This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/fd1fc1a2-ee77-405f-9e31-adc6dfc9b74c/0/F38B6752412BBA5BA6A00E0BD400D0920CA01E22.mft
File:                     F38B6752412BBA5BA6A00E0BD400D0920CA01E22.mft (raw, json)
Hash identifier:          p7FzfVx7/7Min40XGKMJW0+9G2ENQQdVKfVMjiSh3K8=
Subject key identifier:   E8:9B:AF:DC:CD:15:12:CF:E8:D9:04:56:2D:91:73:D1:E5:DB:F3:19
Authority key identifier: F3:8B:67:52:41:2B:BA:5B:A6:A0:0E:0B:D4:00:D0:92:0C:A0:1E:22
Certificate issuer:       /CN=F38B6752412BBA5BA6A00E0BD400D0920CA01E22
Certificate serial:       5AFE155DC71FB38A93E08D2CE6248CAE1890A1B5
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F38B6752412BBA5BA6A00E0BD400D0920CA01E22.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/fd1fc1a2-ee77-405f-9e31-adc6dfc9b74c/0/F38B6752412BBA5BA6A00E0BD400D0920CA01E22.mft
Manifest number:          012B
Signing time:             Sun 01 Feb 2026 15:22:06 +0000
Manifest this update:     Sun 01 Feb 2026 15:17:06 +0000
Manifest next update:     Thu 05 Feb 2026 01:53:06 +0000
Files and hashes:         1: F38B6752412BBA5BA6A00E0BD400D0920CA01E22.crl (hash: ZLxrAjA779KqedGPLkiUkNi8IFm1BbOtW846GIBsZNA=)
                          2: 3135372e31352e3231322e302f32342d3234203d3e20313532343036.roa (hash: ILdIplNUn5zzvV+8+nEtx6VwnOOAN7tEdP7POnsDWcQ=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/fd1fc1a2-ee77-405f-9e31-adc6dfc9b74c/0/F38B6752412BBA5BA6A00E0BD400D0920CA01E22.crl
                          rsync://repo-rpki.idnic.net/repo/fd1fc1a2-ee77-405f-9e31-adc6dfc9b74c/0/F38B6752412BBA5BA6A00E0BD400D0920CA01E22.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F38B6752412BBA5BA6A00E0BD400D0920CA01E22.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 05 Feb 2026 01:53:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:fe:15:5d:c7:1f:b3:8a:93:e0:8d:2c:e6:24:8c:ae:18:90:a1:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F38B6752412BBA5BA6A00E0BD400D0920CA01E22
        Validity
            Not Before: Feb  1 15:17:06 2026 GMT
            Not After : Feb  5 01:53:06 2026 GMT
        Subject: CN=E89BAFDCCD1512CFE8D904562D9173D1E5DBF319
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:d2:da:f1:e8:dd:08:65:c1:ac:5c:02:0b:f2:
                    bf:e4:be:38:df:ca:b7:79:26:52:56:e5:95:75:2c:
                    7d:d0:9d:c1:5b:be:69:db:55:0f:d6:21:bc:57:90:
                    4c:68:46:e3:1e:3d:a5:02:df:77:ff:57:a1:65:05:
                    a9:86:18:3a:46:10:ef:27:bf:05:94:9e:93:0f:90:
                    6a:26:42:85:d7:f5:2d:29:93:0b:33:f1:c8:37:88:
                    08:28:52:7d:08:e8:ed:48:6c:bf:a0:db:6e:af:06:
                    d9:51:e7:9d:08:be:15:fa:55:46:6d:f2:d5:ea:d9:
                    fa:e9:67:21:71:fa:90:c7:92:76:8b:f2:9e:7e:39:
                    57:e1:19:bb:ec:ef:6e:42:2b:a4:f3:74:db:56:9f:
                    a2:ba:1c:b4:2f:e6:39:60:ce:e8:56:79:33:0f:d6:
                    69:2e:6b:47:79:da:01:f0:d3:95:dd:55:76:de:38:
                    e5:fc:d9:38:6b:fe:04:c3:d3:f4:69:93:b3:20:ce:
                    f1:52:a1:90:3a:65:38:e4:9a:ef:32:77:56:f3:84:
                    53:42:88:2a:6f:a4:4e:e2:0e:f0:54:b0:bf:48:94:
                    9d:f3:fc:d2:30:66:df:2f:98:2e:59:6c:e8:3a:94:
                    00:fe:b3:2c:f7:58:df:f6:79:59:09:01:0f:e4:c5:
                    79:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:9B:AF:DC:CD:15:12:CF:E8:D9:04:56:2D:91:73:D1:E5:DB:F3:19
            X509v3 Authority Key Identifier:
                keyid:F3:8B:67:52:41:2B:BA:5B:A6:A0:0E:0B:D4:00:D0:92:0C:A0:1E:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/fd1fc1a2-ee77-405f-9e31-adc6dfc9b74c/0/F38B6752412BBA5BA6A00E0BD400D0920CA01E22.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F38B6752412BBA5BA6A00E0BD400D0920CA01E22.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fd1fc1a2-ee77-405f-9e31-adc6dfc9b74c/0/F38B6752412BBA5BA6A00E0BD400D0920CA01E22.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:2a:a0:a2:04:2e:ba:bb:d9:5b:9b:5e:3c:68:21:ad:d2:87:
         eb:39:d1:35:86:f6:6d:a3:44:8e:57:e9:70:1e:23:ac:62:3a:
         b3:e2:52:6d:5b:8e:47:b4:8e:51:78:e0:3d:ea:ad:c6:bf:c1:
         09:03:ae:f4:41:5b:76:9f:27:94:a9:60:8d:32:ad:4c:f6:ed:
         31:3a:25:98:6f:c2:b4:2d:d6:9f:f3:2c:f1:83:fb:e7:5b:cf:
         78:7e:de:c0:fd:ec:33:d4:e9:b1:07:f4:58:7d:04:d0:09:78:
         6b:26:b4:8d:df:7a:6a:b5:1e:07:a7:2b:1f:d0:39:ca:00:b9:
         5c:d3:1e:78:01:9d:49:67:72:b0:07:5c:cf:63:5e:17:26:98:
         ce:7d:70:05:96:7b:54:8e:e3:82:e4:97:dd:88:56:10:15:21:
         dd:6f:27:27:e7:6e:c7:b5:78:af:90:d4:73:89:33:48:c2:85:
         ec:9d:d4:ae:a3:5c:af:a4:ce:7a:4b:24:f3:86:9b:82:a6:c2:
         2f:15:a8:a5:4c:c1:55:99:16:e1:f1:44:1d:ac:a7:64:08:f5:
         c5:8a:bc:14:a7:2a:5d:6f:a6:84:b6:d1:e3:a9:ac:23:1f:d5:
         34:4f:b7:e9:b0:4e:3e:01:d2:90:bf:a3:4d:95:a6:18:31:a6:
         2a:0d:3d:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 16:00:18 2026 by rpki-client