This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/f4293c64-ea00-413f-9090-2b190b1a45af/0/F2CC4B38295BA8B211B55A53DA0ACB76DA636E70.mft
File:                     F2CC4B38295BA8B211B55A53DA0ACB76DA636E70.mft (raw, json)
Hash identifier:          IkGB533vUvsnIMJxlJK0/8FRQjB73BlgmywG8Z6KmZ8=
Subject key identifier:   11:01:D3:18:4C:0B:AF:CB:72:09:DD:1E:06:FF:7A:7B:C4:28:59:D6
Authority key identifier: F2:CC:4B:38:29:5B:A8:B2:11:B5:5A:53:DA:0A:CB:76:DA:63:6E:70
Certificate issuer:       /CN=F2CC4B38295BA8B211B55A53DA0ACB76DA636E70
Certificate serial:       2B42A485A00E72B38B8F7521A06F2A1757263C40
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F2CC4B38295BA8B211B55A53DA0ACB76DA636E70.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/f4293c64-ea00-413f-9090-2b190b1a45af/0/F2CC4B38295BA8B211B55A53DA0ACB76DA636E70.mft
Manifest number:          03DB
Signing time:             Sat 31 Jan 2026 08:58:34 +0000
Manifest this update:     Sat 31 Jan 2026 08:53:34 +0000
Manifest next update:     Tue 03 Feb 2026 18:51:34 +0000
Files and hashes:         1: 3130332e3136382e34362e302f32342d3234203d3e20313432333130.roa (hash: /hqFM8bn3tDhrg+XA2pNRGjXcuItTuse0QHD782i5/Q=)
                          2: F2CC4B38295BA8B211B55A53DA0ACB76DA636E70.crl (hash: aWD77FDl0mXzHNpQkg7NNiEEL+eKMHKhCaN/GQXjJXY=)
                          3: 3130332e3136382e34372e302f32342d3234203d3e20313432333130.roa (hash: nH/6GtgoV/9v3sMWYjneb+fyVV81krMAog9BySpXr4E=)
                          4: 3130332e3136382e34362e302f32332d3233203d3e20313432333130.roa (hash: UuTu7e3+zWAM3tqzM1lDC6GDGKFz8QAZ3rF08nv/dYo=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/f4293c64-ea00-413f-9090-2b190b1a45af/0/F2CC4B38295BA8B211B55A53DA0ACB76DA636E70.crl
                          rsync://repo-rpki.idnic.net/repo/f4293c64-ea00-413f-9090-2b190b1a45af/0/F2CC4B38295BA8B211B55A53DA0ACB76DA636E70.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F2CC4B38295BA8B211B55A53DA0ACB76DA636E70.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 03 Feb 2026 18:51:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:42:a4:85:a0:0e:72:b3:8b:8f:75:21:a0:6f:2a:17:57:26:3c:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F2CC4B38295BA8B211B55A53DA0ACB76DA636E70
        Validity
            Not Before: Jan 31 08:53:34 2026 GMT
            Not After : Feb  3 18:51:34 2026 GMT
        Subject: CN=1101D3184C0BAFCB7209DD1E06FF7A7BC42859D6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:c1:76:8b:0e:62:67:b1:1a:aa:bf:bc:bf:81:
                    c7:e7:66:ff:0d:74:15:82:9c:9d:5f:a3:76:0d:d9:
                    5c:d8:de:23:e0:1a:9d:62:43:14:25:3a:8a:5f:83:
                    8c:98:df:4c:48:ca:cb:15:cb:31:2f:ef:c5:b4:d1:
                    22:c1:b5:8c:da:4e:be:71:c6:f4:f6:cf:16:27:7d:
                    e5:b9:f4:26:a5:30:48:ca:d5:5e:bc:51:a2:49:47:
                    a5:d3:9d:59:84:8f:91:a3:c4:29:0a:fb:d1:19:7e:
                    a4:81:81:54:eb:53:2f:f9:a1:ba:18:58:ec:34:e3:
                    3b:e1:2d:c9:32:12:52:1e:80:6a:7e:d1:10:77:1c:
                    f5:80:46:ec:7c:7a:c1:3b:0c:50:26:ae:e6:b8:f9:
                    d6:b4:ea:b3:90:e1:0b:db:71:88:eb:db:a8:2f:b7:
                    5f:ee:49:4d:67:c3:20:d3:51:95:bc:84:1d:80:9d:
                    84:3d:82:a8:57:6b:86:9b:24:7e:5b:96:ec:a6:8f:
                    3e:58:62:ca:b9:3c:64:89:a6:12:a2:f4:d0:23:bd:
                    03:94:4d:00:06:07:0b:f6:ba:05:60:8d:3a:fc:13:
                    15:b4:b9:3e:fc:5e:6f:37:f5:51:77:59:69:b1:d9:
                    20:db:65:39:50:21:44:ad:bd:0b:36:c4:c6:db:28:
                    bb:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:01:D3:18:4C:0B:AF:CB:72:09:DD:1E:06:FF:7A:7B:C4:28:59:D6
            X509v3 Authority Key Identifier:
                keyid:F2:CC:4B:38:29:5B:A8:B2:11:B5:5A:53:DA:0A:CB:76:DA:63:6E:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/f4293c64-ea00-413f-9090-2b190b1a45af/0/F2CC4B38295BA8B211B55A53DA0ACB76DA636E70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F2CC4B38295BA8B211B55A53DA0ACB76DA636E70.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f4293c64-ea00-413f-9090-2b190b1a45af/0/F2CC4B38295BA8B211B55A53DA0ACB76DA636E70.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:5b:39:65:aa:2e:32:b1:88:23:24:f2:26:3a:ee:1a:a1:fe:
         fc:c8:e0:f2:d6:db:95:c6:de:59:b4:7c:72:bc:4f:78:6a:06:
         c8:11:f4:3c:63:a7:be:ba:27:0d:ff:29:13:18:f5:7a:1d:80:
         16:ee:aa:a9:85:db:9d:dd:70:25:8f:3d:5d:0b:05:a1:3a:7c:
         d0:39:05:73:7e:43:09:1a:64:66:53:43:af:2a:74:57:61:6e:
         4a:ac:18:63:5a:0e:11:02:7a:19:26:4c:82:48:9d:28:47:3e:
         e3:2c:eb:54:b8:97:ba:3c:e2:e1:f2:b0:18:7f:90:10:e2:63:
         02:3f:c7:4b:5a:06:b4:c6:9e:9f:5d:46:4a:63:7e:4e:19:60:
         84:25:07:f8:5f:35:c7:fa:c1:de:55:1b:88:1f:b7:a4:bb:cf:
         19:95:16:92:70:e8:7c:56:ec:32:14:4d:8b:df:98:0c:bb:b6:
         73:ad:27:7a:a1:1c:52:5e:72:87:cf:0d:36:d1:45:fe:88:ed:
         3f:c6:44:14:f7:18:2e:fc:6b:c2:ed:86:5c:0f:ec:3b:13:00:
         de:f7:df:95:41:09:e8:74:ed:fe:32:c1:12:a5:1d:5a:c1:02:
         ce:4b:5c:2e:ea:41:b2:c5:8f:83:a9:bc:09:ab:6c:e0:57:3b:
         3b:91:ce:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 10:02:53 2026 by rpki-client