This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/76a5ab54-7844-4602-8aea-3c2e641f6a3c/0/C5F2AFA0AB7AB2DDBD8F875B21B8EC0C3FF831F6.mft
File:                     C5F2AFA0AB7AB2DDBD8F875B21B8EC0C3FF831F6.mft (raw, json)
Hash identifier:          cdIhVjR2Mxo+ZVKDkhq/iMIiTwoLdECuis+MORRdUEY=
Subject key identifier:   76:B4:10:78:CE:81:8C:F9:A9:09:E6:BA:7F:E4:4F:C8:73:EC:04:60
Authority key identifier: C5:F2:AF:A0:AB:7A:B2:DD:BD:8F:87:5B:21:B8:EC:0C:3F:F8:31:F6
Certificate issuer:       /CN=C5F2AFA0AB7AB2DDBD8F875B21B8EC0C3FF831F6
Certificate serial:       4DE52ABDF90D1A39997204B346C6F193D8FD7943
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C5F2AFA0AB7AB2DDBD8F875B21B8EC0C3FF831F6.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/76a5ab54-7844-4602-8aea-3c2e641f6a3c/0/C5F2AFA0AB7AB2DDBD8F875B21B8EC0C3FF831F6.mft
Manifest number:          048A
Signing time:             Sun 01 Feb 2026 21:11:26 +0000
Manifest this update:     Sun 01 Feb 2026 21:06:26 +0000
Manifest next update:     Thu 05 Feb 2026 04:27:26 +0000
Files and hashes:         1: 3130332e3234362e3138342e302f32342d3234203d3e203538333833.roa (hash: xufBW0tgF9GH044ZCtCODOthPCoRzgsrcm0HHfNPNhM=)
                          2: C5F2AFA0AB7AB2DDBD8F875B21B8EC0C3FF831F6.crl (hash: tOs1t+c5/Zn23nH+eNOAXH5ys7BRs4dR7QpeMQlSDEQ=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/76a5ab54-7844-4602-8aea-3c2e641f6a3c/0/C5F2AFA0AB7AB2DDBD8F875B21B8EC0C3FF831F6.crl
                          rsync://repo-rpki.idnic.net/repo/76a5ab54-7844-4602-8aea-3c2e641f6a3c/0/C5F2AFA0AB7AB2DDBD8F875B21B8EC0C3FF831F6.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C5F2AFA0AB7AB2DDBD8F875B21B8EC0C3FF831F6.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 05 Feb 2026 04:27:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:e5:2a:bd:f9:0d:1a:39:99:72:04:b3:46:c6:f1:93:d8:fd:79:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C5F2AFA0AB7AB2DDBD8F875B21B8EC0C3FF831F6
        Validity
            Not Before: Feb  1 21:06:26 2026 GMT
            Not After : Feb  5 04:27:26 2026 GMT
        Subject: CN=76B41078CE818CF9A909E6BA7FE44FC873EC0460
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:d1:a1:01:8b:dd:1e:46:f4:d7:4f:5e:dc:a2:
                    3f:a4:96:81:90:e4:3a:77:e1:2b:10:f5:79:7e:85:
                    fc:d5:46:82:6e:4e:ca:44:e1:8d:80:dd:38:47:47:
                    2c:dc:23:9a:a3:d1:8b:0d:66:a7:34:4f:1b:cd:ff:
                    01:b6:22:fe:70:e4:86:54:cb:b3:e7:41:33:dd:da:
                    78:6e:39:b4:fd:44:3e:c9:52:41:a9:55:31:d9:e3:
                    6d:a0:ec:bd:52:9a:5b:86:27:8d:15:b1:ea:51:42:
                    73:e2:bb:92:91:86:e5:72:b8:be:6a:44:31:82:09:
                    53:2b:1e:f2:d2:84:2e:11:79:a1:bb:36:fd:25:fd:
                    80:0d:05:21:6c:ca:18:c4:6e:3d:ae:08:2c:ee:e5:
                    68:41:03:6b:06:0d:26:2e:72:5e:fd:79:25:e3:15:
                    75:50:eb:08:48:fd:d5:83:9b:07:8b:20:72:91:a5:
                    63:62:73:ad:6e:af:86:85:dd:b5:41:94:f4:63:d0:
                    29:35:ce:d8:3b:02:39:50:e5:0c:d4:24:a0:f9:c9:
                    9a:ae:d5:f8:2e:74:ee:d1:82:97:80:88:18:00:23:
                    ec:6c:67:11:40:c4:73:53:1a:38:0c:8b:70:54:fa:
                    aa:5f:b1:91:14:bb:c1:5d:54:f8:ac:c2:5a:e6:30:
