This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/f4b4ec98-4d1f-4e6f-a768-026894202223/0/2C83670427BBEA5DCC6E4F5F7EE2342DB5DC2B2E.mft
File:                     2C83670427BBEA5DCC6E4F5F7EE2342DB5DC2B2E.mft (raw, json)
Hash identifier:          sCurs1A8NV175yezC1a+RhIFPgfgf9IFfhAMQe72ksM=
Subject key identifier:   87:9D:43:DF:DD:31:AD:0E:10:DD:3F:F4:BB:B1:74:20:D1:EB:27:8D
Authority key identifier: 2C:83:67:04:27:BB:EA:5D:CC:6E:4F:5F:7E:E2:34:2D:B5:DC:2B:2E
Certificate issuer:       /CN=2C83670427BBEA5DCC6E4F5F7EE2342DB5DC2B2E
Certificate serial:       368A65ED29825B3EC817355BEB87E5143E485F4E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2C83670427BBEA5DCC6E4F5F7EE2342DB5DC2B2E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/f4b4ec98-4d1f-4e6f-a768-026894202223/0/2C83670427BBEA5DCC6E4F5F7EE2342DB5DC2B2E.mft
Manifest number:          013D
Signing time:             Sun 01 Feb 2026 17:21:21 +0000
Manifest this update:     Sun 01 Feb 2026 17:16:21 +0000
Manifest next update:     Wed 04 Feb 2026 23:39:21 +0000
Files and hashes:         1: 2C83670427BBEA5DCC6E4F5F7EE2342DB5DC2B2E.crl (hash: Nqm49p+ZwoleJHzFSZMSC2WB2d5mNLFwaAlTJllcgC0=)
                          2: 3130332e3133312e35312e302f32342d3234203d3e20313331373735.roa (hash: CcRb5LGBAMt+/VJUtbZ5PslhgE9y9IJGFz9zfz6NHW0=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/f4b4ec98-4d1f-4e6f-a768-026894202223/0/2C83670427BBEA5DCC6E4F5F7EE2342DB5DC2B2E.crl
                          rsync://repo-rpki.idnic.net/repo/f4b4ec98-4d1f-4e6f-a768-026894202223/0/2C83670427BBEA5DCC6E4F5F7EE2342DB5DC2B2E.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2C83670427BBEA5DCC6E4F5F7EE2342DB5DC2B2E.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 04 Feb 2026 23:39:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:8a:65:ed:29:82:5b:3e:c8:17:35:5b:eb:87:e5:14:3e:48:5f:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2C83670427BBEA5DCC6E4F5F7EE2342DB5DC2B2E
        Validity
            Not Before: Feb  1 17:16:21 2026 GMT
            Not After : Feb  4 23:39:21 2026 GMT
        Subject: CN=879D43DFDD31AD0E10DD3FF4BBB17420D1EB278D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:77:d1:3c:71:38:0e:f3:fa:04:88:bf:b0:55:
                    39:23:68:86:54:3d:24:07:18:b9:5c:1e:c6:05:d9:
                    61:68:26:8e:3a:67:c8:05:c1:cf:9c:5d:0f:1c:c5:
                    31:7f:9b:f3:63:62:7e:81:49:ef:9a:ba:2a:fe:bf:
                    61:ba:f6:bb:25:2c:ef:10:34:cd:9e:89:e2:fd:1e:
                    0d:08:fa:b4:c4:59:a5:b4:05:08:0b:08:19:fd:01:
                    b3:6a:7e:d9:4a:93:19:34:3c:3c:ca:b3:c5:ce:04:
                    ed:b5:60:ad:24:d1:c7:57:3e:db:65:bb:c3:5b:cc:
                    b2:19:48:e3:92:21:42:d0:6e:88:97:46:dc:02:f1:
                    9c:24:bc:86:65:4b:46:b7:a5:03:14:bc:c7:af:d7:
                    ef:67:c8:b8:5e:e7:0c:a2:b3:92:51:88:ee:bd:71:
                    c5:49:a3:b2:19:0b:75:9d:18:a1:1a:20:34:90:1f:
                    a7:72:7b:b0:65:1b:d2:df:e9:1e:4f:51:86:4a:f0:
                    db:12:7a:36:90:42:62:e6:48:32:2f:07:9c:11:d3:
                    8b:ba:f5:2a:10:03:cf:0e:19:54:0e:92:3f:87:f6:
                    96:ca:2e:6f:13:65:00:b2:2f:8c:0a:31:9f:ed:13:
                    e1:90:83:f6:a1:f8:7a:4b:58:7a:2a:7b:da:eb:80:
                    b9:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:9D:43:DF:DD:31:AD:0E:10:DD:3F:F4:BB:B1:74:20:D1:EB:27:8D
            X509v3 Authority Key Identifier:
                keyid:2C:83:67:04:27:BB:EA:5D:CC:6E:4F:5F:7E:E2:34:2D:B5:DC:2B:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/f4b4ec98-4d1f-4e6f-a768-026894202223/0/2C83670427BBEA5DCC6E4F5F7EE2342DB5DC2B2E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2C83670427BBEA5DCC6E4F5F7EE2342DB5DC2B2E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f4b4ec98-4d1f-4e6f-a768-026894202223/0/2C83670427BBEA5DCC6E4F5F7EE2342DB5DC2B2E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:d0:7f:f9:d0:41:40:1f:7f:6e:1a:51:5f:43:c0:2c:3a:be:
         2c:e1:9d:4b:42:cb:7d:fb:76:7f:c1:45:cd:64:5c:65:60:9d:
         81:5b:6d:5a:ca:af:4a:08:6f:37:c1:48:b8:06:c6:69:d5:03:
         55:06:ce:fb:60:c6:04:df:28:b5:61:42:5d:fe:a7:60:d2:aa:
         0b:d4:1f:8f:0a:41:c0:04:a3:9a:58:e3:87:ad:33:76:13:71:
         5e:4c:4a:88:91:c1:fa:81:9d:b0:03:2b:15:2f:8d:db:26:67:
         41:44:db:64:c0:97:5d:20:c9:ba:38:f4:36:11:97:18:4d:30:
         28:f3:b7:48:2a:ef:fd:98:b3:07:60:44:07:8e:d0:63:88:40:
         37:fd:50:39:f4:86:d6:56:e3:92:03:4d:59:8c:7e:e2:2b:c6:
         dc:fc:42:ec:75:14:50:7f:81:99:6e:1d:d3:cf:4c:d9:00:ca:
         5e:83:dc:d4:95:3d:2e:6d:a3:e4:ba:29:91:1f:cc:8d:ae:eb:
         2d:d3:22:c4:7c:2e:08:52:ee:d0:f0:1f:c9:a2:2e:78:22:7d:
         27:be:3b:cc:33:6b:43:3e:23:f7:7f:e6:c9:25:55:71:a0:23:
         58:b1:dc:b5:81:e2:ad:7a:69:1e:ee:e0:ca:a9:0b:99:7a:a5:
         ef:e4:d3:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 09:42:11 2026 by rpki-client