This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/f2e05fcf-5f2a-4d5e-a3f2-d84032f0c8f7/0/1A32099023DD32B1C3EE67151C5098ABDFA55F49.mft
File:                     1A32099023DD32B1C3EE67151C5098ABDFA55F49.mft (raw, json)
Hash identifier:          GUOmR88myFoELBPFBhKetX7m5Va4nnf+67lWuk9CeRc=
Subject key identifier:   0F:EE:BE:A5:B5:FA:2B:56:EA:4E:0C:4C:E3:B2:5F:C3:63:71:C7:CC
Authority key identifier: 1A:32:09:90:23:DD:32:B1:C3:EE:67:15:1C:50:98:AB:DF:A5:5F:49
Certificate issuer:       /CN=1A32099023DD32B1C3EE67151C5098ABDFA55F49
Certificate serial:       5EC6480E0D5EF7659C2A17D4063F777E2EA33A47
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1A32099023DD32B1C3EE67151C5098ABDFA55F49.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/f2e05fcf-5f2a-4d5e-a3f2-d84032f0c8f7/0/1A32099023DD32B1C3EE67151C5098ABDFA55F49.mft
Manifest number:          0128
Signing time:             Sat 31 Jan 2026 07:01:50 +0000
Manifest this update:     Sat 31 Jan 2026 06:56:50 +0000
Manifest next update:     Tue 03 Feb 2026 09:02:50 +0000
Files and hashes:         1: 1A32099023DD32B1C3EE67151C5098ABDFA55F49.crl (hash: ZYvoY1k6PAJdUCsOVew0XmNg3hGvJARl3wPpICu5+NY=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/f2e05fcf-5f2a-4d5e-a3f2-d84032f0c8f7/0/1A32099023DD32B1C3EE67151C5098ABDFA55F49.crl
                          rsync://repo-rpki.idnic.net/repo/f2e05fcf-5f2a-4d5e-a3f2-d84032f0c8f7/0/1A32099023DD32B1C3EE67151C5098ABDFA55F49.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1A32099023DD32B1C3EE67151C5098ABDFA55F49.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 03 Feb 2026 09:02:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:c6:48:0e:0d:5e:f7:65:9c:2a:17:d4:06:3f:77:7e:2e:a3:3a:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1A32099023DD32B1C3EE67151C5098ABDFA55F49
        Validity
            Not Before: Jan 31 06:56:50 2026 GMT
            Not After : Feb  3 09:02:50 2026 GMT
        Subject: CN=0FEEBEA5B5FA2B56EA4E0C4CE3B25FC36371C7CC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:86:f3:fb:1e:4a:a1:32:ef:51:48:8b:02:be:
                    9c:81:20:0a:4a:22:20:28:e6:52:e4:79:21:15:57:
                    dd:74:ba:1f:51:b4:c9:13:24:26:33:33:99:67:f0:
                    cf:fa:ed:d0:ac:3d:4f:fa:bf:29:4b:3d:70:58:38:
                    96:b3:a4:dd:3d:98:96:e7:29:78:a8:54:3e:2a:76:
                    98:e6:8e:b7:df:55:18:8a:71:21:44:71:d1:6a:c8:
                    e6:b9:60:87:0c:31:49:dc:e0:15:0d:0c:24:6b:48:
                    e1:dc:0b:3e:5a:fd:57:66:60:1c:91:8e:0a:f7:f1:
                    ef:0c:ba:79:bc:eb:98:b3:c6:e6:43:34:b8:bf:18:
                    bb:99:0b:ad:cb:9a:17:f8:ee:32:f7:45:53:63:63:
                    56:f9:d6:99:12:8c:01:03:95:11:b5:e9:5d:d0:7e:
                    cb:a6:de:0a:87:d1:7e:01:f8:83:01:37:9b:78:42:
                    d6:30:b0:dc:af:71:e2:48:42:e4:40:b4:69:bb:ea:
                    49:cc:5d:7d:15:94:43:56:3e:9a:24:88:9c:b5:77:
                    ea:4a:33:80:73:b0:3b:cf:43:94:e9:e8:34:75:0f:
                    04:80:d4:e5:01:80:61:57:51:86:b4:00:2c:9b:ca:
                    15:d4:f5:1a:8d:f1:42:09:3e:ee:77:06:82:ff:38:
                    05:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:EE:BE:A5:B5:FA:2B:56:EA:4E:0C:4C:E3:B2:5F:C3:63:71:C7:CC
