This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/f418dea2-a891-49ef-a06f-fe7f2c83258b/0/42199169944ED22D1FEACFCC408FAEE536FBB6AF.mft
File:                     42199169944ED22D1FEACFCC408FAEE536FBB6AF.mft (raw, json)
Hash identifier:          YDtLkOiqHX84DdLXDUy/VEfmvIM+NlpAuLsYy0t9/IU=
Subject key identifier:   D5:82:55:9D:02:88:7F:89:DD:14:99:CB:43:8C:2F:88:32:07:1F:EE
Authority key identifier: 42:19:91:69:94:4E:D2:2D:1F:EA:CF:CC:40:8F:AE:E5:36:FB:B6:AF
Certificate issuer:       /CN=42199169944ED22D1FEACFCC408FAEE536FBB6AF
Certificate serial:       5BB779920471F323FDFBFF55986CC048C357D11C
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/42199169944ED22D1FEACFCC408FAEE536FBB6AF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/f418dea2-a891-49ef-a06f-fe7f2c83258b/0/42199169944ED22D1FEACFCC408FAEE536FBB6AF.mft
Manifest number:          01DB
Signing time:             Mon 02 Feb 2026 00:11:17 +0000
Manifest this update:     Mon 02 Feb 2026 00:06:17 +0000
Manifest next update:     Thu 05 Feb 2026 03:32:17 +0000
Files and hashes:         1: 42199169944ED22D1FEACFCC408FAEE536FBB6AF.crl (hash: ilqwJSSv7CjGnxvPNdAKWwmvXxCPwOS2fGM/paMQTAU=)
                          2: 3130332e3134382e38362e302f32332d3234203d3e20313430343136.roa (hash: Im9caE29LrIEyyw1N4Depx5/vTj8Y8+2ed9BSKso6Pk=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/f418dea2-a891-49ef-a06f-fe7f2c83258b/0/42199169944ED22D1FEACFCC408FAEE536FBB6AF.crl
                          rsync://repo-rpki.idnic.net/repo/f418dea2-a891-49ef-a06f-fe7f2c83258b/0/42199169944ED22D1FEACFCC408FAEE536FBB6AF.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/42199169944ED22D1FEACFCC408FAEE536FBB6AF.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 05 Feb 2026 03:32:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:b7:79:92:04:71:f3:23:fd:fb:ff:55:98:6c:c0:48:c3:57:d1:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42199169944ED22D1FEACFCC408FAEE536FBB6AF
        Validity
            Not Before: Feb  2 00:06:17 2026 GMT
            Not After : Feb  5 03:32:17 2026 GMT
        Subject: CN=D582559D02887F89DD1499CB438C2F8832071FEE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:12:ce:c9:df:3b:bb:90:b7:b1:fe:a7:c4:dc:
                    ab:5d:6f:be:44:19:66:81:32:f7:2b:37:57:64:80:
                    b7:87:06:26:69:56:70:2b:52:75:c7:66:de:b1:a8:
                    db:ea:d8:2b:f9:47:c0:37:89:c3:9c:77:3c:b8:ff:
                    c1:00:c1:21:ba:0f:99:63:6c:03:27:80:c4:88:e2:
                    14:d5:83:89:1e:2b:e0:2e:b1:cc:47:f8:44:52:47:
                    99:ba:33:e6:5a:a2:05:5c:7b:77:85:36:fd:f2:26:
                    40:45:4f:cc:c8:f1:39:99:d1:e8:33:1e:ea:07:98:
                    55:8c:7c:b2:60:8f:00:bb:b2:71:3e:24:ee:50:bc:
                    fa:fc:74:b5:3c:04:7c:8d:c9:5d:f3:51:9b:5d:f4:
                    85:1c:a4:ca:e7:c7:42:dc:af:8e:f1:66:71:d0:58:
                    c5:cd:11:be:6d:4e:3d:d6:59:32:b2:0d:bb:cc:d9:
                    9c:96:ee:c9:8c:dd:62:19:f2:19:58:44:44:63:90:
                    cc:8a:4a:23:8d:f0:c4:4a:a9:04:84:32:b0:47:a2:
                    c6:21:0a:68:c4:ea:10:67:46:b2:7d:74:6d:75:f8:
                    ab:ab:24:56:df:52:eb:72:44:a2:be:2b:40:26:77:
                    f4:58:e1:59:c1:eb:69:8f:4e:87:c6:ca:c5:36:9d:
                    49:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:82:55:9D:02:88:7F:89:DD:14:99:CB:43:8C:2F:88:32:07:1F:EE
            X509v3 Authority Key Identifier:
                keyid:42:19:91:69:94:4E:D2:2D:1F:EA:CF:CC:40:8F:AE:E5:36:FB:B6:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/f418dea2-a891-49ef-a06f-fe7f2c83258b/0/42199169944ED22D1FEACFCC408FAEE536FBB6AF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/42199169944ED22D1FEACFCC408FAEE536FBB6AF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f418dea2-a891-49ef-a06f-fe7f2c83258b/0/42199169944ED22D1FEACFCC408FAEE536FBB6AF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:2f:89:7c:6a:97:de:66:d5:3b:2d:11:64:02:70:f3:42:0a:
         21:b2:00:b9:79:2b:d2:3b:40:5b:6d:d4:f3:82:03:ae:16:00:
         52:53:e6:cd:31:87:7f:75:24:ac:5f:99:82:b7:3a:90:71:54:
         e9:11:00:cb:84:d8:3e:ac:8d:f2:7b:db:74:d7:7e:9a:71:cf:
         21:f5:8e:e6:8c:73:4b:4e:ae:ac:e0:2f:0c:87:c2:08:f9:81:
         8c:55:0d:19:b2:65:5a:41:1c:88:fc:53:0e:d1:72:4b:c3:c3:
         64:77:98:0a:9f:14:17:3a:7e:8b:0c:75:c2:98:56:15:76:97:
         63:88:7e:34:63:b1:34:f1:c9:2d:e6:34:76:54:f7:74:98:da:
         e0:e8:05:45:f2:12:af:32:51:7e:05:10:f6:00:98:83:bc:41:
         ee:79:98:75:78:4b:6e:6a:6e:e8:d0:f9:3e:50:44:bd:14:6b:
         d3:6e:58:99:6a:50:86:83:3b:70:62:18:ff:71:9a:89:e7:ee:
         c2:b7:71:2b:0e:4a:a0:a9:7d:f1:c2:ed:50:a2:58:95:d1:45:
         93:b6:f2:d8:bb:62:64:3e:b7:ab:3d:9a:61:bf:c9:66:98:e3:
         77:1d:c1:42:ac:6b:5a:06:ef:13:13:59:27:ab:89:d0:d6:e2:
         fb:b6:b4:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 09:42:08 2026 by rpki-client