This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/addf181f-1e89-4022-82f8-e0dba859ee2e/0/2247520F1208C8D9AC33B3035016DC4EC62CDEB1.mft
File:                     2247520F1208C8D9AC33B3035016DC4EC62CDEB1.mft (raw, json)
Hash identifier:          7ObYtW8Ye4WQ1eNXa+vUv8kvDYEEmUyvQ+E3k1M/oHo=
Subject key identifier:   50:BE:CC:38:FA:23:23:D9:00:30:2B:C4:ED:E6:42:5D:2E:AA:98:05
Authority key identifier: 22:47:52:0F:12:08:C8:D9:AC:33:B3:03:50:16:DC:4E:C6:2C:DE:B1
Certificate issuer:       /CN=2247520F1208C8D9AC33B3035016DC4EC62CDEB1
Certificate serial:       73AA321570383410F94B42134B30C44028BD49C8
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2247520F1208C8D9AC33B3035016DC4EC62CDEB1.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/addf181f-1e89-4022-82f8-e0dba859ee2e/0/2247520F1208C8D9AC33B3035016DC4EC62CDEB1.mft
Manifest number:          054B
Signing time:             Sat 31 Jan 2026 19:50:45 +0000
Manifest this update:     Sat 31 Jan 2026 19:45:45 +0000
Manifest next update:     Tue 03 Feb 2026 20:10:45 +0000
Files and hashes:         1: 2247520F1208C8D9AC33B3035016DC4EC62CDEB1.crl (hash: weyZFFIk45NlEvu6HbLjg7VbdIxiKR1ilxJw0jN/OPk=)
                          2: 3130332e3130372e38342e302f32342d3234203d3e20313336383739.roa (hash: 1XeF70BDEHHHcVh1tuDQSwar3IQqxD2CsqUhmn5Rqx8=)
                          3: 3130332e3130372e38342e302f32332d3233203d3e20313336383739.roa (hash: pwYSccPX545l6tOoGmQeGSusfNrCtCRh4u2GvYkMfU8=)
                          4: 3130332e3130372e37312e302f32342d3234203d3e20313336383739.roa (hash: kS4p5t1GMvH/jM8YbFoB1ZVwKWJDCBblcchgAgj/oBk=)
                          5: 3130332e3130372e38352e302f32342d3234203d3e20313336383739.roa (hash: 2H5831uY9aR1OjDn1Uun2zJ8vaTAjB4BokOjcc3Moq4=)
                          6: 3130332e3130352e3231372e302f32342d3234203d3e20313431313337.roa (hash: vjgtOZ549YGHCxNz1PUrDo34FNB9oleC45Iwzg+kYuo=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/addf181f-1e89-4022-82f8-e0dba859ee2e/0/2247520F1208C8D9AC33B3035016DC4EC62CDEB1.crl
                          rsync://repo-rpki.idnic.net/repo/addf181f-1e89-4022-82f8-e0dba859ee2e/0/2247520F1208C8D9AC33B3035016DC4EC62CDEB1.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2247520F1208C8D9AC33B3035016DC4EC62CDEB1.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 03 Feb 2026 20:10:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:aa:32:15:70:38:34:10:f9:4b:42:13:4b:30:c4:40:28:bd:49:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2247520F1208C8D9AC33B3035016DC4EC62CDEB1
        Validity
            Not Before: Jan 31 19:45:45 2026 GMT
            Not After : Feb  3 20:10:45 2026 GMT
        Subject: CN=50BECC38FA2323D900302BC4EDE6425D2EAA9805
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:6a:22:7b:72:10:3c:e5:a7:73:ee:51:c5:1a:
                    b5:ef:1d:04:4b:31:e7:4a:5e:cd:5d:43:79:d8:2a:
                    4f:f8:61:22:8f:a6:60:d5:30:9b:c6:a9:ea:4d:fb:
                    7e:74:26:59:e8:11:f7:86:62:70:bd:4c:4e:40:6b:
                    3b:e3:c6:b0:d4:6d:58:ed:44:b5:07:cc:3e:f9:b9:
                    4a:fd:16:d8:5d:e0:3c:de:fe:1b:dd:3b:30:f9:1b:
                    85:6c:e2:b4:ee:f4:fb:f9:0c:3e:50:ee:44:ab:13:
                    bf:60:e9:92:c3:8d:cb:f3:1c:6e:1a:fc:9e:a2:e1:
                    55:78:aa:24:52:1c:8c:95:e3:44:90:fe:22:87:d1:
                    9b:c9:e8:de:60:df:e8:2b:32:1a:2c:a7:0b:52:6a:
                    c2:c5:42:c5:14:73:03:0c:fd:dc:9a:8c:ba:5e:56:
                    2e:d3:d5:ef:48:c2:ff:30:e0:50:41:dd:67:2f:a4:
                    0f:ed:83:c0:a3:10:01:70:d2:9e:08:8b:43:ea:b0:
                    9c:81:31:bd:05:45:ef:eb:95:14:92:98:8f:43:55:
                    10:61:87:ed:13:bb:63:49:fc:49:4b:d7:e3:8c:9f:
                    07:99:e9:69:f1:2d:51:bd:91:41:9e:70:67:14:ec:
                    fa:bb:b6:51:a3:f4:06:4c:b3:11:a5:97:91:fb:0d:
                    a8:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:BE:CC:38:FA:23:23:D9:00:30:2B:C4:ED:E6:42:5D:2E:AA:98:05
            X509v3 Authority Key Identifier:
                keyid:22:47:52:0F:12:08:C8:D9:AC:33:B3:03:50:16:DC:4E:C6:2C:DE:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/addf181f-1e89-4022-82f8-e0dba859ee2e/0/2247520F1208C8D9AC33B3035016DC4EC62CDEB1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2247520F1208C8D9AC33B3035016DC4EC62CDEB1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/addf181f-1e89-4022-82f8-e0dba859ee2e/0/2247520F1208C8D9AC33B3035016DC4EC62CDEB1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:54:35:6a:a6:f5:1a:3c:ca:2d:37:a7:9c:de:b7:8a:89:20:
         70:70:02:28:34:a5:31:0b:81:e9:59:02:7d:2a:a7:9d:64:a8:
         ba:92:15:a2:db:a1:b4:08:76:18:d0:25:32:4b:57:10:48:a2:
         b4:9b:23:69:7f:bf:cf:3d:5f:a3:b8:6d:36:44:47:45:6d:0e:
         11:12:0a:3c:ee:98:a4:c9:57:8b:fe:69:ad:82:5a:7c:f9:a2:
         96:98:20:f7:52:2e:39:97:b1:29:ac:9e:c4:18:8e:66:31:7d:
         f0:75:fb:9a:88:61:92:dd:29:05:34:e3:0c:ee:a1:a8:e8:0d:
         af:91:98:c2:54:c2:a3:44:a7:96:ba:ad:21:bf:1c:90:f8:00:
         6d:ec:1f:1d:88:cf:41:b8:1f:ca:fd:2d:5a:e0:c5:71:b9:c2:
         bc:52:44:50:a3:ff:41:a6:76:2d:6a:18:55:56:8e:44:b6:d6:
         3d:7e:77:d4:b5:64:4c:95:8c:f5:cb:55:59:94:cf:23:42:db:
         2c:ec:d1:85:a4:ea:9c:44:7a:c8:c6:23:84:20:d5:01:09:98:
         3b:ba:6b:0d:51:55:eb:c1:3e:4a:b6:ed:68:45:c9:0b:6a:8b:
         c3:af:3a:29:1a:01:25:6b:f2:74:d6:71:50:69:a2:16:db:c8:
         da:57:4a:be
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUc6oyFXA4NBD5S0ITSzDEQCi9ScgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjI0NzUyMEYxMjA4QzhEOUFDMzNCMzAzNTAxNkRDNEVD
NjJDREVCMTAeFw0yNjAxMzExOTQ1NDVaFw0yNjAyMDMyMDEwNDVaMDMxMTAvBgNV
BAMTKDUwQkVDQzM4RkEyMzIzRDkwMDMwMkJDNEVERTY0MjVEMkVBQTk4MDUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSaiJ7chA85adz7lHFGrXvHQRL
MedKXs1dQ3nYKk/4YSKPpmDVMJvGqepN+350JlnoEfeGYnC9TE5AazvjxrDUbVjt
RLUHzD75uUr9Fthd4Dze/hvdOzD5G4Vs4rTu9Pv5DD5Q7kSrE79g6ZLDjcvzHG4a
/J6i4VV4qiRSHIyV40SQ/iKH0ZvJ6N5g3+grMhospwtSasLFQsUUcwMM/dyajLpe
Vi7T1e9Iwv8w4FBB3WcvpA/tg8CjEAFw0p4Ii0PqsJyBMb0FRe/rlRSSmI9DVRBh
h+0Tu2NJ/ElL1+OMnweZ6WnxLVG9kUGecGcU7Pq7tlGj9AZMsxGll5H7DaiZAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUUL7MOPojI9kAMCvE7eZCXS6qmAUwHwYDVR0j
BBgwFoAUIkdSDxIIyNmsM7MDUBbcTsYs3rEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h
ZGRmMTgxZi0xZTg5LTQwMjItODJmOC1lMGRiYTg1OWVlMmUvMC8yMjQ3NTIwRjEy
MDhDOEQ5QUMzM0IzMDM1MDE2REM0RUM2MkNERUIxLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMjI0NzUyMEYxMjA4QzhEOUFDMzNCMzAzNTAxNkRDNEVDNjJD
REVCMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWRkZjE4MWYtMWU4OS00MDIyLTgy
ZjgtZTBkYmE4NTllZTJlLzAvMjI0NzUyMEYxMjA4QzhEOUFDMzNCMzAzNTAxNkRD
NEVDNjJDREVCMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAIBUNWqm9Ro8yi03p5zet4qJIHBwAig0pTEL
gelZAn0qp51kqLqSFaLbobQIdhjQJTJLVxBIorSbI2l/v889X6O4bTZER0VtDhES
CjzumKTJV4v+aa2CWnz5opaYIPdSLjmXsSmsnsQYjmYxffB1+5qIYZLdKQU04wzu
oajoDa+RmMJUwqNEp5a6rSG/HJD4AG3sHx2Iz0G4H8r9LVrgxXG5wrxSRFCj/0Gm
di1qGFVWjkS21j1+d9S1ZEyVjPXLVVmUzyNC2yzs0YWk6pxEesjGI4Qg1QEJmDu6
aw1RVevBPkq27WhFyQtqi8OvOikaASVr8nTWcVBpohbbyNpXSr4=
-----END CERTIFICATE-----
Generated at Mon Feb 2 09:47:09 2026 by rpki-client