            X509v3 Authority Key Identifier:
                keyid:1A:32:09:90:23:DD:32:B1:C3:EE:67:15:1C:50:98:AB:DF:A5:5F:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/f2e05fcf-5f2a-4d5e-a3f2-d84032f0c8f7/0/1A32099023DD32B1C3EE67151C5098ABDFA55F49.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1A32099023DD32B1C3EE67151C5098ABDFA55F49.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f2e05fcf-5f2a-4d5e-a3f2-d84032f0c8f7/0/1A32099023DD32B1C3EE67151C5098ABDFA55F49.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:33:34:de:2c:78:23:26:4b:5f:d8:2b:eb:64:6e:e0:b0:ff:
         c1:c9:89:be:0c:77:d2:cc:f0:3f:f6:8c:04:f0:35:7d:c6:05:
         4e:bd:20:39:19:a6:22:e0:53:34:7d:66:38:ef:e9:d2:ec:37:
         fe:29:ba:56:5d:b3:ea:4a:21:e1:f3:e5:b7:7b:0f:26:3b:2e:
         e3:b7:99:04:10:27:fb:8b:da:c6:54:47:6c:88:a8:a6:6c:60:
         c1:03:22:dc:dd:4d:34:8f:c8:d8:04:04:7c:9f:5c:a1:5c:60:
         bb:f5:82:ad:c8:2f:6c:ab:79:93:a6:57:23:fd:7d:92:d9:45:
         bd:1a:a2:53:f4:c4:63:3c:2c:62:0a:7b:de:69:34:aa:1f:f1:
         df:27:84:72:89:e2:c7:62:d9:b0:34:b6:f1:6d:13:0f:24:bf:
         96:35:74:b8:05:ff:2d:20:f8:d2:c2:3b:04:af:1d:56:a9:02:
         8c:ed:34:ce:1b:91:03:9c:1c:3d:d1:bc:44:4f:cb:e1:a1:cb:
         ec:94:2e:52:8f:22:0b:ae:12:da:0e:cb:80:cd:6c:fc:ad:b1:
         12:1a:4c:0d:fe:57:24:e7:65:00:fb:03:a1:f4:71:e1:b1:dd:
         da:e4:b8:e9:64:b3:21:53:95:9c:fe:b1:0a:30:a4:52:9d:ce:
         cd:d2:ef:ce
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUXsZIDg1e92WcKhfUBj93fi6jOkcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUEzMjA5OTAyM0REMzJCMUMzRUU2NzE1MUM1MDk4QUJE
RkE1NUY0OTAeFw0yNjAxMzEwNjU2NTBaFw0yNjAyMDMwOTAyNTBaMDMxMTAvBgNV
BAMTKDBGRUVCRUE1QjVGQTJCNTZFQTRFMEM0Q0UzQjI1RkMzNjM3MUM3Q0MwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCUhvP7HkqhMu9RSIsCvpyBIApK
IiAo5lLkeSEVV910uh9RtMkTJCYzM5ln8M/67dCsPU/6vylLPXBYOJazpN09mJbn
KXioVD4qdpjmjrffVRiKcSFEcdFqyOa5YIcMMUnc4BUNDCRrSOHcCz5a/VdmYByR
jgr38e8Munm865izxuZDNLi/GLuZC63Lmhf47jL3RVNjY1b51pkSjAEDlRG16V3Q
fsum3gqH0X4B+IMBN5t4QtYwsNyvceJIQuRAtGm76knMXX0VlENWPpokiJy1d+pK
M4BzsDvPQ5Tp6DR1DwSA1OUBgGFXUYa0ACybyhXU9RqN8UIJPu53BoL/OAXbAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUD+6+pbX6K1bqTgxM47Jfw2Nxx8wwHwYDVR0j
BBgwFoAUGjIJkCPdMrHD7mcVHFCYq9+lX0kwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m
MmUwNWZjZi01ZjJhLTRkNWUtYTNmMi1kODQwMzJmMGM4ZjcvMC8xQTMyMDk5MDIz
REQzMkIxQzNFRTY3MTUxQzUwOThBQkRGQTU1RjQ5LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMUEzMjA5OTAyM0REMzJCMUMzRUU2NzE1MUM1MDk4QUJERkE1
NUY0OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjJlMDVmY2YtNWYyYS00ZDVlLWEz
ZjItZDg0MDMyZjBjOGY3LzAvMUEzMjA5OTAyM0REMzJCMUMzRUU2NzE1MUM1MDk4
QUJERkE1NUY0OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBABszNN4seCMmS1/YK+tkbuCw/8HJib4Md9LM
8D/2jATwNX3GBU69IDkZpiLgUzR9Zjjv6dLsN/4pulZds+pKIeHz5bd7DyY7LuO3
mQQQJ/uL2sZUR2yIqKZsYMEDItzdTTSPyNgEBHyfXKFcYLv1gq3IL2yreZOmVyP9
fZLZRb0aolP0xGM8LGIKe95pNKof8d8nhHKJ4sdi2bA0tvFtEw8kv5Y1dLgF/y0g
+NLCOwSvHVapAoztNM4bkQOcHD3RvERPy+Ghy+yULlKPIguuEtoOy4DNbPytsRIa
TA3+VyTnZQD7A6H0ceGx3drkuOlksyFTlZz+sQowpFKdzs3S784=
-----END CERTIFICATE-----
Generated at Mon Feb 2 09:46:27 2026 by rpki-client