This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/a1633b8e-0df9-44ac-9cae-d6f6765a52c9/0/0321984F98230A4F94667E82C0A3DEB1151C5EDB.mft
File:                     0321984F98230A4F94667E82C0A3DEB1151C5EDB.mft (raw, json)
Hash identifier:          uHjzZvWU2PJZsRXsnYEo9P5bGIf9nOSzMIxrh1qwZOA=
Subject key identifier:   91:C7:56:BD:E3:59:59:F5:67:7F:33:59:95:4D:2C:3C:0F:B2:2C:CE
Authority key identifier: 03:21:98:4F:98:23:0A:4F:94:66:7E:82:C0:A3:DE:B1:15:1C:5E:DB
Certificate issuer:       /CN=0321984F98230A4F94667E82C0A3DEB1151C5EDB
Certificate serial:       48E2AA3792E2846B02EEDD49AD39112FE76853E3
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0321984F98230A4F94667E82C0A3DEB1151C5EDB.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/a1633b8e-0df9-44ac-9cae-d6f6765a52c9/0/0321984F98230A4F94667E82C0A3DEB1151C5EDB.mft
Manifest number:          054B
Signing time:             Sun 01 Feb 2026 07:11:16 +0000
Manifest this update:     Sun 01 Feb 2026 07:06:16 +0000
Manifest next update:     Wed 04 Feb 2026 10:42:16 +0000
Files and hashes:         1: 3130332e3233322e3234332e302f32342d3234203d3e203633343937.roa (hash: 5Zkq4VL7/xQa/k2/OTwG7CKYJU47Ei27gMdc6Ezzf0o=)
                          2: 3130332e39302e32362e302f32342d3234203d3e203633343937.roa (hash: bT4Fqpqcdb5rpokIZJm5TScSqR6ImzsbWRIe2yo3XE0=)
                          3: 3130332e3233322e3234322e302f32332d3233203d3e203633343937.roa (hash: 5hLdB80yHj82YkA94unb4g8aqK4XMar6o7GxOAOuQxc=)
                          4: 3130332e39302e32342e302f32342d3234203d3e20313332363733.roa (hash: J5t+PfCFG4MWyBW6jEWkugUvWvLki1MFqnfDET5KGi4=)
                          5: 3130332e3235302e3139392e302f32342d3234203d3e203633343937.roa (hash: /yb5WnwWf7be714QZ0uw4tXzGTbER/znwtSV7ojDR4s=)
                          6: 0321984F98230A4F94667E82C0A3DEB1151C5EDB.crl (hash: MKEvoxYftz0zpIDEmbqYWnRJl7xkCfTSsbM44GYGFE8=)
                          7: 3130332e39302e32352e302f32342d3234203d3e203633343937.roa (hash: t4SlmJKUrVi/pzXe4pRKejusr9o2fyen6lP4E+amyOk=)
                          8: 3130332e3233322e3234302e302f32342d3234203d3e203633343937.roa (hash: bULrEt1X3G/jiy2aFh5cacfLRjb9rnKNnf+yCOK9lkk=)
                          9: 3130332e3233322e3234322e302f32342d3234203d3e203633343937.roa (hash: f6DGPvhqyzvSYXpGkc0cFk921njju8cAzR6yZGDK+gU=)
                          10: 3130332e39302e32372e302f32342d3234203d3e20313332363733.roa (hash: fb4D9jSy0fLk0VJ3g8ZhjE32xxWPedYp/DzCfO9yFIU=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/a1633b8e-0df9-44ac-9cae-d6f6765a52c9/0/0321984F98230A4F94667E82C0A3DEB1151C5EDB.crl
                          rsync://repo-rpki.idnic.net/repo/a1633b8e-0df9-44ac-9cae-d6f6765a52c9/0/0321984F98230A4F94667E82C0A3DEB1151C5EDB.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0321984F98230A4F94667E82C0A3DEB1151C5EDB.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 04 Feb 2026 10:42:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:e2:aa:37:92:e2:84:6b:02:ee:dd:49:ad:39:11:2f:e7:68:53:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0321984F98230A4F94667E82C0A3DEB1151C5EDB
