This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/f03362e2-9765-42bd-b59b-68d43cadeb5c/0/1975F0B2F27DE4AFF43CC246058A2B9E15950AEC.mft
File:                     1975F0B2F27DE4AFF43CC246058A2B9E15950AEC.mft (raw, json)
Hash identifier:          H2yUhDUJRHpu3F9QBhu91D7ankIbol1vSz0qhFxldbg=
Subject key identifier:   CC:4B:42:1C:38:3A:CA:57:CD:5B:BF:E0:8A:11:F6:D8:97:E3:A1:3A
Authority key identifier: 19:75:F0:B2:F2:7D:E4:AF:F4:3C:C2:46:05:8A:2B:9E:15:95:0A:EC
Certificate issuer:       /CN=1975F0B2F27DE4AFF43CC246058A2B9E15950AEC
Certificate serial:       32E6246816BBC263EB76E3E3A338333DD2BFD5EE
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1975F0B2F27DE4AFF43CC246058A2B9E15950AEC.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/f03362e2-9765-42bd-b59b-68d43cadeb5c/0/1975F0B2F27DE4AFF43CC246058A2B9E15950AEC.mft
Manifest number:          0544
Signing time:             Sun 01 Feb 2026 09:10:52 +0000
Manifest this update:     Sun 01 Feb 2026 09:05:52 +0000
Manifest next update:     Wed 04 Feb 2026 17:42:52 +0000
Files and hashes:         1: 1975F0B2F27DE4AFF43CC246058A2B9E15950AEC.crl (hash: KmiBDttKPtTTfYUjFyDKhqbZwLEc34AKU2/sYajQyz4=)
                          2: 3130332e3134352e39372e302f32342d3234203d3e20313339343433.roa (hash: PgHEb146XoyGC0/9tuhNMcAsAzVP9MObWQdPhmy9XiA=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/f03362e2-9765-42bd-b59b-68d43cadeb5c/0/1975F0B2F27DE4AFF43CC246058A2B9E15950AEC.crl
                          rsync://repo-rpki.idnic.net/repo/f03362e2-9765-42bd-b59b-68d43cadeb5c/0/1975F0B2F27DE4AFF43CC246058A2B9E15950AEC.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1975F0B2F27DE4AFF43CC246058A2B9E15950AEC.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 04 Feb 2026 17:42:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:e6:24:68:16:bb:c2:63:eb:76:e3:e3:a3:38:33:3d:d2:bf:d5:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1975F0B2F27DE4AFF43CC246058A2B9E15950AEC
        Validity
            Not Before: Feb  1 09:05:52 2026 GMT
            Not After : Feb  4 17:42:52 2026 GMT
        Subject: CN=CC4B421C383ACA57CD5BBFE08A11F6D897E3A13A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:11:ef:37:f7:48:a8:6b:71:44:00:16:30:19:
                    c6:78:7e:51:1e:3a:73:63:b7:54:6d:d3:14:9f:cd:
                    0d:f2:1d:48:07:90:0d:6c:ab:f8:3c:c1:46:8c:eb:
                    51:dd:84:14:9a:c5:40:5e:9e:3a:31:06:5a:bd:b0:
                    ac:1f:01:30:da:de:30:c0:38:d2:6e:a5:60:03:69:
                    69:8e:a0:e9:28:56:5d:d6:9a:c0:4a:f6:3b:32:5c:
                    8b:c1:9f:8e:2c:c4:c2:f6:81:b0:07:1d:57:7a:4d:
                    4e:ca:b0:95:04:37:46:14:e1:10:ec:6b:15:66:ad:
                    37:c2:fd:97:76:6b:4b:34:62:00:44:39:71:75:74:
                    d4:61:f1:c5:ea:3d:6d:a6:f6:9d:3b:88:18:bb:68:
                    9b:5a:d7:5c:cc:20:20:2a:be:05:21:b3:6a:51:57:
                    c9:97:dc:39:03:68:d4:d3:c2:20:df:6a:42:d4:4f:
                    ba:fc:9a:8e:2b:df:a3:6f:08:e8:56:55:ce:f5:fd:
                    15:13:77:51:dd:0f:f7:1a:b0:6d:e7:2d:6a:4e:cc:
                    83:1c:87:34:0a:2b:63:65:f9:bb:ff:c8:af:ec:3a:
                    1a:10:53:71:3b:0d:2b:e4:b4:e1:84:bb:b6:28:47:
                    c2:52:3d:35:2c:32:e6:bb:10:20:b3:37:18:40:53:
                    1a:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:4B:42:1C:38:3A:CA:57:CD:5B:BF:E0:8A:11:F6:D8:97:E3:A1:3A
            X509v3 Authority Key Identifier:
                keyid:19:75:F0:B2:F2:7D:E4:AF:F4:3C:C2:46:05:8A:2B:9E:15:95:0A:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/f03362e2-9765-42bd-b59b-68d43cadeb5c/0/1975F0B2F27DE4AFF43CC246058A2B9E15950AEC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1975F0B2F27DE4AFF43CC246058A2B9E15950AEC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f03362e2-9765-42bd-b59b-68d43cadeb5c/0/1975F0B2F27DE4AFF43CC246058A2B9E15950AEC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:a4:2c:2e:3d:3b:ec:7f:03:1c:b0:47:51:04:2e:10:84:b6:
         c0:9b:f0:21:06:b1:03:c6:78:b3:b3:f1:e0:e5:0c:be:75:f2:
         fb:75:d4:6c:c2:2d:20:a6:fc:ea:b6:f0:e2:4b:73:71:4f:be:
         27:d9:3c:84:d3:a5:1b:a5:fa:24:96:0e:77:c4:32:dd:92:66:
         de:ba:03:fe:e6:46:12:b8:6d:30:1b:f5:89:26:ac:19:d8:d4:
         8c:37:63:44:8c:d4:d9:4d:ab:75:62:6b:d9:8b:e7:4e:97:6d:
         a8:f6:78:3e:10:92:4d:72:a6:77:e1:2a:87:81:3b:cf:7e:63:
         69:83:2c:fb:33:4e:9e:50:75:76:07:fd:7d:8e:98:af:be:54:
         d8:06:6b:64:17:b4:01:cd:63:1b:9d:83:93:65:4d:96:bf:bc:
         b3:34:9a:dd:89:29:e5:72:13:ec:d5:e8:f4:b3:25:29:9b:f2:
         b3:34:c0:10:d0:01:6c:cc:8f:39:d4:5d:2a:49:07:6a:c6:15:
         33:16:29:5a:3a:e9:f0:4b:cd:ba:3f:b1:58:2d:a8:d3:bc:09:
         73:50:17:b0:ac:0e:fa:4c:ad:a1:11:25:dd:a9:3c:5e:bc:95:
         d2:c5:fc:6d:45:c8:bc:e2:51:22:b0:27:cd:8d:66:81:a4:b2:
         cb:a3:06:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 10:04:22 2026 by rpki-client