This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/e2f6a39f-2940-4ccc-8c1f-9d559c47a79b/0/D85B24E818A4DAC388415FB8C96905DF03C8D6EA.mft
File:                     D85B24E818A4DAC388415FB8C96905DF03C8D6EA.mft (raw, json)
Hash identifier:          4VSw8e9Pti7Ybya6Q2LbQl4p7AX4Hh/OigwGRQA5bsA=
Subject key identifier:   6B:4D:53:7F:2B:5C:21:52:D5:13:9F:E1:B0:CD:B6:42:EF:81:AE:51
Authority key identifier: D8:5B:24:E8:18:A4:DA:C3:88:41:5F:B8:C9:69:05:DF:03:C8:D6:EA
Certificate issuer:       /CN=D85B24E818A4DAC388415FB8C96905DF03C8D6EA
Certificate serial:       64FA4A34C288C479D8CC65B503D281CA41FE2D34
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D85B24E818A4DAC388415FB8C96905DF03C8D6EA.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/e2f6a39f-2940-4ccc-8c1f-9d559c47a79b/0/D85B24E818A4DAC388415FB8C96905DF03C8D6EA.mft
Manifest number:          01E1
Signing time:             Sat 31 Jan 2026 06:22:05 +0000
Manifest this update:     Sat 31 Jan 2026 06:17:05 +0000
Manifest next update:     Tue 03 Feb 2026 12:29:05 +0000
Files and hashes:         1: 3130332e3131382e3132312e302f32342d3234203d3e20313530323033.roa (hash: XcmiTK4lbXwTUsCM0a8uD99kDHrKe3SuEWNxjOChLtA=)
                          2: D85B24E818A4DAC388415FB8C96905DF03C8D6EA.crl (hash: HxyCqjwMBYrKBAUqfxaHz8BIh2wO2m/nwPjKZ9PvYdo=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/e2f6a39f-2940-4ccc-8c1f-9d559c47a79b/0/D85B24E818A4DAC388415FB8C96905DF03C8D6EA.crl
                          rsync://repo-rpki.idnic.net/repo/e2f6a39f-2940-4ccc-8c1f-9d559c47a79b/0/D85B24E818A4DAC388415FB8C96905DF03C8D6EA.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D85B24E818A4DAC388415FB8C96905DF03C8D6EA.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 03 Feb 2026 12:29:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:fa:4a:34:c2:88:c4:79:d8:cc:65:b5:03:d2:81:ca:41:fe:2d:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D85B24E818A4DAC388415FB8C96905DF03C8D6EA
        Validity
            Not Before: Jan 31 06:17:05 2026 GMT
            Not After : Feb  3 12:29:05 2026 GMT
        Subject: CN=6B4D537F2B5C2152D5139FE1B0CDB642EF81AE51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:5b:3d:54:ee:77:eb:53:9f:df:9a:8d:7b:14:
                    b7:08:e2:b5:31:1f:12:b6:fb:f0:3f:b0:99:f7:f8:
                    93:26:33:1d:00:a9:07:f5:aa:62:1f:7c:d2:c2:8a:
                    b3:b2:7e:99:20:b7:80:7f:6a:7e:4e:d5:fd:6a:b6:
                    23:2a:f1:e7:8a:45:55:ce:04:41:43:77:2f:9b:97:
                    d9:c4:8b:e5:63:0f:38:a0:14:a6:0f:62:08:f0:6c:
                    c6:e1:ba:1d:e2:98:d2:08:51:2e:2d:87:82:89:27:
                    40:6c:1e:52:18:73:21:39:58:b4:ca:94:57:04:7d:
                    fe:72:0a:de:a5:18:ee:ee:4b:a1:98:ce:4a:d9:a0:
                    e9:20:a6:59:2c:25:27:37:d6:c2:f1:a2:04:5c:1e:
                    35:8b:1d:4b:00:ac:6e:f2:0c:d2:a3:a0:e3:27:5e:
                    82:62:a2:a7:bf:75:ca:a0:df:84:04:9c:3a:0d:b8:
                    45:82:b9:8e:1a:c4:db:32:6c:3c:57:ad:7d:1a:fa:
                    39:2f:ef:f8:e6:cb:83:14:b3:15:9f:63:5c:16:94:
                    a8:5e:4e:61:40:05:ab:16:e6:d1:64:12:cc:e0:63:
                    7f:1c:2d:e4:91:36:0e:d0:6c:bb:42:9e:c1:54:5a:
                    28:1d:35:79:1b:4c:40:7d:42:d7:2d:ca:52:c1:35:
                    1c:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:4D:53:7F:2B:5C:21:52:D5:13:9F:E1:B0:CD:B6:42:EF:81:AE:51
            X509v3 Authority Key Identifier:
                keyid:D8:5B:24:E8:18:A4:DA:C3:88:41:5F:B8:C9:69:05:DF:03:C8:D6:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/e2f6a39f-2940-4ccc-8c1f-9d559c47a79b/0/D85B24E818A4DAC388415FB8C96905DF03C8D6EA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D85B24E818A4DAC388415FB8C96905DF03C8D6EA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e2f6a39f-2940-4ccc-8c1f-9d559c47a79b/0/D85B24E818A4DAC388415FB8C96905DF03C8D6EA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:28:6d:4b:d3:1e:ab:80:a0:7c:29:9e:bc:d9:c5:fb:e1:cb:
         cf:9a:de:ea:25:15:36:99:52:69:89:f9:5c:17:94:22:86:8a:
         44:10:0a:96:95:19:51:1a:0a:c4:ab:7f:68:48:44:4e:cf:34:
         8c:36:7e:3d:29:de:e0:76:70:1e:0d:df:1e:dc:bd:07:6b:64:
         e8:d6:a4:ec:ad:8a:57:9a:6d:41:f6:37:f3:4b:58:5a:7f:ae:
         81:e3:7c:17:40:0d:22:1f:32:43:71:e9:a7:97:f3:0a:f2:24:
         c2:24:79:bf:ba:57:93:53:51:15:44:20:b3:77:2e:c3:dd:d4:
         18:cd:a2:50:e6:62:4e:b3:76:6e:e5:83:f6:0b:91:a7:6a:35:
         f6:89:a9:7a:8a:f3:19:58:6d:b4:f1:2e:7d:cc:b6:32:64:3a:
         3b:92:19:73:e5:44:2b:fe:45:39:9b:79:b1:86:36:6b:ba:77:
         f8:a9:e6:b3:b3:cd:78:4e:4c:f7:80:5b:2b:07:68:3a:97:d9:
         08:6c:86:8d:bb:3d:c6:b1:ff:dd:73:aa:4f:9e:26:56:9d:2d:
         5f:ce:64:2f:ff:25:2c:17:58:93:bf:d0:ab:70:27:35:f9:d0:
         67:d0:c2:6d:f3:8b:57:5e:0e:75:ed:00:f5:fd:81:f8:0c:08:
         f2:d1:df:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 10:04:22 2026 by rpki-client