This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/dfddcb4b-6d8e-459b-8aa2-99a60886256a/0/CD93E5B741D83CA78E83C5AD92156B086BC05233.mft
File:                     CD93E5B741D83CA78E83C5AD92156B086BC05233.mft (raw, json)
Hash identifier:          JvGpxE5VqmQvUQ7aRzq+WmXUBEQhIAMn7QX9CcusyF0=
Subject key identifier:   E9:0E:83:DC:52:C9:4E:55:67:B7:B7:80:56:B2:7F:1F:98:43:81:F2
Authority key identifier: CD:93:E5:B7:41:D8:3C:A7:8E:83:C5:AD:92:15:6B:08:6B:C0:52:33
Certificate issuer:       /CN=CD93E5B741D83CA78E83C5AD92156B086BC05233
Certificate serial:       792120619ACEE53DEBD7F0BEF95526536F0C2FBA
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CD93E5B741D83CA78E83C5AD92156B086BC05233.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/dfddcb4b-6d8e-459b-8aa2-99a60886256a/0/CD93E5B741D83CA78E83C5AD92156B086BC05233.mft
Manifest number:          02E0
Signing time:             Sat 31 Jan 2026 21:12:23 +0000
Manifest this update:     Sat 31 Jan 2026 21:07:23 +0000
Manifest next update:     Wed 04 Feb 2026 07:31:23 +0000
Files and hashes:         1: CD93E5B741D83CA78E83C5AD92156B086BC05233.crl (hash: gMzjrKKdogShohUr0tW8BcmbaRTmlt8VU6edqMUx1+Y=)
                          2: 3130332e3135382e3139362e302f32342d3234203d3e20313431313333.roa (hash: veFUUZaHhHDpj6KmBcnJnR41ugvnsdBmWkSb2+LTSCU=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/dfddcb4b-6d8e-459b-8aa2-99a60886256a/0/CD93E5B741D83CA78E83C5AD92156B086BC05233.crl
                          rsync://repo-rpki.idnic.net/repo/dfddcb4b-6d8e-459b-8aa2-99a60886256a/0/CD93E5B741D83CA78E83C5AD92156B086BC05233.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CD93E5B741D83CA78E83C5AD92156B086BC05233.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 04 Feb 2026 07:31:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:21:20:61:9a:ce:e5:3d:eb:d7:f0:be:f9:55:26:53:6f:0c:2f:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CD93E5B741D83CA78E83C5AD92156B086BC05233
        Validity
            Not Before: Jan 31 21:07:23 2026 GMT
            Not After : Feb  4 07:31:23 2026 GMT
        Subject: CN=E90E83DC52C94E5567B7B78056B27F1F984381F2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:21:29:47:ca:63:29:02:dc:48:a5:d0:7d:e3:
                    db:4c:ee:57:1a:40:38:fc:a3:0a:54:6c:7d:de:3d:
                    eb:e9:9f:cc:2e:fd:cb:79:50:e7:04:29:cd:87:fc:
                    78:63:5e:e1:81:ee:a7:97:e5:5d:94:05:38:f5:b0:
                    d3:ba:62:d7:b0:34:12:a7:71:da:aa:39:f3:bf:7b:
                    6a:9b:50:3b:7f:b9:9c:16:16:a6:dc:b6:a8:43:e5:
                    d5:ab:1f:08:8d:21:e8:74:13:7a:18:51:8b:3f:9c:
                    72:90:96:e3:78:d3:ab:f3:3b:28:e6:02:01:34:fb:
                    c8:8a:9b:d4:b8:51:f2:10:54:88:c9:53:09:2f:23:
                    18:2a:e7:4a:93:de:95:ba:5d:3e:05:4e:fc:99:ff:
                    31:0a:ca:83:7b:7c:8c:a2:ee:ac:cf:a6:28:52:13:
                    42:f7:fb:8a:ee:5c:e5:47:e2:6d:b4:c3:6c:89:13:
                    58:09:c8:ff:90:2e:7e:7e:aa:b7:d6:15:17:b8:d8:
                    de:36:88:ae:3b:58:4b:8e:55:d5:bd:1d:c6:9d:76:
                    84:91:99:2b:da:84:07:3f:0f:9f:7f:1b:bf:f4:0f:
                    ce:4c:90:e6:90:1f:c3:a3:e0:31:44:5d:a5:7b:7a:
                    88:39:49:fb:2d:46:83:92:90:69:41:02:08:09:2c:
                    a8:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:0E:83:DC:52:C9:4E:55:67:B7:B7:80:56:B2:7F:1F:98:43:81:F2
            X509v3 Authority Key Identifier:
                keyid:CD:93:E5:B7:41:D8:3C:A7:8E:83:C5:AD:92:15:6B:08:6B:C0:52:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/dfddcb4b-6d8e-459b-8aa2-99a60886256a/0/CD93E5B741D83CA78E83C5AD92156B086BC05233.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CD93E5B741D83CA78E83C5AD92156B086BC05233.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dfddcb4b-6d8e-459b-8aa2-99a60886256a/0/CD93E5B741D83CA78E83C5AD92156B086BC05233.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:06:60:74:28:ca:da:60:0e:60:b5:12:e9:d6:fd:37:f2:b3:
         3d:d3:6b:bb:c3:70:1b:d0:fb:7b:21:4b:d5:92:10:75:d2:6c:
         05:96:65:99:07:e0:8b:31:f9:fd:ad:1c:a7:f0:7f:a0:51:53:
         90:77:85:1b:a4:02:2f:f1:5f:1f:c2:89:ea:14:38:11:d4:33:
         9c:7a:ed:86:e6:2e:2f:4d:3d:d6:2f:33:36:a1:4e:70:64:e8:
         f7:10:ae:dc:c2:36:ae:70:31:5c:0c:06:38:36:43:bb:71:ba:
         e9:94:b0:83:26:01:a8:d6:a0:83:50:c2:68:8a:f4:b8:53:df:
         bd:4d:51:5e:02:e3:93:39:d2:99:61:75:df:83:f5:43:9c:63:
         21:99:94:3a:7c:11:86:a5:f2:9b:f2:16:90:9c:d7:ca:d4:fc:
         b1:f2:d9:71:58:d8:bd:57:c4:3b:4f:ca:bc:e4:e7:16:10:c1:
         73:12:03:7e:f8:1a:76:a2:c0:53:82:57:ac:45:82:fb:67:3c:
         7a:28:2c:22:16:ab:5d:12:67:8e:4d:74:56:ca:a7:1b:16:29:
         15:0b:ea:24:e2:45:48:3f:78:f8:91:81:e7:0d:89:d0:1e:cf:
         ed:33:bc:0e:c9:e0:b5:1a:21:d0:34:9d:aa:06:9d:74:45:c5:
         25:f5:10:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 09:43:36 2026 by rpki-client