This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/91a2929c-6088-4cb5-83c6-f4a356b20f9d/0/2F24A2044806301EB7FA6CE5C8521FE03941B7BA.mft
File:                     2F24A2044806301EB7FA6CE5C8521FE03941B7BA.mft (raw, json)
Hash identifier:          TifdoIxO8NiVyZiRQ52k8uGVIDFc1BXror3wsW5g6tA=
Subject key identifier:   5E:A8:2D:54:27:DF:CA:EE:57:F4:93:88:3F:78:30:4E:B9:9D:28:5A
Authority key identifier: 2F:24:A2:04:48:06:30:1E:B7:FA:6C:E5:C8:52:1F:E0:39:41:B7:BA
Certificate issuer:       /CN=2F24A2044806301EB7FA6CE5C8521FE03941B7BA
Certificate serial:       2FB5888F7CEF33B28B5A435DA8EAF995A3C4065E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2F24A2044806301EB7FA6CE5C8521FE03941B7BA.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/91a2929c-6088-4cb5-83c6-f4a356b20f9d/0/2F24A2044806301EB7FA6CE5C8521FE03941B7BA.mft
Manifest number:          0149
Signing time:             Mon 02 Feb 2026 00:31:27 +0000
Manifest this update:     Mon 02 Feb 2026 00:26:27 +0000
Manifest next update:     Thu 05 Feb 2026 04:04:27 +0000
Files and hashes:         1: 2F24A2044806301EB7FA6CE5C8521FE03941B7BA.crl (hash: R9Oud0qRP59Ez9AzJXe0ydQUYSIpoN6yGZtqVJ5kerg=)
                          2: 3130332e3138342e35372e302f32342d3234203d3e20313532333532.roa (hash: bpEdGaau57Ls0LX+FXCrBVL5qcwulWWQkMdNRaMhV9U=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/91a2929c-6088-4cb5-83c6-f4a356b20f9d/0/2F24A2044806301EB7FA6CE5C8521FE03941B7BA.crl
                          rsync://repo-rpki.idnic.net/repo/91a2929c-6088-4cb5-83c6-f4a356b20f9d/0/2F24A2044806301EB7FA6CE5C8521FE03941B7BA.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2F24A2044806301EB7FA6CE5C8521FE03941B7BA.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 05 Feb 2026 04:04:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:b5:88:8f:7c:ef:33:b2:8b:5a:43:5d:a8:ea:f9:95:a3:c4:06:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2F24A2044806301EB7FA6CE5C8521FE03941B7BA
        Validity
            Not Before: Feb  2 00:26:27 2026 GMT
            Not After : Feb  5 04:04:27 2026 GMT
        Subject: CN=5EA82D5427DFCAEE57F493883F78304EB99D285A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:34:22:b9:04:02:dd:64:20:48:6e:d0:35:d5:
                    52:9f:10:a5:81:0c:8c:a6:bf:1e:fe:0b:2f:29:23:
                    fb:c0:ba:d8:94:ee:eb:10:7a:c1:30:50:1c:47:2d:
                    54:1b:e0:11:4c:75:7a:98:cb:ce:69:04:06:ee:ba:
                    4b:4c:82:29:f2:9e:f5:d0:02:13:89:a2:97:0e:a4:
                    74:4b:44:5e:e7:88:64:51:07:aa:1b:d9:dd:6b:de:
                    fa:54:83:75:3d:2a:8f:50:3c:af:42:fd:93:0f:f1:
                    32:1a:c6:90:ad:53:e8:84:cf:07:81:8d:15:b9:d9:
                    4c:30:59:2c:9c:f3:11:ac:98:33:81:52:dc:45:3c:
                    f4:cd:8b:9f:9c:49:65:33:61:5f:45:b8:41:ec:99:
                    a8:8c:69:98:67:fd:f7:d6:4f:2e:e0:78:92:d5:26:
                    ca:23:5a:b1:93:1a:4e:1f:28:af:81:15:25:aa:3d:
                    92:c4:66:31:bd:70:63:0b:ab:da:85:6b:41:26:71:
                    92:8c:4c:8d:d6:ba:56:1b:7b:88:a1:18:dd:54:c5:
                    da:ec:47:ae:0a:62:f6:21:38:89:dd:b0:36:6d:64:
                    b8:4b:dc:e5:c2:f1:29:ff:da:6c:ac:67:ca:e5:e8:
                    a1:ee:6e:58:2e:32:3e:02:30:6a:15:25:1e:6e:c3:
