This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/9b7947aa-ce69-4013-a256-58799a56581c/0/581E644EEC44F9523CF189893E102BCC6008F9BE.mft
File:                     581E644EEC44F9523CF189893E102BCC6008F9BE.mft (raw, json)
Hash identifier:          Li50gE/VUlocIbwkE9tYbgxPvkyCITZiC9GPiQHyplU=
Subject key identifier:   7B:0A:5A:D4:67:81:4C:01:EF:FA:DA:3B:26:37:8E:73:41:12:1F:89
Authority key identifier: 58:1E:64:4E:EC:44:F9:52:3C:F1:89:89:3E:10:2B:CC:60:08:F9:BE
Certificate issuer:       /CN=581E644EEC44F9523CF189893E102BCC6008F9BE
Certificate serial:       5B72AC9AE8D82C935B9D1BD50677D66BC4443DD6
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/581E644EEC44F9523CF189893E102BCC6008F9BE.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/9b7947aa-ce69-4013-a256-58799a56581c/0/581E644EEC44F9523CF189893E102BCC6008F9BE.mft
Manifest number:          0211
Signing time:             Mon 02 Feb 2026 04:20:01 +0000
Manifest this update:     Mon 02 Feb 2026 04:15:01 +0000
Manifest next update:     Thu 05 Feb 2026 05:23:01 +0000
Files and hashes:         1: 581E644EEC44F9523CF189893E102BCC6008F9BE.crl (hash: utvks5xOIfmkzqWb85WZRhBT/1Mr+Nei4EN1j0dAVK4=)
                          2: 3130332e3138392e3132302e302f32332d3234203d3e20313338383836.roa (hash: BD1xmKcIfvv53+qbSsqU41j3RH48RKcR2IUwYcDCVHU=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/9b7947aa-ce69-4013-a256-58799a56581c/0/581E644EEC44F9523CF189893E102BCC6008F9BE.crl
                          rsync://repo-rpki.idnic.net/repo/9b7947aa-ce69-4013-a256-58799a56581c/0/581E644EEC44F9523CF189893E102BCC6008F9BE.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/581E644EEC44F9523CF189893E102BCC6008F9BE.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 05 Feb 2026 05:23:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:72:ac:9a:e8:d8:2c:93:5b:9d:1b:d5:06:77:d6:6b:c4:44:3d:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=581E644EEC44F9523CF189893E102BCC6008F9BE
        Validity
            Not Before: Feb  2 04:15:01 2026 GMT
            Not After : Feb  5 05:23:01 2026 GMT
        Subject: CN=7B0A5AD467814C01EFFADA3B26378E7341121F89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:e3:a2:03:6c:0c:4d:23:4a:10:58:03:83:ef:
                    4a:51:32:c7:e1:19:8b:ad:b3:16:45:94:5d:e6:5b:
                    00:4e:f9:cf:09:fc:37:77:89:77:4e:22:d4:e2:e1:
                    0b:8c:fa:bf:be:3c:4a:1d:5d:6c:1a:9a:7d:b4:eb:
                    eb:a5:d1:f4:2b:45:83:07:15:6b:20:e8:c7:12:c0:
                    ae:db:73:00:8e:c7:a6:7d:73:dd:d3:41:fd:7c:37:
                    40:38:00:61:81:3d:d4:89:95:46:8f:3d:47:01:c9:
                    d0:7e:56:9b:6b:a3:ac:63:9c:1a:d7:aa:f1:c1:5a:
                    48:75:9e:79:3b:6f:8c:7c:be:60:73:72:40:20:88:
                    f9:3a:1a:03:da:55:16:a8:bb:9c:5e:50:64:f9:44:
                    a9:68:e1:6e:08:eb:f7:b3:8b:27:7b:e9:9a:84:8a:
                    28:61:66:36:4b:7b:f0:8b:c2:25:45:be:49:44:4d:
                    5c:e5:45:63:92:be:95:a7:ac:8e:0e:82:62:f6:cb:
                    3b:6a:69:13:d5:85:23:cf:9d:f9:67:9b:0a:7b:3c:
                    9a:e0:5f:5a:97:ab:a8:63:e9:27:4b:37:fe:4d:96:
                    cb:f9:d5:56:1c:b5:af:df:9c:67:a4:5c:86:10:c9:
                    f4:c8:0b:24:bc:81:ef:9f:27:b2:ab:37:98:f3:cf:
                    7c:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:0A:5A:D4:67:81:4C:01:EF:FA:DA:3B:26:37:8E:73:41:12:1F:89
            X509v3 Authority Key Identifier:
                keyid:58:1E:64:4E:EC:44:F9:52:3C:F1:89:89:3E:10:2B:CC:60:08:F9:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/9b7947aa-ce69-4013-a256-58799a56581c/0/581E644EEC44F9523CF189893E102BCC6008F9BE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/581E644EEC44F9523CF189893E102BCC6008F9BE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9b7947aa-ce69-4013-a256-58799a56581c/0/581E644EEC44F9523CF189893E102BCC6008F9BE.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:ad:77:67:30:ac:ea:53:32:fc:e5:79:d1:7e:d4:02:09:2b:
         91:08:6c:0f:0d:15:f8:d3:28:89:d8:4e:b8:84:37:fb:7c:8a:
         8e:c5:3b:81:ab:37:0c:0c:96:03:c0:c2:f9:63:be:40:31:6c:
         a1:56:75:85:17:cb:95:df:39:7c:aa:98:aa:f0:d9:ed:a5:1e:
         23:f1:cb:3b:a5:4b:05:d3:67:6a:64:27:59:0e:7c:8e:ea:34:
         8f:3b:51:fe:22:29:47:47:b4:72:0d:0d:03:d5:38:f9:fb:fb:
         98:aa:0b:26:bf:4a:86:1d:db:85:42:68:1b:7f:e9:13:d0:38:
         13:a5:4f:3d:aa:a0:87:22:85:65:0d:91:de:6b:1c:2a:be:27:
         b9:4f:96:97:1e:16:33:d5:5e:e2:52:c6:7e:60:ce:89:0a:da:
         09:cb:74:3a:85:dc:2e:a8:42:0e:85:ae:05:c1:24:a6:1f:92:
         44:1c:84:01:93:f5:97:ff:c3:23:fc:ea:3d:3d:d1:ff:97:2c:
         4c:d7:73:2c:0f:6d:9e:61:16:d9:ad:02:f0:98:33:2a:37:2b:
         54:8a:b1:7a:cc:d0:dd:24:c2:e3:de:dd:e2:9d:1d:ea:2d:e6:
         c1:2e:25:98:ca:3f:fe:58:b5:6a:95:11:98:2c:ef:fd:c4:62:
         80:ee:c1:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 14:29:14 2026 by rpki-client