This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/f3e45039-6ed0-483d-a1b9-c4f4854c5cf5/0/C0CB508F7D1A9EF9049CCF9EBD0596E7693C2FC6.mft
File:                     C0CB508F7D1A9EF9049CCF9EBD0596E7693C2FC6.mft (raw, json)
Hash identifier:          xvKNCsvPXs4c4OPuW40cgkI7jmLtitrAFidtiJKW8e0=
Subject key identifier:   93:F9:C2:6E:F3:5F:67:68:B9:2D:08:52:88:10:02:0D:B0:E2:88:99
Authority key identifier: C0:CB:50:8F:7D:1A:9E:F9:04:9C:CF:9E:BD:05:96:E7:69:3C:2F:C6
Certificate issuer:       /CN=C0CB508F7D1A9EF9049CCF9EBD0596E7693C2FC6
Certificate serial:       31F479CC8FECE803FE1DA24BBC8B6326803E84A9
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C0CB508F7D1A9EF9049CCF9EBD0596E7693C2FC6.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/f3e45039-6ed0-483d-a1b9-c4f4854c5cf5/0/C0CB508F7D1A9EF9049CCF9EBD0596E7693C2FC6.mft
Manifest number:          E3
Signing time:             Sun 01 Feb 2026 07:12:15 +0000
Manifest this update:     Sun 01 Feb 2026 07:07:15 +0000
Manifest next update:     Wed 04 Feb 2026 08:44:15 +0000
Files and hashes:         1: C0CB508F7D1A9EF9049CCF9EBD0596E7693C2FC6.crl (hash: HZeYNtPYwF/8cS4cKVKQsGOL1H0F1+EGnETqsuh03VU=)
                          2: 3130332e3231372e3137322e302f32342d3234203d3e20313333333534.roa (hash: Jy6L+sGekPMyuMtdpky0D2jRd/OipqZg9C05WnpPS4Y=)
                          3: 3130332e3233322e33322e302f32332d3233203d3e20313333333534.roa (hash: tfvFAul9pjc/Wi//p7lcXXJokuoGN8UfdeXWsqF8UAA=)
                          4: 3130332e3233322e33332e302f32342d3234203d3e20313333333534.roa (hash: L0OHjTLAoKuTGX0pU6SpedvQBvVTanvlgQCeJn9jtow=)
                          5: 3130332e3231372e3137322e302f32332d3233203d3e20313333333534.roa (hash: zKHXogUEbsyyC8ISVc+ANF+73aCbCi6els1lcd1hD1E=)
                          6: 3130332e3233322e33322e302f32342d3234203d3e20313333333534.roa (hash: vaX/n6vc4K9mejYUu1eJI/tNjnfyjVyWN2o5zH8Hflc=)
                          7: 3130332e3231372e3137332e302f32342d3234203d3e20313333333534.roa (hash: +SLAv/Ao5ipR0W/v6AgPtFrgrn+d0qK7qqbca2xo8WU=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/f3e45039-6ed0-483d-a1b9-c4f4854c5cf5/0/C0CB508F7D1A9EF9049CCF9EBD0596E7693C2FC6.crl
                          rsync://repo-rpki.idnic.net/repo/f3e45039-6ed0-483d-a1b9-c4f4854c5cf5/0/C0CB508F7D1A9EF9049CCF9EBD0596E7693C2FC6.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C0CB508F7D1A9EF9049CCF9EBD0596E7693C2FC6.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 04 Feb 2026 08:44:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:f4:79:cc:8f:ec:e8:03:fe:1d:a2:4b:bc:8b:63:26:80:3e:84:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C0CB508F7D1A9EF9049CCF9EBD0596E7693C2FC6
        Validity
            Not Before: Feb  1 07:07:15 2026 GMT
            Not After : Feb  4 08:44:15 2026 GMT
        Subject: CN=93F9C26EF35F6768B92D08528810020DB0E28899
