This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/835048c6-8ccd-463d-ad34-ae7428647a9c/0/7008868799E77C42E437F0D7ACCF683CF5B2AA4E.mft
File:                     7008868799E77C42E437F0D7ACCF683CF5B2AA4E.mft (raw, json)
Hash identifier:          qG2wo1/cR/UlOMHSlsDaLg5rlyFVQpP1OWJu3zMk6Dk=
Subject key identifier:   47:F1:09:17:68:15:2F:12:2F:95:5A:6B:A2:5F:6D:A7:3E:C6:AC:75
Authority key identifier: 70:08:86:87:99:E7:7C:42:E4:37:F0:D7:AC:CF:68:3C:F5:B2:AA:4E
Certificate issuer:       /CN=7008868799E77C42E437F0D7ACCF683CF5B2AA4E
Certificate serial:       0A5642F6EBBF2D6715724E488D78FCBE2D4C4559
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7008868799E77C42E437F0D7ACCF683CF5B2AA4E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/835048c6-8ccd-463d-ad34-ae7428647a9c/0/7008868799E77C42E437F0D7ACCF683CF5B2AA4E.mft
Manifest number:          04E2
Signing time:             Sun 01 Feb 2026 21:01:24 +0000
Manifest this update:     Sun 01 Feb 2026 20:56:24 +0000
Manifest next update:     Wed 04 Feb 2026 23:08:24 +0000
Files and hashes:         1: 7008868799E77C42E437F0D7ACCF683CF5B2AA4E.crl (hash: VUEso7Pwm29f+gkmKeDAYtMmxp1g8wwTE3VHOE+HXfc=)
                          2: 3130332e3134362e3139362e302f32342d3234203d3e20313339393431.roa (hash: WkFNZS79+nq1P3vYzsoqHasGlqkPwC3TJbG5gTcIHd8=)
                          3: 3130332e3134362e3139362e302f32332d3233203d3e20313339393431.roa (hash: KEUVODDrcsujN0g1v6DrUa6Mji4U9jJWIyDXhx1aJNY=)
                          4: 3130332e3134362e3139372e302f32342d3234203d3e20313339393431.roa (hash: p7Jtuo2fT9SMHQpNlniVY5E8TDvsdgf0sorpgXPSACM=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/835048c6-8ccd-463d-ad34-ae7428647a9c/0/7008868799E77C42E437F0D7ACCF683CF5B2AA4E.crl
                          rsync://repo-rpki.idnic.net/repo/835048c6-8ccd-463d-ad34-ae7428647a9c/0/7008868799E77C42E437F0D7ACCF683CF5B2AA4E.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7008868799E77C42E437F0D7ACCF683CF5B2AA4E.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 04 Feb 2026 23:08:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:56:42:f6:eb:bf:2d:67:15:72:4e:48:8d:78:fc:be:2d:4c:45:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7008868799E77C42E437F0D7ACCF683CF5B2AA4E
        Validity
            Not Before: Feb  1 20:56:24 2026 GMT
            Not After : Feb  4 23:08:24 2026 GMT
        Subject: CN=47F1091768152F122F955A6BA25F6DA73EC6AC75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:6a:9e:0f:8a:47:7b:36:76:08:e6:ac:ea:c2:
                    bf:d5:71:e4:fc:29:41:1a:db:2c:ea:8f:e6:6e:64:
                    ad:ed:76:4a:09:7c:ba:8c:71:36:d9:c6:0e:fe:d7:
                    2a:1d:02:9c:44:70:dd:2c:ca:0d:b0:3e:23:eb:8d:
                    0b:66:21:df:c3:d0:14:bc:83:58:4e:3e:93:14:4f:
                    69:ce:d4:cf:c9:a7:03:a8:22:3a:7f:2e:7a:00:24:
                    e8:9d:0b:ad:4d:20:aa:53:41:de:87:99:6c:5a:f7:
                    be:3b:e3:10:af:78:5c:d4:2d:06:cf:0d:27:13:f1:
                    5b:18:12:54:36:15:1a:1a:44:05:3f:1f:f5:68:65:
                    2c:38:56:32:8e:4a:42:01:c2:ca:38:f4:f3:1f:13:
                    70:b8:de:58:fc:9e:a2:bc:bf:3b:86:0f:09:6a:4e:
                    0b:d0:df:b6:f6:2a:d2:ea:fe:41:94:4b:93:cf:3d:
                    93:56:89:38:e9:78:64:2f:1f:3f:2a:22:53:4d:94:
                    29:29:e9:39:72:7e:c4:7e:f4:d6:d3:df:69:3b:e3:
                    6b:df:93:3c:5c:39:99:cf:0e:60:eb:c0:80:1f:9c:
                    c9:a1:c9:db:7b:c6:ed:1e:b2:fc:b6:78:e2:47:f1:
                    3d:f5:f7:a2:12:04:21:fe:18:02:96:10:40:b9:f4:
                    69:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:F1:09:17:68:15:2F:12:2F:95:5A:6B:A2:5F:6D:A7:3E:C6:AC:75
            X509v3 Authority Key Identifier:
                keyid:70:08:86:87:99:E7:7C:42:E4:37:F0:D7:AC:CF:68:3C:F5:B2:AA:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/835048c6-8ccd-463d-ad34-ae7428647a9c/0/7008868799E77C42E437F0D7ACCF683CF5B2AA4E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7008868799E77C42E437F0D7ACCF683CF5B2AA4E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/835048c6-8ccd-463d-ad34-ae7428647a9c/0/7008868799E77C42E437F0D7ACCF683CF5B2AA4E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bd:3e:31:e6:8e:7f:b8:43:06:07:f4:75:d9:2a:15:2f:b6:95:
         63:5f:5b:4f:c5:02:95:40:97:1f:64:0b:9c:2d:a9:7c:42:82:
         cf:97:03:2e:db:70:48:f8:bc:cd:fe:b4:a3:fa:c1:ce:b9:36:
         7d:b9:bb:22:65:f3:e3:a9:f2:9f:87:24:22:27:e9:3b:27:3d:
         6a:50:f1:67:a3:55:3d:ea:b7:e0:d1:66:0f:fb:1e:28:20:41:
         4c:fa:5e:68:e7:0f:cd:75:bd:f0:d8:80:ca:f7:c5:e0:e7:56:
         92:7c:40:3b:a0:02:29:66:e9:98:c9:dd:ad:42:29:41:7c:68:
         75:e3:ed:9c:f6:07:76:dc:b9:a1:4c:cc:d5:bc:a0:dd:28:e5:
         1e:97:aa:b8:21:6b:3c:22:76:46:73:fc:4a:6e:de:a7:31:dc:
         b8:01:e9:eb:22:56:8d:94:d5:14:25:19:98:33:9d:a1:3b:e7:
         d4:30:1b:4d:df:f6:c6:c4:33:8d:50:83:4d:32:35:97:e0:71:
         05:15:c3:01:66:f0:e4:3e:ef:08:94:c5:b6:56:c2:7c:4c:d0:
         23:ea:81:e3:66:79:12:34:39:2e:59:f9:ac:c9:9c:f2:8a:22:
         77:8a:2f:e3:0a:95:01:ef:ba:de:09:cb:51:cb:12:2d:01:94:
         06:7c:85:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 09:44:54 2026 by rpki-client