                    a9:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:A8:2D:54:27:DF:CA:EE:57:F4:93:88:3F:78:30:4E:B9:9D:28:5A
            X509v3 Authority Key Identifier:
                keyid:2F:24:A2:04:48:06:30:1E:B7:FA:6C:E5:C8:52:1F:E0:39:41:B7:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/91a2929c-6088-4cb5-83c6-f4a356b20f9d/0/2F24A2044806301EB7FA6CE5C8521FE03941B7BA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2F24A2044806301EB7FA6CE5C8521FE03941B7BA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/91a2929c-6088-4cb5-83c6-f4a356b20f9d/0/2F24A2044806301EB7FA6CE5C8521FE03941B7BA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:b7:31:0c:78:ef:f7:13:d3:01:91:fc:bc:e2:9b:58:6a:96:
         2c:b7:bc:92:f4:10:a1:c6:99:5f:82:ae:8a:89:d3:6b:68:06:
         60:2c:fb:03:3e:e0:b9:21:87:f1:0a:fd:f2:d3:76:22:1c:b6:
         0c:17:e5:55:ba:3c:75:f3:05:d4:7c:70:23:2d:a3:a5:3e:6c:
         7c:90:11:9c:3a:f5:d8:fa:c1:8e:f2:dd:8e:35:d3:68:3d:3c:
         4a:9b:ec:0f:b2:b9:cc:52:59:87:5b:d2:46:d8:39:47:a8:16:
         79:3b:1b:1b:28:f4:ee:25:6d:b8:50:86:03:61:14:b8:11:13:
         57:58:0e:51:6a:d7:4b:28:7a:69:58:52:67:ef:ee:5e:59:cd:
         da:97:08:36:4b:58:33:1d:35:b7:aa:bc:f2:f3:05:8a:03:bf:
         b9:1d:8a:07:9b:98:2d:49:8d:64:94:f3:f8:d1:cc:a3:e1:ec:
         a4:5e:2d:4b:0e:52:d4:3c:e0:5b:81:d6:64:67:16:f5:67:35:
         08:57:f9:6c:6b:d2:81:f3:60:3a:3d:8f:37:e8:2a:37:05:73:
         b5:6e:7d:1d:65:82:0e:4c:aa:0d:83:50:cd:93:a2:e8:0a:32:
         f5:34:de:c7:59:ad:cc:04:e3:63:e1:7e:b7:3d:a5:3e:1d:02:
         00:ce:34:43
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUL7WIj3zvM7KLWkNdqOr5laPEBl4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkYyNEEyMDQ0ODA2MzAxRUI3RkE2Q0U1Qzg1MjFGRTAz
OTQxQjdCQTAeFw0yNjAyMDIwMDI2MjdaFw0yNjAyMDUwNDA0MjdaMDMxMTAvBgNV
BAMTKDVFQTgyRDU0MjdERkNBRUU1N0Y0OTM4ODNGNzgzMDRFQjk5RDI4NUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFNCK5BALdZCBIbtA11VKfEKWB
DIymvx7+Cy8pI/vAutiU7usQesEwUBxHLVQb4BFMdXqYy85pBAbuuktMginynvXQ
AhOJopcOpHRLRF7niGRRB6ob2d1r3vpUg3U9Ko9QPK9C/ZMP8TIaxpCtU+iEzweB
jRW52UwwWSyc8xGsmDOBUtxFPPTNi5+cSWUzYV9FuEHsmaiMaZhn/ffWTy7geJLV
JsojWrGTGk4fKK+BFSWqPZLEZjG9cGMLq9qFa0EmcZKMTI3WulYbe4ihGN1Uxdrs
R64KYvYhOIndsDZtZLhL3OXC8Sn/2mysZ8rl6KHublguMj4CMGoVJR5uw6lVAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUXqgtVCffyu5X9JOIP3gwTrmdKFowHwYDVR0j
BBgwFoAULySiBEgGMB63+mzlyFIf4DlBt7owDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85
MWEyOTI5Yy02MDg4LTRjYjUtODNjNi1mNGEzNTZiMjBmOWQvMC8yRjI0QTIwNDQ4
MDYzMDFFQjdGQTZDRTVDODUyMUZFMDM5NDFCN0JBLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMkYyNEEyMDQ0ODA2MzAxRUI3RkE2Q0U1Qzg1MjFGRTAzOTQx
QjdCQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTFhMjkyOWMtNjA4OC00Y2I1LTgz
YzYtZjRhMzU2YjIwZjlkLzAvMkYyNEEyMDQ0ODA2MzAxRUI3RkE2Q0U1Qzg1MjFG
RTAzOTQxQjdCQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAIq3MQx47/cT0wGR/Lzim1hqliy3vJL0EKHG
mV+CroqJ02toBmAs+wM+4Lkhh/EK/fLTdiIctgwX5VW6PHXzBdR8cCMto6U+bHyQ
EZw69dj6wY7y3Y4102g9PEqb7A+yucxSWYdb0kbYOUeoFnk7Gxso9O4lbbhQhgNh
FLgRE1dYDlFq10soemlYUmfv7l5ZzdqXCDZLWDMdNbeqvPLzBYoDv7kdigebmC1J
jWSU8/jRzKPh7KReLUsOUtQ84FuB1mRnFvVnNQhX+Wxr0oHzYDo9jzfoKjcFc7Vu
fR1lgg5Mqg2DUM2TougKMvU03sdZrcwE42Phfrc9pT4dAgDONEM=
-----END CERTIFICATE-----
Generated at Mon Feb 2 10:05:30 2026 by rpki-client