This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/ccd53948-ddf3-449a-bf2b-cf3f7ae176d3/0/3E2173CCE67F75D29F1CAAA739E6CC6727D6E088.mft
File:                     3E2173CCE67F75D29F1CAAA739E6CC6727D6E088.mft (raw, json)
Hash identifier:          HGQG2IX+kSU71qCkNxL45nvltITtCfLGojG/YGU7NNI=
Subject key identifier:   DF:76:96:A0:BB:10:A9:CC:0D:69:68:A2:1F:CF:A9:73:F0:CF:D0:30
Authority key identifier: 3E:21:73:CC:E6:7F:75:D2:9F:1C:AA:A7:39:E6:CC:67:27:D6:E0:88
Certificate issuer:       /CN=3E2173CCE67F75D29F1CAAA739E6CC6727D6E088
Certificate serial:       59D4EFA119539289938C8E27D40295EEF5DDB941
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E2173CCE67F75D29F1CAAA739E6CC6727D6E088.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/ccd53948-ddf3-449a-bf2b-cf3f7ae176d3/0/3E2173CCE67F75D29F1CAAA739E6CC6727D6E088.mft
Manifest number:          023A
Signing time:             Sun 01 Feb 2026 18:20:02 +0000
Manifest this update:     Sun 01 Feb 2026 18:15:02 +0000
Manifest next update:     Thu 05 Feb 2026 05:06:02 +0000
Files and hashes:         1: 3130332e39382e3131372e302f32342d3234203d3e20313336383230.roa (hash: u4NoFqVyyFqHI8VrRJJU5o8UKOJMJykYNFUtpxCJD/Y=)
                          2: 3130332e39382e3131382e302f32342d3234203d3e20313336383230.roa (hash: VpjDP2oZ/B1yei8Hfwo7pH5vGmOKYQBwxJOGVD0RFQE=)
                          3: 3130332e39382e3131362e302f32332d3233203d3e20313336383230.roa (hash: 5WMxfKjZT65hcUd7WB/JBj/IGlOrVSKyagiTEPB+Bbc=)
                          4: 3130332e39382e3131362e302f32322d3232203d3e20313336383230.roa (hash: D6xVrarR741Tat/B/aD4Gr/765oFGk3PkG8sC2eJZzQ=)
                          5: 3130332e39382e3131392e302f32342d3234203d3e20313336383230.roa (hash: fKyStuZP+cGYGL12Gl7DPoMVPGekA2LHOpNgfBK7K54=)
                          6: 3130332e39382e3131362e302f32342d3234203d3e20313336383230.roa (hash: hK06HKoqFlnupfPGbH4fj+kvbHmFb9y+Qhw58DcH1q0=)
                          7: 3E2173CCE67F75D29F1CAAA739E6CC6727D6E088.crl (hash: Lb/cC5lpKXhi3C8fU5ep4ftjU+vkxkegyr9m3HUNYQE=)
                          8: 3130332e39382e3131382e302f32332d3233203d3e20313336383230.roa (hash: EGqCere+OuMmi+yewJcL8GzC3eQu4ZQkb/8gD6T4+6E=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/ccd53948-ddf3-449a-bf2b-cf3f7ae176d3/0/3E2173CCE67F75D29F1CAAA739E6CC6727D6E088.crl
                          rsync://repo-rpki.idnic.net/repo/ccd53948-ddf3-449a-bf2b-cf3f7ae176d3/0/3E2173CCE67F75D29F1CAAA739E6CC6727D6E088.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E2173CCE67F75D29F1CAAA739E6CC6727D6E088.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 05 Feb 2026 05:06:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:d4:ef:a1:19:53:92:89:93:8c:8e:27:d4:02:95:ee:f5:dd:b9:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3E2173CCE67F75D29F1CAAA739E6CC6727D6E088
        Validity
            Not Before: Feb  1 18:15:02 2026 GMT
