This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/da4746b7-5ff2-4556-8a3e-5a86cbcc8598/0/81C203CF458E48A8FF345FB4A5DD84C6FA2DCD0A.mft
File:                     81C203CF458E48A8FF345FB4A5DD84C6FA2DCD0A.mft (raw, json)
Hash identifier:          YyWc9PzAdQKaSlBdWeIoQTOm0IvoH4FE3q20WANlMSI=
Subject key identifier:   1E:62:91:60:FA:04:D5:32:4C:31:AF:05:FB:EC:D5:4D:3B:DB:23:75
Authority key identifier: 81:C2:03:CF:45:8E:48:A8:FF:34:5F:B4:A5:DD:84:C6:FA:2D:CD:0A
Certificate issuer:       /CN=81C203CF458E48A8FF345FB4A5DD84C6FA2DCD0A
Certificate serial:       3C4EB8C1D1592F53EC9605CB75114FC01F81520E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/81C203CF458E48A8FF345FB4A5DD84C6FA2DCD0A.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/da4746b7-5ff2-4556-8a3e-5a86cbcc8598/0/81C203CF458E48A8FF345FB4A5DD84C6FA2DCD0A.mft
Manifest number:          0171
Signing time:             Mon 02 Feb 2026 07:01:28 +0000
Manifest this update:     Mon 02 Feb 2026 06:56:28 +0000
Manifest next update:     Thu 05 Feb 2026 12:32:28 +0000
Files and hashes:         1: 3130332e39362e3134362e302f32332d3233203d3e20313430343536.roa (hash: soTFrYPYqOT0wkrn6Py3xPs0fFiW/5/f4549L3r+Igg=)
                          2: 81C203CF458E48A8FF345FB4A5DD84C6FA2DCD0A.crl (hash: p9RZLE/dGHbIdBdK1DTmmh7rRejpI4OiV6MO8Q7cUZk=)
                          3: 3130332e39362e3134372e302f32342d3234203d3e20313430343536.roa (hash: JE5sa6AJ1Mld5tF+2Ipz0AdqItfZzJvAXpbXLSMBkkY=)
                          4: 3130332e39362e3134362e302f32342d3234203d3e20313430343536.roa (hash: 5U1TPFLrHbgyHMQ/fhpf0UIVuTfu8KAoi8W0QJ1AERI=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/da4746b7-5ff2-4556-8a3e-5a86cbcc8598/0/81C203CF458E48A8FF345FB4A5DD84C6FA2DCD0A.crl
                          rsync://repo-rpki.idnic.net/repo/da4746b7-5ff2-4556-8a3e-5a86cbcc8598/0/81C203CF458E48A8FF345FB4A5DD84C6FA2DCD0A.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/81C203CF458E48A8FF345FB4A5DD84C6FA2DCD0A.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 05 Feb 2026 05:24:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:4e:b8:c1:d1:59:2f:53:ec:96:05:cb:75:11:4f:c0:1f:81:52:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81C203CF458E48A8FF345FB4A5DD84C6FA2DCD0A
        Validity
            Not Before: Feb  2 06:56:28 2026 GMT
            Not After : Feb  5 12:32:28 2026 GMT
        Subject: CN=1E629160FA04D5324C31AF05FBECD54D3BDB2375
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:ef:4c:f7:72:78:c9:11:b8:08:ac:29:fb:a8:
                    3f:4f:56:36:10:88:ab:76:fe:80:c1:bc:8a:62:32:
                    62:dd:7a:ff:13:db:d1:5a:91:65:e7:47:e3:89:dc:
                    15:f5:82:63:a3:9e:69:12:62:6c:fb:19:87:bb:fd:
                    02:56:1f:d0:1c:2b:56:b4:fc:e1:43:26:c6:11:72:
                    42:ad:e9:d9:6e:68:e6:2a:f2:09:11:0a:17:a2:31:
                    24:eb:9c:56:82:8f:fa:02:f0:4d:ed:5a:cd:59:80:
                    d5:e2:87:78:d3:dc:c8:f9:8c:d1:dd:30:a2:d5:fc:
                    80:fb:96:46:87:ad:8c:8f:44:48:dc:63:20:b9:d8:
                    90:24:bd:61:6f:a1:f0:c5:1e:68:59:0c:bf:7f:f7:
                    10:96:24:60:fb:09:9c:75:b3:30:70:24:99:f6:87:
                    d9:ab:b1:04:38:5d:4f:4f:6b:dc:cf:ea:e0:68:4b:
                    e3:6e:f4:30:5d:5f:f7:22:be:2d:a1:4e:24:35:b6:
                    c5:01:2b:04:c8:9b:d0:31:de:c4:eb:e8:87:d1:3f:
                    66:3d:e5:6d:b5:4e:b0:6c:72:1a:49:32:d4:f5:2c:
                    53:47:8a:98:17:a0:c6:6d:aa:0e:70:0b:e8:69:89:
                    e8:64:f0:64:79:4b:ae:49:65:e3:2e:ba:b4:c3:82:
                    91:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:62:91:60:FA:04:D5:32:4C:31:AF:05:FB:EC:D5:4D:3B:DB:23:75
            X509v3 Authority Key Identifier:
                keyid:81:C2:03:CF:45:8E:48:A8:FF:34:5F:B4:A5:DD:84:C6:FA:2D:CD:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/da4746b7-5ff2-4556-8a3e-5a86cbcc8598/0/81C203CF458E48A8FF345FB4A5DD84C6FA2DCD0A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/81C203CF458E48A8FF345FB4A5DD84C6FA2DCD0A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/da4746b7-5ff2-4556-8a3e-5a86cbcc8598/0/81C203CF458E48A8FF345FB4A5DD84C6FA2DCD0A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:8f:eb:86:a1:2c:ac:ec:5a:68:a4:19:6e:83:ec:f4:0a:46:
         89:7c:83:e7:49:ce:fb:ca:a2:5e:41:7f:2d:77:71:3d:ec:7f:
         2a:64:ec:df:08:61:09:36:9f:56:e8:0c:62:80:85:0d:8e:99:
         82:03:cb:35:e8:4c:06:00:93:ee:97:e3:63:b6:12:c1:5d:ea:
         af:89:95:fc:c8:14:e7:2d:4f:1b:25:c2:d2:6b:63:f9:14:07:
         e1:62:f0:97:7d:d6:b5:d1:0d:e6:ff:47:be:81:fc:9d:4d:75:
         92:2d:5b:db:c8:2c:ad:03:03:da:5e:4c:68:fe:05:11:fb:4b:
         bb:f5:e1:99:4d:bf:48:9d:0d:ca:ed:84:68:5e:dc:6c:e3:0b:
         ea:5c:b9:b9:db:ec:7f:84:85:b3:eb:fd:bc:6a:fc:a8:5d:58:
         f0:d0:c5:eb:74:fe:07:21:5d:33:cf:b2:3d:06:eb:72:1c:24:
         e5:a1:78:f9:92:6d:27:89:dc:78:50:68:5d:70:0e:e7:28:a2:
         95:81:6c:a3:f2:50:c3:2b:ae:96:cd:cd:94:0a:73:6f:1b:2f:
         23:e4:31:4f:6d:3f:27:be:b0:85:e7:e6:91:07:52:3e:f1:70:
         86:f8:ed:15:67:aa:4f:40:bb:28:b4:fd:6e:ee:e2:d5:61:94:
         31:e5:42:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 09:43:13 2026 by rpki-client