This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/d7b64c3e-b13d-427a-b982-4394073e5cf5/0/5DF7F909917C4DA09D7486E2B70323E7972B7675.mft
File:                     5DF7F909917C4DA09D7486E2B70323E7972B7675.mft (raw, json)
Hash identifier:          87n0rCXptphamdKigYArf5F7Hu8GmBCobej4E5+Ocxk=
Subject key identifier:   67:76:D2:1E:D8:D2:A1:90:87:FF:AA:90:B3:50:70:38:BC:D2:1B:BB
Authority key identifier: 5D:F7:F9:09:91:7C:4D:A0:9D:74:86:E2:B7:03:23:E7:97:2B:76:75
Certificate issuer:       /CN=5DF7F909917C4DA09D7486E2B70323E7972B7675
Certificate serial:       30F7D4A05EE2AA872EC55D8727852346EFF68550
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5DF7F909917C4DA09D7486E2B70323E7972B7675.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/d7b64c3e-b13d-427a-b982-4394073e5cf5/0/5DF7F909917C4DA09D7486E2B70323E7972B7675.mft
Manifest number:          025C
Signing time:             Sun 01 Feb 2026 00:21:54 +0000
Manifest this update:     Sun 01 Feb 2026 00:16:54 +0000
Manifest next update:     Wed 04 Feb 2026 03:22:54 +0000
Files and hashes:         1: 5DF7F909917C4DA09D7486E2B70323E7972B7675.crl (hash: dlubldFF2L43tc94WnXs3XiTIfTAy4GoL5auemQZ9zM=)
                          2: 3130332e3138362e3136372e302f32342d3234203d3e20313439373033.roa (hash: etKKSveFADWMloWFgv7k4bcqwUD/JCeti3TZy4ckvfE=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/d7b64c3e-b13d-427a-b982-4394073e5cf5/0/5DF7F909917C4DA09D7486E2B70323E7972B7675.crl
                          rsync://repo-rpki.idnic.net/repo/d7b64c3e-b13d-427a-b982-4394073e5cf5/0/5DF7F909917C4DA09D7486E2B70323E7972B7675.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5DF7F909917C4DA09D7486E2B70323E7972B7675.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 04 Feb 2026 03:22:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:f7:d4:a0:5e:e2:aa:87:2e:c5:5d:87:27:85:23:46:ef:f6:85:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5DF7F909917C4DA09D7486E2B70323E7972B7675
        Validity
            Not Before: Feb  1 00:16:54 2026 GMT
            Not After : Feb  4 03:22:54 2026 GMT
        Subject: CN=6776D21ED8D2A19087FFAA90B3507038BCD21BBB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:7c:1e:ca:05:7f:53:80:88:b3:78:ca:ca:4c:
                    a9:bc:88:d8:95:49:aa:19:5c:4f:87:80:28:2f:c4:
                    4c:3c:45:83:a8:f5:52:0b:57:ca:3e:f2:ee:2c:78:
                    3d:6a:b8:2b:0d:e1:43:e2:2a:53:06:a0:17:9d:eb:
                    e0:b4:79:ef:51:76:18:4b:36:0b:ca:13:9c:74:64:
                    65:84:ce:8e:6d:64:af:4f:f7:e8:65:d4:02:94:eb:
                    aa:a4:e2:b5:58:f4:8f:ce:6c:6b:d2:37:55:76:6a:
                    35:39:05:4a:07:47:51:43:90:33:c9:30:31:e6:70:
                    93:f1:df:ca:8f:ab:28:ef:41:12:10:95:53:a5:4a:
                    21:6c:9e:ee:e1:d5:d7:4b:f0:bd:46:dc:33:64:45:
                    d9:cc:e7:21:9a:83:a8:52:aa:ee:c7:b2:71:5b:db:
                    50:26:c7:99:eb:b0:4d:d2:46:5d:ee:16:78:78:dc:
                    2a:13:8f:ab:e0:70:c3:21:66:a3:35:7d:23:73:9f:
                    64:ec:24:c4:5f:72:a3:96:96:b1:96:45:ac:9b:8d:
                    cc:8e:9e:86:3e:ed:47:c6:9b:b4:6d:6c:00:8b:42:
                    7f:ed:5b:c5:7f:39:ea:50:b4:78:e9:fd:db:83:38:
                    b1:ee:89:8e:cf:fe:21:04:b9:80:d5:20:26:3d:14:
                    45:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:76:D2:1E:D8:D2:A1:90:87:FF:AA:90:B3:50:70:38:BC:D2:1B:BB
            X509v3 Authority Key Identifier:
                keyid:5D:F7:F9:09:91:7C:4D:A0:9D:74:86:E2:B7:03:23:E7:97:2B:76:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/d7b64c3e-b13d-427a-b982-4394073e5cf5/0/5DF7F909917C4DA09D7486E2B70323E7972B7675.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5DF7F909917C4DA09D7486E2B70323E7972B7675.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d7b64c3e-b13d-427a-b982-4394073e5cf5/0/5DF7F909917C4DA09D7486E2B70323E7972B7675.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:ce:e6:24:36:07:62:5d:ac:be:90:04:9b:45:8d:ac:9f:f7:
         6d:2d:04:0a:d1:a3:40:69:de:a4:b0:f7:af:61:53:ea:36:8f:
         b8:47:53:cf:18:01:14:8b:a3:50:9c:f5:f9:a2:92:03:fd:65:
         31:78:4a:76:19:23:79:88:bc:e8:94:10:b2:5f:2e:31:96:50:
         81:df:52:e8:74:e6:07:73:00:e9:a4:b9:cc:0d:52:26:29:c1:
         b8:66:ac:35:fd:e2:bc:1a:ec:0c:14:f1:13:ec:9c:db:17:57:
         ac:dc:1c:3e:11:13:30:30:5a:ac:18:ef:c1:83:d1:3a:ce:64:
         5c:19:dd:2f:c4:9d:be:48:94:1e:6e:4e:91:ae:a2:9f:59:c9:
         38:89:6d:2e:75:02:4f:c3:a3:55:e3:11:cf:e3:9e:3b:26:a8:
         42:24:ed:c6:91:23:c5:21:1c:09:1e:79:f4:d3:a0:45:37:33:
         c3:7f:f7:21:c7:95:10:e7:2d:9a:cc:ec:cd:64:0d:bf:85:13:
         01:ee:b1:a0:da:11:ca:cc:ed:b6:3e:ca:33:1d:60:a5:d4:9e:
         c2:78:f5:7c:2d:33:fe:6b:07:44:b7:2a:d7:fe:73:04:3c:ca:
         d7:03:a1:46:b9:d8:fa:48:6b:7b:95:15:4a:49:84:40:b6:45:
         fc:59:ca:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 10:02:55 2026 by rpki-client