This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/e99b604f-1578-4a0b-8f7a-58d9f13c9769/0/D1553F19BBD3B70719E720005FDB3145CC910A1F.mft
File:                     D1553F19BBD3B70719E720005FDB3145CC910A1F.mft (raw, json)
Hash identifier:          hxuFgTGw0gy1XNtMbVukyhkz2GU9AkaB/lxCAmfFSlA=
Subject key identifier:   6E:73:AF:2E:2F:41:57:2F:DF:7E:03:60:44:44:3B:07:A7:54:21:E7
Authority key identifier: D1:55:3F:19:BB:D3:B7:07:19:E7:20:00:5F:DB:31:45:CC:91:0A:1F
Certificate issuer:       /CN=D1553F19BBD3B70719E720005FDB3145CC910A1F
Certificate serial:       396A484ADDBE791D33D50F0A0DF33318D5D9BFE9
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D1553F19BBD3B70719E720005FDB3145CC910A1F.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/e99b604f-1578-4a0b-8f7a-58d9f13c9769/0/D1553F19BBD3B70719E720005FDB3145CC910A1F.mft
Manifest number:          027B
Signing time:             Sun 01 Feb 2026 21:30:39 +0000
Manifest this update:     Sun 01 Feb 2026 21:25:39 +0000
Manifest next update:     Thu 05 Feb 2026 01:57:39 +0000
Files and hashes:         1: 3130332e3138332e35382e302f32342d3234203d3e20313439343039.roa (hash: B89ThQDBq7NFEdKxZJ9Go94Cy2gr/9mNFR+AP3UQspo=)
                          2: 3130332e3138332e35392e302f32342d3234203d3e20313439343039.roa (hash: WjcJ7E0QSWsLWoEbkMd62oz7h2Nk8rjlfX12OFJZZWw=)
                          3: 3130332e3138332e35382e302f32332d3233203d3e20313439343039.roa (hash: zkfW7G82q4G/1aqENxbcKsFNsfS8k4+ZqlphVmUFO1g=)
                          4: D1553F19BBD3B70719E720005FDB3145CC910A1F.crl (hash: WD3Tpu0Z8WfZbTkciutMUBgVnLGG/oRGMADXTJz6nvo=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/e99b604f-1578-4a0b-8f7a-58d9f13c9769/0/D1553F19BBD3B70719E720005FDB3145CC910A1F.crl
                          rsync://repo-rpki.idnic.net/repo/e99b604f-1578-4a0b-8f7a-58d9f13c9769/0/D1553F19BBD3B70719E720005FDB3145CC910A1F.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D1553F19BBD3B70719E720005FDB3145CC910A1F.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 05 Feb 2026 01:57:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:6a:48:4a:dd:be:79:1d:33:d5:0f:0a:0d:f3:33:18:d5:d9:bf:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D1553F19BBD3B70719E720005FDB3145CC910A1F
        Validity
            Not Before: Feb  1 21:25:39 2026 GMT
            Not After : Feb  5 01:57:39 2026 GMT
        Subject: CN=6E73AF2E2F41572FDF7E036044443B07A75421E7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:91:bc:f1:66:a8:ff:c3:2a:2e:60:5c:b9:26:
                    a6:f0:5e:bc:c4:62:60:24:ab:c8:4f:62:e2:2d:2f:
                    71:09:8b:09:91:cf:97:fe:51:f8:f4:00:81:2c:4d:
                    0a:b7:aa:2b:65:f1:12:1b:61:81:d3:2f:d6:d7:32:
                    d2:81:7d:0c:0e:7d:6a:6c:55:23:5e:71:38:4e:80:
                    57:23:51:b3:8d:c9:c0:e7:f4:ac:3c:87:b6:d7:b7:
                    5c:44:8c:da:cb:54:5c:4d:d4:f0:51:64:4f:24:06:
                    c1:12:31:5a:73:de:f3:0b:d8:29:70:1b:49:8e:13:
                    11:fd:7e:b5:23:d5:81:da:c4:22:1d:96:81:77:09:
                    b3:6a:6f:c5:6f:f8:80:d6:36:5c:6f:ed:a1:fb:dd:
                    cd:6e:a1:39:86:fa:8f:0b:72:91:ae:5a:87:72:75:
                    e4:a0:75:f8:d0:57:2c:26:e9:03:04:94:1f:09:0d:
                    de:48:8c:1b:55:da:c1:fe:69:d1:c3:79:bb:90:ae:
                    dc:95:8f:74:25:c7:b5:2b:3f:de:a2:4d:bd:04:f2:
                    d2:3d:b1:3a:7a:87:1f:94:52:41:8c:ce:25:7c:f7:
                    ba:f6:39:f5:7e:9d:e2:90:63:b5:de:8f:b8:a9:19:
                    4f:61:0a:31:02:0f:3f:11:8b:fb:3d:4d:ac:c7:c4:
                    10:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:73:AF:2E:2F:41:57:2F:DF:7E:03:60:44:44:3B:07:A7:54:21:E7
            X509v3 Authority Key Identifier:
                keyid:D1:55:3F:19:BB:D3:B7:07:19:E7:20:00:5F:DB:31:45:CC:91:0A:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/e99b604f-1578-4a0b-8f7a-58d9f13c9769/0/D1553F19BBD3B70719E720005FDB3145CC910A1F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D1553F19BBD3B70719E720005FDB3145CC910A1F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e99b604f-1578-4a0b-8f7a-58d9f13c9769/0/D1553F19BBD3B70719E720005FDB3145CC910A1F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:f4:65:9e:c0:14:aa:a4:c1:3f:62:cb:7f:dc:68:98:9e:50:
         96:60:2b:02:aa:64:bf:43:83:99:c2:17:6b:c6:16:e9:86:c9:
         8d:4f:b1:41:66:89:ec:4f:8a:fd:b6:bc:2e:69:dd:a4:23:64:
         d8:a5:2f:21:99:ae:38:e2:d5:e5:6d:51:bb:42:e1:2e:d0:23:
         ea:68:c7:77:7a:2b:44:dc:c5:cd:09:98:ec:67:d0:0c:37:a7:
         87:af:86:40:90:36:a5:99:c9:48:6e:20:dc:39:27:1a:3c:23:
         bc:16:61:a0:72:e9:46:8e:64:ec:06:2d:f0:db:d2:ba:57:88:
         01:e5:d9:7a:49:b4:0e:b3:30:27:ba:89:2d:05:fa:68:e0:eb:
         38:5b:53:a2:8e:f6:da:99:05:e7:4b:25:bc:93:5d:cc:f1:8e:
         a4:7f:e6:d6:38:20:bb:74:bf:8c:22:d6:0f:c1:af:23:00:bb:
         57:5f:fb:45:ce:39:69:69:9a:70:58:ee:96:01:a1:e0:7e:f5:
         c0:54:6f:fd:de:6c:19:18:61:79:b1:b8:b7:b4:df:c4:bd:5a:
         32:01:a1:31:2b:69:8a:0a:ff:b3:b1:c3:db:19:3e:18:04:62:
         e8:3f:24:3c:11:b6:ca:fe:07:93:b6:4b:b0:ef:86:2b:c3:53:
         be:4d:2b:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 10:05:10 2026 by rpki-client