            Not After : Feb  5 05:06:02 2026 GMT
        Subject: CN=DF7696A0BB10A9CC0D6968A21FCFA973F0CFD030
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:c5:57:0d:4b:16:0d:f5:80:aa:7e:bd:26:9b:
                    71:f7:e3:23:e5:ec:6d:d4:63:68:66:3a:cd:8a:fb:
                    cc:ec:9a:ff:8f:13:47:f6:98:67:67:7e:a6:99:a4:
                    b8:40:81:17:43:1c:0c:8a:c3:61:c6:ff:b9:05:40:
                    25:22:8e:ed:ea:43:8a:c3:46:7f:66:2c:f0:74:f8:
                    61:8e:dc:de:36:f9:3f:90:8e:f5:49:f9:2b:3f:f0:
                    d3:63:fa:71:5b:f5:b0:21:37:79:2e:bd:a8:d7:a2:
                    80:9c:3a:44:24:db:05:ef:bb:60:b3:9d:a9:b0:30:
                    0e:9c:a5:2b:2c:57:f6:c4:d1:4e:b4:88:31:74:57:
                    f0:5a:2b:5e:57:37:3e:98:15:66:f4:3d:ce:9f:d4:
                    aa:db:02:98:ae:60:8d:ca:a1:0a:7b:1c:d2:3f:47:
                    c4:ad:4b:b7:aa:76:0c:1e:52:b4:b0:7d:b6:8f:07:
                    e2:fe:43:3a:11:98:1b:ef:da:26:d5:1b:c3:d5:7f:
                    6c:a1:a9:66:53:b8:c7:31:7f:f3:02:66:64:0a:dd:
                    f9:ee:8b:93:ad:d1:c3:2d:86:89:9a:f6:f0:d9:77:
                    24:93:93:3d:59:f0:58:32:de:9b:1e:e5:44:eb:bb:
                    12:36:1a:74:24:a8:1f:81:a7:4f:7b:e8:0d:da:5a:
                    e8:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:76:96:A0:BB:10:A9:CC:0D:69:68:A2:1F:CF:A9:73:F0:CF:D0:30
            X509v3 Authority Key Identifier:
                keyid:3E:21:73:CC:E6:7F:75:D2:9F:1C:AA:A7:39:E6:CC:67:27:D6:E0:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/ccd53948-ddf3-449a-bf2b-cf3f7ae176d3/0/3E2173CCE67F75D29F1CAAA739E6CC6727D6E088.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E2173CCE67F75D29F1CAAA739E6CC6727D6E088.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ccd53948-ddf3-449a-bf2b-cf3f7ae176d3/0/3E2173CCE67F75D29F1CAAA739E6CC6727D6E088.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:9a:ec:5f:2a:7c:7b:34:64:ed:f4:d7:68:1c:91:76:f1:a4:
         59:27:3a:70:97:83:f6:7a:79:64:16:a7:d2:1b:b8:5a:d2:33:
         9f:87:1f:cc:a3:a6:d5:9e:df:a8:5c:01:0d:00:79:af:f4:36:
         db:1a:6b:e9:76:61:54:ef:21:d0:50:86:27:d9:09:37:c7:84:
         4e:d8:c2:31:ef:e3:5c:b9:df:c7:fc:5a:7c:3b:fd:85:a4:9a:
         d2:6d:92:82:80:58:b4:9c:c7:01:97:d5:2d:0c:79:f7:4d:bd:
         04:37:8d:62:16:85:e5:9f:05:98:7e:45:54:a2:58:c8:28:c3:
         b6:38:b2:dc:41:ed:09:2b:06:fa:5e:e6:52:00:d5:52:98:b5:
         a3:75:90:39:98:aa:e8:0b:29:01:2d:3e:7b:a6:69:ea:8c:c1:
         da:b2:8c:76:9e:34:d1:c4:86:1f:fd:4c:e7:e1:df:79:6d:2c:
         9b:73:93:39:c8:63:e2:36:06:6d:22:48:c0:b8:31:3d:2d:c9:
         df:1b:27:4b:7c:91:57:31:04:d4:41:43:f1:b7:1b:e3:f0:0c:
         7a:e8:39:37:a7:b6:b6:73:53:9f:d6:e3:72:c7:d0:f9:91:33:
         29:35:e0:25:fb:58:99:ab:f1:25:22:f6:a1:58:07:d3:1b:5b:
         ce:d4:c4:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 09:47:09 2026 by rpki-client