This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/fae4cd96-cfc1-4577-ad3f-7983c0523c10/0/7C33921B29322EBAAC6645FC4B920923F5E49E1A.mft
File:                     7C33921B29322EBAAC6645FC4B920923F5E49E1A.mft (raw, json)
Hash identifier:          VsHbP3no3QS61T89Q5gUjD7dr19qYWWXnsojTqVDFmE=
Subject key identifier:   07:F5:23:60:B1:0F:57:BD:3C:AA:42:2B:78:96:34:F9:D7:F3:3F:27
Authority key identifier: 7C:33:92:1B:29:32:2E:BA:AC:66:45:FC:4B:92:09:23:F5:E4:9E:1A
Certificate issuer:       /CN=7C33921B29322EBAAC6645FC4B920923F5E49E1A
Certificate serial:       5D06B0C349B551F8DA74558B5F927E30E67BA1CD
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7C33921B29322EBAAC6645FC4B920923F5E49E1A.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/fae4cd96-cfc1-4577-ad3f-7983c0523c10/0/7C33921B29322EBAAC6645FC4B920923F5E49E1A.mft
Manifest number:          015E
Signing time:             Sat 31 Jan 2026 17:31:37 +0000
Manifest this update:     Sat 31 Jan 2026 17:26:37 +0000
Manifest next update:     Tue 03 Feb 2026 18:14:37 +0000
Files and hashes:         1: 7C33921B29322EBAAC6645FC4B920923F5E49E1A.crl (hash: JB85c0GI2FO9o3WtzRqbNXAOU1OCk6EpYAFfFXrPufk=)
                          2: 3130332e3133322e3136392e302f32342d3234203d3e20313339393830.roa (hash: YYnSVH0s4DjSEyWcGqkNP3J7ej8/N95y0I96Ya7UVn0=)
                          3: 3130332e3134382e37392e302f32342d3234203d3e20313339393830.roa (hash: prunEGeOFiQXN1Qgy35XW66Os/Zb7gkIG+vEYQIhWTQ=)
                          4: 323030313a6466323a633638303a3a2f34382d3438203d3e20313339393830.roa (hash: qQqB2dTLr4xmCPqrovkLKFh60qxbylHoj3Xk9uQwJdI=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/fae4cd96-cfc1-4577-ad3f-7983c0523c10/0/7C33921B29322EBAAC6645FC4B920923F5E49E1A.crl
                          rsync://repo-rpki.idnic.net/repo/fae4cd96-cfc1-4577-ad3f-7983c0523c10/0/7C33921B29322EBAAC6645FC4B920923F5E49E1A.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7C33921B29322EBAAC6645FC4B920923F5E49E1A.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 03 Feb 2026 18:14:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:06:b0:c3:49:b5:51:f8:da:74:55:8b:5f:92:7e:30:e6:7b:a1:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7C33921B29322EBAAC6645FC4B920923F5E49E1A
        Validity
            Not Before: Jan 31 17:26:37 2026 GMT
            Not After : Feb  3 18:14:37 2026 GMT
        Subject: CN=07F52360B10F57BD3CAA422B789634F9D7F33F27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:28:d4:62:7c:4f:3d:af:df:a7:f1:48:c9:6e:
                    47:59:36:7a:96:28:7b:2c:f5:21:7b:82:cf:c8:42:
                    33:0c:8f:15:58:ac:1c:f5:99:a2:ff:26:ad:94:0a:
                    e7:ad:a4:05:27:83:79:07:5c:0c:64:8f:e8:0a:98:
                    ac:42:12:46:0e:ee:7e:90:67:3c:16:7c:1b:20:85:
                    df:f3:e6:f9:32:e8:64:3c:a1:da:8b:99:1f:08:7b:
                    97:42:29:ea:2f:86:71:09:30:4e:17:ca:f2:73:26:
                    de:ea:a2:55:d3:84:50:16:d4:76:38:13:ca:90:7b:
                    3b:7b:0b:4d:4f:79:cf:95:eb:2b:2a:e4:13:dd:35:
                    04:79:29:97:39:bc:35:6c:82:16:b1:b2:c9:29:de:
                    bb:b9:87:83:59:87:6f:13:f0:18:57:1f:0d:dd:18:
                    9d:b4:93:07:78:88:02:cc:d2:3b:63:58:a4:b1:b9:
                    56:b4:a0:85:05:09:a5:ec:5b:6c:0e:cc:da:87:80:
                    3b:bd:e2:0c:51:c6:68:61:eb:d1:e7:68:d8:5d:d5:
                    af:31:8e:08:42:8f:d0:ee:e6:e0:6c:bf:66:a8:ea:
                    63:88:c3:df:8c:19:90:b5:42:4e:85:28:54:5e:14:
                    84:2a:a6:04:91:88:78:dd:31:62:b6:1f:31:b3:ff:
                    9b:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:F5:23:60:B1:0F:57:BD:3C:AA:42:2B:78:96:34:F9:D7:F3:3F:27
            X509v3 Authority Key Identifier:
                keyid:7C:33:92:1B:29:32:2E:BA:AC:66:45:FC:4B:92:09:23:F5:E4:9E:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/fae4cd96-cfc1-4577-ad3f-7983c0523c10/0/7C33921B29322EBAAC6645FC4B920923F5E49E1A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7C33921B29322EBAAC6645FC4B920923F5E49E1A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fae4cd96-cfc1-4577-ad3f-7983c0523c10/0/7C33921B29322EBAAC6645FC4B920923F5E49E1A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:10:43:cb:f8:68:40:2d:0b:0b:ad:50:d5:fe:9b:95:42:89:
         65:b6:d3:ff:f4:e6:c0:28:c8:8d:50:92:40:c4:ae:7f:bd:50:
         09:4f:13:16:1b:5b:ae:5c:9e:f7:c4:b1:2d:f5:a9:c9:db:1a:
         e6:02:31:b1:3a:7b:ae:d2:fe:cd:77:b0:45:8d:0f:3c:e6:c2:
         76:35:bc:97:62:4a:aa:78:37:24:f1:3e:a7:e9:23:c6:c3:ff:
         66:29:6f:20:ba:43:32:2d:7a:5f:42:f0:ac:1d:a6:6f:ab:e6:
         e9:26:34:53:c5:5b:15:af:01:1d:6c:3e:2e:fc:8c:86:4f:3a:
         5f:a5:a3:8e:b4:bd:00:87:32:a1:d5:ed:5c:cb:19:24:5e:4d:
         16:50:79:98:57:af:f3:4a:4b:c2:a4:5e:0b:5b:b0:1f:37:80:
         c5:96:d1:8a:9b:01:73:19:b4:e4:54:31:df:31:93:1a:e9:84:
         f9:00:aa:f1:e6:48:f9:b4:ce:e7:6c:62:27:b4:89:70:bb:e2:
         01:06:d2:e9:0b:b4:ae:2b:6c:92:a2:4b:f4:3a:57:2a:52:66:
         b5:61:1d:94:99:8d:18:b7:b5:0b:56:b4:cd:87:38:cb:a9:47:
         9e:7f:21:c7:7d:a0:69:55:9b:85:75:9e:53:03:f8:4d:06:67:
         6e:95:1e:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 10:05:12 2026 by rpki-client