This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/d7a6b23b-c41e-4449-a149-bc0c6c8b011b/0/D77C7D38397FCDE17250AA403BF110EC387F7C02.mft
File:                     D77C7D38397FCDE17250AA403BF110EC387F7C02.mft (raw, json)
Hash identifier:          u96KlMWxHYg3w80nwXtF25CXDjpHWaOTeQeKr/XiMbs=
Subject key identifier:   64:C6:E7:2C:AB:5F:26:54:5A:8A:3A:F4:10:8B:DA:E2:02:44:B8:5C
Authority key identifier: D7:7C:7D:38:39:7F:CD:E1:72:50:AA:40:3B:F1:10:EC:38:7F:7C:02
Certificate issuer:       /CN=D77C7D38397FCDE17250AA403BF110EC387F7C02
Certificate serial:       5CA8B92465C9950AE9871A8C0A67AA6619EE31BC
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D77C7D38397FCDE17250AA403BF110EC387F7C02.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/d7a6b23b-c41e-4449-a149-bc0c6c8b011b/0/D77C7D38397FCDE17250AA403BF110EC387F7C02.mft
Manifest number:          0177
Signing time:             Mon 02 Feb 2026 09:51:30 +0000
Manifest this update:     Mon 02 Feb 2026 09:46:30 +0000
Manifest next update:     Thu 05 Feb 2026 18:20:30 +0000
Files and hashes:         1: D77C7D38397FCDE17250AA403BF110EC387F7C02.crl (hash: sm5IXSj2t8hLJMwz5yDdB35j01lOZwtMdENIrqgAK84=)
                          2: 3130332e3233342e33352e302f32342d3234203d3e20313531353231.roa (hash: AZoj+0FC7tr+2ZKJboWJyczOYWAwC/zNvBvRBqK06eM=)
                          3: 3130332e3233342e33342e302f32342d3234203d3e20313531353231.roa (hash: aAQ3gTdw9Ba4EyqO5leg/m+5A85FY5W+Vc3itSgQl30=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/d7a6b23b-c41e-4449-a149-bc0c6c8b011b/0/D77C7D38397FCDE17250AA403BF110EC387F7C02.crl
                          rsync://repo-rpki.idnic.net/repo/d7a6b23b-c41e-4449-a149-bc0c6c8b011b/0/D77C7D38397FCDE17250AA403BF110EC387F7C02.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D77C7D38397FCDE17250AA403BF110EC387F7C02.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 05 Feb 2026 05:24:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:a8:b9:24:65:c9:95:0a:e9:87:1a:8c:0a:67:aa:66:19:ee:31:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D77C7D38397FCDE17250AA403BF110EC387F7C02
        Validity
            Not Before: Feb  2 09:46:30 2026 GMT
            Not After : Feb  5 18:20:30 2026 GMT
        Subject: CN=64C6E72CAB5F26545A8A3AF4108BDAE20244B85C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:05:2b:88:bb:53:c7:f6:0d:02:69:ba:ab:2a:
                    ef:f1:61:8a:ae:a4:13:e3:2c:97:5a:fa:44:98:55:
                    d0:f3:2d:5a:81:c0:c9:eb:8f:75:96:53:b5:1f:2a:
                    6d:07:43:b1:77:b9:cb:b7:22:82:6c:a0:e9:45:b8:
                    71:a3:02:d9:80:04:9e:0b:6f:70:ff:85:1d:9f:bb:
                    6c:7b:ff:0e:d2:a1:c4:1b:f6:2e:7a:56:b9:f9:99:
                    d4:b7:78:5e:d1:b4:6c:4f:f0:ac:81:9c:7e:3a:e2:
                    ca:52:9a:6c:88:b1:f0:72:bb:95:46:14:eb:50:ec:
                    bf:23:1c:6d:fb:10:d5:82:4a:ba:fd:2a:de:a9:c7:
                    e4:b9:51:d5:06:32:70:cf:f6:71:c0:7f:45:21:86:
                    01:f5:69:10:40:e7:f5:46:ef:25:3c:e4:23:15:3c:
                    1c:79:70:3c:2c:36:39:0c:db:88:20:e9:b4:ed:08:
                    68:bc:c8:be:18:f1:3b:31:74:4b:04:df:b8:85:60:
                    66:78:9d:9d:26:26:38:55:6f:ad:c0:1b:b3:ea:89:
                    bf:51:c8:5b:53:88:1c:c1:03:82:eb:0e:ec:46:00:
                    53:e9:1f:ad:1b:0d:20:9f:09:7f:43:17:aa:a5:10:
