This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/94ee2bd3-0f66-4d43-a9e7-965d33f12852/0/F5A5DFAFD47F54DC54D56683E91A5C1722CBA6AD.mft
File:                     F5A5DFAFD47F54DC54D56683E91A5C1722CBA6AD.mft (raw, json)
Hash identifier:          3pLdSzPmzPANJGfPl3v4RaIH52VkZJkyPxuuyQbdcWw=
Subject key identifier:   E9:29:4C:E1:5F:AB:5A:8D:A8:B7:A4:D3:0D:E8:CF:56:F1:47:C9:26
Authority key identifier: F5:A5:DF:AF:D4:7F:54:DC:54:D5:66:83:E9:1A:5C:17:22:CB:A6:AD
Certificate issuer:       /CN=F5A5DFAFD47F54DC54D56683E91A5C1722CBA6AD
Certificate serial:       13D3C8B858FFCE758DFC272A04F405AC0BEC77FC
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F5A5DFAFD47F54DC54D56683E91A5C1722CBA6AD.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/94ee2bd3-0f66-4d43-a9e7-965d33f12852/0/F5A5DFAFD47F54DC54D56683E91A5C1722CBA6AD.mft
Manifest number:          022E
Signing time:             Sun 01 Feb 2026 01:11:14 +0000
Manifest this update:     Sun 01 Feb 2026 01:06:14 +0000
Manifest next update:     Wed 04 Feb 2026 10:57:14 +0000
Files and hashes:         1: F5A5DFAFD47F54DC54D56683E91A5C1722CBA6AD.crl (hash: +bQ1u/Dvanx0oGvLuUMouj++cQf2dMUjP3dfcr66HRk=)
                          2: 3130332e3133392e3131322e302f32342d3234203d3e20313338383933.roa (hash: 0a6d0VadEC4mllKiwomZ9jBfURtS2Uj6BdXxHPbtGhc=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/94ee2bd3-0f66-4d43-a9e7-965d33f12852/0/F5A5DFAFD47F54DC54D56683E91A5C1722CBA6AD.crl
                          rsync://repo-rpki.idnic.net/repo/94ee2bd3-0f66-4d43-a9e7-965d33f12852/0/F5A5DFAFD47F54DC54D56683E91A5C1722CBA6AD.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F5A5DFAFD47F54DC54D56683E91A5C1722CBA6AD.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 04 Feb 2026 10:57:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:d3:c8:b8:58:ff:ce:75:8d:fc:27:2a:04:f4:05:ac:0b:ec:77:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F5A5DFAFD47F54DC54D56683E91A5C1722CBA6AD
        Validity
            Not Before: Feb  1 01:06:14 2026 GMT
            Not After : Feb  4 10:57:14 2026 GMT
        Subject: CN=E9294CE15FAB5A8DA8B7A4D30DE8CF56F147C926
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:61:a2:c8:8f:f3:cc:d8:f6:0e:55:c2:88:45:
                    31:61:31:59:77:50:53:fd:8b:d7:52:48:6c:6d:34:
                    19:64:1d:a3:ba:ce:7e:c5:c4:57:77:0a:bc:73:46:
                    8c:17:63:71:34:58:19:fa:d0:a8:89:34:cb:1e:a4:
                    cb:c5:63:70:93:3c:94:20:8e:63:4c:78:70:a8:61:
                    39:7e:ca:b9:0d:bb:8d:21:ae:01:00:2f:a3:60:95:
                    81:dc:f0:f5:7b:1a:24:48:17:05:2b:89:62:2a:c9:
                    ec:f8:a0:01:10:2f:15:b0:63:03:70:fe:a9:e5:f9:
                    ce:d5:ff:6b:57:41:bd:4a:6b:84:94:fc:97:a8:ba:
                    40:3d:c3:07:7c:41:67:e7:7b:8b:15:63:9e:38:40:
                    e9:35:e8:69:a5:34:b7:9c:2b:db:f9:66:a1:32:da:
                    90:9f:83:da:60:bf:b1:dd:30:d7:1c:66:c7:7e:97:
                    bf:5a:63:80:57:4c:d0:49:20:5b:e9:8e:6b:ce:bb:
                    28:7b:d6:37:6f:79:c5:c6:03:e0:af:71:66:7a:18:
                    6d:97:d6:8d:0c:84:89:64:32:41:39:62:2e:95:2d:
                    bf:cb:9e:8d:7b:ef:8f:a5:e8:bd:ab:b1:26:08:41:
                    d6:8f:ce:60:c4:ce:90:60:cb:bd:84:fe:11:2e:de:
                    65:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:29:4C:E1:5F:AB:5A:8D:A8:B7:A4:D3:0D:E8:CF:56:F1:47:C9:26
            X509v3 Authority Key Identifier:
                keyid:F5:A5:DF:AF:D4:7F:54:DC:54:D5:66:83:E9:1A:5C:17:22:CB:A6:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/94ee2bd3-0f66-4d43-a9e7-965d33f12852/0/F5A5DFAFD47F54DC54D56683E91A5C1722CBA6AD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F5A5DFAFD47F54DC54D56683E91A5C1722CBA6AD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/94ee2bd3-0f66-4d43-a9e7-965d33f12852/0/F5A5DFAFD47F54DC54D56683E91A5C1722CBA6AD.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:ff:41:32:d8:dd:a4:fa:f9:7c:21:07:6b:66:ae:92:95:bd:
         c1:f8:89:74:b0:77:1a:f0:58:93:50:27:62:3a:b4:49:ab:c1:
         c0:d0:72:93:37:fe:59:e1:bd:be:98:de:a2:c8:f4:a6:39:d7:
         73:e7:c9:77:97:b1:b9:0d:9c:ee:64:c0:4f:a2:09:c2:91:c6:
         1f:9c:d7:d7:ca:09:22:c3:ea:71:6f:c8:24:f3:e5:58:37:46:
         47:30:9d:ae:0c:1e:92:a7:4d:b6:db:0f:4a:15:02:5e:fd:1d:
         68:aa:3d:6a:a8:5c:4c:06:2d:9f:c4:c2:5b:b8:b9:c0:0c:6c:
         75:42:c9:c9:85:a6:d8:9f:56:56:8a:08:1e:81:5c:85:be:30:
         4e:f7:a1:5b:e5:cc:87:93:a9:34:86:c6:f8:cf:fb:f3:fc:1d:
         fc:fd:19:f9:e7:30:34:d9:19:f0:e8:60:de:61:56:2e:68:40:
         cd:d6:5e:30:eb:af:cc:cb:61:df:9c:0f:4d:1f:49:c9:a1:65:
         9b:13:13:ac:02:9f:6f:cc:c4:de:67:e1:fe:c3:61:d3:10:57:
         15:4f:c3:ba:9f:c3:70:a9:ca:50:18:eb:1d:d3:06:0c:b7:83:
         32:c0:f1:8d:da:03:bb:b1:3f:26:1f:1f:b6:65:26:e2:da:d0:
         02:c7:0d:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 09:43:09 2026 by rpki-client