This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/7ba0b3f1-974f-4205-bdce-0f9f5b7250dc/0/339257A0C7951203C012BA5AF19EDB52E6790B03.mft
File:                     339257A0C7951203C012BA5AF19EDB52E6790B03.mft (raw, json)
Hash identifier:          uqUoxQQ7wWcSHh1iXDbOkTmhCIzDCuTOejA2zVYGiAQ=
Subject key identifier:   8E:77:2A:8E:46:11:FE:CF:AD:97:CE:DB:5B:A1:C3:A8:CA:2D:43:87
Authority key identifier: 33:92:57:A0:C7:95:12:03:C0:12:BA:5A:F1:9E:DB:52:E6:79:0B:03
Certificate issuer:       /CN=339257A0C7951203C012BA5AF19EDB52E6790B03
Certificate serial:       5C47D8C69CA8B8A43C0736DBE85AA2F585F63165
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/339257A0C7951203C012BA5AF19EDB52E6790B03.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/7ba0b3f1-974f-4205-bdce-0f9f5b7250dc/0/339257A0C7951203C012BA5AF19EDB52E6790B03.mft
Manifest number:          0266
Signing time:             Sat 31 Jan 2026 03:31:08 +0000
Manifest this update:     Sat 31 Jan 2026 03:26:08 +0000
Manifest next update:     Tue 03 Feb 2026 15:27:08 +0000
Files and hashes:         1: 3130332e38372e36302e302f32322d3234203d3e20313336303932.roa (hash: +xob4YEanp8C5GvuLdsQx6ikXowtOPpr/uG69DFpAKw=)
                          2: 339257A0C7951203C012BA5AF19EDB52E6790B03.crl (hash: c/UzgtUnjfcSNQfXi2SYESVJM/YLOmiLY1YOX2fN3Mc=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/7ba0b3f1-974f-4205-bdce-0f9f5b7250dc/0/339257A0C7951203C012BA5AF19EDB52E6790B03.crl
                          rsync://repo-rpki.idnic.net/repo/7ba0b3f1-974f-4205-bdce-0f9f5b7250dc/0/339257A0C7951203C012BA5AF19EDB52E6790B03.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/339257A0C7951203C012BA5AF19EDB52E6790B03.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 03 Feb 2026 15:27:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:47:d8:c6:9c:a8:b8:a4:3c:07:36:db:e8:5a:a2:f5:85:f6:31:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=339257A0C7951203C012BA5AF19EDB52E6790B03
        Validity
            Not Before: Jan 31 03:26:08 2026 GMT
            Not After : Feb  3 15:27:08 2026 GMT
        Subject: CN=8E772A8E4611FECFAD97CEDB5BA1C3A8CA2D4387
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:7e:53:cb:72:b5:2c:71:93:5e:34:0f:97:a9:
                    6e:b4:c4:87:ee:32:98:d0:95:44:1b:07:5c:33:f4:
                    97:69:2e:ab:d1:8d:9d:fd:f3:b1:47:4e:24:d1:81:
                    07:cf:7f:25:1d:fa:05:b5:ef:54:fe:0e:90:42:05:
                    f3:09:2d:ec:a4:a8:24:0e:97:90:08:be:35:1d:c3:
                    10:15:7f:ec:ce:55:e8:51:ce:f6:58:84:f1:d0:20:
                    19:9a:26:5f:78:78:43:d4:83:22:a7:ce:48:3e:be:
                    ca:bf:17:7f:e9:c3:34:9c:1f:9e:9b:48:01:3f:75:
                    b9:2f:c2:23:83:fc:ef:4d:51:4f:53:0d:6e:3d:39:
                    7c:c7:2d:5e:e7:fa:67:4d:4a:91:eb:93:19:e5:c5:
                    d9:c2:e8:ab:fc:8d:1c:0a:e4:58:5e:36:20:41:6c:
                    64:80:0d:e8:21:51:43:7f:8e:1c:c3:5d:21:d8:c5:
                    24:75:d9:2c:76:8a:c6:aa:4a:66:f5:54:fa:3f:10:
                    6b:a3:6a:4e:4c:0e:72:aa:7e:f9:c6:64:0b:dd:37:
                    50:72:33:3c:6d:56:e7:9a:22:f2:13:8b:b3:bb:08:
                    cb:ec:b7:77:89:92:d1:c4:c8:da:79:f2:ba:b3:ba:
                    a5:95:b9:90:b6:4d:a9:ad:81:a6:de:f1:83:ba:19:
                    a5:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:77:2A:8E:46:11:FE:CF:AD:97:CE:DB:5B:A1:C3:A8:CA:2D:43:87
            X509v3 Authority Key Identifier:
                keyid:33:92:57:A0:C7:95:12:03:C0:12:BA:5A:F1:9E:DB:52:E6:79:0B:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/7ba0b3f1-974f-4205-bdce-0f9f5b7250dc/0/339257A0C7951203C012BA5AF19EDB52E6790B03.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/339257A0C7951203C012BA5AF19EDB52E6790B03.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7ba0b3f1-974f-4205-bdce-0f9f5b7250dc/0/339257A0C7951203C012BA5AF19EDB52E6790B03.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:7e:51:c2:c9:01:02:a0:4d:b8:f4:d0:ea:49:18:ed:e7:4b:
         72:b2:a7:ed:05:b7:3c:65:f5:9c:0b:cc:fe:18:6c:63:fc:c9:
         ac:58:af:6f:20:65:70:94:e9:cc:d7:53:60:dd:92:1e:e8:5d:
         57:85:0f:1c:2a:65:4a:d1:c6:3c:fa:50:4f:7d:1d:92:51:f4:
         33:f5:4f:87:6a:d4:6f:2b:13:94:ef:f8:c4:c0:9c:2d:75:8b:
         58:da:d6:22:06:d0:5b:ae:a5:88:19:7b:41:1f:ce:d9:e5:9e:
         18:a7:5a:15:dd:89:97:c1:35:f3:2f:93:14:32:2c:b1:3e:26:
         69:2e:2b:d7:5d:fa:f1:ae:84:5a:9a:f1:b6:ad:31:94:be:5b:
         f8:4c:cc:fd:1d:55:dd:cc:6f:b1:e8:08:0e:6a:9c:46:91:12:
         d9:94:50:64:c8:93:fa:0f:68:0c:34:56:36:38:33:4c:0f:74:
         81:5b:6b:2d:7a:8f:70:6b:87:21:52:94:d9:77:b1:74:65:1b:
         4f:fa:f8:a8:c1:d1:0a:a9:14:6b:81:f4:2a:b1:99:3f:b0:ff:
         53:23:c1:6f:8a:91:7b:53:df:1e:da:22:24:42:3c:6f:e1:0e:
         a0:ad:5c:54:fe:8d:d7:4e:c5:81:6b:68:dc:5c:93:96:a6:50:
         c2:bf:c5:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 12:48:54 2026 by rpki-client