This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/d36ab04d-68c7-4249-b109-46b28cf803f3/0/1D4A7562F096F3F753E388C14594BA75AE09E7F3.mft
File:                     1D4A7562F096F3F753E388C14594BA75AE09E7F3.mft (raw, json)
Hash identifier:          ZGsAbuC8NDZooEM3YQfQbhZ41ovHZGTiOODgnE56Lhc=
Subject key identifier:   9F:4C:B1:A6:57:90:01:7D:57:ED:E6:BB:1E:9B:6C:0B:8B:62:59:F1
Authority key identifier: 1D:4A:75:62:F0:96:F3:F7:53:E3:88:C1:45:94:BA:75:AE:09:E7:F3
Certificate issuer:       /CN=1D4A7562F096F3F753E388C14594BA75AE09E7F3
Certificate serial:       51746D9A379B64C33A1577BDE671A2CEB1BF06BB
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D4A7562F096F3F753E388C14594BA75AE09E7F3.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/d36ab04d-68c7-4249-b109-46b28cf803f3/0/1D4A7562F096F3F753E388C14594BA75AE09E7F3.mft
Manifest number:          01C2
Signing time:             Sun 01 Feb 2026 15:01:39 +0000
Manifest this update:     Sun 01 Feb 2026 14:56:39 +0000
Manifest next update:     Wed 04 Feb 2026 18:58:39 +0000
Files and hashes:         1: 1D4A7562F096F3F753E388C14594BA75AE09E7F3.crl (hash: mK7WSz8wiQG0IVF4YyiAxbArTq2p44XGOdPQdg/qHNM=)
                          2: 3130332e3130372e3137362e302f32342d3234203d3e20313530393434.roa (hash: t5cP9pI7pfpZ95tebj5VAs5xM+wyda4Uz0LABi641BU=)
                          3: 3130332e3130372e3137362e302f32332d3233203d3e20313530393434.roa (hash: +kGXvvTp0IkbxrGv/DEpgvQeRlEwoEyXoWledhe0tWQ=)
                          4: 3130332e3130372e3137372e302f32342d3234203d3e20313530393434.roa (hash: Tu2pBk/URNroZW6zOqNNP1pzL3rQikcBMBsuhpkJzRA=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/d36ab04d-68c7-4249-b109-46b28cf803f3/0/1D4A7562F096F3F753E388C14594BA75AE09E7F3.crl
                          rsync://repo-rpki.idnic.net/repo/d36ab04d-68c7-4249-b109-46b28cf803f3/0/1D4A7562F096F3F753E388C14594BA75AE09E7F3.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D4A7562F096F3F753E388C14594BA75AE09E7F3.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 04 Feb 2026 18:58:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:74:6d:9a:37:9b:64:c3:3a:15:77:bd:e6:71:a2:ce:b1:bf:06:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1D4A7562F096F3F753E388C14594BA75AE09E7F3
        Validity
            Not Before: Feb  1 14:56:39 2026 GMT
            Not After : Feb  4 18:58:39 2026 GMT
        Subject: CN=9F4CB1A65790017D57EDE6BB1E9B6C0B8B6259F1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:42:f0:81:10:63:21:22:47:77:a7:ab:01:31:
                    de:6b:e8:95:8c:7d:5b:0a:b2:4d:0b:9f:71:f8:85:
                    9c:a0:ce:43:c3:e9:47:46:58:a3:ba:30:8e:2c:33:
                    10:1a:7a:43:9f:4c:92:b6:51:ba:65:a0:cb:f1:90:
                    33:c9:ce:57:3c:08:5a:2c:6b:d9:bc:49:b8:ae:d3:
                    7b:3e:0c:f5:7b:4a:e4:b7:ff:63:7c:e8:82:98:68:
                    fd:5c:40:e4:72:c9:70:b0:d3:67:24:3e:99:d1:36:
                    4c:03:80:59:a2:09:ea:f8:7d:6b:53:7f:d9:e1:39:
                    db:e2:a0:ec:ac:61:6a:46:36:87:a9:31:f8:d3:8e:
                    6a:a3:58:90:c9:23:81:3f:be:89:7b:0c:83:57:1d:
                    c3:aa:fd:26:b2:bd:a7:9f:07:81:42:cd:04:36:d4:
                    da:57:6e:b6:71:ba:33:61:17:bd:08:a1:6a:30:92:
                    28:47:f0:2b:ac:e0:b4:70:9b:c1:f3:c3:d2:d7:a8:
                    14:1d:e5:50:05:bd:04:f2:1b:d2:ff:94:79:9b:b7:
                    6a:4b:48:cb:23:7b:1b:e6:80:55:63:56:97:c5:04:
                    69:64:c9:a2:71:53:e0:80:35:f3:33:17:34:6e:ac:
                    95:df:56:8f:b5:dc:3a:13:9d:e6:2b:31:60:f0:a7:
                    28:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:4C:B1:A6:57:90:01:7D:57:ED:E6:BB:1E:9B:6C:0B:8B:62:59:F1
            X509v3 Authority Key Identifier:
                keyid:1D:4A:75:62:F0:96:F3:F7:53:E3:88:C1:45:94:BA:75:AE:09:E7:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/d36ab04d-68c7-4249-b109-46b28cf803f3/0/1D4A7562F096F3F753E388C14594BA75AE09E7F3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D4A7562F096F3F753E388C14594BA75AE09E7F3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d36ab04d-68c7-4249-b109-46b28cf803f3/0/1D4A7562F096F3F753E388C14594BA75AE09E7F3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:fc:a4:98:02:a2:37:c5:49:45:b9:d8:7a:c1:4e:45:55:4d:
         d7:54:c5:15:9c:d4:63:10:24:a7:ee:f1:a2:a4:c1:2e:df:c1:
         f1:60:98:49:c5:52:a2:2b:f3:3b:1d:94:eb:a3:ee:17:2a:81:
         ee:cc:a4:0c:9e:84:09:55:6f:b9:51:67:8b:08:8a:58:e4:f6:
         09:2d:77:21:67:46:4c:6f:32:86:26:15:9b:51:25:5f:ce:64:
         22:fc:14:4c:1b:bf:57:e8:5a:8a:46:39:f3:ed:1b:b3:bf:43:
         af:09:ea:7c:9b:6a:ec:1a:61:72:db:40:46:c4:82:b1:12:5f:
         a7:51:05:ba:12:67:eb:69:19:29:a1:70:cd:d5:5b:07:34:7b:
         62:f2:b4:0a:35:71:64:46:97:62:46:45:dd:3c:cf:a3:00:68:
         19:61:89:76:9b:ba:27:17:d4:be:02:d2:86:8d:fe:2f:0d:41:
         0f:97:58:22:86:8a:d3:f1:bc:a4:e3:93:19:21:d3:5c:68:af:
         44:f6:a8:2f:9a:c7:da:7a:81:55:30:b4:ff:02:91:67:99:d2:
         bb:94:d5:d3:b1:5c:95:72:20:20:4e:9c:37:dc:1e:82:d7:6d:
         d6:3a:ac:c7:33:3e:d7:11:1c:5a:69:85:c8:f8:4d:87:c3:e3:
         77:4b:1f:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 09:43:55 2026 by rpki-client