                    1b:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:B4:10:78:CE:81:8C:F9:A9:09:E6:BA:7F:E4:4F:C8:73:EC:04:60
            X509v3 Authority Key Identifier:
                keyid:C5:F2:AF:A0:AB:7A:B2:DD:BD:8F:87:5B:21:B8:EC:0C:3F:F8:31:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/76a5ab54-7844-4602-8aea-3c2e641f6a3c/0/C5F2AFA0AB7AB2DDBD8F875B21B8EC0C3FF831F6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C5F2AFA0AB7AB2DDBD8F875B21B8EC0C3FF831F6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/76a5ab54-7844-4602-8aea-3c2e641f6a3c/0/C5F2AFA0AB7AB2DDBD8F875B21B8EC0C3FF831F6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:0d:25:ad:22:72:85:5d:11:de:e1:71:d7:05:99:f5:f5:7d:
         e0:87:8f:a9:3c:0c:0c:84:89:a7:ad:6a:27:df:3d:8d:88:65:
         2b:8d:2f:ff:36:a7:8a:bc:ae:89:d4:d0:6f:e8:8a:45:b3:e2:
         92:0d:b9:5f:84:c3:c2:f0:4c:8d:b7:7c:e5:20:dc:b1:22:02:
         06:02:d5:57:52:a8:8b:11:59:dd:0e:e1:71:64:eb:21:fd:1d:
         83:75:1b:6b:dd:23:8d:0c:a7:0a:42:84:ae:c0:64:f9:4d:92:
         f2:56:36:38:4c:09:ae:5a:5c:38:09:42:83:35:9b:9a:41:82:
         bc:e9:b3:45:56:ce:0b:b2:d6:de:6e:63:6c:97:c0:a0:86:1c:
         aa:6d:2b:70:fe:a0:8e:91:cc:81:6c:ec:f2:b0:60:e0:7c:2f:
         eb:51:f2:52:8c:ec:15:c8:69:11:df:1b:57:94:f7:67:13:d9:
         f5:5b:91:73:01:b9:a8:7a:ae:42:95:a5:e0:92:1a:00:8a:35:
         d1:9b:eb:ec:60:e0:5c:56:32:4f:99:af:bb:29:d7:55:4b:de:
         3a:b7:e9:df:4a:93:0c:7e:b8:32:0f:87:b6:79:0c:a1:35:8d:
         68:61:bf:a9:39:24:09:82:8c:a6:3a:ec:16:0a:4f:39:46:70:
         23:34:c1:c6
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUTeUqvfkNGjmZcgSzRsbxk9j9eUMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzVGMkFGQTBBQjdBQjJEREJEOEY4NzVCMjFCOEVDMEMz
RkY4MzFGNjAeFw0yNjAyMDEyMTA2MjZaFw0yNjAyMDUwNDI3MjZaMDMxMTAvBgNV
BAMTKDc2QjQxMDc4Q0U4MThDRjlBOTA5RTZCQTdGRTQ0RkM4NzNFQzA0NjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDE0aEBi90eRvTXT17coj+kloGQ
5Dp34SsQ9Xl+hfzVRoJuTspE4Y2A3ThHRyzcI5qj0YsNZqc0TxvN/wG2Iv5w5IZU
y7PnQTPd2nhuObT9RD7JUkGpVTHZ422g7L1SmluGJ40VsepRQnPiu5KRhuVyuL5q
RDGCCVMrHvLShC4ReaG7Nv0l/YANBSFsyhjEbj2uCCzu5WhBA2sGDSYucl79eSXj
FXVQ6whI/dWDmweLIHKRpWNic61ur4aF3bVBlPRj0Ck1ztg7AjlQ5QzUJKD5yZqu
1fgudO7RgpeAiBgAI+xsZxFAxHNTGjgMi3BU+qpfsZEUu8FdVPiswlrmMBtBAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUdrQQeM6BjPmpCea6f+RPyHPsBGAwHwYDVR0j
BBgwFoAUxfKvoKt6st29j4dbIbjsDD/4MfYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83
NmE1YWI1NC03ODQ0LTQ2MDItOGFlYS0zYzJlNjQxZjZhM2MvMC9DNUYyQUZBMEFC
N0FCMkREQkQ4Rjg3NUIyMUI4RUMwQzNGRjgzMUY2LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQzVGMkFGQTBBQjdBQjJEREJEOEY4NzVCMjFCOEVDMEMzRkY4
MzFGNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzZhNWFiNTQtNzg0NC00NjAyLThh
ZWEtM2MyZTY0MWY2YTNjLzAvQzVGMkFGQTBBQjdBQjJEREJEOEY4NzVCMjFCOEVD
MEMzRkY4MzFGNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAJANJa0icoVdEd7hcdcFmfX1feCHj6k8DAyE
iaetaiffPY2IZSuNL/82p4q8ronU0G/oikWz4pINuV+Ew8LwTI23fOUg3LEiAgYC
1VdSqIsRWd0O4XFk6yH9HYN1G2vdI40MpwpChK7AZPlNkvJWNjhMCa5aXDgJQoM1
m5pBgrzps0VWzguy1t5uY2yXwKCGHKptK3D+oI6RzIFs7PKwYOB8L+tR8lKM7BXI
aRHfG1eU92cT2fVbkXMBuah6rkKVpeCSGgCKNdGb6+xg4FxWMk+Zr7sp11VL3jq3
6d9Kkwx+uDIPh7Z5DKE1jWhhv6k5JAmCjKY67BYKTzlGcCM0wcY=
-----END CERTIFICATE-----
Generated at Mon Feb 2 09:43:22 2026 by rpki-client