This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/a6358dda-0ff1-4f6a-bb66-60f4ca04c490/0/754AE571E3432B20E78045BE7B2C99E39E0F1873.mft
File:                     754AE571E3432B20E78045BE7B2C99E39E0F1873.mft (raw, json)
Hash identifier:          T3QMgUGaHjV64WEuP4cNkzjc8H2lcTU71AdxS9nDrtg=
Subject key identifier:   D0:31:C2:29:CF:FF:67:AA:64:08:6F:03:E9:BC:EB:29:54:0F:51:F9
Authority key identifier: 75:4A:E5:71:E3:43:2B:20:E7:80:45:BE:7B:2C:99:E3:9E:0F:18:73
Certificate issuer:       /CN=754AE571E3432B20E78045BE7B2C99E39E0F1873
Certificate serial:       3038E85B0225E8150A4449F63B8895032ED45BA9
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/754AE571E3432B20E78045BE7B2C99E39E0F1873.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/a6358dda-0ff1-4f6a-bb66-60f4ca04c490/0/754AE571E3432B20E78045BE7B2C99E39E0F1873.mft
Manifest number:          0259
Signing time:             Sat 31 Jan 2026 07:22:13 +0000
Manifest this update:     Sat 31 Jan 2026 07:17:13 +0000
Manifest next update:     Tue 03 Feb 2026 11:31:13 +0000
Files and hashes:         1: 754AE571E3432B20E78045BE7B2C99E39E0F1873.crl (hash: buY/h2Pn0PRiV+TvI449Usr62eeSlohmkIoVf/bXbVo=)
                          2: 3130332e372e3232372e302f32342d3234203d3e203539313335.roa (hash: Fle5qLzNk23ZNkYRzf8mlYQ/OLfLBGZjvUjXRT80jgM=)
                          3: 3130332e372e3232362e302f32332d3233203d3e203539313335.roa (hash: /qz+/FrTyvqN+lKfQMLM9vGRBCrWv6ZRIa9kSi7cy5M=)
                          4: 3130332e372e3232362e302f32342d3234203d3e203539313335.roa (hash: d1VqPlCHSAGRA/UEI5pUZ6WXcTK62ba2i6gugZCVB1Y=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/a6358dda-0ff1-4f6a-bb66-60f4ca04c490/0/754AE571E3432B20E78045BE7B2C99E39E0F1873.crl
                          rsync://repo-rpki.idnic.net/repo/a6358dda-0ff1-4f6a-bb66-60f4ca04c490/0/754AE571E3432B20E78045BE7B2C99E39E0F1873.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/754AE571E3432B20E78045BE7B2C99E39E0F1873.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 03 Feb 2026 11:31:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:38:e8:5b:02:25:e8:15:0a:44:49:f6:3b:88:95:03:2e:d4:5b:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=754AE571E3432B20E78045BE7B2C99E39E0F1873
        Validity
            Not Before: Jan 31 07:17:13 2026 GMT
            Not After : Feb  3 11:31:13 2026 GMT
        Subject: CN=D031C229CFFF67AA64086F03E9BCEB29540F51F9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:03:06:0e:dc:83:70:a2:0d:c9:ef:10:54:79:
                    53:28:7a:32:bb:81:db:00:1b:39:c0:0f:e8:f1:5e:
                    c0:eb:1d:f8:33:39:b0:8a:77:66:ea:56:ae:05:34:
                    f1:97:05:1c:40:3c:db:1b:bd:97:ab:22:de:48:b0:
                    22:94:65:6a:93:c6:75:1b:a8:18:f0:8b:07:dc:3d:
                    47:9a:c8:fb:1a:82:f7:8b:bd:4a:79:25:bc:ec:dc:
                    d3:31:10:48:48:f3:51:7f:42:22:87:46:b2:e3:c9:
                    c2:f1:c3:22:cf:17:83:05:6f:0b:90:2b:08:80:09:
                    f8:85:20:f8:63:de:e4:63:b5:5c:74:a6:30:94:56:
                    15:c2:ff:3b:2a:bf:a5:23:6c:b2:bc:aa:fa:18:a9:
                    63:51:de:b3:90:3c:e9:0e:22:84:5b:d5:fe:d9:26:
                    32:b4:4a:d4:03:72:5e:e1:08:38:dd:c1:05:89:16:
                    ce:4c:34:60:94:fc:10:f8:fa:e4:a8:22:cc:ef:d8:
                    84:b9:54:68:bc:54:f9:2f:3c:74:42:ad:d1:f6:fe:
                    3b:d7:db:41:2d:e8:9d:a4:78:0a:72:af:d4:d1:0f:
                    58:67:d8:de:72:64:c4:3e:80:2a:0d:fa:27:81:82:
                    67:96:0a:06:7a:e6:35:59:42:7a:c3:83:ec:fe:70:
                    cd:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:31:C2:29:CF:FF:67:AA:64:08:6F:03:E9:BC:EB:29:54:0F:51:F9
            X509v3 Authority Key Identifier:
                keyid:75:4A:E5:71:E3:43:2B:20:E7:80:45:BE:7B:2C:99:E3:9E:0F:18:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/a6358dda-0ff1-4f6a-bb66-60f4ca04c490/0/754AE571E3432B20E78045BE7B2C99E39E0F1873.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/754AE571E3432B20E78045BE7B2C99E39E0F1873.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a6358dda-0ff1-4f6a-bb66-60f4ca04c490/0/754AE571E3432B20E78045BE7B2C99E39E0F1873.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:8f:9d:f0:23:26:1a:dc:dd:97:10:62:bd:2f:ac:f0:0d:5e:
         c2:70:db:d8:42:c4:a6:34:11:2a:6c:66:95:bc:d1:31:1b:95:
         4d:6e:a8:ff:14:a0:9d:8c:17:ab:8f:c9:a2:ec:70:a9:8c:69:
         57:18:46:29:b1:29:07:5b:82:ef:7e:26:7a:44:7e:93:cd:57:
         1e:52:f0:ae:f5:93:ee:29:bd:9e:d0:8f:1e:09:ea:62:6e:7d:
         ee:26:6c:03:e2:6b:24:4b:07:f8:8d:26:d3:4d:c6:fa:5b:11:
         55:41:59:e6:60:fb:ed:a2:17:97:9a:5d:77:ad:18:8c:6f:2d:
         a2:55:96:cb:2f:1a:55:50:c1:f6:a8:c1:1e:c1:d4:41:c5:f2:
         44:77:19:52:b9:30:13:11:38:78:90:59:52:aa:cf:57:c9:5e:
         f6:45:1a:5a:a6:20:22:79:65:f9:a3:9b:fe:83:c3:13:a2:5d:
         58:42:66:4b:98:4b:7a:47:4b:19:f5:fe:4a:93:4d:78:a3:a1:
         1f:f3:cb:d3:5c:d1:22:92:a1:55:a8:b0:a6:5f:aa:3d:6f:44:
         0f:23:8a:f1:41:be:8b:ea:42:ba:e5:83:5c:36:3e:7f:47:b7:
         99:fa:0e:86:a3:a2:a3:20:c6:8e:f8:51:8d:d0:17:e2:b4:f7:
         1e:75:b2:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 10:06:06 2026 by rpki-client