This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/ad440c85-3471-4461-b590-1601e19f5318/0/C5930A139BC72A04603E7234E6AA3938C4FAE3BC.mft
File:                     C5930A139BC72A04603E7234E6AA3938C4FAE3BC.mft (raw, json)
Hash identifier:          XkRZSamd6TzB8U/YXGMHTI1gMDux3S61Q9FLDEZvLdA=
Subject key identifier:   6B:F1:AC:23:85:DD:29:F4:E6:09:C2:6D:47:12:1D:49:DD:92:98:28
Authority key identifier: C5:93:0A:13:9B:C7:2A:04:60:3E:72:34:E6:AA:39:38:C4:FA:E3:BC
Certificate issuer:       /CN=C5930A139BC72A04603E7234E6AA3938C4FAE3BC
Certificate serial:       2B6D228C4B41CAB733A672A62B95EDBC23CCEEBA
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C5930A139BC72A04603E7234E6AA3938C4FAE3BC.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/ad440c85-3471-4461-b590-1601e19f5318/0/C5930A139BC72A04603E7234E6AA3938C4FAE3BC.mft
Manifest number:          0294
Signing time:             Sat 31 Jan 2026 22:21:08 +0000
Manifest this update:     Sat 31 Jan 2026 22:16:08 +0000
Manifest next update:     Tue 03 Feb 2026 23:30:08 +0000
Files and hashes:         1: 3130332e3136352e3134362e302f32332d3233203d3e20313431393236.roa (hash: mfc1MWJrfS0i4jbp54vUDYFOgjfPW5TyC5UPp0KzzWY=)
                          2: C5930A139BC72A04603E7234E6AA3938C4FAE3BC.crl (hash: L7yD9KtbOkT60oXzu/492xGjjKLAxLM6Vl1SdbJ9lqs=)
                          3: 3130332e3136352e3134372e302f32342d3234203d3e20313431393236.roa (hash: IuY6Z6ZxkbRwQMJQpE9OThBrKqwMAexp3I1bhh6pQ9o=)
                          4: 3130332e3136352e3134362e302f32342d3234203d3e20313431393236.roa (hash: 1DftqP7fwg1IcfyuMNUOovuIMKeX+ETObWgg15HcP+g=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/ad440c85-3471-4461-b590-1601e19f5318/0/C5930A139BC72A04603E7234E6AA3938C4FAE3BC.crl
                          rsync://repo-rpki.idnic.net/repo/ad440c85-3471-4461-b590-1601e19f5318/0/C5930A139BC72A04603E7234E6AA3938C4FAE3BC.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C5930A139BC72A04603E7234E6AA3938C4FAE3BC.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 03 Feb 2026 23:30:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:6d:22:8c:4b:41:ca:b7:33:a6:72:a6:2b:95:ed:bc:23:cc:ee:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C5930A139BC72A04603E7234E6AA3938C4FAE3BC
        Validity
            Not Before: Jan 31 22:16:08 2026 GMT
            Not After : Feb  3 23:30:08 2026 GMT
        Subject: CN=6BF1AC2385DD29F4E609C26D47121D49DD929828
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:dc:cd:ca:bf:cb:88:63:d6:6c:32:73:b9:9e:
                    1b:ae:88:2f:63:45:78:7c:ea:c9:2e:90:f4:ac:72:
                    94:31:a5:bb:8a:e4:fd:02:a4:ba:c2:c0:92:eb:6c:
                    d4:74:40:70:de:77:7e:30:c7:23:9e:49:66:cd:1c:
                    29:4f:6d:a4:0f:00:0b:21:31:af:0e:e2:12:d3:2c:
                    c5:8f:25:a9:9c:03:89:7c:ce:07:4c:d8:78:54:46:
                    de:b9:57:5b:23:82:b7:43:65:ac:9b:72:c9:57:31:
                    9a:52:76:83:68:a8:73:f0:23:c3:ee:c3:a0:79:35:
                    02:24:e7:d7:20:76:91:7d:dd:60:0f:b5:d7:ad:d5:
                    70:d2:38:b9:f4:cb:60:11:8c:14:17:1f:6d:38:25:
                    fb:f9:f0:45:fa:f9:a5:b8:91:be:41:dd:e4:0a:fb:
                    0a:36:9d:6a:34:14:4b:85:dd:04:98:c7:40:80:d6:
                    1b:ab:2f:16:a4:79:d7:4d:3a:f1:3f:b3:a6:5b:d5:
                    ee:da:80:e3:b6:26:de:8b:fe:76:d9:48:e5:f7:79:
                    1d:7c:d7:fd:64:1d:28:90:e0:b6:4a:7d:55:7f:23:
                    48:48:b5:c8:56:da:fd:28:fe:9e:40:c8:8d:49:32:
                    39:55:59:24:6f:69:9b:cb:88:e1:63:eb:66:e7:dc:
                    60:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:F1:AC:23:85:DD:29:F4:E6:09:C2:6D:47:12:1D:49:DD:92:98:28
            X509v3 Authority Key Identifier:
                keyid:C5:93:0A:13:9B:C7:2A:04:60:3E:72:34:E6:AA:39:38:C4:FA:E3:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/ad440c85-3471-4461-b590-1601e19f5318/0/C5930A139BC72A04603E7234E6AA3938C4FAE3BC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C5930A139BC72A04603E7234E6AA3938C4FAE3BC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ad440c85-3471-4461-b590-1601e19f5318/0/C5930A139BC72A04603E7234E6AA3938C4FAE3BC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:a9:9f:59:2f:00:71:84:ec:e3:4a:d3:05:4e:fc:d7:ef:90:
         e6:de:ff:67:86:83:ea:27:47:ca:f4:08:10:f6:40:a5:91:97:
         d1:81:94:8a:3e:3b:dc:49:d6:59:c2:8b:18:4f:ac:13:cb:6a:
         c6:7b:64:88:fb:e5:d5:94:fa:0b:c5:a9:f5:d5:82:87:dc:2e:
         7e:1b:ba:9b:b1:5e:50:16:49:4a:e3:8a:e1:7f:67:ac:5a:53:
         74:6b:f1:92:92:74:29:71:ba:10:df:79:89:5f:ec:ad:d3:ee:
         47:31:ca:76:73:4e:90:41:f1:8d:36:83:ca:86:c8:d1:ec:2e:
         2d:98:7a:eb:ad:a3:8a:84:99:ff:fe:47:44:72:a7:65:d4:90:
         61:d9:38:8e:91:26:53:bd:8f:42:b7:86:a5:a3:41:83:0e:39:
         a6:94:b0:76:d2:35:81:9c:2d:a4:ed:44:b4:1f:e6:37:6f:d0:
         db:c1:02:d8:1e:fc:32:bf:d8:fe:3f:22:be:d0:12:6e:de:a9:
         83:f5:e5:d8:8d:b9:c6:e8:70:5f:ef:f6:51:bc:bd:41:9d:3b:
         6f:ed:c3:ca:76:ef:94:72:41:29:22:9b:18:93:b7:46:cb:33:
         bb:55:62:24:51:c7:1c:4c:5a:5a:ec:78:2c:01:51:fe:9c:b1:
         55:74:be:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 10:06:34 2026 by rpki-client