This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/891d3c30-95dc-4b72-ae1b-ad1e98b0e179/0/4E52504397B6835784BD4E67D8048C0D1CE3B242.mft
File:                     4E52504397B6835784BD4E67D8048C0D1CE3B242.mft (raw, json)
Hash identifier:          riRpC+jOoehXxn24vAYTEu3g13CPOAPKIKIPwPivJw8=
Subject key identifier:   E3:D8:81:96:A1:FA:F2:63:37:6F:70:B3:9E:30:68:B1:89:7C:C4:B3
Authority key identifier: 4E:52:50:43:97:B6:83:57:84:BD:4E:67:D8:04:8C:0D:1C:E3:B2:42
Certificate issuer:       /CN=4E52504397B6835784BD4E67D8048C0D1CE3B242
Certificate serial:       39054D5D3D397CC5DD5AFA41B1F77DC64DD95DE6
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4E52504397B6835784BD4E67D8048C0D1CE3B242.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/891d3c30-95dc-4b72-ae1b-ad1e98b0e179/0/4E52504397B6835784BD4E67D8048C0D1CE3B242.mft
Manifest number:          0549
Signing time:             Sun 01 Feb 2026 22:12:22 +0000
Manifest this update:     Sun 01 Feb 2026 22:07:22 +0000
Manifest next update:     Thu 05 Feb 2026 01:14:22 +0000
Files and hashes:         1: 4E52504397B6835784BD4E67D8048C0D1CE3B242.crl (hash: YGhX59423OGEiqOdcSsTwJXSXHLERE8Db/2HGYLW/MM=)
                          2: 323430333a653630303a3a2f33322d3332203d3e203538333736.roa (hash: bVu2SaAa9IWvlQ6o6+veKHD0ZA7xlveBNCWEZ2Ja1Z4=)
                          3: 323430333a653630303a6630303a3a2f34302d3430203d3e203538333736.roa (hash: AgqSIkRIGOrQPc+1mZW5lGFc3zRhyUQtTv3vz8FdAPU=)
                          4: 34332e3234352e3138382e302f32322d3234203d3e203538333736.roa (hash: AI/USbQ/a0LFBdjZWtV22hxC6HEFmmDia8w1dNa/lbM=)
                          5: 3130332e32392e3134382e302f32322d3234203d3e203538333736.roa (hash: kZ6+BhGljQylz/AhW+5O41yNHq5oDRG+mIs3e+fq18E=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/891d3c30-95dc-4b72-ae1b-ad1e98b0e179/0/4E52504397B6835784BD4E67D8048C0D1CE3B242.crl
                          rsync://repo-rpki.idnic.net/repo/891d3c30-95dc-4b72-ae1b-ad1e98b0e179/0/4E52504397B6835784BD4E67D8048C0D1CE3B242.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4E52504397B6835784BD4E67D8048C0D1CE3B242.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 05 Feb 2026 01:14:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:05:4d:5d:3d:39:7c:c5:dd:5a:fa:41:b1:f7:7d:c6:4d:d9:5d:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4E52504397B6835784BD4E67D8048C0D1CE3B242
        Validity
            Not Before: Feb  1 22:07:22 2026 GMT
            Not After : Feb  5 01:14:22 2026 GMT
        Subject: CN=E3D88196A1FAF263376F70B39E3068B1897CC4B3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:b4:50:ed:b4:61:fa:c3:c7:65:1f:2d:21:3c:
                    50:db:b6:93:fb:70:57:dd:f9:0d:71:08:f9:72:8a:
                    d8:1c:af:1d:c5:0e:0a:b7:4d:ff:da:3b:7d:3a:38:
                    a4:7a:f6:87:67:d7:08:27:50:a0:6b:ed:ab:db:6a:
                    26:8a:1f:39:1e:7d:89:1d:a7:ee:34:47:05:db:32:
                    bf:d4:b8:f3:d4:56:7f:e0:b9:8d:a7:94:8d:d6:7e:
                    93:f7:b6:0e:5a:85:64:9c:e6:6c:44:b7:69:7f:99:
                    1c:24:0e:c0:ef:2c:27:22:76:7e:21:69:ff:a3:fa:
                    04:cd:b9:bb:36:32:a9:34:38:ee:78:33:fc:bb:91:
                    cb:21:01:bd:22:1f:67:ac:8d:6a:86:a7:72:9c:f4:
                    f3:4b:1e:5b:12:1a:ab:ed:c6:8b:41:61:47:12:f3:
                    fa:af:b1:0f:bb:ae:9c:50:43:10:d2:c6:3c:60:09:
                    c6:22:a6:3f:8d:de:2b:a7:be:1f:8b:02:e8:8a:d0:
                    92:3d:a8:b3:0e:cd:2b:19:9a:da:33:ac:1b:32:9a:
                    d5:e7:bd:92:aa:c1:af:32:72:1b:1a:3d:a8:5b:b0:
                    54:0e:12:c7:cd:ed:86:a8:5f:9e:1e:90:70:5b:86:
                    79:e6:de:b0:7e:18:1b:b3:8a:7a:b6:0b:89:dd:a2:
                    af:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:D8:81:96:A1:FA:F2:63:37:6F:70:B3:9E:30:68:B1:89:7C:C4:B3
            X509v3 Authority Key Identifier:
                keyid:4E:52:50:43:97:B6:83:57:84:BD:4E:67:D8:04:8C:0D:1C:E3:B2:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/891d3c30-95dc-4b72-ae1b-ad1e98b0e179/0/4E52504397B6835784BD4E67D8048C0D1CE3B242.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4E52504397B6835784BD4E67D8048C0D1CE3B242.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/891d3c30-95dc-4b72-ae1b-ad1e98b0e179/0/4E52504397B6835784BD4E67D8048C0D1CE3B242.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:eb:46:01:d8:f7:5d:52:7d:cb:4a:a4:75:9d:c3:7b:71:8f:
         ac:1e:0e:1a:9c:db:06:b7:a2:05:32:1b:b5:d2:60:30:45:a7:
         6e:fc:c9:6c:f5:64:f1:95:24:e4:d9:75:bd:85:97:3e:de:f9:
         e7:88:dd:45:c3:70:07:4d:50:3d:63:32:ed:0d:a4:e4:5b:40:
         be:34:8c:0d:9c:f4:74:e0:3c:3c:f1:cd:9d:3f:d7:54:8f:b9:
         0a:87:e1:54:df:13:f1:c2:a5:bd:4a:dc:1d:58:d7:0b:d4:91:
         81:b8:05:29:17:0f:99:c2:7c:52:d4:39:6e:46:4d:4e:d2:27:
         ae:da:42:4a:2b:69:64:69:5d:cd:13:65:28:61:b1:f2:e4:4c:
         8c:bc:0e:a8:83:b9:a4:5d:38:fe:e4:0b:32:2e:83:76:44:19:
         fe:7d:53:92:a6:16:84:95:de:75:6a:14:e6:b4:1f:c8:eb:0a:
         be:17:8a:58:73:4e:77:4f:8d:de:bb:91:1e:9e:47:74:e4:9a:
         da:22:63:b6:b4:38:97:67:85:84:08:15:57:c1:c6:89:05:3c:
         fe:81:57:78:cd:51:83:1b:e1:5b:91:55:a6:32:ea:36:72:54:
         5a:97:b6:70:af:ed:b2:64:00:ed:55:51:cd:61:d1:da:57:59:
         a4:59:de:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 10:06:10 2026 by rpki-client