F3D76.mft
File:                     247D705AC2F14A763F3EB87E2E41158A251F3D76.mft (raw, json)
Hash identifier:          zcOrulQ6JoyvCgKYtksXAM/62FETt7y8ID72ISZHVUc=
Subject key identifier:   B3:1D:4D:AE:71:CA:D9:D3:66:0A:EB:BC:E7:3F:F1:32:6A:F0:06:32
Authority key identifier: 24:7D:70:5A:C2:F1:4A:76:3F:3E:B8:7E:2E:41:15:8A:25:1F:3D:76
Certificate issuer:       /CN=247D705AC2F14A763F3EB87E2E41158A251F3D76
Certificate serial:       56D5E3ECF78968A9D1AF232644D333736E880F9F
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/247D705AC2F14A763F3EB87E2E41158A251F3D76.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/7488d4c0-dc92-4aa8-b169-52cab2a61ba1/0/247D705AC2F14A763F3EB87E2E41158A251F3D76.mft
Manifest number:          0336
Signing time:             Sat 31 Jan 2026 06:11:15 +0000
Manifest this update:     Sat 31 Jan 2026 06:06:15 +0000
Manifest next update:     Tue 03 Feb 2026 09:38:15 +0000
Files and hashes:         1: 247D705AC2F14A763F3EB87E2E41158A251F3D76.crl (hash: LrKqgI7a399sJGzyoPCmIstCVfq9ry1O5R/xog30ro0=)
                          2: 323430343a653930303a343030303a3a2f33342d3334203d3e203436303632.roa (hash: KX+TcfWMtFMWBw+/wMS/PSYWDCnYN7O3lGExEaabLIU=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/7488d4c0-dc92-4aa8-b169-52cab2a61ba1/0/247D705AC2F14A763F3EB87E2E41158A251F3D76.crl
                          rsync://repo-rpki.idnic.net/repo/7488d4c0-dc92-4aa8-b169-52cab2a61ba1/0/247D705AC2F14A763F3EB87E2E41158A251F3D76.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/247D705AC2F14A763F3EB87E2E41158A251F3D76.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 03 Feb 2026 09:38:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:d5:e3:ec:f7:89:68:a9:d1:af:23:26:44:d3:33:73:6e:88:0f:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=247D705AC2F14A763F3EB87E2E41158A251F3D76
        Validity
            Not Before: Jan 31 06:06:15 2026 GMT
            Not After : Feb  3 09:38:15 2026 GMT
        Subject: CN=B31D4DAE71CAD9D3660AEBBCE73FF1326AF00632
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:98:62:1f:94:7e:f2:18:39:51:01:39:e7:6f:
                    5f:b3:51:bd:a0:6d:db:37:97:06:00:87:55:b3:d4:
                    91:d6:d5:14:83:89:3e:ad:c3:89:55:94:e9:a8:4b:
                    b4:7f:73:8d:f5:93:11:00:ec:29:f7:0b:b5:4e:29:
                    08:12:ba:22:3f:0b:33:c7:37:7d:17:07:fc:e2:d4:
                    36:6d:34:bc:a0:62:ac:88:9f:5d:ba:93:90:96:30:
                    7f:8a:ab:0b:ff:fa:82:96:70:f8:e9:42:9d:bd:4a:
                    ba:eb:56:e1:76:d9:b7:0d:e2:fb:22:a0:92:f1:5d:
                    3d:a5:d8:f1:85:5d:e8:02:16:6d:ff:88:f7:ab:db:
                    97:21:12:f7:15:35:8c:8b:47:f9:2b:50:ac:ed:6d:
                    20:e7:66:e8:d4:fd:b4:1f:ad:f2:06:6d:ad:ae:e7:
                    ef:bb:ed:24:19:30:f3:79:dc:a8:16:c0:2c:5c:a3:
                    c2:19:a8:69:a5:19:b2:6f:b4:ec:04:6d:7a:9c:96:
                    54:5c:ae:fc:a9:58:68:d4:c8:08:11:72:85:ec:36:
                    50:08:4c:ca:d3:18:71:f8:f3:2f:7c:be:ba:7b:6d:
                    db:fd:fa:5d:58:0c:b6:72:07:40:30:9e:06:ce:43:
                    4d:fe:31:86:e1:6f:ff:9d:85:2b:e1:0c:96:f5:32:
                    3b:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:1D:4D:AE:71:CA:D9:D3:66:0A:EB:BC:E7:3F:F1:32:6A:F0:06:32
            X509v3 Authority Key Identifier:
                keyid:24:7D:70:5A:C2:F1:4A:76:3F:3E:B8:7E:2E:41:15:8A:25:1F:3D:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/7488d4c0-dc92-4aa8-b169-52cab2a61ba1/0/247D705AC2F14A763F3EB87E2E41158A251F3D76.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/247D705AC2F14A763F3EB87E2E41158A251F3D76.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7488d4c0-dc92-4aa8-b169-52cab2a61ba1/0/247D705AC2F14A763F3EB87E2E41158A251F3D76.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         e7:38:23:88:f7:7c:76:9d:c5:35:90:ca:e4:7e:f9:ce:df:9f:
         cc:72:1f:8c:5c:1f:8f:54:92:0a:ee:c1:e1:48:1e:0e:eb:ff:
         8d:b8:64:cf:0b:f6:7d:c0:52:ea:f3:ef:b6:7f:29:53:e8:b9:
         d5:d9:7c:47:9b:0e:45:9b:a9:51:0e:25:53:26:9a:80:4c:ae:
         43:50:46:e0:36:bf:6c:e6:3e:fd:1d:90:bf:7e:07:73:e0:6e:
         c2:c7:96:7b:8f:3e:1e:cf:71:ce:d3:4d:70:4d:35:51:da:fd:
         9a:1a:81:ca:95:87:d8:a9:e0:02:13:69:c4:c4:62:d8:86:f2:
         9e:8b:36:3f:7b:66:82:a1:7f:cf:61:b3:ca:d0:e4:0d:a3:09:
         e1:df:66:56:e7:2c:55:d2:ea:de:7f:74:a6:b4:09:28:84:48:
         19:ad:63:eb:8b:5f:97:b3:95:ac:64:52:20:f0:d5:de:6d:60:
         4c:ab:db:af:7b:70:02:40:f8:76:23:f7:27:38:a8:46:78:b4:
         65:ad:4a:1b:35:6c:ed:af:47:72:4f:88:6e:53:0d:66:d2:d1:
         e7:51:dc:9b:10:04:ea:f6:b6:bb:4d:f5:57:11:0c:8c:6d:48:
         07:c4:2a:e8:31:2f:01:75:a5:7c:0b:23:53:fb:bc:54:16:9e:
         03:8f:03:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 10:01:24 2026 by rpki-client