This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/c359b6a3-b74b-4baa-993a-818fb7210722/0/D34F7D48A07BB8A2DEEDC8C87819771181935231.mft
File:                     D34F7D48A07BB8A2DEEDC8C87819771181935231.mft (raw, json)
Hash identifier:          zXpNHV64cJUFUd7Kmizj9nhJ9xRO8I4vdj9mOHCZufo=
Subject key identifier:   E9:98:F0:F6:CA:05:AB:54:F3:AC:BB:01:D6:F0:F4:4A:FD:C3:4C:D0
Authority key identifier: D3:4F:7D:48:A0:7B:B8:A2:DE:ED:C8:C8:78:19:77:11:81:93:52:31
Certificate issuer:       /CN=D34F7D48A07BB8A2DEEDC8C87819771181935231
Certificate serial:       14341597693C64A9883C25008AF5F65A3186B3B4
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D34F7D48A07BB8A2DEEDC8C87819771181935231.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/c359b6a3-b74b-4baa-993a-818fb7210722/0/D34F7D48A07BB8A2DEEDC8C87819771181935231.mft
Manifest number:          023E
Signing time:             Sat 31 Jan 2026 19:10:00 +0000
Manifest this update:     Sat 31 Jan 2026 19:05:00 +0000
Manifest next update:     Wed 04 Feb 2026 05:18:00 +0000
Files and hashes:         1: 3130332e3138392e3131342e302f32342d3234203d3e20313439373533.roa (hash: mJRfdF8Fdla37pRzxHiZB6KLj2ueLFTilKfm0V/9nTs=)
                          2: D34F7D48A07BB8A2DEEDC8C87819771181935231.crl (hash: PPCAnnoXfmtaAwOT2L4NQ4fD5LBI3ik1izgagc+qXrU=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/c359b6a3-b74b-4baa-993a-818fb7210722/0/D34F7D48A07BB8A2DEEDC8C87819771181935231.crl
                          rsync://repo-rpki.idnic.net/repo/c359b6a3-b74b-4baa-993a-818fb7210722/0/D34F7D48A07BB8A2DEEDC8C87819771181935231.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D34F7D48A07BB8A2DEEDC8C87819771181935231.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 04 Feb 2026 05:18:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:34:15:97:69:3c:64:a9:88:3c:25:00:8a:f5:f6:5a:31:86:b3:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D34F7D48A07BB8A2DEEDC8C87819771181935231
        Validity
            Not Before: Jan 31 19:05:00 2026 GMT
            Not After : Feb  4 05:18:00 2026 GMT
        Subject: CN=E998F0F6CA05AB54F3ACBB01D6F0F44AFDC34CD0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:74:e3:21:8a:28:81:86:11:35:1a:c8:65:2a:
                    77:1c:f0:e9:94:69:f1:23:e0:f5:c9:e7:b4:f0:16:
                    fe:c9:75:a7:85:c9:39:c4:1d:fd:58:8e:81:a3:73:
                    70:c3:4a:d4:39:c1:c8:8f:87:1b:1a:c3:d5:52:74:
                    4e:e6:83:37:8d:3d:c6:c0:9a:d0:22:46:e5:76:9b:
                    2e:25:22:09:52:ed:18:0e:e7:15:6b:92:f4:bd:14:
                    a7:b7:33:db:65:60:6e:d0:64:30:b2:af:23:be:bb:
                    9f:89:fe:a1:f4:08:c0:24:68:83:2b:cd:15:72:c8:
                    c8:05:a0:95:65:ff:e9:9a:78:06:5f:60:9c:bd:d5:
                    6b:09:b7:f9:46:a7:43:d2:23:47:b3:14:e0:36:3e:
                    2a:3d:15:ef:73:70:7a:8c:ec:40:f2:e8:e4:49:4a:
                    45:dd:11:ce:a0:d3:20:d5:4b:d3:e0:6b:af:2b:70:
                    72:31:74:51:8c:8e:14:08:37:03:11:9d:29:dd:55:
                    c1:d6:f5:df:3e:29:a1:c9:33:e8:fd:2d:83:a8:d0:
                    90:09:82:a9:ae:b1:7d:41:4d:31:a9:17:b0:54:ed:
                    d9:d3:00:d8:05:76:69:ec:29:c9:12:3d:56:d5:c7:
                    b0:58:8e:22:68:a8:4c:56:21:a0:36:be:ab:ae:a7:
                    23:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:98:F0:F6:CA:05:AB:54:F3:AC:BB:01:D6:F0:F4:4A:FD:C3:4C:D0
            X509v3 Authority Key Identifier:
                keyid:D3:4F:7D:48:A0:7B:B8:A2:DE:ED:C8:C8:78:19:77:11:81:93:52:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/c359b6a3-b74b-4baa-993a-818fb7210722/0/D34F7D48A07BB8A2DEEDC8C87819771181935231.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D34F7D48A07BB8A2DEEDC8C87819771181935231.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c359b6a3-b74b-4baa-993a-818fb7210722/0/D34F7D48A07BB8A2DEEDC8C87819771181935231.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:46:ce:cd:d4:52:58:50:e7:d6:f9:37:52:1c:ce:96:9c:89:
         75:1e:7b:fd:88:b2:0e:0e:a0:a8:27:a7:e3:0e:f7:7c:53:b8:
         c3:23:be:7e:07:ca:ac:e7:ff:9f:05:0a:20:21:e5:f6:66:2f:
         b0:1b:00:3e:82:27:75:be:fa:f8:3b:bf:2e:d9:a3:e3:f8:0c:
         2d:d2:5c:07:63:af:8c:ec:ec:08:e1:f6:90:38:b4:8b:95:95:
         92:3d:e0:dc:13:fd:53:15:c1:19:47:07:de:65:8e:ec:b2:7a:
         3b:16:cf:5d:6d:cf:45:e3:9b:35:9a:89:d3:d3:05:bc:df:8f:
         1b:42:5b:79:85:a5:d5:f3:47:f0:ac:f4:a6:58:7a:92:75:5f:
         a9:e3:c6:27:43:74:ba:bd:69:6b:b2:d7:97:51:67:18:6b:1f:
         7d:bf:9b:a1:9f:27:23:a7:42:17:35:6a:7c:73:2e:11:04:00:
         ac:fc:2f:9a:57:d5:36:71:50:8a:7a:79:e3:79:57:77:4f:89:
         97:01:08:5e:8f:54:e2:20:70:c1:b8:bc:71:76:99:d2:4b:16:
         23:38:03:ea:88:9c:8d:ca:e8:59:62:39:46:39:b6:0c:12:01:
         c4:64:56:e9:b1:a9:d0:b0:ce:6e:8b:d7:8b:9e:cd:3a:e3:87:
         a6:5a:95:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 10:06:06 2026 by rpki-client