This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/7e5c73cc-985e-4e92-ba69-cd8bffe4a53d/0/F256ED0C68D48E70DDBE3473644FDBA420E82FBC.mft
File:                     F256ED0C68D48E70DDBE3473644FDBA420E82FBC.mft (raw, json)
Hash identifier:          Q6n3oJMx03urK5b/8vSNHOLUBF/jp+ItihtxBrm+Jcs=
Subject key identifier:   41:DE:31:68:51:1D:BF:10:D8:9C:13:29:66:B6:5A:49:17:26:5C:F9
Authority key identifier: F2:56:ED:0C:68:D4:8E:70:DD:BE:34:73:64:4F:DB:A4:20:E8:2F:BC
Certificate issuer:       /CN=F256ED0C68D48E70DDBE3473644FDBA420E82FBC
Certificate serial:       7F9EE8A89287D0D9BA80078B84253F794829FF3D
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F256ED0C68D48E70DDBE3473644FDBA420E82FBC.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/7e5c73cc-985e-4e92-ba69-cd8bffe4a53d/0/F256ED0C68D48E70DDBE3473644FDBA420E82FBC.mft
Manifest number:          04A6
Signing time:             Sun 01 Feb 2026 16:01:54 +0000
Manifest this update:     Sun 01 Feb 2026 15:56:54 +0000
Manifest next update:     Wed 04 Feb 2026 20:57:54 +0000
Files and hashes:         1: 3130332e3136312e3133312e302f32342d3234203d3e20313431363133.roa (hash: 0BDcpOLIRVqH1LqrD2HTtyqqS166kEUq73to5WDYQTw=)
                          2: 3130332e3136312e3133302e302f32332d3233203d3e20313431363133.roa (hash: tWY/6umjYIKYO4Yi6unWY6z8ANffH061XFtZ500p3RI=)
                          3: 3130332e3136312e3133302e302f32342d3234203d3e20313431363133.roa (hash: YDn+UkbOnA22nwNbzvw75sJ6kzbC7kgwQ8ntSkUIEQE=)
                          4: F256ED0C68D48E70DDBE3473644FDBA420E82FBC.crl (hash: wTnMnGJw7csO8r21+DyJ5jqP0JJi9KE9lh2WqKBqcuk=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/7e5c73cc-985e-4e92-ba69-cd8bffe4a53d/0/F256ED0C68D48E70DDBE3473644FDBA420E82FBC.crl
                          rsync://repo-rpki.idnic.net/repo/7e5c73cc-985e-4e92-ba69-cd8bffe4a53d/0/F256ED0C68D48E70DDBE3473644FDBA420E82FBC.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F256ED0C68D48E70DDBE3473644FDBA420E82FBC.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 04 Feb 2026 20:57:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:9e:e8:a8:92:87:d0:d9:ba:80:07:8b:84:25:3f:79:48:29:ff:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F256ED0C68D48E70DDBE3473644FDBA420E82FBC
        Validity
            Not Before: Feb  1 15:56:54 2026 GMT
            Not After : Feb  4 20:57:54 2026 GMT
        Subject: CN=41DE3168511DBF10D89C132966B65A4917265CF9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:6d:4e:57:4c:53:e2:47:62:ad:f7:56:90:04:
                    ba:b7:6e:cf:44:e8:fc:3b:52:7a:ef:b8:cb:c8:af:
                    14:10:72:87:f8:75:70:e9:3b:23:5d:86:cb:33:26:
                    37:a2:1c:0a:75:b8:ca:96:b1:61:8b:88:c5:6d:ea:
                    3d:06:a7:d3:85:55:fa:aa:c8:07:2a:e5:fe:d2:f7:
                    a1:e6:f2:c7:82:0e:42:e0:b8:1f:70:3a:2e:95:af:
                    02:f2:d6:4d:2f:ca:30:0c:2e:87:9e:fb:7d:21:77:
                    4a:ae:fb:ff:c2:68:0d:05:d9:75:b4:8f:ca:6a:c8:
                    e6:bc:fd:5e:95:b9:97:21:9a:44:83:d1:e1:f1:26:
                    9e:bd:d4:c6:47:26:d4:b5:db:50:52:1b:69:e9:dd:
                    3d:af:11:c6:85:b3:f7:8c:08:22:c3:5b:81:88:a1:
                    59:f5:37:d4:0e:19:f7:80:89:bb:6a:29:3a:0d:a3:
                    12:85:55:c7:88:59:f1:35:8f:fc:37:93:7e:b1:d1:
                    e5:7e:c2:87:72:8a:78:8a:e4:d9:25:ec:d2:96:fa:
                    d7:45:50:78:6c:b7:46:79:06:70:27:46:ab:50:ed:
                    f5:4b:8a:89:e1:4e:5f:05:c5:ed:d1:2e:16:e3:dd:
                    58:92:1e:75:5e:dd:b4:70:55:6f:05:f1:b0:1b:1f:
                    d6:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:DE:31:68:51:1D:BF:10:D8:9C:13:29:66:B6:5A:49:17:26:5C:F9
            X509v3 Authority Key Identifier:
                keyid:F2:56:ED:0C:68:D4:8E:70:DD:BE:34:73:64:4F:DB:A4:20:E8:2F:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/7e5c73cc-985e-4e92-ba69-cd8bffe4a53d/0/F256ED0C68D48E70DDBE3473644FDBA420E82FBC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F256ED0C68D48E70DDBE3473644FDBA420E82FBC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7e5c73cc-985e-4e92-ba69-cd8bffe4a53d/0/F256ED0C68D48E70DDBE3473644FDBA420E82FBC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:27:83:07:82:5a:96:04:1d:54:67:fb:29:04:be:26:fd:dd:
         e7:2b:d8:15:d0:27:ff:8c:f0:dd:17:64:87:9e:6f:8d:6e:47:
         77:85:ee:8b:88:44:22:c0:6f:b8:dc:e1:19:55:b1:27:77:81:
         89:a7:fd:91:cd:ec:c7:e7:21:73:56:30:3f:67:fa:03:a0:fb:
         e9:44:af:24:37:a1:fd:65:1d:b9:28:8f:32:48:25:83:42:85:
         fa:14:81:68:a8:d6:f4:71:1b:dc:51:ef:ec:70:8a:62:18:cf:
         ae:65:f8:cb:30:74:01:3d:f3:65:90:b1:3a:ba:70:db:3d:fa:
         94:87:23:11:f5:b5:74:7f:83:94:61:98:3f:43:95:9e:89:f4:
         36:16:a3:38:ee:27:5c:c9:a2:6b:a6:f6:d0:7d:bd:b3:be:3c:
         c3:9d:88:36:d1:d8:aa:d0:45:2f:43:40:70:40:d4:fd:47:f9:
         bf:12:d2:65:b1:6a:2f:c4:13:9e:8a:53:b6:c9:39:5b:ac:68:
         36:50:90:67:1e:65:5a:3f:40:c7:8c:26:34:74:e1:fc:9e:78:
         69:ec:62:c5:c7:78:76:1d:d8:15:6e:11:43:82:bc:17:a0:cd:
         ad:e4:26:3f:02:33:b8:01:1b:b8:4a:11:a9:01:96:c0:9a:0c:
         2b:52:da:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 09:42:52 2026 by rpki-client