This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/e523d060-b7a5-4455-9940-4fb7c704430f/0/2337E63A0142984FAFF0AD9D462EB6810AC6A036.mft
File:                     2337E63A0142984FAFF0AD9D462EB6810AC6A036.mft (raw, json)
Hash identifier:          Bp2wGM6I41PmNUNbuROJtwgzk9nlf2BoM4Wd4oaGqGU=
Subject key identifier:   0B:3C:6A:FD:1F:82:8F:ED:06:04:3C:DC:8E:7C:60:8A:B2:1E:84:AE
Authority key identifier: 23:37:E6:3A:01:42:98:4F:AF:F0:AD:9D:46:2E:B6:81:0A:C6:A0:36
Certificate issuer:       /CN=2337E63A0142984FAFF0AD9D462EB6810AC6A036
Certificate serial:       5EE2CB895869955411BBBD048FA0139882B13553
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2337E63A0142984FAFF0AD9D462EB6810AC6A036.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/e523d060-b7a5-4455-9940-4fb7c704430f/0/2337E63A0142984FAFF0AD9D462EB6810AC6A036.mft
Manifest number:          0245
Signing time:             Sat 31 Jan 2026 06:01:19 +0000
Manifest this update:     Sat 31 Jan 2026 05:56:19 +0000
Manifest next update:     Tue 03 Feb 2026 08:30:19 +0000
Files and hashes:         1: 2337E63A0142984FAFF0AD9D462EB6810AC6A036.crl (hash: 6JHDDnVCv0wgykH6a/pIyz+7eYYnqcM5T0wGVPmq6AE=)
                          2: 3130332e3138352e3235322e302f32342d3234203d3e20313439393132.roa (hash: C1EotO9BJTaqVbunTPAaWJ0CvR6X2Eyc5cI9862YoWY=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/e523d060-b7a5-4455-9940-4fb7c704430f/0/2337E63A0142984FAFF0AD9D462EB6810AC6A036.crl
                          rsync://repo-rpki.idnic.net/repo/e523d060-b7a5-4455-9940-4fb7c704430f/0/2337E63A0142984FAFF0AD9D462EB6810AC6A036.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2337E63A0142984FAFF0AD9D462EB6810AC6A036.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 03 Feb 2026 08:30:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:e2:cb:89:58:69:95:54:11:bb:bd:04:8f:a0:13:98:82:b1:35:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2337E63A0142984FAFF0AD9D462EB6810AC6A036
        Validity
            Not Before: Jan 31 05:56:19 2026 GMT
            Not After : Feb  3 08:30:19 2026 GMT
        Subject: CN=0B3C6AFD1F828FED06043CDC8E7C608AB21E84AE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:88:5a:f2:bc:35:f7:96:9e:82:5e:c2:32:d5:
                    f8:35:c6:72:ce:f6:aa:ca:91:83:b5:2e:f3:30:5f:
                    d0:f4:f2:bc:94:1a:37:f8:6f:30:e4:fc:bb:54:3a:
                    07:42:db:2f:d4:70:51:59:d3:b8:44:09:a7:77:03:
                    d8:a0:76:74:7f:62:84:f1:ee:ac:61:91:10:ca:26:
                    75:fb:05:e0:48:0c:7e:6f:08:fb:4b:bd:6b:32:78:
                    58:8c:9c:4a:64:79:95:f1:64:ec:54:8f:cc:44:58:
                    73:b4:82:37:40:6b:07:90:2d:de:12:b1:0f:16:0d:
                    a5:8f:26:d5:ae:9e:aa:fe:54:0f:cc:64:fe:81:bd:
                    f5:0c:ae:48:eb:2d:ba:fe:97:ed:b9:83:ca:62:da:
                    34:58:b2:0f:3a:62:ec:71:eb:03:10:3b:64:72:ea:
                    0d:ce:fa:25:9a:ff:53:e2:33:6d:7e:07:09:33:21:
                    81:ab:d4:3e:d7:04:12:9d:d7:6e:95:e3:bf:35:21:
                    14:a7:ad:53:c0:fc:77:6d:4c:ac:b3:31:e2:8a:17:
                    4e:93:c1:4a:30:af:75:a3:83:5c:04:cd:a6:88:11:
                    04:9c:99:df:5d:20:25:63:d2:ff:70:07:a9:ab:6b:
                    f5:5c:b8:05:15:04:91:e6:10:36:c1:8d:ad:a8:c3:
                    a2:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:3C:6A:FD:1F:82:8F:ED:06:04:3C:DC:8E:7C:60:8A:B2:1E:84:AE
            X509v3 Authority Key Identifier:
                keyid:23:37:E6:3A:01:42:98:4F:AF:F0:AD:9D:46:2E:B6:81:0A:C6:A0:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/e523d060-b7a5-4455-9940-4fb7c704430f/0/2337E63A0142984FAFF0AD9D462EB6810AC6A036.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2337E63A0142984FAFF0AD9D462EB6810AC6A036.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e523d060-b7a5-4455-9940-4fb7c704430f/0/2337E63A0142984FAFF0AD9D462EB6810AC6A036.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:3e:c7:89:44:f8:0d:2f:8c:ac:56:61:21:cc:48:e7:d2:4b:
         ba:4e:84:7d:f2:67:58:98:65:0f:2a:4b:71:c3:86:b4:0c:98:
         34:d3:bd:83:15:0a:30:a1:e0:59:02:1c:e8:05:55:c1:55:05:
         8c:01:a6:09:9f:35:d9:e8:38:2a:24:81:80:2b:ca:2c:28:e7:
         03:5f:64:57:aa:56:89:6d:ac:12:9b:e3:43:56:ed:b4:25:a0:
         86:46:cf:42:0d:f1:45:49:37:67:b4:a3:92:83:6f:01:18:a8:
         0b:6c:21:33:7b:de:8b:45:dc:78:e7:28:38:aa:b9:91:8d:40:
         fc:a3:a9:fe:71:ce:25:91:e3:ed:ff:68:2d:3a:38:4a:e6:17:
         b1:d6:61:0c:bb:f9:9c:5a:92:98:f4:73:2c:df:61:51:53:60:
         c8:51:24:dc:61:66:1a:c2:b9:fb:98:37:72:9d:e1:07:21:c8:
         ba:c3:a8:5e:d4:45:5d:f1:14:ad:6f:66:1a:8c:ac:03:2b:eb:
         ae:0d:b3:23:f7:72:4e:51:e3:a5:11:a6:7d:64:9c:f1:3a:65:
         27:d7:42:3f:f0:b3:87:31:93:a9:05:ca:d2:3c:d8:2c:55:ff:
         d4:3d:ec:49:77:db:69:d2:24:59:d9:15:0e:33:73:66:f3:44:
         73:0a:f9:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 09:49:52 2026 by rpki-client