This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/757e11dc-ff71-4ed7-a695-834922e0e361/0/065943D1744CF4841A6D3D50944D2A4DB537A128.mft
File:                     065943D1744CF4841A6D3D50944D2A4DB537A128.mft (raw, json)
Hash identifier:          CVTNjsYp0y5w0xHtGH7XNHvJheMQZnP63h2rvhr1Nvk=
Subject key identifier:   AF:57:7F:29:18:D0:20:18:33:18:B1:C7:18:7C:FB:66:D5:A3:CD:66
Authority key identifier: 06:59:43:D1:74:4C:F4:84:1A:6D:3D:50:94:4D:2A:4D:B5:37:A1:28
Certificate issuer:       /CN=065943D1744CF4841A6D3D50944D2A4DB537A128
Certificate serial:       11DE56748CCA119469EB3FEE98167A2D7DD367D5
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/065943D1744CF4841A6D3D50944D2A4DB537A128.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/757e11dc-ff71-4ed7-a695-834922e0e361/0/065943D1744CF4841A6D3D50944D2A4DB537A128.mft
Manifest number:          013E
Signing time:             Sun 01 Feb 2026 01:11:59 +0000
Manifest this update:     Sun 01 Feb 2026 01:06:59 +0000
Manifest next update:     Wed 04 Feb 2026 05:26:59 +0000
Files and hashes:         1: 3135372e31352e37372e302f32342d3234203d3e20313338313331.roa (hash: I8arlV9bMVGsAQTZtHx6y++6HiyiMdDVTXwTw+QSjwU=)
                          2: 065943D1744CF4841A6D3D50944D2A4DB537A128.crl (hash: GDeUJpi/wfaMVsNSbI7li9JPgIDbyOcunCwYDWnOxdE=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/757e11dc-ff71-4ed7-a695-834922e0e361/0/065943D1744CF4841A6D3D50944D2A4DB537A128.crl
                          rsync://repo-rpki.idnic.net/repo/757e11dc-ff71-4ed7-a695-834922e0e361/0/065943D1744CF4841A6D3D50944D2A4DB537A128.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/065943D1744CF4841A6D3D50944D2A4DB537A128.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 04 Feb 2026 05:26:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:de:56:74:8c:ca:11:94:69:eb:3f:ee:98:16:7a:2d:7d:d3:67:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=065943D1744CF4841A6D3D50944D2A4DB537A128
        Validity
            Not Before: Feb  1 01:06:59 2026 GMT
            Not After : Feb  4 05:26:59 2026 GMT
        Subject: CN=AF577F2918D020183318B1C7187CFB66D5A3CD66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:f6:5d:4e:7b:50:6a:29:51:0c:3f:c1:bd:58:
                    4d:1a:3a:b0:fc:c2:98:ba:bc:a8:a4:74:4f:73:fa:
                    72:d3:80:89:bc:36:e2:50:fc:e3:ce:61:72:64:63:
                    2a:eb:66:47:c4:56:8d:70:55:26:f2:30:80:41:ad:
                    48:b1:f9:ed:0e:74:47:92:d1:7b:07:fa:9d:99:f6:
                    f9:49:b7:14:f7:01:75:e8:73:24:f8:19:99:66:3b:
                    e5:39:5f:f3:7b:71:24:1d:d3:82:2e:5c:fb:38:95:
                    2b:7c:9c:e2:83:ef:9f:4a:b2:d6:0e:b9:06:c4:b9:
                    0d:be:10:02:98:eb:63:3c:dc:54:ee:bb:01:79:a2:
                    31:01:39:93:f4:07:60:a1:09:52:bc:5b:81:c4:65:
                    18:a8:79:c6:c9:e3:f4:b8:b6:0f:fc:1d:2a:05:4c:
                    4f:24:ff:f4:84:b8:4f:09:fd:ea:b3:61:98:dc:f4:
                    08:3b:15:05:5a:61:27:bc:9a:14:dc:99:2f:88:14:
                    0d:a5:ec:68:34:de:0e:75:c0:47:f1:e0:43:38:8a:
                    77:33:cb:c0:20:bd:73:4d:be:ee:7f:f9:78:7a:9e:
                    6f:b8:38:93:37:a0:c1:28:af:f4:89:18:7d:43:f4:
                    b5:20:98:7e:b5:7d:af:73:fc:dd:c8:c7:ec:76:92:
                    ff:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:57:7F:29:18:D0:20:18:33:18:B1:C7:18:7C:FB:66:D5:A3:CD:66
            X509v3 Authority Key Identifier:
                keyid:06:59:43:D1:74:4C:F4:84:1A:6D:3D:50:94:4D:2A:4D:B5:37:A1:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/757e11dc-ff71-4ed7-a695-834922e0e361/0/065943D1744CF4841A6D3D50944D2A4DB537A128.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/065943D1744CF4841A6D3D50944D2A4DB537A128.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/757e11dc-ff71-4ed7-a695-834922e0e361/0/065943D1744CF4841A6D3D50944D2A4DB537A128.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:2f:f4:eb:61:58:4c:72:27:2f:2f:3b:b2:d4:08:99:9d:da:
         b7:79:aa:4a:34:81:ce:20:c7:0c:62:cc:04:4f:25:46:f0:80:
         d7:d3:43:e7:5f:d6:dc:ee:6a:76:3e:cd:07:de:cd:71:ca:5a:
         e6:cc:92:7a:9f:7a:b2:d1:aa:2a:3f:95:37:4e:6f:e8:b6:c1:
         f5:cc:5b:ec:df:61:46:cc:4d:7e:3a:83:2f:21:94:6d:51:76:
         20:45:cd:bf:dd:69:fa:f6:fa:2b:c0:d3:3c:f0:99:e3:f6:3c:
         ae:d1:ac:8e:81:a3:05:e3:25:08:26:54:df:1c:77:75:d7:d0:
         36:ce:37:41:b2:4e:58:08:0f:03:0a:32:2b:a0:aa:71:0b:8b:
         a0:d1:d8:a9:7f:3a:1f:7b:32:4c:86:ef:72:a4:23:7b:6f:f9:
         31:c7:de:51:86:39:fa:cc:bf:58:61:61:e8:9f:f6:4b:a0:3e:
         5c:81:3d:a5:60:35:fa:87:60:8c:52:8f:eb:e8:33:22:49:ec:
         d3:2a:fb:11:f8:80:69:75:ca:72:ac:e8:1b:8c:fb:a7:98:86:
         d0:74:ad:fb:af:52:84:62:f8:1e:55:7d:d5:cf:15:10:72:e5:
         8f:e1:e6:93:1a:47:4a:3a:85:6b:00:47:50:84:9e:ca:b8:32:
         2a:5d:4a:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 15:48:33 2026 by rpki-client