This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/a634c8dc-8853-4f65-8209-4fbee7ab4252/0/292C6CF5F336CE0D758E47F5DF9778633CDCA769.mft
File:                     292C6CF5F336CE0D758E47F5DF9778633CDCA769.mft (raw, json)
Hash identifier:          P6LFO9ZWbynrGKKLE45pcIdr2IAyRyNL4xEXPkakia0=
Subject key identifier:   18:CE:B6:53:70:89:A5:0A:3E:FC:9B:C4:85:07:A4:EA:CA:4D:E8:0A
Authority key identifier: 29:2C:6C:F5:F3:36:CE:0D:75:8E:47:F5:DF:97:78:63:3C:DC:A7:69
Certificate issuer:       /CN=292C6CF5F336CE0D758E47F5DF9778633CDCA769
Certificate serial:       4022364FD276C21F33CE7640BBC74868F836205A
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/292C6CF5F336CE0D758E47F5DF9778633CDCA769.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/a634c8dc-8853-4f65-8209-4fbee7ab4252/0/292C6CF5F336CE0D758E47F5DF9778633CDCA769.mft
Manifest number:          03C5
Signing time:             Sat 31 Jan 2026 15:52:32 +0000
Manifest this update:     Sat 31 Jan 2026 15:47:32 +0000
Manifest next update:     Wed 04 Feb 2026 02:32:32 +0000
Files and hashes:         1: 3130332e3136362e3133362e302f32332d3234203d3e203137393935.roa (hash: bN0O+3JGtIOaU62palp9MIrngagfeVADVprJx+0r0Fs=)
                          2: 292C6CF5F336CE0D758E47F5DF9778633CDCA769.crl (hash: ZuXLVnpTQ3bby6FzdSz2R+j/9hn7r4MNfbeMhl42JoA=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/a634c8dc-8853-4f65-8209-4fbee7ab4252/0/292C6CF5F336CE0D758E47F5DF9778633CDCA769.crl
                          rsync://repo-rpki.idnic.net/repo/a634c8dc-8853-4f65-8209-4fbee7ab4252/0/292C6CF5F336CE0D758E47F5DF9778633CDCA769.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/292C6CF5F336CE0D758E47F5DF9778633CDCA769.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 04 Feb 2026 02:32:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:22:36:4f:d2:76:c2:1f:33:ce:76:40:bb:c7:48:68:f8:36:20:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=292C6CF5F336CE0D758E47F5DF9778633CDCA769
        Validity
            Not Before: Jan 31 15:47:32 2026 GMT
            Not After : Feb  4 02:32:32 2026 GMT
        Subject: CN=18CEB6537089A50A3EFC9BC48507A4EACA4DE80A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:b5:cc:1e:08:ca:a5:c8:fd:ee:f3:20:80:38:
                    73:c5:31:aa:c1:eb:1d:02:7c:92:1a:b6:0c:f3:3b:
                    ee:0c:09:9f:d9:e2:44:56:13:e0:c9:7f:a2:6d:d2:
                    a0:1d:09:5e:fb:70:77:a4:dd:57:18:f0:21:69:b6:
                    e2:af:c2:a8:0e:c8:85:dd:5a:c6:72:d5:98:07:74:
                    fd:5e:82:e7:66:6d:b5:02:cd:c7:cb:65:25:c3:64:
                    0a:b3:f8:3f:45:ea:f0:6f:86:f1:87:38:20:ce:4f:
                    66:a1:9f:9c:20:a1:e1:13:3c:d4:86:f5:9e:2f:29:
                    ee:ee:94:8c:9e:f2:41:d4:55:88:9a:8b:02:9c:23:
                    0e:d7:c7:83:99:98:09:78:36:17:a8:e9:31:db:93:
                    a0:56:6a:42:33:28:24:7d:41:c3:2d:7e:56:a2:86:
                    b5:bb:cb:f6:fe:9f:47:da:17:c6:ef:da:9b:bf:93:
                    6d:62:32:04:07:e1:57:a2:21:67:6f:78:ac:90:8f:
                    b7:b2:a5:64:fe:48:92:bc:2c:3d:6b:81:77:98:19:
                    47:f4:90:c4:97:af:4b:89:4c:1d:9f:6d:aa:e3:38:
                    2a:9f:a0:52:71:72:7e:5f:57:7f:e0:ae:1a:89:4d:
                    22:fb:ca:e3:21:07:70:14:b9:69:69:96:1c:94:a1:
                    a1:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:CE:B6:53:70:89:A5:0A:3E:FC:9B:C4:85:07:A4:EA:CA:4D:E8:0A
            X509v3 Authority Key Identifier:
                keyid:29:2C:6C:F5:F3:36:CE:0D:75:8E:47:F5:DF:97:78:63:3C:DC:A7:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/a634c8dc-8853-4f65-8209-4fbee7ab4252/0/292C6CF5F336CE0D758E47F5DF9778633CDCA769.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/292C6CF5F336CE0D758E47F5DF9778633CDCA769.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a634c8dc-8853-4f65-8209-4fbee7ab4252/0/292C6CF5F336CE0D758E47F5DF9778633CDCA769.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:c9:ca:7d:08:1f:65:f5:0b:ce:69:9a:7c:71:86:2f:24:91:
         f6:65:d1:ea:2e:f9:45:72:51:10:28:d7:08:22:5f:3d:c7:e3:
         3e:99:d4:1d:02:0f:2f:40:58:b0:e3:ad:82:07:39:1f:29:0d:
         9c:05:7c:b8:ae:fd:d2:db:07:67:10:70:d3:5c:55:29:0a:5a:
         ba:37:96:89:ba:c7:6b:7d:71:21:40:d6:fe:b8:7c:cd:04:dd:
         0b:ea:be:94:bf:78:98:0d:14:b8:ad:b8:f0:18:2f:29:c1:67:
         51:e7:fe:94:e0:39:59:2b:12:1b:89:aa:28:e7:45:d9:ba:7b:
         9d:c3:73:9f:e0:63:70:b8:c9:b0:fa:64:fd:81:42:aa:f0:81:
         93:26:7d:d6:0c:7a:46:3a:81:40:a3:92:c2:9c:f2:c8:43:17:
         b9:36:8b:e4:2d:f9:e6:d6:66:de:6f:e7:38:05:18:df:64:3d:
         7e:da:52:f4:22:b0:06:c9:89:08:0b:ee:b4:50:7d:83:c9:34:
         a1:d1:34:50:d7:9b:b8:94:85:5a:14:cf:ce:b9:63:7b:f3:dc:
         7e:b7:5b:c7:c1:21:be:90:19:d3:4e:4e:93:fe:da:f4:ad:07:
         fd:4e:ce:12:49:1d:18:6a:44:cd:6c:e6:23:4e:0a:b2:e1:0c:
         98:bb:a4:0d
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUQCI2T9J2wh8zznZAu8dIaPg2IFowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjkyQzZDRjVGMzM2Q0UwRDc1OEU0N0Y1REY5Nzc4NjMz
Q0RDQTc2OTAeFw0yNjAxMzExNTQ3MzJaFw0yNjAyMDQwMjMyMzJaMDMxMTAvBgNV
BAMTKDE4Q0VCNjUzNzA4OUE1MEEzRUZDOUJDNDg1MDdBNEVBQ0E0REU4MEEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvtcweCMqlyP3u8yCAOHPFMarB
6x0CfJIatgzzO+4MCZ/Z4kRWE+DJf6Jt0qAdCV77cHek3VcY8CFptuKvwqgOyIXd
WsZy1ZgHdP1egudmbbUCzcfLZSXDZAqz+D9F6vBvhvGHOCDOT2ahn5wgoeETPNSG
9Z4vKe7ulIye8kHUVYiaiwKcIw7Xx4OZmAl4Nheo6THbk6BWakIzKCR9QcMtflai
hrW7y/b+n0faF8bv2pu/k21iMgQH4VeiIWdveKyQj7eypWT+SJK8LD1rgXeYGUf0
kMSXr0uJTB2fbarjOCqfoFJxcn5fV3/grhqJTSL7yuMhB3AUuWlplhyUoaHZAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUGM62U3CJpQo+/JvEhQek6spN6AowHwYDVR0j
BBgwFoAUKSxs9fM2zg11jkf135d4Yzzcp2kwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h
NjM0YzhkYy04ODUzLTRmNjUtODIwOS00ZmJlZTdhYjQyNTIvMC8yOTJDNkNGNUYz
MzZDRTBENzU4RTQ3RjVERjk3Nzg2MzNDRENBNzY5LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMjkyQzZDRjVGMzM2Q0UwRDc1OEU0N0Y1REY5Nzc4NjMzQ0RD
QTc2OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTYzNGM4ZGMtODg1My00ZjY1LTgy
MDktNGZiZWU3YWI0MjUyLzAvMjkyQzZDRjVGMzM2Q0UwRDc1OEU0N0Y1REY5Nzc4
NjMzQ0RDQTc2OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAA3Jyn0IH2X1C85pmnxxhi8kkfZl0eou+UVy
URAo1wgiXz3H4z6Z1B0CDy9AWLDjrYIHOR8pDZwFfLiu/dLbB2cQcNNcVSkKWro3
lom6x2t9cSFA1v64fM0E3QvqvpS/eJgNFLituPAYLynBZ1Hn/pTgOVkrEhuJqijn
Rdm6e53Dc5/gY3C4ybD6ZP2BQqrwgZMmfdYMekY6gUCjksKc8shDF7k2i+Qt+ebW
Zt5v5zgFGN9kPX7aUvQisAbJiQgL7rRQfYPJNKHRNFDXm7iUhVoUz865Y3vz3H63
W8fBIb6QGdNOTpP+2vStB/1OzhJJHRhqRM1s5iNOCrLhDJi7pA0=
-----END CERTIFICATE-----
Generated at Mon Feb 2 10:03:46 2026 by rpki-client