                    77:87:50:34:b5:3d:33:e0:34:1e:93:94:76:28:e4:
                    c7:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:C6:E7:2C:AB:5F:26:54:5A:8A:3A:F4:10:8B:DA:E2:02:44:B8:5C
            X509v3 Authority Key Identifier:
                keyid:D7:7C:7D:38:39:7F:CD:E1:72:50:AA:40:3B:F1:10:EC:38:7F:7C:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/d7a6b23b-c41e-4449-a149-bc0c6c8b011b/0/D77C7D38397FCDE17250AA403BF110EC387F7C02.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D77C7D38397FCDE17250AA403BF110EC387F7C02.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d7a6b23b-c41e-4449-a149-bc0c6c8b011b/0/D77C7D38397FCDE17250AA403BF110EC387F7C02.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:03:16:3f:52:5d:1b:3f:be:5a:a0:51:57:97:63:df:17:1f:
         45:05:6c:e5:8c:6c:94:2b:02:6c:63:cf:3d:db:08:ef:3f:92:
         22:be:2e:e5:28:38:81:70:bb:5d:55:90:de:b4:67:4f:ea:ac:
         ca:cb:5e:ec:96:5b:f0:44:9d:1a:60:2c:5a:4b:c4:ed:63:35:
         0b:78:b0:bd:71:56:0e:76:10:4a:75:d8:d4:9b:8c:c2:a8:fb:
         5c:22:da:c1:83:11:97:bc:52:94:59:27:82:f6:6b:d7:a0:a5:
         d6:9c:4d:bd:3a:4c:9e:dc:29:8b:e7:d8:c6:08:01:3f:13:c6:
         12:6e:81:a3:51:ff:56:bb:30:01:a0:2e:44:ad:fb:05:ef:22:
         13:9d:ce:c7:98:b7:46:35:bf:e7:a6:88:2d:a9:4f:8e:50:49:
         cc:50:be:a1:91:84:c4:d8:65:45:87:e8:24:07:de:56:79:0b:
         5e:14:c6:ff:a9:21:9f:db:91:97:9a:88:3d:a6:c7:f3:bc:20:
         a5:3f:96:5f:bf:df:1a:f3:24:34:85:6f:23:ad:39:ba:02:47:
         1c:b4:b3:8e:e5:e3:e5:8d:97:bf:fc:5e:9d:58:91:57:00:26:
         ca:73:32:01:aa:e6:f6:b1:b0:ff:04:dc:7b:37:d5:86:e6:88:
         70:b6:43:87
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUXKi5JGXJlQrphxqMCmeqZhnuMbwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDc3QzdEMzgzOTdGQ0RFMTcyNTBBQTQwM0JGMTEwRUMz
ODdGN0MwMjAeFw0yNjAyMDIwOTQ2MzBaFw0yNjAyMDUxODIwMzBaMDMxMTAvBgNV
BAMTKDY0QzZFNzJDQUI1RjI2NTQ1QThBM0FGNDEwOEJEQUUyMDI0NEI4NUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQBSuIu1PH9g0CabqrKu/xYYqu
pBPjLJda+kSYVdDzLVqBwMnrj3WWU7UfKm0HQ7F3ucu3IoJsoOlFuHGjAtmABJ4L
b3D/hR2fu2x7/w7SocQb9i56Vrn5mdS3eF7RtGxP8KyBnH464spSmmyIsfByu5VG
FOtQ7L8jHG37ENWCSrr9Kt6px+S5UdUGMnDP9nHAf0UhhgH1aRBA5/VG7yU85CMV
PBx5cDwsNjkM24gg6bTtCGi8yL4Y8TsxdEsE37iFYGZ4nZ0mJjhVb63AG7Pqib9R
yFtTiBzBA4LrDuxGAFPpH60bDSCfCX9DF6qlEHeHUDS1PTPgNB6TlHYo5MeFAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUZMbnLKtfJlRaijr0EIva4gJEuFwwHwYDVR0j
BBgwFoAU13x9ODl/zeFyUKpAO/EQ7Dh/fAIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k
N2E2YjIzYi1jNDFlLTQ0NDktYTE0OS1iYzBjNmM4YjAxMWIvMC9ENzdDN0QzODM5
N0ZDREUxNzI1MEFBNDAzQkYxMTBFQzM4N0Y3QzAyLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvRDc3QzdEMzgzOTdGQ0RFMTcyNTBBQTQwM0JGMTEwRUMzODdG
N0MwMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDdhNmIyM2ItYzQxZS00NDQ5LWEx
NDktYmMwYzZjOGIwMTFiLzAvRDc3QzdEMzgzOTdGQ0RFMTcyNTBBQTQwM0JGMTEw
RUMzODdGN0MwMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAB4DFj9SXRs/vlqgUVeXY98XH0UFbOWMbJQr
Amxjzz3bCO8/kiK+LuUoOIFwu11VkN60Z0/qrMrLXuyWW/BEnRpgLFpLxO1jNQt4
sL1xVg52EEp12NSbjMKo+1wi2sGDEZe8UpRZJ4L2a9egpdacTb06TJ7cKYvn2MYI
AT8TxhJugaNR/1a7MAGgLkSt+wXvIhOdzseYt0Y1v+emiC2pT45QScxQvqGRhMTY
ZUWH6CQH3lZ5C14Uxv+pIZ/bkZeaiD2mx/O8IKU/ll+/3xrzJDSFbyOtOboCRxy0
s47l4+WNl7/8Xp1YkVcAJspzMgGq5vaxsP8E3Hs31YbmiHC2Q4c=
-----END CERTIFICATE-----
Generated at Mon Feb 2 14:26:54 2026 by rpki-client