This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/ae1911b9-1d2f-4bb4-9d75-9aa3c35100e8/0/285218D0288125F1010B5469F03888B08A661969.mft
File:                     285218D0288125F1010B5469F03888B08A661969.mft (raw, json)
Hash identifier:          CZNpbN1sgclCepNvJjr33pGYy2tDAPDTmKHZCI4XXSM=
Subject key identifier:   81:BB:DE:58:FD:57:73:63:71:E9:AD:34:FC:BB:66:D4:92:BD:CC:18
Authority key identifier: 28:52:18:D0:28:81:25:F1:01:0B:54:69:F0:38:88:B0:8A:66:19:69
Certificate issuer:       /CN=285218D0288125F1010B5469F03888B08A661969
Certificate serial:       4CF07F5C5869546A3539409D70BA49FD9F0AF031
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/285218D0288125F1010B5469F03888B08A661969.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/ae1911b9-1d2f-4bb4-9d75-9aa3c35100e8/0/285218D0288125F1010B5469F03888B08A661969.mft
Manifest number:          0543
Signing time:             Sat 31 Jan 2026 03:51:32 +0000
Manifest this update:     Sat 31 Jan 2026 03:46:32 +0000
Manifest next update:     Tue 03 Feb 2026 15:38:32 +0000
Files and hashes:         1: 285218D0288125F1010B5469F03888B08A661969.crl (hash: ffYTSLj7xXjG4Ly6AIm5/f14GW25C/dmVHVzCjUKSCk=)
                          2: 3130332e3134352e36362e302f32332d3234203d3e20313339343430.roa (hash: 3WvRyWguaKJ79IiRQCYW4ffkb6kXppTp2QGnBBoTwmo=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/ae1911b9-1d2f-4bb4-9d75-9aa3c35100e8/0/285218D0288125F1010B5469F03888B08A661969.crl
                          rsync://repo-rpki.idnic.net/repo/ae1911b9-1d2f-4bb4-9d75-9aa3c35100e8/0/285218D0288125F1010B5469F03888B08A661969.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/285218D0288125F1010B5469F03888B08A661969.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 03 Feb 2026 15:38:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:f0:7f:5c:58:69:54:6a:35:39:40:9d:70:ba:49:fd:9f:0a:f0:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=285218D0288125F1010B5469F03888B08A661969
        Validity
            Not Before: Jan 31 03:46:32 2026 GMT
            Not After : Feb  3 15:38:32 2026 GMT
        Subject: CN=81BBDE58FD57736371E9AD34FCBB66D492BDCC18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:9b:66:9b:cb:37:1d:d9:2b:29:f1:38:b8:b9:
                    62:9c:99:ff:c1:59:f0:ee:c3:0e:df:ae:87:fe:59:
                    e7:67:31:6f:f6:e1:cd:54:9f:4b:8f:fc:b6:44:e1:
                    e1:42:50:72:b7:5e:b1:a5:10:d3:19:9f:b4:55:62:
                    7b:fe:8b:b8:65:8d:7b:29:fb:61:05:30:68:33:91:
                    a8:63:50:e6:15:77:34:cf:e8:af:54:b0:77:b2:fe:
                    48:7a:7e:c5:87:7e:e3:49:5e:88:99:00:c8:e4:fb:
                    4c:34:27:84:1a:d7:bb:9c:05:25:f1:c1:ff:85:e3:
                    05:ea:84:f1:8b:d3:c4:60:3d:ea:bf:02:89:fd:61:
                    ba:a8:56:58:a2:56:49:6b:41:2a:8b:e6:16:fd:fd:
                    8f:3a:1a:42:92:70:3f:ac:cc:11:06:b0:48:b0:7c:
                    45:52:4b:2f:36:2b:92:cc:aa:17:dd:77:0b:4c:b2:
                    c0:54:43:94:2e:1d:fc:dd:b3:b0:e1:fc:fc:a7:c7:
                    be:bc:d6:af:22:bb:43:c5:94:92:5d:3e:1e:b8:59:
                    71:b2:56:0d:68:0b:ad:56:52:a4:13:af:d5:7e:b4:
                    17:d2:41:3c:21:ea:49:03:b2:8a:a4:66:d7:31:b4:
                    88:4f:6a:6a:06:dd:04:88:f1:c2:05:2b:f6:7c:0a:
                    16:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:BB:DE:58:FD:57:73:63:71:E9:AD:34:FC:BB:66:D4:92:BD:CC:18
            X509v3 Authority Key Identifier:
                keyid:28:52:18:D0:28:81:25:F1:01:0B:54:69:F0:38:88:B0:8A:66:19:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/ae1911b9-1d2f-4bb4-9d75-9aa3c35100e8/0/285218D0288125F1010B5469F03888B08A661969.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/285218D0288125F1010B5469F03888B08A661969.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ae1911b9-1d2f-4bb4-9d75-9aa3c35100e8/0/285218D0288125F1010B5469F03888B08A661969.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:70:4c:8d:6f:b2:8d:86:44:ef:61:d8:68:97:42:11:b1:b9:
         c5:97:cb:43:dc:ca:91:b3:9b:78:02:0c:16:29:6e:bb:1f:1b:
         52:8b:7a:c7:b6:c5:99:7a:58:0c:e5:6f:6c:fd:81:67:70:1d:
         ff:48:91:00:7f:4a:ca:58:10:68:08:06:d4:1e:5c:5f:b4:01:
         90:05:c0:41:83:fe:41:91:f7:75:5d:6c:da:33:0f:be:25:9a:
         ed:f4:d3:fd:82:ee:b1:cc:a5:0c:f3:a8:0f:b7:6e:ba:31:12:
         ee:e3:34:ff:84:9e:3a:ae:19:2b:01:d4:ad:6b:cd:07:3a:ea:
         76:3d:8d:ea:34:a6:cf:29:2b:d7:d8:ef:54:30:46:81:20:b4:
         57:eb:de:58:2f:9a:6d:c5:cd:ec:6b:3e:21:49:83:08:d8:22:
         9d:75:aa:4b:fd:65:61:7d:f7:3c:e7:ab:2e:45:0e:7d:bd:68:
         0c:ef:8c:d2:ff:11:ed:4b:da:0c:49:c0:11:af:a4:bc:86:3a:
         5a:b4:44:1c:d6:b2:c1:33:7d:53:89:e0:07:97:93:bb:6e:0d:
         53:9a:e9:df:d3:6d:8a:d8:77:5d:38:f8:c0:d2:91:08:47:53:
         7b:af:15:5b:f7:49:2b:4a:58:37:4f:e7:ec:ce:90:40:df:e7:
         01:f1:ae:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 10:04:19 2026 by rpki-client