This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/77cd68f4-69a5-475f-aee4-3ef4b8d302dd/0/490B3FBCC6F0FC65785096A153DC87BC5057ACE5.mft
File:                     490B3FBCC6F0FC65785096A153DC87BC5057ACE5.mft (raw, json)
Hash identifier:          ldk9q+s/XDg7GfXOmT9LAKOiRtFIlLnbOMiYks1iMJ8=
Subject key identifier:   B8:33:B0:E0:2B:1B:29:56:31:BD:27:C6:A0:3F:40:F5:E6:AA:A3:66
Authority key identifier: 49:0B:3F:BC:C6:F0:FC:65:78:50:96:A1:53:DC:87:BC:50:57:AC:E5
Certificate issuer:       /CN=490B3FBCC6F0FC65785096A153DC87BC5057ACE5
Certificate serial:       1457A2F817F60CCC1C18F91BE663AE782D13843F
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/490B3FBCC6F0FC65785096A153DC87BC5057ACE5.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/77cd68f4-69a5-475f-aee4-3ef4b8d302dd/0/490B3FBCC6F0FC65785096A153DC87BC5057ACE5.mft
Manifest number:          054B
Signing time:             Sat 31 Jan 2026 16:11:07 +0000
Manifest this update:     Sat 31 Jan 2026 16:06:07 +0000
Manifest next update:     Wed 04 Feb 2026 02:09:07 +0000
Files and hashes:         1: 490B3FBCC6F0FC65785096A153DC87BC5057ACE5.crl (hash: zUKQU+pEzGr1+ctaILcXfxeVJQiXclLH9k+dMCJYQ1c=)
                          2: 3135302e3130372e3234382e302f32322d3234203d3e203435373036.roa (hash: UD6uPbiybd2gYQ34RwGBqvbNDHuw/OBXgpqqJ4vtt5c=)
                          3: 3130332e31382e32382e302f32322d3234203d3e20313339393338.roa (hash: ucnqUA3ytkqy/KZQsVBDn5h+vw9Xea+SBX0gdpwdSiI=)
                          4: 32372e3132332e302e302f32312d3234203d3e20313339393338.roa (hash: 93zBrgb6m1LW3mW3NgO8+L8poGQYWz2Zyn5aV5wC7UU=)
                          5: 323430363a613330303a3a2f33322d3332203d3e203435373036.roa (hash: mSVrT9nxgdbO5zEJl0JNWqbaa5yXAY0zHugt4tIrWAI=)
                          6: 3230322e34332e3131342e302f32332d3234203d3e203435373036.roa (hash: 7fQVmlkjjbtviTL2Fj7ic9MZZ5loTg5W7CHv/vNGE0s=)
                          7: 32372e3132332e302e302f32312d3234203d3e203435373036.roa (hash: uuH+ziNBEr2lIwcdPkvVugSjVKRTjk8bgzFRk7pTIbw=)
                          8: 3230322e34332e3131342e302f32332d3234203d3e20313339393338.roa (hash: UzutzzrLFTEOaJSDZubuLTcQodPgB9vcpIjcaAdh8AA=)
                          9: 3135302e3130372e3234382e302f32322d3234203d3e20313339393338.roa (hash: vA79jR7K7GTqla1cGm5s5aJKIIoqkQL2bUTr0ZcxLOI=)
                          10: 3130332e31382e32382e302f32322d3234203d3e203435373036.roa (hash: Og1WIa42Ljyk1coTqcyrLMYu4TjgeM0yBlFnoKhLkxg=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/77cd68f4-69a5-475f-aee4-3ef4b8d302dd/0/490B3FBCC6F0FC65785096A153DC87BC5057ACE5.crl
                          rsync://repo-rpki.idnic.net/repo/77cd68f4-69a5-475f-aee4-3ef4b8d302dd/0/490B3FBCC6F0FC65785096A153DC87BC5057ACE5.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/490B3FBCC6F0FC65785096A153DC87BC5057ACE5.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 04 Feb 2026 02:09:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:57:a2:f8:17:f6:0c:cc:1c:18:f9:1b:e6:63:ae:78:2d:13:84:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=490B3FBCC6F0FC65785096A153DC87BC5057ACE5
