This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/8144d576-3818-49d6-8662-f8df89ab2863/0/CD7C267C58AE2F51817FAA5202B0BF91C84ECED4.mft
File:                     CD7C267C58AE2F51817FAA5202B0BF91C84ECED4.mft (raw, json)
Hash identifier:          +oNi1nUrlGCrHtqfGgOAPxnFRyBzpVR9M1Lj2ynHxFs=
Subject key identifier:   A1:C3:4F:65:73:6D:05:66:19:09:F9:63:EA:C1:58:B3:90:0F:ED:F1
Authority key identifier: CD:7C:26:7C:58:AE:2F:51:81:7F:AA:52:02:B0:BF:91:C8:4E:CE:D4
Certificate issuer:       /CN=CD7C267C58AE2F51817FAA5202B0BF91C84ECED4
Certificate serial:       6AE556B009F5D476779FB576C309A8923DA264C8
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CD7C267C58AE2F51817FAA5202B0BF91C84ECED4.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/8144d576-3818-49d6-8662-f8df89ab2863/0/CD7C267C58AE2F51817FAA5202B0BF91C84ECED4.mft
Manifest number:          03B4
Signing time:             Sun 01 Feb 2026 23:51:32 +0000
Manifest this update:     Sun 01 Feb 2026 23:46:32 +0000
Manifest next update:     Thu 05 Feb 2026 05:32:32 +0000
Files and hashes:         1: CD7C267C58AE2F51817FAA5202B0BF91C84ECED4.crl (hash: 1an6RMmj1d2sV3jkbitNdlm5lXG25lsAhXxypGxDS4s=)
                          2: 3130332e3137302e3233342e302f32332d3234203d3e20313338383535.roa (hash: Zud2nnElfbx5UA3aYazzfNWJKcwUrbzENyQybZ8isd0=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/8144d576-3818-49d6-8662-f8df89ab2863/0/CD7C267C58AE2F51817FAA5202B0BF91C84ECED4.crl
                          rsync://repo-rpki.idnic.net/repo/8144d576-3818-49d6-8662-f8df89ab2863/0/CD7C267C58AE2F51817FAA5202B0BF91C84ECED4.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CD7C267C58AE2F51817FAA5202B0BF91C84ECED4.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 05 Feb 2026 05:24:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:e5:56:b0:09:f5:d4:76:77:9f:b5:76:c3:09:a8:92:3d:a2:64:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CD7C267C58AE2F51817FAA5202B0BF91C84ECED4
        Validity
            Not Before: Feb  1 23:46:32 2026 GMT
            Not After : Feb  5 05:32:32 2026 GMT
        Subject: CN=A1C34F65736D05661909F963EAC158B3900FEDF1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:9d:68:f8:c6:f1:14:90:a2:96:c6:fc:05:80:
                    97:4e:ba:94:84:2a:30:40:9c:3a:dd:d7:c2:89:4c:
                    48:90:af:dc:dd:61:56:65:a1:79:7c:7f:4e:c1:09:
                    e6:06:ac:79:cb:7a:25:1e:64:30:55:b1:69:44:f2:
                    d0:e4:11:8a:78:11:f9:94:33:d2:86:a8:2a:1d:be:
                    d2:1b:b7:96:61:25:93:8f:d2:7f:cd:f1:70:39:a8:
                    90:a7:b0:bf:9b:5a:24:ae:fd:55:74:0a:00:c4:40:
                    99:21:8e:c8:59:68:2a:b5:b1:18:92:54:02:af:d4:
                    81:4e:8e:53:80:47:30:ef:50:d3:45:72:ac:8a:e5:
                    fc:44:1e:9e:bb:7d:6b:7d:9c:13:1c:b0:04:a7:f0:
                    99:e9:a5:e0:6e:5d:1a:2b:b3:71:1c:28:b0:2e:51:
                    16:fd:19:dc:d4:c1:39:32:d3:6a:33:72:78:7b:96:
                    33:d7:58:b5:f2:a3:4e:ed:56:ef:38:5c:6c:78:c7:
                    a2:ea:f6:68:ed:24:3d:68:ae:a7:05:c2:fe:25:ef:
                    f5:b4:8c:aa:1a:6b:8f:67:a4:83:74:e8:89:ad:d0:
                    1b:39:e3:22:2a:01:bd:c7:00:84:e5:49:cf:9e:da:
                    c7:c9:76:6a:ed:a5:21:c2:78:7f:67:a3:af:09:3e:
                    95:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:C3:4F:65:73:6D:05:66:19:09:F9:63:EA:C1:58:B3:90:0F:ED:F1
            X509v3 Authority Key Identifier:
                keyid:CD:7C:26:7C:58:AE:2F:51:81:7F:AA:52:02:B0:BF:91:C8:4E:CE:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/8144d576-3818-49d6-8662-f8df89ab2863/0/CD7C267C58AE2F51817FAA5202B0BF91C84ECED4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CD7C267C58AE2F51817FAA5202B0BF91C84ECED4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8144d576-3818-49d6-8662-f8df89ab2863/0/CD7C267C58AE2F51817FAA5202B0BF91C84ECED4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:14:21:e3:47:81:cc:73:c6:e3:6c:cf:8e:a0:03:fc:d7:32:
         ec:fb:19:9a:9b:1a:62:fe:81:06:1d:a6:2a:f9:1f:0d:fa:b0:
         98:88:54:3b:7b:94:32:a8:28:ea:09:29:40:f8:77:35:7b:e1:
         b0:5a:78:b3:ed:dc:8b:db:56:67:be:af:7c:e8:fc:eb:62:84:
         c9:79:17:f9:f2:43:40:99:52:ca:e1:88:4b:23:34:7e:e5:5a:
         12:3b:48:bb:81:d0:b9:3b:38:c3:0d:48:2e:ec:50:fb:a2:1a:
         a4:38:1a:cb:f3:f1:66:65:2f:a9:e0:2c:cd:67:af:a2:05:16:
         ab:d2:db:82:e5:f2:48:0c:2e:cc:3e:12:fe:72:ed:c4:04:cc:
         05:9e:b2:3e:09:3c:6d:9e:37:89:8d:d9:b9:85:4c:b5:b2:8d:
         b5:73:c5:be:8b:49:0d:4f:f5:0f:a8:47:4b:55:a6:d2:4c:f2:
         a9:26:6e:24:bc:ef:22:26:b3:e6:f3:5b:95:bc:e9:2d:b8:a6:
         44:15:82:04:97:34:17:18:14:93:95:77:7f:38:9c:4a:55:d1:
         97:d6:04:38:b0:52:c0:59:8a:ef:79:24:e7:48:c3:99:8a:17:
         ca:61:b9:8c:b7:fb:03:53:2c:a4:2e:3e:ce:03:ad:cc:36:d8:
         39:11:b7:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 10:05:26 2026 by rpki-client