        Validity
            Not Before: Feb  1 07:06:16 2026 GMT
            Not After : Feb  4 10:42:16 2026 GMT
        Subject: CN=91C756BDE35959F5677F3359954D2C3C0FB22CCE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:74:c1:e4:f4:78:f1:19:79:de:2f:5f:d3:01:
                    29:f2:ef:e7:11:92:76:65:2f:65:c0:cd:72:22:b0:
                    83:d1:78:50:c3:b9:42:4c:c1:10:a1:61:33:73:9d:
                    7f:56:45:2f:4c:a2:a9:d5:55:19:99:53:13:d8:b1:
                    e6:5b:97:16:ce:7f:0b:32:96:63:e2:ee:9d:fe:fe:
                    0e:1e:3f:dd:1f:e2:30:82:77:2b:b4:aa:3f:f0:e7:
                    c5:7f:4b:b1:1e:b7:ab:85:b8:48:af:39:1e:02:22:
                    4b:d9:05:40:de:ff:8f:5c:9e:d0:bb:4a:81:c9:92:
                    6e:31:6f:9e:5f:98:25:f6:b0:91:c2:8d:14:a2:3c:
                    79:9c:66:0f:06:21:f8:84:60:f9:c6:d9:9b:1b:23:
                    32:3c:b5:44:81:26:1a:e2:8b:6e:56:a6:8b:ac:f9:
                    b1:ad:80:c0:97:d6:4e:e2:e4:1b:db:11:43:8f:a5:
                    d6:ff:2b:e2:fd:68:be:24:d8:ee:fd:fe:44:8f:16:
                    df:66:a2:fa:ca:89:21:c4:87:13:79:0e:b7:30:c5:
                    3c:11:5b:05:5c:79:40:0b:18:cc:97:5e:6d:f1:f5:
                    f2:ab:a1:54:13:52:55:e7:10:be:a6:2c:6e:36:4a:
                    bf:6b:0e:f5:db:63:bf:5b:7b:08:d5:b7:cc:f0:12:
                    60:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:C7:56:BD:E3:59:59:F5:67:7F:33:59:95:4D:2C:3C:0F:B2:2C:CE
            X509v3 Authority Key Identifier:
                keyid:03:21:98:4F:98:23:0A:4F:94:66:7E:82:C0:A3:DE:B1:15:1C:5E:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/a1633b8e-0df9-44ac-9cae-d6f6765a52c9/0/0321984F98230A4F94667E82C0A3DEB1151C5EDB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0321984F98230A4F94667E82C0A3DEB1151C5EDB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a1633b8e-0df9-44ac-9cae-d6f6765a52c9/0/0321984F98230A4F94667E82C0A3DEB1151C5EDB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:b2:67:75:38:c0:6c:82:6e:9d:02:17:00:af:00:f5:9f:09:
         09:4c:11:7b:c2:fd:d0:51:84:b9:62:c6:d3:ee:4c:82:97:45:
         41:eb:21:06:ad:86:ba:df:7b:29:ee:64:ff:2e:a5:e1:21:2f:
         96:22:85:bf:a6:01:da:05:75:2a:d0:6e:ad:f4:7d:01:af:eb:
         80:4a:55:cb:39:f4:3a:77:58:d7:c8:7a:40:38:91:78:29:9a:
         12:41:fe:fe:03:0a:a6:92:63:00:87:9d:d8:0f:ec:8c:d6:cf:
         47:9a:13:a2:fd:df:2c:f8:f4:b1:b3:26:a4:d1:e8:b0:19:51:
         62:26:f9:7f:f9:b4:cf:e5:0e:76:86:07:6e:9f:39:1a:d6:f8:
         22:a4:a1:48:7f:42:50:d7:73:08:90:73:ab:a7:e5:b1:af:aa:
         bd:c3:35:dc:31:12:e2:a5:0f:cf:06:4f:1f:95:4a:90:c0:f0:
         99:35:8e:75:91:fb:01:07:0d:ec:ce:d4:e1:67:d9:1c:4c:92:
         5a:4f:ec:52:ca:e6:fb:50:50:79:29:ad:82:42:94:3f:2b:f4:
         4f:ab:42:11:f0:e3:4e:41:4e:ac:58:c8:94:7a:35:1b:7e:a0:
         42:7c:fb:42:de:60:5d:7c:8a:ef:95:63:ea:63:0e:05:66:40:
         f1:ff:ec:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 09:43:47 2026 by rpki-client