This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/ccbfb228-fd05-4afd-87bd-ed580b55036f/0/052EE59C1D4149A77DF1555311C056DCDBC5FF4C.mft
File:                     052EE59C1D4149A77DF1555311C056DCDBC5FF4C.mft (raw, json)
Hash identifier:          tLh3nCElr2fhO7lSsE5b6M3tYa8+rzqgRwyaaCsb2iE=
Subject key identifier:   91:67:64:6E:EE:38:8A:17:A7:1F:F6:10:69:2F:0C:89:C8:DC:FC:61
Authority key identifier: 05:2E:E5:9C:1D:41:49:A7:7D:F1:55:53:11:C0:56:DC:DB:C5:FF:4C
Certificate issuer:       /CN=052EE59C1D4149A77DF1555311C056DCDBC5FF4C
Certificate serial:       16A08FC6F3942D5210131D4513543137DC2933EE
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/052EE59C1D4149A77DF1555311C056DCDBC5FF4C.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/ccbfb228-fd05-4afd-87bd-ed580b55036f/0/052EE59C1D4149A77DF1555311C056DCDBC5FF4C.mft
Manifest number:          0358
Signing time:             Sun 01 Feb 2026 19:42:07 +0000
Manifest this update:     Sun 01 Feb 2026 19:37:07 +0000
Manifest next update:     Thu 05 Feb 2026 00:44:07 +0000
Files and hashes:         1: 3130332e3136312e3139342e302f32332d3233203d3e20313431363232.roa (hash: oZleMN4XSuVHyPBpWgeFkCol07oh2xMRlYa+Uzesyrw=)
                          2: 3130332e3136312e3139352e302f32342d3234203d3e20313431363232.roa (hash: 3Jf6rjo7oK98mb2AwseOoU04Ietp18eSMPo87t19+zs=)
                          3: 3130332e3136312e3139342e302f32342d3234203d3e20313431363232.roa (hash: byxFPyjiQJT5Oo5JN6VrZseWPHWMRktKnANVfaiZKVo=)
                          4: 052EE59C1D4149A77DF1555311C056DCDBC5FF4C.crl (hash: CLYhp8RTBchkVD6Flps8E66GyN9BKlDghLJWY/ASF/g=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/ccbfb228-fd05-4afd-87bd-ed580b55036f/0/052EE59C1D4149A77DF1555311C056DCDBC5FF4C.crl
                          rsync://repo-rpki.idnic.net/repo/ccbfb228-fd05-4afd-87bd-ed580b55036f/0/052EE59C1D4149A77DF1555311C056DCDBC5FF4C.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/052EE59C1D4149A77DF1555311C056DCDBC5FF4C.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 05 Feb 2026 00:44:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:a0:8f:c6:f3:94:2d:52:10:13:1d:45:13:54:31:37:dc:29:33:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=052EE59C1D4149A77DF1555311C056DCDBC5FF4C
        Validity
            Not Before: Feb  1 19:37:07 2026 GMT
            Not After : Feb  5 00:44:07 2026 GMT
        Subject: CN=9167646EEE388A17A71FF610692F0C89C8DCFC61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:7b:a6:32:24:c7:e3:de:89:a3:12:a7:04:49:
                    50:3f:dd:00:b8:89:84:1b:5f:f0:a8:bf:9a:45:dd:
                    16:0a:a9:18:7c:14:b6:01:b2:02:11:b8:76:34:20:
                    56:a9:70:8c:34:45:91:78:ce:02:be:77:9d:0e:6a:
                    15:14:87:ab:c3:da:37:5b:64:0b:91:00:9d:a7:c5:
                    31:a1:48:e6:d5:21:c9:af:f8:ae:b9:e2:27:65:ff:
                    c8:c3:5f:43:5b:80:08:84:83:4f:29:a9:02:ac:31:
                    dc:eb:cd:ee:90:8b:ad:a8:e7:11:51:70:73:ce:7c:
                    e5:eb:99:0d:b4:5e:4c:20:6b:c9:0b:fd:1d:ce:c2:
                    ee:55:f5:00:cd:5f:14:3e:38:cf:a4:ba:d6:a7:ad:
                    da:bd:e8:a9:22:ff:9b:ce:85:f5:b4:81:18:d2:ed:
                    b2:e4:6a:e1:43:4b:3b:2d:3f:ae:5b:bd:34:de:b4:
                    06:e4:df:0a:f5:0f:17:a0:1e:e5:6d:c7:df:d6:90:
                    11:ff:71:7f:be:de:3d:77:69:54:e2:55:0a:66:33:
                    6b:8d:eb:53:9f:0b:24:7c:a8:a6:db:0d:4b:f3:82:
                    47:07:3e:8b:a1:95:b7:41:d2:87:c3:d6:0e:01:c5:
                    92:69:10:83:d7:23:1b:ca:c3:57:00:79:eb:2f:f6:
                    b5:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:67:64:6E:EE:38:8A:17:A7:1F:F6:10:69:2F:0C:89:C8:DC:FC:61
            X509v3 Authority Key Identifier:
                keyid:05:2E:E5:9C:1D:41:49:A7:7D:F1:55:53:11:C0:56:DC:DB:C5:FF:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/ccbfb228-fd05-4afd-87bd-ed580b55036f/0/052EE59C1D4149A77DF1555311C056DCDBC5FF4C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/052EE59C1D4149A77DF1555311C056DCDBC5FF4C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ccbfb228-fd05-4afd-87bd-ed580b55036f/0/052EE59C1D4149A77DF1555311C056DCDBC5FF4C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:ca:0a:70:eb:ef:3c:94:e4:74:39:0e:fb:eb:48:33:75:0d:
         9d:8a:b3:ab:ad:b7:e7:5a:44:4b:8c:10:f6:35:d6:1d:53:3c:
         d4:56:bb:8e:4b:08:b5:f2:77:e0:03:4c:4f:f4:5f:14:32:ba:
         3d:cb:92:fb:df:99:44:33:81:b5:a1:7a:c4:ae:fa:33:f2:86:
         4c:e1:a9:55:f1:7c:10:5c:97:9f:96:00:8c:4b:be:16:f2:6a:
         7d:aa:12:30:94:51:09:3a:d5:37:f9:02:2b:cf:15:b9:59:c4:
         3b:99:5d:9e:1e:a6:77:4d:df:1e:c7:76:d7:72:8f:3a:2d:50:
         23:2a:42:c1:20:0a:99:b4:9c:92:0e:aa:34:9a:6b:a4:ed:7e:
         cf:01:89:2f:e4:bd:1d:2b:5d:df:25:e9:19:a7:22:51:e3:5d:
         ff:a8:cb:56:79:c7:72:22:d6:c3:bc:ca:4d:71:3d:87:d7:a5:
         59:01:1d:87:50:44:c3:3b:ac:16:40:c5:f6:63:77:66:6b:9d:
         f8:84:71:a3:09:ec:c0:8f:b8:34:06:a0:4a:bf:a0:42:5d:29:
         2a:3e:aa:cb:8b:65:c9:89:ab:08:ff:c2:8d:5f:6a:2d:3a:ef:
         bb:61:ab:c6:40:23:fd:b1:85:64:0d:da:04:aa:00:a0:5f:fb:
         22:9d:02:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 09:43:39 2026 by rpki-client