This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/7998d6ee-6fd7-4e2d-ae41-6939fdb153ee/0/03F45A130990D1072FE172E1EF64AAFAEC347834.mft
File:                     03F45A130990D1072FE172E1EF64AAFAEC347834.mft (raw, json)
Hash identifier:          Y0fzNVICWQZcN9Dv7ZAMK0chuvKvo6K7duDt9AL5xdc=
Subject key identifier:   36:81:D0:53:83:62:8D:AC:82:CB:ED:43:C0:88:BB:B2:D5:88:0B:C8
Authority key identifier: 03:F4:5A:13:09:90:D1:07:2F:E1:72:E1:EF:64:AA:FA:EC:34:78:34
Certificate issuer:       /CN=03F45A130990D1072FE172E1EF64AAFAEC347834
Certificate serial:       27FC1233B32858C08AA447CF270365E0287C6940
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/03F45A130990D1072FE172E1EF64AAFAEC347834.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/7998d6ee-6fd7-4e2d-ae41-6939fdb153ee/0/03F45A130990D1072FE172E1EF64AAFAEC347834.mft
Manifest number:          042C
Signing time:             Sat 31 Jan 2026 20:11:06 +0000
Manifest this update:     Sat 31 Jan 2026 20:06:06 +0000
Manifest next update:     Wed 04 Feb 2026 05:13:06 +0000
Files and hashes:         1: 3130332e3134332e342e302f32332d3233203d3e20313339343034.roa (hash: 2HuZv4Ja6YvRs50s/AvvVTs4SzEqz98r1HP9GJBz7UE=)
                          2: 03F45A130990D1072FE172E1EF64AAFAEC347834.crl (hash: I+KvE0KUI1RfmBCrrXj4PHsI8Lks373rjY0fbO4JSu0=)
                          3: 323430353a343634303a3a2f33322d3332203d3e20313339343034.roa (hash: zm5n3GOGREs/7wstc0BHEn5R1puxQvUBN1+zTBkXQdk=)
                          4: 3130332e3134332e342e302f32342d3234203d3e20313339343034.roa (hash: g83O77cuv/czxZuSd3skhM6J6984QBC8vJgtKHDY3UY=)
                          5: 3130332e3134332e352e302f32342d3234203d3e20313339343034.roa (hash: q2zoM+wvljCJma+BNVrs4roku1rpn2bEEOd2FS2g3aQ=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/7998d6ee-6fd7-4e2d-ae41-6939fdb153ee/0/03F45A130990D1072FE172E1EF64AAFAEC347834.crl
                          rsync://repo-rpki.idnic.net/repo/7998d6ee-6fd7-4e2d-ae41-6939fdb153ee/0/03F45A130990D1072FE172E1EF64AAFAEC347834.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/03F45A130990D1072FE172E1EF64AAFAEC347834.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 04 Feb 2026 05:13:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:fc:12:33:b3:28:58:c0:8a:a4:47:cf:27:03:65:e0:28:7c:69:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03F45A130990D1072FE172E1EF64AAFAEC347834
        Validity
            Not Before: Jan 31 20:06:06 2026 GMT
            Not After : Feb  4 05:13:06 2026 GMT
        Subject: CN=3681D05383628DAC82CBED43C088BBB2D5880BC8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:d9:d8:c7:85:bf:18:f7:14:0c:9e:8a:e5:6e:
                    0d:61:f9:4c:5c:f7:ff:e5:fd:32:a7:88:d2:56:b5:
                    dc:df:6a:7e:c5:38:36:c3:a9:80:69:ac:c9:c4:08:
                    d0:84:28:aa:0b:ce:42:54:a1:e8:52:f7:11:a4:ed:
                    09:64:85:15:5c:d9:29:e4:e0:0c:5d:cb:71:6d:72:
                    ae:e8:9b:20:09:73:2d:e9:bf:17:aa:36:58:c5:b9:
                    90:38:e6:1c:a4:57:c3:61:d8:30:5d:bb:92:62:53:
                    43:db:7d:35:29:4d:b8:4e:e7:21:6e:59:0e:14:70:
                    59:f6:4f:54:03:fb:75:3c:d8:f7:72:0c:e1:f3:00:
                    d8:b9:a5:77:50:70:56:1d:a8:a0:9f:67:22:cf:20:
                    39:9c:47:5a:6e:af:1b:bf:cb:08:0f:e0:aa:fa:74:
                    c2:3d:e7:90:8f:3b:df:1c:4c:0f:3a:55:fa:9c:d3:
                    95:01:b0:1e:5e:b2:b1:4d:92:3c:79:84:e4:a7:a0:
                    5f:64:15:3f:40:de:7d:c9:9a:45:cb:9d:54:de:1b:
                    e0:5a:20:00:bc:86:82:05:78:e2:00:92:c1:43:ee:
                    7d:04:0d:87:78:3f:8b:35:5c:be:be:29:88:a7:5b:
                    6a:ed:f0:4f:1e:b9:fd:7f:fb:86:22:e1:2a:e1:00:
                    2f:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:81:D0:53:83:62:8D:AC:82:CB:ED:43:C0:88:BB:B2:D5:88:0B:C8
            X509v3 Authority Key Identifier:
                keyid:03:F4:5A:13:09:90:D1:07:2F:E1:72:E1:EF:64:AA:FA:EC:34:78:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/7998d6ee-6fd7-4e2d-ae41-6939fdb153ee/0/03F45A130990D1072FE172E1EF64AAFAEC347834.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/03F45A130990D1072FE172E1EF64AAFAEC347834.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7998d6ee-6fd7-4e2d-ae41-6939fdb153ee/0/03F45A130990D1072FE172E1EF64AAFAEC347834.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:4b:1b:46:01:5c:24:3f:f1:aa:b1:5a:7c:9f:e9:f3:72:e4:
         51:00:5c:4b:dd:1b:f1:b5:0a:21:e2:a8:7f:7d:c5:94:0a:9b:
         96:e1:78:4b:88:6c:fa:9d:05:ac:b2:25:23:fe:7f:c2:c6:72:
         ac:8b:52:7e:d2:d7:54:3d:01:29:28:ef:42:f7:cf:58:f1:05:
         4c:64:7a:ca:44:26:54:b5:65:57:96:04:ca:5c:6a:6f:ab:11:
         c4:aa:ce:3f:77:36:d8:10:89:10:04:b2:ae:16:92:95:fb:7b:
         d6:03:67:df:d6:07:01:f9:31:2a:50:22:54:47:ee:e0:38:a0:
         69:8f:6c:26:0c:7d:cc:cf:e3:50:de:69:99:22:6a:b9:9c:69:
         00:65:a0:2c:bc:31:6f:b7:fb:ba:4e:df:fe:26:e7:3c:26:b7:
         64:a8:0c:06:b2:25:d8:e3:f2:c6:b8:87:b4:b5:a9:e7:04:2f:
         ef:a9:8b:27:ae:18:f4:74:81:ed:2c:fd:9a:b3:89:af:ef:7d:
         d4:1d:79:38:66:0b:bd:a9:f6:ea:f6:70:26:bc:7b:76:3f:da:
         08:6f:47:2d:60:5a:a9:a0:d7:b8:a9:e8:62:89:a8:fa:fa:b2:
         ce:a3:f4:b3:83:15:b7:3b:57:5e:67:cb:48:7b:5f:50:b4:9a:
         67:77:4a:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 10:03:46 2026 by rpki-client