This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/f2e3e981-bf39-42e0-a2f6-cf87c757f827/0/232967D03C1169374A898D1C8991F1ABE7744870.mft
File:                     232967D03C1169374A898D1C8991F1ABE7744870.mft (raw, json)
Hash identifier:          mvN0AQLTZAFGoVcpjm8dblS29WT/LcHnWKBnrOkw3c4=
Subject key identifier:   EA:A3:C6:73:48:E7:B9:DB:D9:47:81:13:54:72:74:61:E7:3D:2A:BB
Authority key identifier: 23:29:67:D0:3C:11:69:37:4A:89:8D:1C:89:91:F1:AB:E7:74:48:70
Certificate issuer:       /CN=232967D03C1169374A898D1C8991F1ABE7744870
Certificate serial:       6F8BCDE955BD1D8626DA5C890FA6913C40A5CBEC
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/232967D03C1169374A898D1C8991F1ABE7744870.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/f2e3e981-bf39-42e0-a2f6-cf87c757f827/0/232967D03C1169374A898D1C8991F1ABE7744870.mft
Manifest number:          02D9
Signing time:             Sat 31 Jan 2026 07:21:41 +0000
Manifest this update:     Sat 31 Jan 2026 07:16:41 +0000
Manifest next update:     Tue 03 Feb 2026 08:16:41 +0000
Files and hashes:         1: 232967D03C1169374A898D1C8991F1ABE7744870.crl (hash: 3eCSQSHevaSryfM4Pm3Evp/G9om0nirSHqvGx/k8SVQ=)
                          2: 3130332e3135362e3233322e302f32332d3234203d3e20313431303938.roa (hash: OrYEci2LXcYUd7zO3w5vMjUiO57zzyli3tlZ6qJrtVM=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/f2e3e981-bf39-42e0-a2f6-cf87c757f827/0/232967D03C1169374A898D1C8991F1ABE7744870.crl
                          rsync://repo-rpki.idnic.net/repo/f2e3e981-bf39-42e0-a2f6-cf87c757f827/0/232967D03C1169374A898D1C8991F1ABE7744870.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/232967D03C1169374A898D1C8991F1ABE7744870.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 03 Feb 2026 08:16:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:8b:cd:e9:55:bd:1d:86:26:da:5c:89:0f:a6:91:3c:40:a5:cb:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=232967D03C1169374A898D1C8991F1ABE7744870
        Validity
            Not Before: Jan 31 07:16:41 2026 GMT
            Not After : Feb  3 08:16:41 2026 GMT
        Subject: CN=EAA3C67348E7B9DBD947811354727461E73D2ABB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:de:51:6d:ce:c6:16:7f:ea:43:4c:21:79:ea:
                    d3:1f:e2:99:ef:42:d6:2e:9a:a9:81:49:06:39:80:
                    bc:0d:99:4e:23:a5:c3:b4:cc:31:79:39:db:5d:44:
                    fe:f5:8e:c7:0c:3f:78:dc:81:d4:8c:96:6f:64:af:
                    2c:66:a2:c7:25:1a:b3:c3:6b:45:89:48:15:0e:e8:
                    65:e8:e8:be:3b:cd:6b:c9:b8:dc:6c:1a:4d:a1:77:
                    03:a5:d4:05:cf:4b:fd:68:8f:23:0b:fc:3d:cc:24:
                    64:dd:37:c5:71:18:cb:93:53:3c:1e:fa:dc:fd:04:
                    9c:1f:4c:57:b9:76:0d:3a:f2:f4:d0:73:4b:dd:03:
                    a6:73:7c:1b:6d:31:de:1e:64:f4:3a:39:59:3e:2f:
                    3d:95:cd:6f:07:4a:70:5f:5a:94:71:30:e7:1e:aa:
                    e2:59:f3:21:a9:37:01:2f:10:25:54:ba:6d:30:e0:
                    1f:fe:c0:b9:c9:3f:08:b6:94:51:14:4d:e6:a1:35:
                    5b:8f:9e:48:b1:9e:c9:78:31:ac:e4:4d:c8:f7:ce:
                    d0:5d:6f:68:b9:d2:24:f3:0c:7a:4d:78:95:5c:76:
                    97:ab:41:5f:48:92:1d:19:23:9a:f5:1c:e8:92:ce:
                    b8:da:83:08:f0:82:45:c6:1e:e0:44:28:96:dd:06:
                    5a:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:A3:C6:73:48:E7:B9:DB:D9:47:81:13:54:72:74:61:E7:3D:2A:BB
            X509v3 Authority Key Identifier:
                keyid:23:29:67:D0:3C:11:69:37:4A:89:8D:1C:89:91:F1:AB:E7:74:48:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/f2e3e981-bf39-42e0-a2f6-cf87c757f827/0/232967D03C1169374A898D1C8991F1ABE7744870.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/232967D03C1169374A898D1C8991F1ABE7744870.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f2e3e981-bf39-42e0-a2f6-cf87c757f827/0/232967D03C1169374A898D1C8991F1ABE7744870.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:d4:8f:d1:90:9e:12:54:5d:43:b1:2d:99:56:e4:2a:76:a7:
         4d:d7:4f:6a:d3:3a:bb:fa:59:46:b6:a1:82:a2:58:dc:33:ef:
         cc:16:fb:a1:4a:45:a2:7e:d3:86:7c:3c:ec:94:50:67:4d:ba:
         40:fe:51:54:b7:78:ef:4f:85:bc:6b:f9:0d:9b:fd:93:9c:de:
         c6:1f:b1:18:f3:de:03:1e:db:31:cd:9a:be:a8:c7:fc:49:78:
         8b:83:c9:fc:f6:bd:e9:5f:66:7c:c5:93:f9:e4:6d:66:30:34:
         f9:3f:b1:b0:28:65:67:d1:18:df:91:17:03:70:eb:f1:9b:84:
         c3:d6:e5:76:14:7f:ac:15:d1:ca:8a:53:9a:91:6e:f7:e4:e0:
         f8:e6:f7:aa:16:60:f2:a8:f0:9b:63:a3:d6:92:60:84:9c:73:
         e4:ce:d7:26:c5:9b:d8:96:18:ca:ef:c4:57:00:dc:b0:cb:b6:
         4a:81:81:5e:8b:56:30:42:54:5f:29:bf:dd:7b:44:5c:77:b3:
         04:97:60:3b:65:db:30:d7:22:0c:77:f1:d8:da:f7:36:e7:ec:
         27:97:c7:f8:a8:47:ac:42:15:c4:0b:d3:f7:78:e1:45:ed:4a:
         9b:c9:7c:7b:c0:d2:44:6b:fd:d3:f5:3b:c0:15:9e:55:7a:fc:
         5a:51:7b:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 09:56:34 2026 by rpki-client