This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/a683b27c-a730-4002-91b8-d0366dfac77e/0/E35D44338E5937B4AE269DDDCDA40A28F87F3EC8.mft
File:                     E35D44338E5937B4AE269DDDCDA40A28F87F3EC8.mft (raw, json)
Hash identifier:          CgHv2lT9TWn19ybbePlqIHLag9SBgaOEfwyaX50O5Ew=
Subject key identifier:   2F:41:CD:93:7D:F2:83:82:EB:F8:C6:42:9E:BA:1A:D9:5A:B5:A5:4A
Authority key identifier: E3:5D:44:33:8E:59:37:B4:AE:26:9D:DD:CD:A4:0A:28:F8:7F:3E:C8
Certificate issuer:       /CN=E35D44338E5937B4AE269DDDCDA40A28F87F3EC8
Certificate serial:       4C09C5C0D3C2662F02FB7795097609D87E69AAFE
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E35D44338E5937B4AE269DDDCDA40A28F87F3EC8.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/a683b27c-a730-4002-91b8-d0366dfac77e/0/E35D44338E5937B4AE269DDDCDA40A28F87F3EC8.mft
Manifest number:          0232
Signing time:             Sat 31 Jan 2026 22:31:58 +0000
Manifest this update:     Sat 31 Jan 2026 22:26:58 +0000
Manifest next update:     Wed 04 Feb 2026 08:59:58 +0000
Files and hashes:         1: E35D44338E5937B4AE269DDDCDA40A28F87F3EC8.crl (hash: z5i8f4lavRX4wj4Apv3Clszq2sLpTCb6biwMfK46GLs=)
                          2: 3130332e32312e3139352e302f32342d3234203d3e20313439393637.roa (hash: ztOieajHr1k+CIYjNgErkUbe6vEvP2EXx+nQ8S+WL90=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/a683b27c-a730-4002-91b8-d0366dfac77e/0/E35D44338E5937B4AE269DDDCDA40A28F87F3EC8.crl
                          rsync://repo-rpki.idnic.net/repo/a683b27c-a730-4002-91b8-d0366dfac77e/0/E35D44338E5937B4AE269DDDCDA40A28F87F3EC8.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E35D44338E5937B4AE269DDDCDA40A28F87F3EC8.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 04 Feb 2026 08:59:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:09:c5:c0:d3:c2:66:2f:02:fb:77:95:09:76:09:d8:7e:69:aa:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E35D44338E5937B4AE269DDDCDA40A28F87F3EC8
        Validity
            Not Before: Jan 31 22:26:58 2026 GMT
            Not After : Feb  4 08:59:58 2026 GMT
        Subject: CN=2F41CD937DF28382EBF8C6429EBA1AD95AB5A54A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:02:49:8a:4f:f5:a8:6a:42:28:3f:b9:d3:43:
                    6f:88:94:9a:b6:01:e9:60:72:ce:86:6d:f2:61:a5:
                    3d:26:ab:65:47:a8:fb:63:80:37:bf:1c:e1:67:91:
                    9f:6f:be:12:ad:bf:17:e3:41:3f:fa:2b:42:56:ca:
                    47:1e:73:56:b6:94:81:ff:48:81:0a:36:e5:95:8e:
                    ac:9b:d3:cc:5e:39:18:ea:f7:38:bc:9a:c2:2a:ae:
                    12:c5:ce:79:69:66:a3:db:ff:3b:e5:9c:51:75:1a:
                    43:cb:f5:0c:44:2d:f1:d2:af:1b:85:bc:00:0d:dd:
                    78:9c:54:28:45:c1:ed:71:42:72:31:14:9e:34:9f:
                    67:23:08:13:c8:6d:9d:04:3d:cc:40:ec:90:62:f3:
                    be:0c:c4:0e:d5:f5:85:f0:b1:7f:43:44:85:e3:30:
                    26:be:b7:87:28:77:05:f6:17:67:bb:91:c5:cd:c8:
                    31:f1:af:ef:bb:3c:6b:52:2d:58:31:ab:2c:25:e3:
                    34:1d:71:87:54:14:15:3d:4a:3c:91:a7:d4:09:39:
                    40:e2:bd:5f:81:95:b4:28:0c:bc:0d:5d:e7:38:db:
                    eb:8b:23:18:94:21:e4:f0:45:74:b2:6a:0f:b2:b6:
                    fe:d0:00:84:06:d6:ce:03:cb:3c:a9:2e:35:1e:01:
                    8b:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:41:CD:93:7D:F2:83:82:EB:F8:C6:42:9E:BA:1A:D9:5A:B5:A5:4A
            X509v3 Authority Key Identifier:
                keyid:E3:5D:44:33:8E:59:37:B4:AE:26:9D:DD:CD:A4:0A:28:F8:7F:3E:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/a683b27c-a730-4002-91b8-d0366dfac77e/0/E35D44338E5937B4AE269DDDCDA40A28F87F3EC8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E35D44338E5937B4AE269DDDCDA40A28F87F3EC8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a683b27c-a730-4002-91b8-d0366dfac77e/0/E35D44338E5937B4AE269DDDCDA40A28F87F3EC8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:e7:bb:5c:eb:ae:44:11:00:d1:8b:a5:70:a4:b6:66:7a:a8:
         e2:fe:60:02:7b:be:8c:7a:53:31:99:6d:21:7e:1e:88:5a:02:
         ce:f9:b9:26:ce:44:e4:ab:00:56:5a:92:95:5c:ef:39:a7:35:
         ce:e9:ec:17:5b:a3:db:8d:29:f6:ed:1f:ea:31:09:c7:4c:94:
         4f:7d:8c:03:37:27:9a:1f:2d:19:ad:ec:35:71:15:4c:47:17:
         d6:40:79:42:de:3c:3b:c4:38:23:f3:13:a4:9f:8d:38:5a:b8:
         83:92:4c:2a:24:20:28:7b:02:11:5c:b3:d5:42:9d:90:ae:de:
         e6:2f:b6:4c:23:c2:48:b3:ed:2c:1f:12:23:bb:46:06:a5:49:
         e9:8e:57:14:b6:bf:7e:f5:6e:f3:cd:bf:b8:76:8f:df:42:ae:
         0e:b7:1f:34:8d:cc:23:8c:c0:4e:b0:bd:7d:35:67:04:96:10:
         62:2d:a9:12:2e:01:9e:b3:aa:78:2e:9e:b1:0d:63:57:b7:4e:
         95:07:4d:d6:48:13:17:c9:cb:96:69:88:0e:7a:12:d6:b6:30:
         a0:0e:29:58:87:33:c8:c9:15:1e:cc:39:7b:f3:5e:98:ec:4f:
         30:51:c3:f9:5a:d7:4d:fb:6b:39:01:59:33:f7:75:2f:d2:05:
         31:8c:cc:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 09:43:12 2026 by rpki-client