This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/e595b7d4-3aab-4b83-94b2-c4267b2ae0a0/0/23093B0E58201D339EAA3983654297729EB3D7FD.mft
File:                     23093B0E58201D339EAA3983654297729EB3D7FD.mft (raw, json)
Hash identifier:          Q+S2P4/GyVuImRVO+M9xF0k7ft1IUbwTxX2m2Kzwj+U=
Subject key identifier:   81:ED:3D:94:31:F8:19:32:94:56:02:94:EC:3F:61:86:5E:A9:15:D1
Authority key identifier: 23:09:3B:0E:58:20:1D:33:9E:AA:39:83:65:42:97:72:9E:B3:D7:FD
Certificate issuer:       /CN=23093B0E58201D339EAA3983654297729EB3D7FD
Certificate serial:       47CB92F8A10921AF4A1405566587C2761E9BFAB5
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/23093B0E58201D339EAA3983654297729EB3D7FD.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/e595b7d4-3aab-4b83-94b2-c4267b2ae0a0/0/23093B0E58201D339EAA3983654297729EB3D7FD.mft
Manifest number:          02A9
Signing time:             Mon 02 Feb 2026 06:22:30 +0000
Manifest this update:     Mon 02 Feb 2026 06:17:30 +0000
Manifest next update:     Thu 05 Feb 2026 16:43:30 +0000
Files and hashes:         1: 3130332e3136362e3231322e302f32332d3233203d3e20313431393537.roa (hash: I3IiUxQVB0K6AHHH6hadb9zyg87yVWrhTKPdESrGNC4=)
                          2: 23093B0E58201D339EAA3983654297729EB3D7FD.crl (hash: JYSpHiqrIqOO8sk5tRwoZT9NNmRjiK6X2Fxf7tEv3lI=)
                          3: 3130332e3136362e3231322e302f32342d3234203d3e20313431393537.roa (hash: 1T/005+fcGS3bHhfnGHMDWx9bEqPsgYOiwCk3qFgrG8=)
                          4: 3130332e3136362e3231332e302f32342d3234203d3e20313431393537.roa (hash: +q+2lGJsfE4ezep6xSn8bk3REU1n8oNlxOWiZdJkL5s=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/e595b7d4-3aab-4b83-94b2-c4267b2ae0a0/0/23093B0E58201D339EAA3983654297729EB3D7FD.crl
                          rsync://repo-rpki.idnic.net/repo/e595b7d4-3aab-4b83-94b2-c4267b2ae0a0/0/23093B0E58201D339EAA3983654297729EB3D7FD.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/23093B0E58201D339EAA3983654297729EB3D7FD.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 05 Feb 2026 05:24:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:cb:92:f8:a1:09:21:af:4a:14:05:56:65:87:c2:76:1e:9b:fa:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23093B0E58201D339EAA3983654297729EB3D7FD
        Validity
            Not Before: Feb  2 06:17:30 2026 GMT
            Not After : Feb  5 16:43:30 2026 GMT
        Subject: CN=81ED3D9431F8193294560294EC3F61865EA915D1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:66:1c:a1:9a:79:fb:f7:f8:4a:86:02:41:fb:
                    d0:39:7d:70:d6:a4:98:2e:2a:b0:ed:8c:cb:80:9e:
                    3e:f2:8c:99:1f:f5:6d:f5:4a:40:0a:83:22:dd:6a:
                    e3:7d:4c:b1:43:0c:4c:19:1e:2d:a6:5e:09:f0:60:
                    78:a5:c4:5d:fe:c1:f6:8f:ff:74:37:75:a3:98:45:
                    0b:b6:f7:f8:0a:5b:2d:5e:25:e4:52:9d:5c:77:77:
                    ab:44:8e:9d:fe:4a:bc:1c:e9:a2:b4:e9:1f:6f:c0:
                    e6:dd:c7:11:76:12:a0:9f:00:63:cd:9b:8c:c3:df:
                    f2:52:66:c8:98:a4:1b:ed:28:a9:1f:0a:7b:dc:5f:
                    7e:12:0c:8c:73:68:7d:d8:37:bf:b6:da:6b:c5:71:
                    35:c2:0d:4a:b9:bb:d1:0c:3d:f9:e9:88:82:b1:1f:
                    25:5e:44:3a:b4:d0:3c:07:76:22:21:a3:34:cc:e9:
                    85:c8:c9:d8:d7:39:48:3e:34:95:a8:38:e8:a6:53:
                    68:3b:dc:d5:79:f3:83:7a:2b:cb:0a:55:66:f1:4c:
                    1a:6f:3f:af:70:d9:59:a6:55:4f:0a:1d:0a:bf:9a:
                    fb:82:95:7c:86:4f:b4:e3:69:5b:1d:42:87:81:39:
                    5c:f8:4b:93:ca:61:ae:5d:9b:9d:48:6a:5d:95:68:
                    1d:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:ED:3D:94:31:F8:19:32:94:56:02:94:EC:3F:61:86:5E:A9:15:D1
            X509v3 Authority Key Identifier:
                keyid:23:09:3B:0E:58:20:1D:33:9E:AA:39:83:65:42:97:72:9E:B3:D7:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/e595b7d4-3aab-4b83-94b2-c4267b2ae0a0/0/23093B0E58201D339EAA3983654297729EB3D7FD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/23093B0E58201D339EAA3983654297729EB3D7FD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e595b7d4-3aab-4b83-94b2-c4267b2ae0a0/0/23093B0E58201D339EAA3983654297729EB3D7FD.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:8d:1a:05:3d:d5:8c:06:d0:1b:1e:7f:5e:e1:0e:6c:93:53:
         9f:ae:9f:d5:8d:bd:18:86:65:2c:fe:d3:02:27:59:0f:37:13:
         16:d8:54:d8:e5:ba:c7:b1:37:0f:5a:e6:85:a1:0f:61:ee:db:
         3e:a8:29:69:38:14:1f:b3:fb:da:2f:52:4a:cc:34:14:30:a0:
         46:60:42:1c:1d:cd:98:50:5a:56:00:6d:c1:49:cb:38:b3:fe:
         87:41:30:87:7b:f7:6d:d0:cd:11:f5:d5:be:79:50:a1:50:35:
         87:67:f3:d4:85:0f:69:5f:db:a7:e0:4f:39:45:e4:ef:1d:56:
         82:8d:40:8c:c0:94:d7:45:af:ea:21:72:27:bc:8c:55:d1:2e:
         7b:8e:3c:c7:e6:4a:b8:8c:4a:79:66:54:08:8a:f3:a6:77:8f:
         49:8e:2a:d2:e7:1f:99:62:2c:11:09:4c:c2:8f:1d:69:e9:46:
         aa:8f:a2:5d:82:fe:29:4b:8a:85:b0:39:78:f9:e6:de:d0:e2:
         ce:1a:03:04:9b:55:85:9c:7f:d8:d4:85:4b:8a:d8:d6:54:10:
         fc:49:ca:6d:22:44:21:05:6c:3f:5e:59:24:19:7f:8b:a8:60:
         ab:5e:0e:d5:6e:c3:f4:16:82:15:cc:85:6d:ad:4e:44:32:da:
         8f:d9:d9:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 12:49:01 2026 by rpki-client