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:b8:7a:cd:c0:6f:03:66:69:bb:0b:c1:4b:33:
                    3d:70:99:e4:18:2b:5d:4c:36:e8:76:b7:66:e7:db:
                    da:40:ec:5d:7b:22:04:a9:98:69:f7:e3:ee:12:2b:
                    41:19:8c:99:fd:ee:d0:f8:31:ef:6d:93:29:80:c8:
                    86:cb:6b:8d:8f:68:5c:5f:2f:36:d2:02:4f:3e:fb:
                    4d:bc:35:84:5f:07:d4:35:c2:32:0d:2c:35:d8:a6:
                    89:65:cc:6b:3b:ab:66:08:f7:d3:2f:35:46:d7:36:
                    dd:bd:3c:54:e0:a8:39:88:03:44:2a:8c:68:3a:61:
                    01:61:c9:6f:e9:34:cb:00:e1:bf:85:bb:1f:0b:d3:
                    5c:42:f7:24:c5:49:3c:23:66:6b:5b:60:5a:86:09:
                    e8:d1:02:1b:24:60:ac:e9:98:29:84:3a:c6:37:dc:
                    69:16:53:43:eb:e1:41:86:a4:09:8d:71:45:60:1b:
                    be:df:0f:05:54:82:98:d7:fc:02:9d:6a:c4:de:7d:
                    e6:94:85:56:43:1a:95:98:86:9a:47:f8:02:af:07:
                    ba:06:32:0f:ba:1e:26:a1:d3:b4:0f:21:3e:7c:f8:
                    11:90:52:bf:e6:56:9e:f8:92:4b:4a:b4:cd:b4:7f:
                    88:5a:30:b7:4e:62:54:e8:75:68:5d:39:ec:27:9d:
                    55:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:F9:C2:6E:F3:5F:67:68:B9:2D:08:52:88:10:02:0D:B0:E2:88:99
            X509v3 Authority Key Identifier:
                keyid:C0:CB:50:8F:7D:1A:9E:F9:04:9C:CF:9E:BD:05:96:E7:69:3C:2F:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/f3e45039-6ed0-483d-a1b9-c4f4854c5cf5/0/C0CB508F7D1A9EF9049CCF9EBD0596E7693C2FC6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C0CB508F7D1A9EF9049CCF9EBD0596E7693C2FC6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f3e45039-6ed0-483d-a1b9-c4f4854c5cf5/0/C0CB508F7D1A9EF9049CCF9EBD0596E7693C2FC6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:b3:a9:df:f8:54:90:4e:74:aa:92:31:b4:c4:e1:58:34:23:
         78:09:15:2b:1d:22:9b:e0:00:8e:3f:0e:55:a2:7f:0e:06:8c:
         ee:62:4a:25:8b:e0:fd:6e:0c:14:5e:b3:f7:88:f7:12:36:47:
         2d:42:d3:ba:65:bf:24:21:60:e7:dd:b0:2a:b4:9f:75:ef:01:
         59:e7:be:3e:de:2f:e6:a4:40:e5:7e:69:d6:34:19:4f:ec:04:
         5b:48:e8:6d:4e:71:5d:6a:58:20:91:e0:ed:a4:05:a0:90:f5:
         52:1c:03:78:85:12:c4:f5:8a:03:de:a5:68:79:1c:56:0c:65:
         73:62:5f:1a:56:c3:85:80:38:49:b5:76:8a:d1:ae:16:a0:f0:
         98:d8:2d:94:f8:2f:f3:46:82:e0:dc:2b:4a:da:c6:7c:52:19:
         7c:a5:0f:27:4d:e2:42:6b:26:d3:62:a0:13:80:4e:f1:e2:21:
         c7:3f:00:1f:d7:0a:96:2e:1d:75:af:d3:3f:b9:a5:f2:97:e6:
         a0:6f:ef:a2:17:9f:d6:31:9e:2e:cf:e8:62:53:55:47:b0:97:
         3d:b4:ac:4c:46:96:5e:10:ae:87:fd:7a:5a:e6:42:eb:42:07:
         60:86:c2:b6:dd:9a:a5:9c:5a:7e:3e:75:96:86:62:08:1b:8b:
         e4:eb:97:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 10:05:04 2026 by rpki-client