This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/d774b18c-f263-4fe1-8df8-1e7c68bfbefc/0/57D075B2873A1E1F844485DAAC774C656EB9A611.mft
File:                     57D075B2873A1E1F844485DAAC774C656EB9A611.mft (raw, json)
Hash identifier:          609qyHnxogX43XeXFZ5a5MnaqJxmoNVEbjYGXPa8ZCY=
Subject key identifier:   09:DA:60:22:34:D8:30:97:E9:DE:06:16:BC:62:07:4E:72:EF:D2:E3
Authority key identifier: 57:D0:75:B2:87:3A:1E:1F:84:44:85:DA:AC:77:4C:65:6E:B9:A6:11
Certificate issuer:       /CN=57D075B2873A1E1F844485DAAC774C656EB9A611
Certificate serial:       68D97065E141A27A6F0E6FB1E84100C85CFAA392
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/57D075B2873A1E1F844485DAAC774C656EB9A611.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/d774b18c-f263-4fe1-8df8-1e7c68bfbefc/0/57D075B2873A1E1F844485DAAC774C656EB9A611.mft
Manifest number:          03D8
Signing time:             Sat 31 Jan 2026 22:41:46 +0000
Manifest this update:     Sat 31 Jan 2026 22:36:46 +0000
Manifest next update:     Tue 03 Feb 2026 23:01:46 +0000
Files and hashes:         1: 3130332e39302e3235332e302f32342d3234203d3e203338343936.roa (hash: VfuZSouZTsq571ghIBuDI0RvCeUniEkqt+AyLLYswCI=)
                          2: 57D075B2873A1E1F844485DAAC774C656EB9A611.crl (hash: UPLaTa3IKq7IAwHaCgyepCYFVvoiam08S4EX9reGhck=)
                          3: 3130332e39302e3235342e302f32342d3234203d3e203338343936.roa (hash: iMulVgKCxwqPFbAFOeAzE5yh4tPkiOrz17ayjx5bBCI=)
                          4: 3130332e39302e3235352e302f32342d3234203d3e20313338303836.roa (hash: CMIYNlZq2wW30QRZM8aVN94gnX6NjhrlvsnBm9PvN+0=)
                          5: 3130332e39302e3235322e302f32342d3234203d3e203338343936.roa (hash: N91VkEyIONXI8YjWF6UzPMS2HMBAziqn1kBl9mmK1M4=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/d774b18c-f263-4fe1-8df8-1e7c68bfbefc/0/57D075B2873A1E1F844485DAAC774C656EB9A611.crl
                          rsync://repo-rpki.idnic.net/repo/d774b18c-f263-4fe1-8df8-1e7c68bfbefc/0/57D075B2873A1E1F844485DAAC774C656EB9A611.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/57D075B2873A1E1F844485DAAC774C656EB9A611.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 03 Feb 2026 23:01:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:d9:70:65:e1:41:a2:7a:6f:0e:6f:b1:e8:41:00:c8:5c:fa:a3:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57D075B2873A1E1F844485DAAC774C656EB9A611
        Validity
            Not Before: Jan 31 22:36:46 2026 GMT
            Not After : Feb  3 23:01:46 2026 GMT
        Subject: CN=09DA602234D83097E9DE0616BC62074E72EFD2E3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:31:3d:8e:51:ce:a2:0a:b3:a1:db:b0:d4:41:
                    8b:f8:d5:9e:15:82:e4:f0:68:9a:54:e3:46:f0:a2:
                    7e:2b:0d:6e:b1:e6:6f:56:87:b6:02:f5:d8:c8:eb:
                    76:2b:9a:ba:88:44:5b:f4:b7:4d:f1:be:77:ff:7c:
                    ce:d5:4c:58:3f:39:2c:3b:dd:20:af:e6:40:1a:2a:
                    f7:ad:2c:d5:63:5d:1e:7d:6d:6e:89:e3:51:d1:f1:
                    ed:24:09:99:f0:19:ea:00:cf:22:e4:42:4a:11:ab:
                    1c:56:d3:f1:55:c8:46:fa:4f:08:b9:de:0c:60:e7:
                    fa:8e:02:2d:e1:5e:9b:d4:89:63:09:5e:3a:92:6f:
                    93:66:41:35:70:6a:aa:13:a1:36:4d:88:75:10:f9:
                    8d:4b:c3:2e:a3:84:ef:fc:19:92:30:4e:65:21:fe:
                    56:af:9e:14:08:25:93:0a:77:24:fd:8e:a9:18:1e:
                    79:cc:7e:79:c2:62:29:73:64:e3:dd:e9:82:72:a8:
                    c6:8d:98:da:83:71:99:48:67:fd:f6:5b:08:85:86:
                    7e:13:f5:2f:67:9e:4b:94:2e:5b:50:bb:fa:17:d9:
                    64:d9:b4:5f:a0:36:a4:f3:1d:fe:7a:d9:c1:86:13:
                    f2:14:a6:85:fa:11:41:a8:de:93:30:02:76:c3:d0:
                    22:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:DA:60:22:34:D8:30:97:E9:DE:06:16:BC:62:07:4E:72:EF:D2:E3
            X509v3 Authority Key Identifier:
                keyid:57:D0:75:B2:87:3A:1E:1F:84:44:85:DA:AC:77:4C:65:6E:B9:A6:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/d774b18c-f263-4fe1-8df8-1e7c68bfbefc/0/57D075B2873A1E1F844485DAAC774C656EB9A611.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/57D075B2873A1E1F844485DAAC774C656EB9A611.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d774b18c-f263-4fe1-8df8-1e7c68bfbefc/0/57D075B2873A1E1F844485DAAC774C656EB9A611.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:e6:e5:f4:5c:1b:3e:f1:c1:b5:61:93:5e:1a:e8:6e:3c:ea:
         d4:0e:cb:c7:c9:c2:fa:e1:c7:32:2c:fb:7a:ee:0b:29:cc:5c:
         9e:10:14:4a:be:db:c4:0b:c8:af:4c:fd:7c:f1:0a:f2:1e:8a:
         5c:53:67:6e:ce:4d:71:a3:46:10:6f:82:d5:68:c7:e1:87:80:
         94:15:d7:12:e9:13:3e:5e:7f:63:71:54:8f:fc:b8:9e:b0:35:
         e8:f8:58:45:bd:bf:21:d8:3b:a0:04:b1:e9:58:23:c6:6d:6e:
         9e:b5:8a:91:c8:b9:bd:25:45:56:1c:57:a3:38:65:21:a9:15:
         bc:1a:99:01:2f:fe:b5:9a:a1:93:b5:36:b9:da:69:82:1d:1b:
         06:3a:5f:da:7f:37:79:79:72:48:33:94:e5:1d:25:cc:b5:6b:
         1f:97:01:4e:5a:56:17:de:4a:b9:05:50:81:53:33:8d:db:8e:
         27:c2:ca:fc:12:99:67:d0:45:e1:25:e8:6b:dc:68:4e:bd:cc:
         5e:67:ac:aa:12:e3:56:61:96:44:3e:8f:79:54:c7:8b:0e:cb:
         cc:52:aa:89:6c:da:80:9e:bc:ef:df:60:1d:61:99:a4:fd:dd:
         bc:4f:71:eb:12:e7:a0:eb:b7:0b:23:e3:d0:bc:3b:a8:23:92:
         ac:40:e0:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 14:27:46 2026 by rpki-client