This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/949c8680-bd0f-4a4f-996d-2102a0535374/0/F558D9AA4E66D7B6E4CB29EC877953D3ED6CD766.mft
File:                     F558D9AA4E66D7B6E4CB29EC877953D3ED6CD766.mft (raw, json)
Hash identifier:          U9b/EE+3yl01BNnhiVF6RrS+iuAZgYCbm4v/B3LldAw=
Subject key identifier:   48:6B:5E:AA:F8:AC:62:74:CC:2A:5E:51:9D:6E:64:67:43:A2:63:78
Authority key identifier: F5:58:D9:AA:4E:66:D7:B6:E4:CB:29:EC:87:79:53:D3:ED:6C:D7:66
Certificate issuer:       /CN=F558D9AA4E66D7B6E4CB29EC877953D3ED6CD766
Certificate serial:       55CDFB62DD330486AF48E27C68385C5785CA5595
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F558D9AA4E66D7B6E4CB29EC877953D3ED6CD766.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/949c8680-bd0f-4a4f-996d-2102a0535374/0/F558D9AA4E66D7B6E4CB29EC877953D3ED6CD766.mft
Manifest number:          031B
Signing time:             Sat 31 Jan 2026 16:10:03 +0000
Manifest this update:     Sat 31 Jan 2026 16:05:03 +0000
Manifest next update:     Tue 03 Feb 2026 19:08:03 +0000
Files and hashes:         1: 323430343a343234303a3133383a3a2f34382d3438203d3e20313338313239.roa (hash: nq4zy1af72x204AkF+u1PwnoA4FxaLfpw4t+rXKovzs=)
                          2: F558D9AA4E66D7B6E4CB29EC877953D3ED6CD766.crl (hash: 5P1Tuv85oFsZzsDz8/Y3rbP2QUfm7Fm8ZQSOohLFV2U=)
                          3: 3130332e3133322e3233392e302f32342d3234203d3e20313338313239.roa (hash: p62ZDq5ZKBkPYp/iloiGAyAKE+MyvpfKUn6NvYYi1Cg=)
                          4: 3130332e3133322e3233362e302f32342d3234203d3e20313338313239.roa (hash: i9nBXlvSxbioIMa6/RyGmFvQTR4AM5zzTQEPL/AB/CY=)
                          5: 3130332e3133322e3233372e302f32342d3234203d3e20313338313239.roa (hash: Ts+xPNKTeqHI6xUcpbKs8S135rclyr4OArUohFwar50=)
                          6: 3130332e3133322e3233362e302f32322d3234203d3e20313338313239.roa (hash: 2g7rbutz6JGpSI0ieoT3F+50As6HjTWRVSvDXVVxKnA=)
                          7: 323430343a343234303a3a2f33322d3438203d3e20313338313239.roa (hash: 9++yUwhwlSbkLR01RfXkFXxsjocjqNk14mv+oISczLY=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/949c8680-bd0f-4a4f-996d-2102a0535374/0/F558D9AA4E66D7B6E4CB29EC877953D3ED6CD766.crl
                          rsync://repo-rpki.idnic.net/repo/949c8680-bd0f-4a4f-996d-2102a0535374/0/F558D9AA4E66D7B6E4CB29EC877953D3ED6CD766.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F558D9AA4E66D7B6E4CB29EC877953D3ED6CD766.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 03 Feb 2026 19:08:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:cd:fb:62:dd:33:04:86:af:48:e2:7c:68:38:5c:57:85:ca:55:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F558D9AA4E66D7B6E4CB29EC877953D3ED6CD766
        Validity
            Not Before: Jan 31 16:05:03 2026 GMT
            Not After : Feb  3 19:08:03 2026 GMT
        Subject: CN=486B5EAAF8AC6274CC2A5E519D6E646743A26378
