This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/e6adae2a-47b6-4ae5-9c3f-3e8cb92a3987/0/7CA3F2C40FE453CEE230AF594985B275514F5ECF.mft
File:                     7CA3F2C40FE453CEE230AF594985B275514F5ECF.mft (raw, json)
Hash identifier:          4rcmen/3kgKh+sNpLFm3pb04H4vTDyfJaCrmekO9TEg=
Subject key identifier:   50:85:F6:FF:33:A4:5A:22:E1:7D:5C:74:90:D4:27:6A:04:04:AD:75
Authority key identifier: 7C:A3:F2:C4:0F:E4:53:CE:E2:30:AF:59:49:85:B2:75:51:4F:5E:CF
Certificate issuer:       /CN=7CA3F2C40FE453CEE230AF594985B275514F5ECF
Certificate serial:       790F944D3A9A4CCD31775C694219DFD6BCFA765E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7CA3F2C40FE453CEE230AF594985B275514F5ECF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/e6adae2a-47b6-4ae5-9c3f-3e8cb92a3987/0/7CA3F2C40FE453CEE230AF594985B275514F5ECF.mft
Manifest number:          01DD
Signing time:             Mon 02 Feb 2026 03:22:21 +0000
Manifest this update:     Mon 02 Feb 2026 03:17:21 +0000
Manifest next update:     Thu 05 Feb 2026 05:33:21 +0000
Files and hashes:         1: 3130332e3139312e3131372e302f32342d3234203d3e20313439393137.roa (hash: MMOGS7T9X8x7JT9s8oWcj5fdpc4Z+j40BumMkZopolM=)
                          2: 7CA3F2C40FE453CEE230AF594985B275514F5ECF.crl (hash: D0U6at9lwWKeiRyqOz5FyFX4BeHyaZVYBkdAZDZfovc=)
                          3: 3130332e3139312e3131362e302f32332d3233203d3e20313439393137.roa (hash: yloFFDOEavyW9OOZ+KM+O5lOWtq7g/hDtLKYHcYmJYE=)
                          4: 3130332e3139312e3131362e302f32342d3234203d3e20313439393137.roa (hash: fdBGaDwbA3O0q2/vBfcwU5qvE8WWWviCtFtejPXVA+I=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/e6adae2a-47b6-4ae5-9c3f-3e8cb92a3987/0/7CA3F2C40FE453CEE230AF594985B275514F5ECF.crl
                          rsync://repo-rpki.idnic.net/repo/e6adae2a-47b6-4ae5-9c3f-3e8cb92a3987/0/7CA3F2C40FE453CEE230AF594985B275514F5ECF.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7CA3F2C40FE453CEE230AF594985B275514F5ECF.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 05 Feb 2026 05:24:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:0f:94:4d:3a:9a:4c:cd:31:77:5c:69:42:19:df:d6:bc:fa:76:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CA3F2C40FE453CEE230AF594985B275514F5ECF
        Validity
            Not Before: Feb  2 03:17:21 2026 GMT
            Not After : Feb  5 05:33:21 2026 GMT
        Subject: CN=5085F6FF33A45A22E17D5C7490D4276A0404AD75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:43:e3:59:dc:1c:a5:5c:e4:5c:3c:f8:f3:84:
                    d3:fb:e2:9e:d4:2d:c2:c2:82:58:fd:47:9e:5b:55:
                    dc:4d:a2:31:63:57:34:86:88:1b:08:2b:12:37:4b:
                    61:be:a2:f0:65:4f:9c:04:c8:1e:c4:62:11:71:3c:
                    63:57:bb:49:22:9f:cf:27:45:f2:79:86:c2:b8:50:
                    30:e6:69:eb:31:17:f1:98:30:99:0e:20:f8:83:74:
                    27:14:6f:ce:06:f8:45:61:6c:15:ab:fc:2a:47:be:
                    77:fc:a1:cd:54:0c:93:b0:ea:76:b9:70:79:d9:11:
                    79:66:bc:ef:14:52:e4:64:84:10:59:7c:2f:19:1b:
                    4a:aa:45:1b:c5:87:5a:de:9b:ac:3b:fe:97:08:c1:
                    ff:99:e8:e7:df:83:20:e7:6c:f2:50:fe:f4:45:34:
                    e7:12:3d:8f:23:cf:8a:91:f0:db:61:2b:a8:5d:a3:
                    df:78:22:80:07:e9:5c:9f:d2:ff:7c:11:1c:ab:f5:
                    a6:94:dc:6d:b7:21:b6:db:03:66:8a:f0:50:9c:8f:
                    dc:60:83:72:a0:f4:cd:b1:47:af:15:ca:a9:d9:0a:
                    85:28:6b:e3:0c:63:56:0b:2e:61:1e:31:77:9f:bb:
                    38:2c:4f:45:0e:09:d5:c7:fa:cb:08:0d:d1:99:f0:
                    05:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:85:F6:FF:33:A4:5A:22:E1:7D:5C:74:90:D4:27:6A:04:04:AD:75
            X509v3 Authority Key Identifier:
                keyid:7C:A3:F2:C4:0F:E4:53:CE:E2:30:AF:59:49:85:B2:75:51:4F:5E:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/e6adae2a-47b6-4ae5-9c3f-3e8cb92a3987/0/7CA3F2C40FE453CEE230AF594985B275514F5ECF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7CA3F2C40FE453CEE230AF594985B275514F5ECF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e6adae2a-47b6-4ae5-9c3f-3e8cb92a3987/0/7CA3F2C40FE453CEE230AF594985B275514F5ECF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:04:46:3b:76:0f:ed:ce:01:50:49:a0:b5:58:83:1c:88:82:
         f8:1e:fa:bb:07:81:09:b3:22:7d:fd:d4:32:c2:24:02:9c:79:
         b2:a9:d3:f6:30:e3:90:ba:cc:20:6a:b8:37:a7:75:f9:24:b9:
         dd:df:2d:68:ec:f6:02:f4:56:5c:5d:dd:45:f6:9b:97:28:12:
         7b:b1:8c:4b:20:2f:59:17:13:44:02:b8:ed:e0:23:1d:79:55:
         6f:bd:31:60:d0:b1:e5:f3:5a:83:80:49:dc:c7:b3:8f:e5:a7:
         1e:6c:cb:bb:be:e5:d8:37:9d:96:e5:d6:ff:4b:9c:44:97:dd:
         d6:52:a6:a2:c1:e6:6a:7d:96:b7:a5:61:16:5e:c7:ee:0c:ba:
         14:4b:95:0f:2a:58:32:8d:db:fe:03:2d:d9:d4:f4:fd:69:f1:
         e1:85:9c:1a:7e:dc:ac:50:23:2a:31:41:26:b8:68:b2:00:d8:
         a8:9c:76:c7:99:6f:a3:ec:9a:73:5f:69:b6:b0:42:1b:9a:8d:
         b3:12:c1:64:33:0e:d4:86:a6:e1:a3:21:dd:28:da:73:c1:52:
         df:cf:f8:c8:d6:c2:4f:f2:2a:c5:45:e2:88:1e:b7:b5:d5:4c:
         23:08:b6:89:94:3a:9c:ab:ed:b0:b2:7e:69:1f:db:00:7a:1e:
         ea:60:8c:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 10:02:18 2026 by rpki-client