This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/f7f49068-c0ca-4a21-9a8a-eed26fcdd1aa/0/B144E4EB28F69D9B76C0C2499BFD7B3EC503EF3E.mft
File:                     B144E4EB28F69D9B76C0C2499BFD7B3EC503EF3E.mft (raw, json)
Hash identifier:          rj67olxRtPNRTcSWDdF9ZlLE7l1kiJyOVYee3qacJYc=
Subject key identifier:   EF:5A:7E:6C:9C:2A:9B:BC:8E:27:BE:FB:A8:4E:75:F7:82:48:3A:0E
Authority key identifier: B1:44:E4:EB:28:F6:9D:9B:76:C0:C2:49:9B:FD:7B:3E:C5:03:EF:3E
Certificate issuer:       /CN=B144E4EB28F69D9B76C0C2499BFD7B3EC503EF3E
Certificate serial:       3CA827206135A341501AF1BE11EEBE79C953CDA4
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B144E4EB28F69D9B76C0C2499BFD7B3EC503EF3E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/f7f49068-c0ca-4a21-9a8a-eed26fcdd1aa/0/B144E4EB28F69D9B76C0C2499BFD7B3EC503EF3E.mft
Manifest number:          0545
Signing time:             Sun 01 Feb 2026 04:00:48 +0000
Manifest this update:     Sun 01 Feb 2026 03:55:48 +0000
Manifest next update:     Wed 04 Feb 2026 12:18:48 +0000
Files and hashes:         1: 323030313a6466303a3236663a3a2f34382d3438203d3e203538343736.roa (hash: 19ABnycRhti98EG6MJ/6S6W4a31omV6sktXNN7fCeRE=)
                          2: 3130332e37322e3131302e302f32342d3234203d3e203538343736.roa (hash: voekDMYuoDNmVswZr7/xsWsJnvx7lZSdUg+Aq+ToSP0=)
                          3: 34332e3234322e3133322e302f32342d3234203d3e203538343736.roa (hash: ut8mKe181e+GL8gZVd8D9lpxfAhurYa657vG8sPaVZU=)
                          4: 3130332e32382e3130362e302f32342d3234203d3e203538343736.roa (hash: 3CwSzY5tw6Zm4h624sLhttPd8ZN8CiHTGKhVehN+hWE=)
                          5: 3130332e37322e3131312e302f32342d3234203d3e203538343736.roa (hash: lw8CjbCa9nau6CgaK9qo3W7fJOYahpzK8W9j4IBI5bo=)
                          6: 3130332e32382e3130372e302f32342d3234203d3e203538343736.roa (hash: 1UalLxKn41/lSLgzHwYn+86cGRYM0p3PY4M21eZtrAo=)
                          7: 34332e3234322e3133332e302f32342d3234203d3e203538343736.roa (hash: 2NAEElgvlB7IhQMwd1Atvpj3R7riVOfOU9AzMjYnGF0=)
                          8: B144E4EB28F69D9B76C0C2499BFD7B3EC503EF3E.crl (hash: /yufd7CcHL6q6WbBo8Z3nuE5rHFqikl9l3NbqhqZEEE=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/f7f49068-c0ca-4a21-9a8a-eed26fcdd1aa/0/B144E4EB28F69D9B76C0C2499BFD7B3EC503EF3E.crl
                          rsync://repo-rpki.idnic.net/repo/f7f49068-c0ca-4a21-9a8a-eed26fcdd1aa/0/B144E4EB28F69D9B76C0C2499BFD7B3EC503EF3E.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B144E4EB28F69D9B76C0C2499BFD7B3EC503EF3E.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 04 Feb 2026 12:18:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:a8:27:20:61:35:a3:41:50:1a:f1:be:11:ee:be:79:c9:53:cd:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B144E4EB28F69D9B76C0C2499BFD7B3EC503EF3E
        Validity
            Not Before: Feb  1 03:55:48 2026 GMT
