This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/82fab611-8be3-4b44-9561-752a1eda065c/0/1DE04B1502D06C1C133ACE901223884FB36B2638.mft
File:                     1DE04B1502D06C1C133ACE901223884FB36B2638.mft (raw, json)
Hash identifier:          wBbdSU/emBpKW2OGCdvrbpbhmu2bsW0KyCfnRzdOi4Q=
Subject key identifier:   38:C6:A5:38:3D:30:A7:DD:D5:70:76:1A:D7:F8:C4:25:9F:A0:83:76
Authority key identifier: 1D:E0:4B:15:02:D0:6C:1C:13:3A:CE:90:12:23:88:4F:B3:6B:26:38
Certificate issuer:       /CN=1DE04B1502D06C1C133ACE901223884FB36B2638
Certificate serial:       110C92701D098FACAFBD5216150257EEA175F20E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1DE04B1502D06C1C133ACE901223884FB36B2638.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/82fab611-8be3-4b44-9561-752a1eda065c/0/1DE04B1502D06C1C133ACE901223884FB36B2638.mft
Manifest number:          0249
Signing time:             Mon 02 Feb 2026 02:41:13 +0000
Manifest this update:     Mon 02 Feb 2026 02:36:13 +0000
Manifest next update:     Thu 05 Feb 2026 13:56:13 +0000
Files and hashes:         1: 1DE04B1502D06C1C133ACE901223884FB36B2638.crl (hash: xBmCHZk5VCZiou4hhLoYGocK4qWdGXGob7yXZty5Hqg=)
                          2: 3130332e3138372e3131342e302f32342d3234203d3e203633383738.roa (hash: Dbua1W+dq/k6Z9uQfXqPhRIcFQdPJ4Cp3vbD2GRN4CU=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/82fab611-8be3-4b44-9561-752a1eda065c/0/1DE04B1502D06C1C133ACE901223884FB36B2638.crl
                          rsync://repo-rpki.idnic.net/repo/82fab611-8be3-4b44-9561-752a1eda065c/0/1DE04B1502D06C1C133ACE901223884FB36B2638.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1DE04B1502D06C1C133ACE901223884FB36B2638.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 05 Feb 2026 05:24:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:0c:92:70:1d:09:8f:ac:af:bd:52:16:15:02:57:ee:a1:75:f2:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1DE04B1502D06C1C133ACE901223884FB36B2638
        Validity
            Not Before: Feb  2 02:36:13 2026 GMT
            Not After : Feb  5 13:56:13 2026 GMT
        Subject: CN=38C6A5383D30A7DDD570761AD7F8C4259FA08376
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:da:32:47:da:a8:9f:41:bd:eb:3e:e4:4d:b1:
                    45:97:a1:3b:25:c7:6a:a6:e5:51:0d:85:ba:c4:9a:
                    60:2f:34:0b:89:73:fd:82:1c:17:44:47:9b:7d:c4:
                    a2:ec:e4:1b:1b:a4:ec:bd:88:da:3d:e5:dc:5a:c0:
                    2c:e4:ca:73:21:34:0a:15:30:05:5e:de:3f:73:f4:
                    ee:c3:a7:2c:50:e4:15:42:60:db:06:1f:be:17:b4:
                    47:ef:8c:23:2b:ed:cd:52:a8:37:2f:2d:d1:12:83:
                    28:50:eb:50:d6:8a:00:87:17:18:44:33:47:86:67:
                    f8:59:9a:4e:31:d9:4b:a3:af:f5:40:29:2a:25:7f:
                    2a:72:11:6e:cf:0d:00:ce:6b:e8:b8:21:23:5f:00:
                    86:79:5c:f9:6c:66:0e:4f:82:af:1e:ba:60:f1:31:
                    8e:c8:a3:16:ce:f9:a3:70:3f:73:c0:b0:c6:14:c6:
                    f2:ea:16:26:ef:ea:07:5e:80:a6:76:7f:a5:53:b1:
                    68:cc:e5:dd:65:41:5a:ec:43:0b:18:f0:07:9e:ab:
                    ec:af:d8:fc:30:22:ac:3a:74:17:aa:f9:e1:a9:3b:
                    90:5b:84:35:29:9c:d7:a3:04:c5:f3:30:c4:e4:56:
                    31:51:85:08:0b:99:f3:de:05:77:50:25:4c:55:f2:
                    e7:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:C6:A5:38:3D:30:A7:DD:D5:70:76:1A:D7:F8:C4:25:9F:A0:83:76
            X509v3 Authority Key Identifier:
                keyid:1D:E0:4B:15:02:D0:6C:1C:13:3A:CE:90:12:23:88:4F:B3:6B:26:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/82fab611-8be3-4b44-9561-752a1eda065c/0/1DE04B1502D06C1C133ACE901223884FB36B2638.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1DE04B1502D06C1C133ACE901223884FB36B2638.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/82fab611-8be3-4b44-9561-752a1eda065c/0/1DE04B1502D06C1C133ACE901223884FB36B2638.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:78:a9:da:22:7b:e6:fe:79:60:eb:90:3a:72:16:7c:9c:a1:
         a2:ab:5e:59:1e:1b:dc:b7:8c:5c:13:83:99:9f:89:a9:af:81:
         11:ca:69:31:07:ba:0c:b4:36:4c:1a:22:f3:8b:a8:68:63:95:
         49:27:97:ff:e5:d6:dd:b2:92:ce:44:82:5f:f0:a6:2e:20:6c:
         2e:e5:a8:55:5d:22:ff:03:95:6c:72:df:5d:a9:72:f1:ba:42:
         79:cb:3b:d2:03:8c:27:0f:a7:a9:9b:39:86:72:32:e5:28:74:
         86:d6:b6:f8:bc:e5:80:df:50:a0:58:b1:6b:93:98:18:da:4e:
         a7:a5:f6:11:84:70:9f:84:c7:78:c9:db:ec:93:c0:75:e9:8d:
         c1:60:10:1f:4c:f1:3b:47:94:2b:78:2d:70:ab:f4:89:56:14:
         1b:d1:7e:f1:fd:b7:61:7e:3b:37:f0:1b:c5:d7:12:03:00:02:
         25:02:a7:97:50:fe:2f:d3:68:ac:58:76:61:7b:ee:98:6c:df:
         ed:9e:de:6e:1f:b0:64:ba:13:8b:0c:b7:f4:9b:35:42:4b:70:
         9e:0b:f6:aa:0c:f5:bf:ae:12:6d:40:80:e5:8f:cf:6a:5b:8a:
         76:0c:69:74:d2:b3:43:9a:83:77:14:40:ba:7c:0e:8d:4b:31:
         c9:b2:b4:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 10:06:08 2026 by rpki-client