This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/b35129e4-2328-43d2-a458-9d3829614815/0/E42B0752D5FFAB254C3F0E221499F67420870FEB.mft
File:                     E42B0752D5FFAB254C3F0E221499F67420870FEB.mft (raw, json)
Hash identifier:          hKY/5gzm2BmLircTvINJKHS3FehZ9YaWt+6T45CGhv8=
Subject key identifier:   74:68:46:69:98:50:26:60:F7:64:77:8C:46:2D:75:09:E7:9E:DC:1E
Authority key identifier: E4:2B:07:52:D5:FF:AB:25:4C:3F:0E:22:14:99:F6:74:20:87:0F:EB
Certificate issuer:       /CN=E42B0752D5FFAB254C3F0E221499F67420870FEB
Certificate serial:       26A6BF572ACD50117E3883326DDE3136A9A3DA8C
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E42B0752D5FFAB254C3F0E221499F67420870FEB.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/b35129e4-2328-43d2-a458-9d3829614815/0/E42B0752D5FFAB254C3F0E221499F67420870FEB.mft
Manifest number:          04CC
Signing time:             Sat 31 Jan 2026 08:51:18 +0000
Manifest this update:     Sat 31 Jan 2026 08:46:18 +0000
Manifest next update:     Tue 03 Feb 2026 13:44:18 +0000
Files and hashes:         1: 3230322e35382e3137362e302f32312d3234203d3e203234353236.roa (hash: TiBDscIwDM8LXa+oZsdSozLCIgCynFE1SJZ86LD1GBs=)
                          2: E42B0752D5FFAB254C3F0E221499F67420870FEB.crl (hash: sUizQtJBPUUJ7bDyOfr9LZJRedZKbIURsrSmxip2L9U=)
                          3: 3230322e35382e3136302e302f32302d3234203d3e203234353236.roa (hash: U5G6WyuhUeeAyAkhv6VtLWLCxLc3eTUGqsMy7Fb3zes=)
                          4: 323430323a646130303a3a2f33322d3438203d3e203234353236.roa (hash: KXkQEzDE7eAOGwkwjqYSUBJ2gO8yBncemPnpiy3ztzA=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/b35129e4-2328-43d2-a458-9d3829614815/0/E42B0752D5FFAB254C3F0E221499F67420870FEB.crl
                          rsync://repo-rpki.idnic.net/repo/b35129e4-2328-43d2-a458-9d3829614815/0/E42B0752D5FFAB254C3F0E221499F67420870FEB.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E42B0752D5FFAB254C3F0E221499F67420870FEB.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 03 Feb 2026 13:44:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:a6:bf:57:2a:cd:50:11:7e:38:83:32:6d:de:31:36:a9:a3:da:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E42B0752D5FFAB254C3F0E221499F67420870FEB
        Validity
            Not Before: Jan 31 08:46:18 2026 GMT
            Not After : Feb  3 13:44:18 2026 GMT
        Subject: CN=7468466998502660F764778C462D7509E79EDC1E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:e1:cf:d8:b9:1c:7d:48:f5:56:67:05:af:18:
                    dc:b8:42:a2:8d:67:94:ed:d9:6e:3f:30:16:71:68:
                    88:67:10:48:dc:bf:8c:75:7c:e2:9c:7d:10:93:da:
                    60:eb:c3:78:c0:9e:15:1e:54:70:5a:df:c9:e9:95:
                    f4:e7:05:73:7c:63:2c:19:52:55:da:62:36:70:6c:
                    9c:ff:e9:ab:a1:00:b0:df:fc:76:d6:a4:5c:cd:83:
                    f8:50:f0:d3:6e:c1:b0:e3:af:d2:32:91:05:8e:f5:
                    3a:7c:df:b8:1d:8c:9b:70:13:53:f6:bf:9d:42:5b:
                    f8:8e:0b:5e:2a:95:03:df:6a:bd:df:9e:28:7f:39:
                    4c:02:5f:40:8e:87:d0:d8:05:e2:da:8e:e6:b8:23:
                    98:3f:a5:6b:25:8b:00:71:ae:7a:bc:81:79:b7:3e:
                    64:89:a5:14:6c:54:eb:34:fd:e9:70:97:cd:7b:e7:
                    bc:d1:59:2a:9a:e2:13:d0:cc:d0:91:fe:96:92:ba:
                    d9:3f:43:f8:f7:ad:33:8b:e8:ec:81:44:48:4c:c6:
                    7f:c7:f8:7f:bb:81:c4:a3:4e:6f:fc:9c:ea:a7:d2:
