This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/b11ca620-dace-4a9f-b8e8-a3a2e581500e/0/48549F5F50A2ABC93D8E6B9EC2074F116E3D73B8.mft
File:                     48549F5F50A2ABC93D8E6B9EC2074F116E3D73B8.mft (raw, json)
Hash identifier:          tb7p/c4LCy8rh/i/u2S+LVN8pTCsop2rYhP0EBlSnvk=
Subject key identifier:   7B:6C:3F:81:45:80:17:93:9E:97:3E:91:64:30:07:26:B3:25:A3:A9
Authority key identifier: 48:54:9F:5F:50:A2:AB:C9:3D:8E:6B:9E:C2:07:4F:11:6E:3D:73:B8
Certificate issuer:       /CN=48549F5F50A2ABC93D8E6B9EC2074F116E3D73B8
Certificate serial:       6FE85D126DD0F83618BF58311ACA99319615A03A
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/48549F5F50A2ABC93D8E6B9EC2074F116E3D73B8.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/b11ca620-dace-4a9f-b8e8-a3a2e581500e/0/48549F5F50A2ABC93D8E6B9EC2074F116E3D73B8.mft
Manifest number:          03CA
Signing time:             Sat 31 Jan 2026 23:21:08 +0000
Manifest this update:     Sat 31 Jan 2026 23:16:08 +0000
Manifest next update:     Wed 04 Feb 2026 00:30:08 +0000
Files and hashes:         1: 48549F5F50A2ABC93D8E6B9EC2074F116E3D73B8.crl (hash: GYhGPdSf6BVnj1HE0uFr0mLQLbe8+IULPYIJTZTWkbc=)
                          2: 3130332e3136392e3233392e302f32342d3234203d3e20313338383831.roa (hash: CZs1I8dUPWQDsBqpGNZkzGBe+O9Bk4R+3W5yaMyDGIY=)
                          3: 3130332e3136392e3233382e302f32342d3234203d3e20313338383831.roa (hash: P1vMuZbunUFRMJmCFPvVUKKPOpQNGYneEv0PzmT3lQM=)
                          4: 3130332e3136392e3233382e302f32332d3233203d3e20313338383831.roa (hash: bsXADU2MANDvYNrthrNZs3NmDaaJZRaO6UbqMjiPRtc=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/b11ca620-dace-4a9f-b8e8-a3a2e581500e/0/48549F5F50A2ABC93D8E6B9EC2074F116E3D73B8.crl
                          rsync://repo-rpki.idnic.net/repo/b11ca620-dace-4a9f-b8e8-a3a2e581500e/0/48549F5F50A2ABC93D8E6B9EC2074F116E3D73B8.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/48549F5F50A2ABC93D8E6B9EC2074F116E3D73B8.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 04 Feb 2026 00:30:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:e8:5d:12:6d:d0:f8:36:18:bf:58:31:1a:ca:99:31:96:15:a0:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48549F5F50A2ABC93D8E6B9EC2074F116E3D73B8
        Validity
            Not Before: Jan 31 23:16:08 2026 GMT
            Not After : Feb  4 00:30:08 2026 GMT
        Subject: CN=7B6C3F81458017939E973E9164300726B325A3A9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:d8:2e:70:21:96:73:5a:77:5e:40:da:aa:9b:
                    aa:01:d0:01:52:71:e5:42:4a:58:0e:dc:11:ed:ae:
                    a8:78:f4:bf:99:85:3c:79:2b:e9:4d:9a:63:4d:ca:
                    3b:c3:1f:b5:5b:8b:03:fa:7a:e4:64:25:4d:54:a3:
                    51:62:0d:0d:0b:65:98:ac:4a:84:28:0b:20:d1:70:
                    9b:29:47:dc:7c:77:35:81:98:8d:a6:69:ac:c3:d7:
                    97:cc:85:ed:e7:48:df:f0:bf:c7:86:4e:2b:dd:1a:
                    09:63:9a:24:65:d0:cf:dc:04:b7:85:2f:0a:17:30:
                    55:53:f0:32:ab:25:70:4f:ef:ed:af:f9:84:c4:f4:
                    4c:e8:e7:52:d1:d3:ce:cc:b9:32:c0:ce:a6:5c:65:
                    25:92:2d:67:cc:15:c9:80:bf:48:b8:39:82:0e:56:
                    fc:0f:99:d2:8f:df:82:ab:33:94:b7:0b:79:e7:ca:
                    bc:74:d2:5b:67:50:ea:61:4d:37:c4:e8:5d:95:12:
                    d9:79:95:07:fc:bf:eb:5f:d7:dd:91:29:e0:2c:83:
                    64:02:ac:f6:4d:80:f0:3e:05:e5:bb:f4:13:bd:07:
                    d1:99:e0:dc:a1:2c:99:91:55:c6:01:aa:41:42:f0:
                    b1:d7:35:6d:bf:1e:df:bc:11:b5:20:07:b5:31:14:
                    52:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:6C:3F:81:45:80:17:93:9E:97:3E:91:64:30:07:26:B3:25:A3:A9
            X509v3 Authority Key Identifier:
                keyid:48:54:9F:5F:50:A2:AB:C9:3D:8E:6B:9E:C2:07:4F:11:6E:3D:73:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/b11ca620-dace-4a9f-b8e8-a3a2e581500e/0/48549F5F50A2ABC93D8E6B9EC2074F116E3D73B8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/48549F5F50A2ABC93D8E6B9EC2074F116E3D73B8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b11ca620-dace-4a9f-b8e8-a3a2e581500e/0/48549F5F50A2ABC93D8E6B9EC2074F116E3D73B8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:de:74:2e:ef:88:ad:1b:eb:80:81:50:4e:90:3c:7e:c9:19:
         94:23:16:64:a9:43:57:d2:db:d0:85:5c:04:24:52:16:27:67:
         89:e6:5d:6b:40:48:fc:dc:96:63:11:c5:61:d4:aa:7e:f4:aa:
         fc:75:53:e0:ee:67:62:b6:fc:9f:4e:88:77:f5:11:54:7c:02:
         1e:42:77:7a:0c:32:17:7f:71:b7:88:38:95:f6:ba:af:e6:06:
         37:08:9d:54:e5:ab:52:43:54:57:d9:b4:7e:88:7a:c8:fb:13:
         82:3d:16:84:ab:c3:e2:b0:f3:d9:2c:ad:40:cc:75:93:7f:fb:
         3b:57:8e:cb:8f:2a:f9:c6:0d:9c:f7:46:fa:fb:e8:df:05:5d:
         a8:19:5f:39:ab:9e:9f:e3:5d:37:98:a4:ce:b0:0c:a8:fa:fa:
         36:97:65:49:27:bb:a4:03:3b:b4:f1:4f:0c:85:9d:c7:e1:51:
         b3:a6:de:b5:61:ad:c1:40:a4:a1:17:e8:d0:cd:eb:95:6d:05:
         85:e9:0e:ed:f7:b7:23:45:c0:2e:21:7b:97:42:a7:a9:0f:91:
         84:e9:ce:73:d7:2a:80:8b:0f:15:19:ee:f3:fe:10:5a:b2:fe:
         85:1b:c7:3b:83:60:00:e8:c9:b1:df:1e:de:a5:c0:5d:d9:84:
         be:e8:43:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 09:43:19 2026 by rpki-client