This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/ca1f3b37-bd54-4911-905b-365496687c8d/0/E0FBA03D6B6895CEB53722CEFDB94C5601BDEA42.mft
File:                     E0FBA03D6B6895CEB53722CEFDB94C5601BDEA42.mft (raw, json)
Hash identifier:          C3END0TTZtooBwkxDLatfGheJ0LI8nXDjdRGHD4UyK4=
Subject key identifier:   9D:E7:68:AD:0A:D1:C8:17:49:A0:BA:EA:93:CC:B3:3A:B9:00:4A:F7
Authority key identifier: E0:FB:A0:3D:6B:68:95:CE:B5:37:22:CE:FD:B9:4C:56:01:BD:EA:42
Certificate issuer:       /CN=E0FBA03D6B6895CEB53722CEFDB94C5601BDEA42
Certificate serial:       573985D252A825980DC35EB5B60C210BB914A620
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E0FBA03D6B6895CEB53722CEFDB94C5601BDEA42.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/ca1f3b37-bd54-4911-905b-365496687c8d/0/E0FBA03D6B6895CEB53722CEFDB94C5601BDEA42.mft
Manifest number:          054E
Signing time:             Mon 02 Feb 2026 07:40:06 +0000
Manifest this update:     Mon 02 Feb 2026 07:35:06 +0000
Manifest next update:     Thu 05 Feb 2026 11:53:06 +0000
Files and hashes:         1: 35392e3135332e32342e302f32332d3233203d3e203539323835.roa (hash: 1SizngiTVzIbRBWH1t3CjVmzzkPKhWLCfAxINTFYNoo=)
                          2: E0FBA03D6B6895CEB53722CEFDB94C5601BDEA42.crl (hash: 88H2LvooTw/mt5XlSgdc5428K8BvROIYQ5bH5EeaJNk=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/ca1f3b37-bd54-4911-905b-365496687c8d/0/E0FBA03D6B6895CEB53722CEFDB94C5601BDEA42.crl
                          rsync://repo-rpki.idnic.net/repo/ca1f3b37-bd54-4911-905b-365496687c8d/0/E0FBA03D6B6895CEB53722CEFDB94C5601BDEA42.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E0FBA03D6B6895CEB53722CEFDB94C5601BDEA42.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 05 Feb 2026 05:24:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:39:85:d2:52:a8:25:98:0d:c3:5e:b5:b6:0c:21:0b:b9:14:a6:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E0FBA03D6B6895CEB53722CEFDB94C5601BDEA42
        Validity
            Not Before: Feb  2 07:35:06 2026 GMT
            Not After : Feb  5 11:53:06 2026 GMT
        Subject: CN=9DE768AD0AD1C81749A0BAEA93CCB33AB9004AF7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:25:29:2f:42:59:45:f8:6a:20:ec:5d:65:06:
                    26:a9:a8:76:47:cf:fd:2c:51:06:bd:8d:cd:6e:15:
                    64:fb:17:e8:31:e8:86:d0:2e:6b:da:9d:db:ab:be:
                    1c:fc:b0:6a:9c:73:1e:09:d3:88:ac:e9:be:00:f8:
                    ec:e5:a0:d0:0e:97:a4:79:66:51:69:62:e7:cd:39:
                    01:e6:e2:5f:5a:05:40:20:57:d4:0b:ec:c0:c8:1e:
                    16:90:80:23:12:9d:6a:a3:b9:8f:c8:b1:99:c6:33:
                    4d:bd:13:84:57:48:49:73:b2:a4:f9:bd:bb:f0:a3:
                    f8:1d:37:4f:f4:75:bc:c9:3d:c3:0c:3e:ce:0f:32:
                    68:20:bd:62:48:b1:e1:50:3b:7d:bd:6d:c2:82:70:
                    2b:82:0c:e2:09:44:2f:c4:83:d1:4c:63:0a:d0:dc:
                    04:fd:3e:57:af:55:31:ad:e3:06:ee:23:eb:28:08:
                    d8:b4:0b:d8:a9:2b:ca:a1:90:e9:4c:b3:2e:f1:cc:
                    02:d2:8c:0c:1b:0a:dd:fb:aa:c9:4d:6e:3e:eb:1f:
                    23:53:7f:b9:36:23:4a:d4:0b:5d:3c:3e:82:b4:be:
                    d3:36:12:ff:2d:36:90:c4:f4:64:e8:92:b9:2f:9d:
                    b3:2a:47:1a:b1:82:0e:8d:38:7b:72:c6:9f:8f:b3:
                    e9:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:E7:68:AD:0A:D1:C8:17:49:A0:BA:EA:93:CC:B3:3A:B9:00:4A:F7
            X509v3 Authority Key Identifier:
                keyid:E0:FB:A0:3D:6B:68:95:CE:B5:37:22:CE:FD:B9:4C:56:01:BD:EA:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/ca1f3b37-bd54-4911-905b-365496687c8d/0/E0FBA03D6B6895CEB53722CEFDB94C5601BDEA42.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E0FBA03D6B6895CEB53722CEFDB94C5601BDEA42.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ca1f3b37-bd54-4911-905b-365496687c8d/0/E0FBA03D6B6895CEB53722CEFDB94C5601BDEA42.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:8b:ec:5a:10:59:63:94:e0:4f:0c:2b:d2:5b:df:b8:ef:ac:
         93:6e:1f:16:ff:3b:00:5d:28:13:63:37:53:92:5e:51:69:e6:
         dc:55:b5:8b:42:52:87:47:35:ab:66:ea:0b:51:66:27:4a:5c:
         72:1e:2f:f9:76:c1:37:f2:7d:6c:81:80:34:22:a6:94:a0:01:
         b2:b7:5d:d4:d7:a5:4b:8c:4e:4e:0c:1b:09:2c:16:0f:f2:85:
         dc:64:43:18:ab:08:bd:64:98:d2:38:14:c9:f0:c2:8e:e1:91:
         92:f1:be:c4:b5:69:6c:b3:64:80:28:e3:3f:5b:a0:b1:d7:ab:
         bf:b5:52:f8:9d:96:d5:59:d7:fd:d4:1e:6a:ab:0c:f0:6b:33:
         df:a0:69:8e:d7:87:b9:99:9f:18:f0:c4:08:3b:e3:0b:ce:6a:
         85:cc:6b:60:84:1a:1f:88:a3:0a:9e:7b:42:e3:35:c6:e1:de:
         df:83:cb:a3:3d:9f:f5:d3:5f:ba:ce:b7:96:3f:1c:aa:6b:08:
         c3:3d:45:3b:80:3f:d3:24:7f:dc:95:66:18:01:71:bd:4e:19:
         6a:a7:1a:a6:c6:f1:b3:de:b4:d9:8d:02:3f:13:4b:c1:b0:77:
         94:99:ed:e8:3d:0b:b1:6c:cb:8d:1a:f0:8b:c9:a7:38:c7:4a:
         2f:18:23:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 09:45:09 2026 by rpki-client