This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/b27b11c2-ab90-420f-b49c-3cc332eb7d64/0/62C35B9AD91CB5B6A52F4D28F2C5F7B252FC480E.mft
File:                     62C35B9AD91CB5B6A52F4D28F2C5F7B252FC480E.mft (raw, json)
Hash identifier:          gLdcQmK11HeYpJiVDxl2OqSE4ESyHjYPvDElwU610H4=
Subject key identifier:   8D:97:E2:88:F9:9A:EA:DC:85:5E:4C:D2:4F:9D:A9:C0:03:E5:CA:37
Authority key identifier: 62:C3:5B:9A:D9:1C:B5:B6:A5:2F:4D:28:F2:C5:F7:B2:52:FC:48:0E
Certificate issuer:       /CN=62C35B9AD91CB5B6A52F4D28F2C5F7B252FC480E
Certificate serial:       454E26332386ECC7ED299B9D676E1BFEB4329AD9
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/62C35B9AD91CB5B6A52F4D28F2C5F7B252FC480E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/b27b11c2-ab90-420f-b49c-3cc332eb7d64/0/62C35B9AD91CB5B6A52F4D28F2C5F7B252FC480E.mft
Manifest number:          04C3
Signing time:             Sat 31 Jan 2026 21:12:13 +0000
Manifest this update:     Sat 31 Jan 2026 21:07:13 +0000
Manifest next update:     Wed 04 Feb 2026 07:27:13 +0000
Files and hashes:         1: 3130332e3135352e32382e302f32342d3234203d3e20313431303636.roa (hash: 37Na13ceKxwy7/MxF6iCFolj+zTVulov5Ebf5kXzs0E=)
                          2: 62C35B9AD91CB5B6A52F4D28F2C5F7B252FC480E.crl (hash: OjFgkvuSWdkwxhZcJglVk8MsYShFFQKtEwaatQXtK98=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/b27b11c2-ab90-420f-b49c-3cc332eb7d64/0/62C35B9AD91CB5B6A52F4D28F2C5F7B252FC480E.crl
                          rsync://repo-rpki.idnic.net/repo/b27b11c2-ab90-420f-b49c-3cc332eb7d64/0/62C35B9AD91CB5B6A52F4D28F2C5F7B252FC480E.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/62C35B9AD91CB5B6A52F4D28F2C5F7B252FC480E.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 04 Feb 2026 07:27:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:4e:26:33:23:86:ec:c7:ed:29:9b:9d:67:6e:1b:fe:b4:32:9a:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62C35B9AD91CB5B6A52F4D28F2C5F7B252FC480E
        Validity
            Not Before: Jan 31 21:07:13 2026 GMT
            Not After : Feb  4 07:27:13 2026 GMT
        Subject: CN=8D97E288F99AEADC855E4CD24F9DA9C003E5CA37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:30:c3:0c:e5:21:9b:b3:f9:23:ad:c1:ea:fe:
                    5b:2d:3a:b0:3b:fd:85:61:67:59:7b:3a:7b:53:82:
                    60:7e:5d:3f:9d:5e:ad:45:7e:7e:f2:cf:da:94:a8:
                    c4:fe:42:08:37:a0:ac:1f:c1:30:c8:40:78:d6:ae:
                    cf:8e:93:f9:67:c9:a2:9d:06:f3:fb:c5:c3:b8:a4:
                    fe:36:80:cb:3a:3e:b6:27:8d:4b:60:e3:90:b9:2e:
                    00:b5:5a:3b:04:e0:76:41:4c:b3:83:6f:e9:ad:d9:
                    f7:88:e7:a3:d0:12:d8:50:b4:94:66:a4:d1:1b:c0:
                    01:94:17:32:ab:cb:ac:d3:05:2f:9d:24:e0:e8:c9:
                    09:1d:56:57:0d:29:c7:59:12:79:5b:b5:52:21:4e:
                    a0:4a:4e:09:e4:6f:77:13:51:6e:e2:9a:4c:3f:6d:
                    72:6a:16:47:1f:95:ab:41:0d:77:c4:db:f1:6f:2e:
                    6f:c1:d1:f0:1b:79:a5:e4:ce:b0:3a:be:20:22:46:
                    30:ac:e7:19:b7:89:b8:93:c7:47:c1:4f:ce:27:aa:
                    0e:08:d1:bc:cd:73:42:67:44:56:25:60:d1:3e:99:
                    02:f9:c5:9d:d2:25:f3:9b:be:cc:f1:2c:a5:4a:d9:
                    57:8c:e2:b1:11:75:b6:69:82:c3:ce:11:23:3f:ff:
                    04:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:97:E2:88:F9:9A:EA:DC:85:5E:4C:D2:4F:9D:A9:C0:03:E5:CA:37
            X509v3 Authority Key Identifier:
                keyid:62:C3:5B:9A:D9:1C:B5:B6:A5:2F:4D:28:F2:C5:F7:B2:52:FC:48:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/b27b11c2-ab90-420f-b49c-3cc332eb7d64/0/62C35B9AD91CB5B6A52F4D28F2C5F7B252FC480E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/62C35B9AD91CB5B6A52F4D28F2C5F7B252FC480E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b27b11c2-ab90-420f-b49c-3cc332eb7d64/0/62C35B9AD91CB5B6A52F4D28F2C5F7B252FC480E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:cb:e7:d2:ae:9c:e3:32:d6:8a:fd:8c:ff:5e:77:19:fd:f1:
         31:fd:e5:92:53:fa:95:c5:0f:93:24:16:87:5b:17:db:84:23:
         6f:af:c8:f9:96:b1:6e:7e:d8:1c:04:b2:a0:ec:09:cd:67:3c:
         7e:0a:51:d3:94:7a:7b:a6:c5:f5:1e:b6:1f:68:4e:4f:eb:3d:
         97:50:a9:a0:6b:03:71:8b:74:02:91:d0:6d:0b:61:38:f9:b5:
         8b:8d:7b:31:90:d8:5d:39:54:2a:63:a3:de:b9:83:3b:99:72:
         18:eb:e7:90:8b:4f:0b:8e:da:77:08:7b:74:3b:34:d7:88:6b:
         39:a9:36:a3:1d:ef:6a:1d:38:52:84:ca:68:06:6d:cb:49:80:
         e1:44:c6:08:ed:e8:99:22:87:f4:7f:17:1d:a2:7e:3b:85:56:
         cd:40:54:98:25:c5:c1:f7:5c:b9:e1:fe:26:5c:41:2e:cb:ae:
         bc:bf:89:70:70:77:2d:00:2c:da:ca:92:3d:53:17:90:f5:e5:
         d4:d9:ac:32:1f:0a:28:d3:5e:b0:b2:64:27:a1:74:2c:be:07:
         3b:dd:a1:50:8d:cd:b9:74:46:d5:5b:76:98:55:b1:0d:ac:fb:
         34:d2:60:11:fc:f4:ab:9c:60:8a:ff:c6:12:ff:79:5a:7a:e0:
         d1:54:74:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 12:48:38 2026 by rpki-client