                    a8:77:3f:8f:7f:f9:0d:10:44:10:7b:35:c2:63:e2:
                    46:69:20:8a:ef:90:c8:11:54:89:7e:10:d1:31:9a:
                    73:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:68:46:69:98:50:26:60:F7:64:77:8C:46:2D:75:09:E7:9E:DC:1E
            X509v3 Authority Key Identifier:
                keyid:E4:2B:07:52:D5:FF:AB:25:4C:3F:0E:22:14:99:F6:74:20:87:0F:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/b35129e4-2328-43d2-a458-9d3829614815/0/E42B0752D5FFAB254C3F0E221499F67420870FEB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E42B0752D5FFAB254C3F0E221499F67420870FEB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b35129e4-2328-43d2-a458-9d3829614815/0/E42B0752D5FFAB254C3F0E221499F67420870FEB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:3f:b9:ef:5b:c2:db:71:ad:36:d9:40:dd:e6:28:12:45:f1:
         b1:4e:a4:6d:d5:7b:bc:1a:e6:3b:23:4c:52:6a:ea:e4:3a:d4:
         6d:e6:13:cf:87:fd:f1:dc:d9:88:91:10:d8:89:b2:9f:08:16:
         56:c9:90:29:4d:89:53:80:cd:a8:71:ef:d8:33:54:4c:3d:17:
         97:4f:fe:f0:fe:61:fd:c1:08:c3:33:a6:38:63:20:87:95:36:
         8a:5f:e9:c9:af:40:ba:34:5c:f2:c6:a8:79:60:50:89:2a:c1:
         e0:57:94:ae:02:a1:98:3d:6d:fc:ec:1f:82:6b:fd:66:f0:40:
         76:0f:ff:87:21:d6:76:e2:14:ae:ce:b5:8f:58:09:c0:6a:ad:
         00:bf:ea:1d:7a:4f:0f:91:38:e0:42:31:b2:0a:47:19:bb:da:
         2d:ed:47:87:c9:32:91:62:c1:26:1e:b2:eb:d7:fe:49:fb:04:
         45:65:c3:5f:80:db:74:87:df:e9:42:5c:f2:31:0e:4e:50:3d:
         00:7c:71:87:a1:90:92:c2:28:fb:ef:42:b2:02:71:8e:b6:ba:
         30:8e:f3:40:f8:ee:67:ea:39:2a:04:cc:70:79:b0:5e:12:dc:
         7e:86:b4:be:bc:f4:ca:d6:8c:df:3a:94:4a:ef:67:c9:bf:7b:
         39:ea:8b:e0
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUJqa/VyrNUBF+OIMybd4xNqmj2owwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTQyQjA3NTJENUZGQUIyNTRDM0YwRTIyMTQ5OUY2NzQy
MDg3MEZFQjAeFw0yNjAxMzEwODQ2MThaFw0yNjAyMDMxMzQ0MThaMDMxMTAvBgNV
BAMTKDc0Njg0NjY5OTg1MDI2NjBGNzY0Nzc4QzQ2MkQ3NTA5RTc5RURDMUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDy4c/YuRx9SPVWZwWvGNy4QqKN
Z5Tt2W4/MBZxaIhnEEjcv4x1fOKcfRCT2mDrw3jAnhUeVHBa38nplfTnBXN8YywZ
UlXaYjZwbJz/6auhALDf/HbWpFzNg/hQ8NNuwbDjr9IykQWO9Tp837gdjJtwE1P2
v51CW/iOC14qlQPfar3fnih/OUwCX0COh9DYBeLajua4I5g/pWsliwBxrnq8gXm3
PmSJpRRsVOs0/elwl81757zRWSqa4hPQzNCR/paSutk/Q/j3rTOL6OyBREhMxn/H
+H+7gcSjTm/8nOqn0qh3P49/+Q0QRBB7NcJj4kZpIIrvkMgRVIl+ENExmnPNAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUdGhGaZhQJmD3ZHeMRi11Ceee3B4wHwYDVR0j
BBgwFoAU5CsHUtX/qyVMPw4iFJn2dCCHD+swDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i
MzUxMjllNC0yMzI4LTQzZDItYTQ1OC05ZDM4Mjk2MTQ4MTUvMC9FNDJCMDc1MkQ1
RkZBQjI1NEMzRjBFMjIxNDk5RjY3NDIwODcwRkVCLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvRTQyQjA3NTJENUZGQUIyNTRDM0YwRTIyMTQ5OUY2NzQyMDg3
MEZFQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjM1MTI5ZTQtMjMyOC00M2QyLWE0
NTgtOWQzODI5NjE0ODE1LzAvRTQyQjA3NTJENUZGQUIyNTRDM0YwRTIyMTQ5OUY2
NzQyMDg3MEZFQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAIw/ue9bwttxrTbZQN3mKBJF8bFOpG3Ve7wa
5jsjTFJq6uQ61G3mE8+H/fHc2YiRENiJsp8IFlbJkClNiVOAzahx79gzVEw9F5dP
/vD+Yf3BCMMzpjhjIIeVNopf6cmvQLo0XPLGqHlgUIkqweBXlK4CoZg9bfzsH4Jr
/WbwQHYP/4ch1nbiFK7OtY9YCcBqrQC/6h16Tw+ROOBCMbIKRxm72i3tR4fJMpFi
wSYesuvX/kn7BEVlw1+A23SH3+lCXPIxDk5QPQB8cYehkJLCKPvvQrICcY62ujCO
80D47mfqOSoEzHB5sF4S3H6GtL689MrWjN86lErvZ8m/eznqi+A=
-----END CERTIFICATE-----
Generated at Mon Feb 2 12:55:38 2026 by rpki-client