This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/76db4cb8-faea-4530-b29e-0b7a4affc316/0/3053FFA7A0123B032FC9458281063C89F007FA98.mft
File:                     3053FFA7A0123B032FC9458281063C89F007FA98.mft (raw, json)
Hash identifier:          4nZRV/UNFIfqp4UdWneVyjP590P+Lo22kCHeuw5lu4g=
Subject key identifier:   B8:39:F2:ED:D8:EA:90:5A:9B:1A:3E:27:39:A3:A9:96:41:D6:5B:1B
Authority key identifier: 30:53:FF:A7:A0:12:3B:03:2F:C9:45:82:81:06:3C:89:F0:07:FA:98
Certificate issuer:       /CN=3053FFA7A0123B032FC9458281063C89F007FA98
Certificate serial:       097E8642B8886191A088C17EAB5B43FCDEEFB699
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3053FFA7A0123B032FC9458281063C89F007FA98.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/76db4cb8-faea-4530-b29e-0b7a4affc316/0/3053FFA7A0123B032FC9458281063C89F007FA98.mft
Manifest number:          03C3
Signing time:             Sat 31 Jan 2026 22:11:29 +0000
Manifest this update:     Sat 31 Jan 2026 22:06:29 +0000
Manifest next update:     Tue 03 Feb 2026 23:20:29 +0000
Files and hashes:         1: 3053FFA7A0123B032FC9458281063C89F007FA98.crl (hash: GLyUk2caMZaeexcsRme4M9YaLvBYNvD0dKzhiKqkGzY=)
                          2: 3130332e3136382e3138382e302f32332d3234203d3e203137393935.roa (hash: X8fSVyl/ekaFc0qdxtX72tyLH/RXxnJtVkW2HtewxfI=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/76db4cb8-faea-4530-b29e-0b7a4affc316/0/3053FFA7A0123B032FC9458281063C89F007FA98.crl
                          rsync://repo-rpki.idnic.net/repo/76db4cb8-faea-4530-b29e-0b7a4affc316/0/3053FFA7A0123B032FC9458281063C89F007FA98.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3053FFA7A0123B032FC9458281063C89F007FA98.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 03 Feb 2026 23:20:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:7e:86:42:b8:88:61:91:a0:88:c1:7e:ab:5b:43:fc:de:ef:b6:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3053FFA7A0123B032FC9458281063C89F007FA98
        Validity
            Not Before: Jan 31 22:06:29 2026 GMT
            Not After : Feb  3 23:20:29 2026 GMT
        Subject: CN=B839F2EDD8EA905A9B1A3E2739A3A99641D65B1B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:53:49:4d:84:32:ef:cd:05:df:27:86:c7:0d:
                    bb:17:a1:07:24:e6:9c:38:2b:bf:dd:7d:84:96:9b:
                    f3:7c:b6:c6:12:3c:13:40:c5:c8:2f:51:50:34:ff:
                    43:ca:4b:ad:f1:95:84:16:bc:98:0b:17:70:fe:2b:
                    56:0f:47:45:d0:f2:3b:67:28:2b:ae:9b:f4:44:68:
                    d3:8e:9d:45:9f:29:a6:74:5b:62:1a:f8:1e:73:78:
                    c9:1c:2a:c5:e4:3b:be:4b:05:43:6e:a2:2d:8f:6a:
                    0d:ff:ab:ef:ab:f0:f7:5a:15:bc:fe:51:3c:6a:1a:
                    1f:e3:ce:e5:b7:16:39:0e:3f:c2:af:a8:13:b0:a9:
                    2f:f3:b4:91:01:b3:2b:a5:58:54:ae:7c:6e:3b:57:
                    a8:49:97:28:6c:db:16:5d:77:09:33:da:a4:20:99:
                    a1:51:d3:40:7a:a7:13:76:a4:c8:39:29:71:07:2f:
                    e8:07:3d:f9:d0:1e:34:84:b5:41:47:5a:b3:17:86:
                    be:f9:58:8e:be:35:db:32:4a:c0:45:56:70:be:28:
                    3b:e2:7c:d0:6a:85:10:46:7c:ce:8f:fe:0e:17:85:
                    d1:c7:91:b0:d8:41:ca:be:38:4d:ab:67:58:6d:5e:
                    39:18:66:ff:53:2a:75:50:4c:d0:2d:03:27:06:4a:
                    da:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:39:F2:ED:D8:EA:90:5A:9B:1A:3E:27:39:A3:A9:96:41:D6:5B:1B
            X509v3 Authority Key Identifier:
                keyid:30:53:FF:A7:A0:12:3B:03:2F:C9:45:82:81:06:3C:89:F0:07:FA:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/76db4cb8-faea-4530-b29e-0b7a4affc316/0/3053FFA7A0123B032FC9458281063C89F007FA98.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3053FFA7A0123B032FC9458281063C89F007FA98.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/76db4cb8-faea-4530-b29e-0b7a4affc316/0/3053FFA7A0123B032FC9458281063C89F007FA98.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:31:df:85:eb:05:99:bf:d1:79:db:18:a5:2e:2a:ea:0a:4c:
         be:50:90:b8:00:41:05:e9:19:0b:f0:37:c8:88:ae:e0:ee:30:
         99:57:0c:d1:2d:e9:e5:17:ea:0c:da:34:e4:5b:8d:3b:04:ca:
         a3:03:4e:c9:fa:de:9b:0b:f9:2f:08:ee:eb:c2:c1:ca:1d:a3:
         8a:ac:cf:08:fb:ed:de:2c:eb:23:6d:a7:f3:f6:99:8e:76:73:
         5a:28:84:a3:49:80:31:51:fe:66:b2:00:24:da:cb:8b:d7:d6:
         50:f4:d6:fb:8f:3d:df:92:a8:73:b3:26:3b:0f:8b:57:e9:d1:
         da:eb:ee:de:17:11:23:c0:5a:6e:e9:76:9d:47:89:78:b9:c7:
         d3:3f:35:75:10:4a:35:53:89:52:3f:53:05:26:fc:7e:c3:65:
         00:bc:b1:bd:52:f1:22:72:dc:c4:ee:5f:60:6d:aa:ad:0c:95:
         d3:ce:54:86:41:dd:05:cf:ea:68:3e:a9:3d:c5:fb:bb:4d:cf:
         0d:95:70:ab:bc:0d:d1:4e:ce:c9:8f:a0:6e:4c:d4:e6:50:f7:
         09:15:a8:22:88:6b:3a:e5:09:c6:47:38:51:d8:1d:d4:17:c7:
         c5:0a:e8:5c:be:af:4e:f6:38:48:d0:4f:1d:a1:32:a0:4d:9a:
         53:23:cc:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 12:49:03 2026 by rpki-client