This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/d4f48a89-90c5-4f5a-8015-36f1196a71c8/0/F30F14F4AEB6630FF4E270B0729358AEBFA97733.mft
File:                     F30F14F4AEB6630FF4E270B0729358AEBFA97733.mft (raw, json)
Hash identifier:          y6OZELKSIRJvM8saJJLysuABlOTi4hOyIDGoiRe9VKE=
Subject key identifier:   A4:FE:B0:5D:64:BF:01:00:C5:82:62:2F:24:CD:7E:F9:D3:ED:C9:A9
Authority key identifier: F3:0F:14:F4:AE:B6:63:0F:F4:E2:70:B0:72:93:58:AE:BF:A9:77:33
Certificate issuer:       /CN=F30F14F4AEB6630FF4E270B0729358AEBFA97733
Certificate serial:       71C7C97C7B2988F9D50EC4BB581202D0FF506724
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F30F14F4AEB6630FF4E270B0729358AEBFA97733.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/d4f48a89-90c5-4f5a-8015-36f1196a71c8/0/F30F14F4AEB6630FF4E270B0729358AEBFA97733.mft
Manifest number:          0546
Signing time:             Sat 31 Jan 2026 19:22:11 +0000
Manifest this update:     Sat 31 Jan 2026 19:17:11 +0000
Manifest next update:     Wed 04 Feb 2026 00:54:11 +0000
Files and hashes:         1: 3130332e3135312e39322e302f32332d3234203d3e203435323935.roa (hash: WCf4k80HtpWJXreA4Q6XD5iDNEeVQ9AU8BVWi8IEoSM=)
                          2: F30F14F4AEB6630FF4E270B0729358AEBFA97733.crl (hash: yP9Eahn/2Povbbb5MDByXdLxjVnbDHLQpiaNnrvpYNM=)
                          3: 3131332e3231322e3136302e302f32312d3234203d3e203435323935.roa (hash: ykBCC6a4TUa9u53qD+3M0qE2NkGoJtCXa3OdoYw7FhA=)
                          4: 323430373a343630303a3a2f33322d3438203d3e203435323935.roa (hash: 4LpQRgrp7oBVnTYb85mIa1GKQ4oBc22IhdekLi1TA6c=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/d4f48a89-90c5-4f5a-8015-36f1196a71c8/0/F30F14F4AEB6630FF4E270B0729358AEBFA97733.crl
                          rsync://repo-rpki.idnic.net/repo/d4f48a89-90c5-4f5a-8015-36f1196a71c8/0/F30F14F4AEB6630FF4E270B0729358AEBFA97733.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F30F14F4AEB6630FF4E270B0729358AEBFA97733.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 04 Feb 2026 00:54:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:c7:c9:7c:7b:29:88:f9:d5:0e:c4:bb:58:12:02:d0:ff:50:67:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F30F14F4AEB6630FF4E270B0729358AEBFA97733
        Validity
            Not Before: Jan 31 19:17:11 2026 GMT
            Not After : Feb  4 00:54:11 2026 GMT
        Subject: CN=A4FEB05D64BF0100C582622F24CD7EF9D3EDC9A9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:83:a6:82:e0:e5:79:61:44:75:b8:7b:00:7e:
                    2a:c3:3c:2f:d7:bd:9f:71:ff:13:66:d3:92:42:a2:
                    27:a6:86:03:6a:aa:11:9f:6c:b7:e2:fa:e2:09:83:
                    a2:79:1b:20:22:ff:80:af:16:11:82:e5:e5:28:e8:
                    7f:ed:20:9d:31:37:1b:04:e5:75:d0:6c:38:1c:e2:
                    c3:9d:9c:20:f1:31:16:bd:50:97:8c:9e:12:38:41:
                    5e:85:be:b9:a7:51:c2:5a:c2:e1:c4:74:40:59:98:
                    87:f2:d1:90:a7:f5:2e:33:11:e9:56:70:01:ab:cb:
                    66:31:60:19:02:62:4d:8f:a6:25:9e:a1:e0:8a:79:
                    4b:13:8f:93:c7:59:14:b1:ba:2b:a9:93:3e:09:69:
                    e4:73:e4:11:1b:51:8d:29:15:ef:a7:dd:3a:2a:f7:
                    d9:50:e2:f0:83:3b:b6:61:74:96:61:e1:f3:85:56:
                    4b:90:7e:fa:40:67:fb:22:ff:93:5f:b2:5d:df:24:
                    c1:21:84:d7:d2:33:9d:2f:89:76:75:a3:69:ad:3f:
                    e0:b6:f8:c4:17:f6:70:0e:d4:cb:77:96:58:a3:3b:
                    9a:ff:77:b9:7f:ae:80:65:06:3e:a3:30:d5:c3:a9:
                    07:96:28:6c:77:8d:8c:39:81:b7:b1:1a:77:26:57:
                    17:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:FE:B0:5D:64:BF:01:00:C5:82:62:2F:24:CD:7E:F9:D3:ED:C9:A9
            X509v3 Authority Key Identifier:
                keyid:F3:0F:14:F4:AE:B6:63:0F:F4:E2:70:B0:72:93:58:AE:BF:A9:77:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/d4f48a89-90c5-4f5a-8015-36f1196a71c8/0/F30F14F4AEB6630FF4E270B0729358AEBFA97733.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F30F14F4AEB6630FF4E270B0729358AEBFA97733.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d4f48a89-90c5-4f5a-8015-36f1196a71c8/0/F30F14F4AEB6630FF4E270B0729358AEBFA97733.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:ac:42:33:6a:1e:e5:b9:9b:5f:aa:97:fe:36:c5:61:e1:7a:
         7c:d2:e7:53:33:48:58:be:1f:a9:6b:c7:f6:6e:8f:f5:aa:4d:
         08:c0:ff:f6:ee:31:8f:34:f9:30:85:0e:58:67:fb:2c:17:3f:
         a1:f9:9e:29:2c:2d:f1:30:2d:81:84:fd:95:46:70:c3:52:1a:
         e9:09:fb:85:ee:a4:68:b0:7d:57:f3:3c:d6:8d:54:8f:fb:44:
         75:4b:f1:42:e7:e6:90:99:d0:10:01:41:a1:a7:57:75:f1:14:
         3b:7f:37:72:12:64:35:77:38:df:22:f0:f7:91:07:06:ef:61:
         81:bd:0b:a7:76:6d:47:a0:b0:00:7b:59:69:ed:d1:9a:41:42:
         16:66:51:eb:5d:8a:a1:07:8a:53:a4:f2:d7:12:eb:ef:b5:6d:
         e9:a3:27:dd:f5:93:df:06:52:25:4a:7e:b7:c2:ec:26:02:c8:
         3d:56:fb:16:b8:6f:ef:6b:a5:d2:11:78:c3:c1:55:c0:15:a2:
         ea:a2:30:eb:b3:f9:a1:83:67:ee:de:3e:44:48:01:45:eb:08:
         fe:ee:1a:5c:79:22:bd:09:88:a8:9a:10:8b:b5:51:6e:8a:4f:
         ea:61:24:72:d5:de:6d:de:e4:88:d5:b8:f7:a7:5f:0b:21:ac:
         7b:2a:1a:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 16:12:53 2026 by rpki-client