This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/9019589a-d525-40fc-894a-12e44010e3e4/0/0E2E7A9CF11C692EC8E56F03527BDF92FA001A4E.mft
File:                     0E2E7A9CF11C692EC8E56F03527BDF92FA001A4E.mft (raw, json)
Hash identifier:          7kvAGsezHj+/R/QuCGtBJUe5lHvG/u+7O1MYfyLkYL8=
Subject key identifier:   41:AF:4A:E8:9C:BB:3D:4B:D0:13:21:C5:D1:AF:42:E4:F3:D0:20:A6
Authority key identifier: 0E:2E:7A:9C:F1:1C:69:2E:C8:E5:6F:03:52:7B:DF:92:FA:00:1A:4E
Certificate issuer:       /CN=0E2E7A9CF11C692EC8E56F03527BDF92FA001A4E
Certificate serial:       5C5F4D9AE7BBD526C7047931C5CA2427E3517863
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0E2E7A9CF11C692EC8E56F03527BDF92FA001A4E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/9019589a-d525-40fc-894a-12e44010e3e4/0/0E2E7A9CF11C692EC8E56F03527BDF92FA001A4E.mft
Manifest number:          01E1
Signing time:             Sat 31 Jan 2026 02:51:04 +0000
Manifest this update:     Sat 31 Jan 2026 02:46:04 +0000
Manifest next update:     Tue 03 Feb 2026 11:24:04 +0000
Files and hashes:         1: 3130332e342e38302e302f32332d3233203d3e20313530323034.roa (hash: sAxyAacrSqW6mHWffMKLhhk3JgkihWYb7S14LaFMATc=)
                          2: 0E2E7A9CF11C692EC8E56F03527BDF92FA001A4E.crl (hash: 8CNKQ9+ZGvq26AUOeU32vbqgPbl1AroqNNvkPFxDTWA=)
                          3: 3130332e342e38312e302f32342d3234203d3e20313530323034.roa (hash: lkSfYrODyHMpEekQgH4/krwxQF80Ua2eqSFXhHKZbPA=)
                          4: 3130332e342e38302e302f32342d3234203d3e20313530323034.roa (hash: KnPDrY7Tqy+sU3wNCKUDVoZ9WQhkJdY8RVjgQku10bc=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/9019589a-d525-40fc-894a-12e44010e3e4/0/0E2E7A9CF11C692EC8E56F03527BDF92FA001A4E.crl
                          rsync://repo-rpki.idnic.net/repo/9019589a-d525-40fc-894a-12e44010e3e4/0/0E2E7A9CF11C692EC8E56F03527BDF92FA001A4E.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0E2E7A9CF11C692EC8E56F03527BDF92FA001A4E.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 03 Feb 2026 11:24:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:5f:4d:9a:e7:bb:d5:26:c7:04:79:31:c5:ca:24:27:e3:51:78:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E2E7A9CF11C692EC8E56F03527BDF92FA001A4E
        Validity
            Not Before: Jan 31 02:46:04 2026 GMT
            Not After : Feb  3 11:24:04 2026 GMT
        Subject: CN=41AF4AE89CBB3D4BD01321C5D1AF42E4F3D020A6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:ce:f3:50:0f:86:70:63:e8:86:25:36:96:ef:
                    4d:54:14:3f:02:44:68:5c:45:97:fb:38:f0:6e:2b:
                    9d:38:82:b4:bf:ce:51:59:d2:a5:3e:e9:96:d0:6c:
                    6e:8a:30:01:54:4d:1d:cc:77:bd:fe:38:74:e9:0e:
                    ac:cd:2f:56:80:cb:98:1b:d7:f0:45:ed:c3:9d:ad:
                    cf:c1:3c:a8:2a:63:8c:9d:55:ae:b5:90:a9:db:d3:
                    41:dc:e8:76:e0:00:42:25:3b:46:06:56:3c:57:7f:
                    9e:d7:c0:6e:63:4c:50:61:62:1a:ac:49:0a:a5:1a:
                    83:18:70:47:a4:bb:d9:df:52:82:cf:d0:a3:18:cd:
                    ba:66:14:36:ae:ca:9f:c7:eb:8f:12:79:87:b9:2f:
                    85:d8:d8:97:bf:df:be:11:74:82:9d:3e:a9:f8:14:
                    d3:13:a9:ab:e7:19:44:62:73:c9:8d:a2:ef:ba:ce:
                    e3:c6:a9:78:78:72:98:83:e3:f5:2b:9a:52:86:f9:
                    6b:83:48:5f:94:2f:ba:a7:59:1e:28:d1:cc:0a:49:
                    13:36:67:6a:eb:8d:10:7b:4e:2f:25:60:fb:38:aa:
                    3a:f9:c2:0a:ef:fe:f7:33:66:62:da:23:28:b4:dc:
                    10:9c:3f:c3:0d:95:83:48:fb:a7:53:47:e4:e6:c6:
                    39:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:AF:4A:E8:9C:BB:3D:4B:D0:13:21:C5:D1:AF:42:E4:F3:D0:20:A6
            X509v3 Authority Key Identifier:
                keyid:0E:2E:7A:9C:F1:1C:69:2E:C8:E5:6F:03:52:7B:DF:92:FA:00:1A:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/9019589a-d525-40fc-894a-12e44010e3e4/0/0E2E7A9CF11C692EC8E56F03527BDF92FA001A4E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0E2E7A9CF11C692EC8E56F03527BDF92FA001A4E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9019589a-d525-40fc-894a-12e44010e3e4/0/0E2E7A9CF11C692EC8E56F03527BDF92FA001A4E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:a3:74:59:0f:3b:ea:c5:bd:15:22:12:4a:be:87:d2:49:63:
         f8:fa:c6:67:04:6c:45:e8:62:0a:84:b3:d6:9c:55:d7:67:62:
         28:74:3f:9b:11:67:64:c2:53:cf:d7:b4:80:4f:a0:d6:ae:ab:
         0e:10:2e:bf:39:3f:b6:f4:94:e8:c2:cc:ad:5e:14:9f:d2:ef:
         ac:c3:46:34:05:57:dd:02:be:a8:40:dd:9c:bf:3c:cb:12:b2:
         8f:0e:04:49:59:dc:ae:94:f4:b7:25:a1:a1:9c:ec:eb:97:20:
         56:4d:52:f7:8d:a9:77:1d:a3:23:46:1f:20:67:4d:da:ce:64:
         35:d4:39:dc:f6:aa:5f:ef:64:ad:8e:02:fa:74:64:eb:ab:b9:
         66:eb:99:4e:f8:e7:03:e2:56:e2:73:7a:18:6f:1b:57:26:50:
         6d:bc:bf:81:52:14:de:8c:c1:e8:e4:ef:39:ab:dd:85:57:bb:
         ba:cd:f0:ce:ca:59:eb:aa:b5:2e:ed:3e:c2:53:64:c3:ca:68:
         92:2b:b8:53:54:cd:f2:7e:7d:ac:03:f3:d1:9b:1b:53:b0:08:
         23:e5:7f:39:4f:78:f1:5a:5e:48:16:60:41:96:30:5c:27:88:
         e8:34:33:43:69:30:13:86:b2:fa:7d:73:7a:e5:64:d7:e7:ae:
         2d:7e:76:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 09:45:16 2026 by rpki-client