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:18:b8:82:d4:7a:d7:6f:f0:8e:a0:9a:aa:f2:
                    41:02:ac:95:d5:cb:f1:a0:44:51:4f:29:11:78:8e:
                    02:9d:b3:3d:70:46:93:f2:0f:8a:fc:ee:a8:8a:f0:
                    20:b1:79:f4:71:22:6a:79:60:66:39:55:d3:8d:3e:
                    e2:dd:c8:cc:db:d7:9b:55:ed:c4:6a:01:f6:4b:1b:
                    43:5c:94:12:8b:db:6b:41:9c:92:5b:12:5a:7e:56:
                    1a:5a:03:a9:7f:f5:cf:c8:9a:f7:58:4b:8e:07:a6:
                    61:f9:93:e2:e0:a1:cc:a0:ea:2e:1e:ef:a3:50:97:
                    aa:81:55:b3:52:02:9e:b9:17:ca:50:91:b6:e2:ea:
                    17:28:d8:11:2d:ad:4f:10:62:8b:15:83:ce:3f:8e:
                    2f:5b:7d:11:07:ce:ef:1b:39:7c:c0:93:c7:f2:91:
                    af:87:21:7a:40:fa:c4:08:27:51:31:e2:50:fa:4f:
                    b5:50:94:f4:73:7e:60:12:92:86:64:11:98:f8:e3:
                    6e:17:a5:d3:cc:50:ed:a9:72:33:e6:37:c5:7d:91:
                    a8:41:36:2a:87:23:84:4f:67:53:32:57:fb:b6:dd:
                    5d:14:c8:1b:3c:8b:0a:4d:09:42:a5:eb:88:87:2b:
                    2a:05:0a:2d:8e:a3:08:a6:be:f4:76:7f:1d:cd:7b:
                    bc:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:6B:5E:AA:F8:AC:62:74:CC:2A:5E:51:9D:6E:64:67:43:A2:63:78
            X509v3 Authority Key Identifier:
                keyid:F5:58:D9:AA:4E:66:D7:B6:E4:CB:29:EC:87:79:53:D3:ED:6C:D7:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/949c8680-bd0f-4a4f-996d-2102a0535374/0/F558D9AA4E66D7B6E4CB29EC877953D3ED6CD766.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F558D9AA4E66D7B6E4CB29EC877953D3ED6CD766.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/949c8680-bd0f-4a4f-996d-2102a0535374/0/F558D9AA4E66D7B6E4CB29EC877953D3ED6CD766.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:ca:5c:b2:25:13:b2:79:2c:60:93:98:e2:ca:00:b4:ee:fa:
         e9:a0:95:ce:ef:67:87:9a:00:79:4b:3c:d9:46:3f:e8:84:41:
         6d:bf:94:66:e1:c3:2e:e3:94:02:7f:f5:bc:cb:03:c2:48:98:
         2a:2e:bc:14:b5:87:9d:cd:b4:fc:69:5d:79:5b:12:82:7f:f0:
         28:9e:2d:c3:a5:2b:63:0c:9a:82:d7:bd:08:6d:f8:7b:ea:a0:
         44:f4:42:ac:fa:86:4a:a9:39:1b:95:e2:00:f5:e8:07:cd:25:
         c7:72:00:ae:ac:37:55:81:14:d4:9b:a9:88:7b:b5:26:f4:1c:
         5d:6e:62:71:7b:56:b2:61:ac:f6:94:a7:14:ba:82:9f:91:26:
         be:7d:7a:5e:22:43:43:64:70:90:2e:a9:b1:91:9c:7f:62:0a:
         cb:a5:10:c3:30:37:bb:c5:3f:ac:ba:33:47:b8:9a:5c:95:6e:
         50:5a:55:77:45:f1:e9:8e:e6:75:ad:48:6d:a9:46:6c:0a:d8:
         0e:98:e8:19:da:e9:6d:76:d9:8d:81:cf:d4:24:0c:e7:a7:62:
         28:36:13:c2:f9:38:01:90:cf:63:b3:10:cb:70:bc:ae:b6:13:
         c5:a5:71:81:14:7d:b1:10:cc:60:0b:08:d3:2e:13:4a:b6:87:
         b0:8d:1c:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 09:45:19 2026 by rpki-client