This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/e67a7f0e-8d07-45de-8252-3bffc05e5649/0/F9F45AEE2535AA139ECA272806E15BF40CC89B98.mft
File:                     F9F45AEE2535AA139ECA272806E15BF40CC89B98.mft (raw, json)
Hash identifier:          anCdEL9ZWxYzSycO0kD3ulc9FS99b9qP5zruQO9H5JQ=
Subject key identifier:   A7:DD:70:48:FE:EE:AB:B9:16:AF:D1:02:20:94:29:D3:EE:E6:A4:A8
Authority key identifier: F9:F4:5A:EE:25:35:AA:13:9E:CA:27:28:06:E1:5B:F4:0C:C8:9B:98
Certificate issuer:       /CN=F9F45AEE2535AA139ECA272806E15BF40CC89B98
Certificate serial:       42C5F44923EA31EF910D03721143B40258514211
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F9F45AEE2535AA139ECA272806E15BF40CC89B98.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/e67a7f0e-8d07-45de-8252-3bffc05e5649/0/F9F45AEE2535AA139ECA272806E15BF40CC89B98.mft
Manifest number:          01A4
Signing time:             Mon 02 Feb 2026 06:42:23 +0000
Manifest this update:     Mon 02 Feb 2026 06:37:23 +0000
Manifest next update:     Thu 05 Feb 2026 07:49:23 +0000
Files and hashes:         1: F9F45AEE2535AA139ECA272806E15BF40CC89B98.crl (hash: oCrHL+8VtHYoLZXNzpUlSeU1UDhJRVuRVjoLO21DBkw=)
                          2: 3130332e3130352e392e302f32342d3234203d3e20313530393339.roa (hash: hcH6v6RlrdRAjVWDrVOqtAZuasdkitnMnAycrQrkzno=)
                          3: 3130332e3130352e382e302f32342d3234203d3e20313530393339.roa (hash: fGeye8pNhq5kvXjnhfQRX7MDbYw/hQQCjNdJBXmX1wE=)
                          4: 3130332e3130352e382e302f32332d3233203d3e20313530393339.roa (hash: 4goMGkXJ7mvm5yoxzX/P6coIIi1YjH1SZnzH4RGSxEo=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/e67a7f0e-8d07-45de-8252-3bffc05e5649/0/F9F45AEE2535AA139ECA272806E15BF40CC89B98.crl
                          rsync://repo-rpki.idnic.net/repo/e67a7f0e-8d07-45de-8252-3bffc05e5649/0/F9F45AEE2535AA139ECA272806E15BF40CC89B98.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F9F45AEE2535AA139ECA272806E15BF40CC89B98.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 05 Feb 2026 05:24:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:c5:f4:49:23:ea:31:ef:91:0d:03:72:11:43:b4:02:58:51:42:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F9F45AEE2535AA139ECA272806E15BF40CC89B98
        Validity
            Not Before: Feb  2 06:37:23 2026 GMT
            Not After : Feb  5 07:49:23 2026 GMT
        Subject: CN=A7DD7048FEEEABB916AFD102209429D3EEE6A4A8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:05:2c:d9:07:3c:c0:2e:c9:9d:78:3c:4c:e3:
                    c5:bc:b8:1c:fc:31:79:21:f3:60:d0:34:1d:af:67:
                    73:63:a1:05:52:4d:57:39:b9:ca:8d:68:c7:81:3a:
                    72:ff:51:f1:02:d3:c5:2a:95:d9:21:02:2b:68:3e:
                    33:1c:2b:60:fa:d6:5c:1c:8e:2b:b4:36:e1:07:74:
                    85:d1:2c:57:40:d3:39:31:92:b2:46:43:5f:f0:96:
                    2b:34:24:c0:92:c1:a8:e1:ca:30:53:36:11:3f:30:
                    ee:bb:41:86:c8:d0:5d:7e:83:41:03:7a:5f:73:bd:
                    79:ad:ab:54:4a:e1:81:ac:79:f4:83:55:0a:c5:af:
                    d2:8b:4e:c0:7e:18:7f:5c:66:d7:6f:c9:c6:a8:6b:
                    df:da:04:98:18:83:20:38:0f:a8:f9:83:7d:3e:04:
                    68:55:00:58:60:b8:3d:50:32:e1:77:fe:09:16:eb:
                    b3:e6:e5:13:19:14:af:d5:cb:00:23:02:91:56:95:
                    7c:ca:8c:ae:67:ca:0f:ea:c6:19:78:99:17:b6:4a:
                    9d:4d:ae:8c:5f:1c:d3:a4:bd:30:5e:f7:cf:cd:7c:
                    9c:b3:8d:84:50:da:01:83:c0:b4:da:5b:ea:29:2b:
                    f6:b3:6c:7a:f5:82:9c:72:35:a8:02:28:90:d0:18:
                    da:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:DD:70:48:FE:EE:AB:B9:16:AF:D1:02:20:94:29:D3:EE:E6:A4:A8
            X509v3 Authority Key Identifier:
                keyid:F9:F4:5A:EE:25:35:AA:13:9E:CA:27:28:06:E1:5B:F4:0C:C8:9B:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/e67a7f0e-8d07-45de-8252-3bffc05e5649/0/F9F45AEE2535AA139ECA272806E15BF40CC89B98.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F9F45AEE2535AA139ECA272806E15BF40CC89B98.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e67a7f0e-8d07-45de-8252-3bffc05e5649/0/F9F45AEE2535AA139ECA272806E15BF40CC89B98.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:45:bf:0d:7a:c8:3a:b6:38:4f:df:57:16:72:6f:52:fb:6b:
         81:72:26:c8:c1:0e:90:9e:f3:4b:bb:81:97:54:fd:d2:cb:3d:
         2a:c5:59:c2:f8:eb:77:14:7c:2b:27:4b:d3:1e:2b:4c:12:f8:
         5a:33:d6:0c:5f:59:35:ec:90:4a:d3:0e:b6:52:cf:88:29:8a:
         51:17:81:e1:37:fe:d4:79:a5:29:97:a4:99:7c:20:ca:44:60:
         2c:ca:46:4e:46:0c:68:9d:7c:f5:b5:3d:f9:6a:0a:79:87:ca:
         b8:08:ba:46:91:0c:c3:c3:87:be:a4:b2:6f:da:35:12:91:05:
         ad:a5:0d:0a:2d:d3:0b:be:69:03:57:8f:a7:52:61:66:cc:a7:
         d8:26:34:96:0d:ce:99:c0:14:a0:55:9e:a0:94:c1:5f:8d:36:
         aa:27:70:6c:42:71:10:03:40:05:52:1d:88:c3:21:82:df:38:
         cd:91:ba:f1:ad:bf:83:f1:82:85:a1:47:94:b4:6d:2d:1e:8f:
         90:95:30:54:23:48:3b:fc:7e:0d:d7:ba:8b:e1:f2:d7:f8:21:
         e0:07:e6:8d:84:0e:b4:63:50:c5:3a:18:c3:7c:a1:6d:8b:c0:
         41:75:73:f6:ca:c5:5b:aa:e0:83:c0:7f:55:41:54:8a:aa:c0:
         da:14:de:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 14:27:01 2026 by rpki-client