        Validity
            Not Before: Jan 31 16:06:07 2026 GMT
            Not After : Feb  4 02:09:07 2026 GMT
        Subject: CN=B833B0E02B1B295631BD27C6A03F40F5E6AAA366
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:e2:56:d6:6f:b4:88:96:48:29:3c:34:50:7e:
                    ea:69:a2:a2:db:75:18:94:47:cd:cc:75:aa:dc:0a:
                    2a:6e:09:6c:d9:2f:7e:c4:e7:ed:fc:34:4f:59:f7:
                    b8:8f:69:4c:ee:42:21:0c:11:41:1e:c5:87:2b:88:
                    0a:90:8f:be:b3:e0:83:79:23:89:ed:21:3e:1d:89:
                    4f:9f:ac:a3:03:42:7f:e0:2f:9f:1d:90:c4:a1:58:
                    bf:c6:ad:d5:52:95:09:43:16:81:43:bb:93:c1:93:
                    d6:df:01:6c:7c:c1:85:ef:2b:83:78:8a:45:11:a9:
                    d2:21:8c:c1:a5:f7:0d:04:f1:26:14:86:1b:4b:04:
                    f3:07:e0:d9:8a:f5:7f:13:14:cf:fb:46:bc:e6:e7:
                    cf:75:fd:81:1c:c9:50:06:7d:86:5a:93:06:0f:f9:
                    25:01:d4:bf:c9:84:df:45:2f:a8:2e:05:ae:09:e1:
                    e3:d4:39:3c:32:50:33:d6:26:35:55:bc:cf:9c:7f:
                    55:3e:65:13:c2:b1:65:a6:ae:7a:71:42:09:ac:92:
                    ac:88:26:6c:44:b3:50:03:ed:b5:f0:78:d4:58:f9:
                    e5:b1:65:78:51:cb:56:9a:eb:4e:8f:da:cb:27:c8:
                    07:a3:b0:a7:11:00:ac:a8:da:9d:eb:8b:5c:2a:64:
                    28:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:33:B0:E0:2B:1B:29:56:31:BD:27:C6:A0:3F:40:F5:E6:AA:A3:66
            X509v3 Authority Key Identifier:
                keyid:49:0B:3F:BC:C6:F0:FC:65:78:50:96:A1:53:DC:87:BC:50:57:AC:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/77cd68f4-69a5-475f-aee4-3ef4b8d302dd/0/490B3FBCC6F0FC65785096A153DC87BC5057ACE5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/490B3FBCC6F0FC65785096A153DC87BC5057ACE5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/77cd68f4-69a5-475f-aee4-3ef4b8d302dd/0/490B3FBCC6F0FC65785096A153DC87BC5057ACE5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:44:51:39:5b:68:60:35:3d:2e:6e:b8:25:2b:e1:59:82:58:
         54:59:6a:a0:e3:af:c5:4c:4a:50:0f:5f:f5:24:80:85:c7:dd:
         bf:75:23:c3:47:e1:39:28:93:03:e5:bd:58:62:73:e8:f2:8e:
         d7:c8:5e:5e:b8:c6:70:0d:cb:8e:79:fd:6f:c3:c5:4c:6d:6b:
         6e:b2:3d:c8:74:06:62:bf:da:1a:3a:40:3c:16:52:21:b8:35:
         a5:70:72:81:d3:4a:49:06:a4:3e:d7:83:65:55:64:da:0a:11:
         be:6c:12:ae:62:63:24:e7:fe:b2:e2:22:b3:34:a3:ec:29:dd:
         18:d1:e3:52:0d:d6:bc:48:55:f7:49:f7:aa:4f:2a:22:17:e6:
         30:5b:f7:fa:8c:75:42:0a:7a:28:5e:a5:95:54:10:8b:54:19:
         d8:03:30:84:51:a1:e7:0d:35:a2:89:7b:90:ce:72:b4:f3:cc:
         e2:95:2f:4f:63:02:d8:72:bb:25:5a:4b:21:75:cb:3f:7a:b8:
         e0:c4:00:81:aa:dc:7c:d7:09:63:ee:63:84:18:60:f9:3a:d9:
         52:ab:51:ad:08:e9:20:4e:ec:6f:98:84:52:5d:84:1f:1e:98:
         bb:13:db:4a:23:27:69:35:73:7f:7b:3b:cc:9a:db:6c:6d:80:
         6e:1f:fd:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 09:42:13 2026 by rpki-client