            Not After : Feb  4 12:18:48 2026 GMT
        Subject: CN=EF5A7E6C9C2A9BBC8E27BEFBA84E75F782483A0E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:7b:08:5b:fc:2b:91:fa:f1:14:71:05:2c:33:
                    59:d6:3b:e1:2a:30:34:95:d2:44:3f:e1:41:e4:1c:
                    74:a0:d6:16:f9:63:94:b0:0f:a5:5f:de:ba:a1:f5:
                    da:bb:26:fa:97:ac:fe:af:c6:c5:35:c3:ce:c3:5e:
                    c3:e0:67:88:fa:f2:55:10:04:f1:e9:69:d0:59:dc:
                    39:04:dc:87:80:fc:e1:7d:f3:de:55:fb:05:90:ec:
                    66:70:bc:6a:48:ce:75:36:75:97:1e:20:6d:ca:83:
                    9f:65:bd:b2:68:9a:d8:9a:c5:c0:b7:cf:63:d0:8c:
                    ae:28:9d:0c:8e:38:a1:dd:cd:5e:f1:65:95:33:a7:
                    6e:1e:ac:7c:bb:ec:d0:93:2c:6e:0f:f3:bb:63:ae:
                    2c:ef:9a:cf:4e:fb:b3:d9:ce:b3:c5:4f:75:c3:b7:
                    51:17:6d:73:cd:e7:1a:45:af:ac:6b:76:c6:ec:d5:
                    20:7a:36:08:eb:88:f8:f9:9e:4d:d7:5c:f4:fd:49:
                    83:74:ba:1e:f0:81:35:93:06:6f:30:d9:7b:65:e5:
                    7b:ae:fa:30:97:a4:ef:b8:25:d6:5f:9c:4f:37:6a:
                    2b:a0:97:81:cf:4f:8e:88:dc:7a:a1:a0:6b:dc:96:
                    8b:f4:39:f0:33:8c:ba:a6:ef:ef:94:47:ea:03:f7:
                    95:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:5A:7E:6C:9C:2A:9B:BC:8E:27:BE:FB:A8:4E:75:F7:82:48:3A:0E
            X509v3 Authority Key Identifier:
                keyid:B1:44:E4:EB:28:F6:9D:9B:76:C0:C2:49:9B:FD:7B:3E:C5:03:EF:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/f7f49068-c0ca-4a21-9a8a-eed26fcdd1aa/0/B144E4EB28F69D9B76C0C2499BFD7B3EC503EF3E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B144E4EB28F69D9B76C0C2499BFD7B3EC503EF3E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f7f49068-c0ca-4a21-9a8a-eed26fcdd1aa/0/B144E4EB28F69D9B76C0C2499BFD7B3EC503EF3E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:41:60:61:f7:9a:4b:32:57:71:76:82:8f:4e:39:c2:52:40:
         08:ce:49:17:dd:63:c8:4c:dd:3d:9a:65:55:07:84:fa:43:10:
         a3:88:ab:e5:d9:06:e4:e3:dc:4a:64:c8:69:4a:dc:3c:ac:c7:
         da:0f:3b:d6:68:d2:93:71:9d:18:71:77:da:aa:f3:a3:1d:c4:
         8e:88:9e:09:52:aa:07:9e:6e:a2:6b:d1:6e:ee:c1:86:db:dc:
         1a:a4:b9:eb:86:2e:32:cd:10:fd:09:ae:f1:5e:5b:8d:ae:0e:
         a6:04:6e:17:59:5d:40:98:33:c3:f7:fe:63:02:14:cc:b5:6a:
         5a:d9:a6:2c:3f:12:8b:9e:4a:49:ce:ab:4a:9a:b5:bf:62:52:
         c6:5f:fe:55:5a:a6:3a:02:f6:5a:77:36:43:3a:4e:49:a8:11:
         11:db:3d:53:44:3b:96:e7:8e:e4:59:2f:43:91:85:30:00:28:
         45:14:14:38:b8:aa:39:25:8b:52:53:d1:85:99:e4:aa:38:2c:
         ed:ca:6b:c5:2a:6f:ee:42:2b:9a:d0:20:23:7a:c4:e8:31:13:
         79:54:ae:91:3e:b9:96:1b:70:3e:d2:e7:e9:8f:cc:53:0d:f4:
         47:77:2d:1e:3b:01:ff:b3:70:21:2d:48:62:44:3b:f2:b0:49:
         57:4c:c8:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 09:43:21 2026 by rpki-client