This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/ff5dd0aa-fa7a-4da4-a1c7-1dbc88b2c169/0/36058F001B4EB8C36AC0C178096CB2C2CB5D6223.mft
File:                     36058F001B4EB8C36AC0C178096CB2C2CB5D6223.mft (raw, json)
Hash identifier:          8ixoQdsTbx3tD57B5lUbhL7+J5VpJ42x+CCvG6RMGc8=
Subject key identifier:   94:AB:C7:54:57:3C:10:5D:3C:40:44:CD:DA:14:7E:CD:A7:82:AC:C6
Authority key identifier: 36:05:8F:00:1B:4E:B8:C3:6A:C0:C1:78:09:6C:B2:C2:CB:5D:62:23
Certificate issuer:       /CN=36058F001B4EB8C36AC0C178096CB2C2CB5D6223
Certificate serial:       21C9E5AD241359CE3951E99469B2BA5BDB307C42
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/36058F001B4EB8C36AC0C178096CB2C2CB5D6223.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/ff5dd0aa-fa7a-4da4-a1c7-1dbc88b2c169/0/36058F001B4EB8C36AC0C178096CB2C2CB5D6223.mft
Manifest number:          6A
Signing time:             Mon 02 Feb 2026 02:52:27 +0000
Manifest this update:     Mon 02 Feb 2026 02:47:27 +0000
Manifest next update:     Thu 05 Feb 2026 14:04:27 +0000
Files and hashes:         1: 3130332e3134352e3232322e302f32332d3233203d3e20313339343533.roa (hash: WfyKy7SGgw1ll4gSjGcypbLZ+xtgURJsabsZ3eqwV20=)
                          2: 36058F001B4EB8C36AC0C178096CB2C2CB5D6223.crl (hash: 0pjod2XxmFkP40a7fyrjUqlgGrtePMfO6Gh3DAIlpbM=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/ff5dd0aa-fa7a-4da4-a1c7-1dbc88b2c169/0/36058F001B4EB8C36AC0C178096CB2C2CB5D6223.crl
                          rsync://repo-rpki.idnic.net/repo/ff5dd0aa-fa7a-4da4-a1c7-1dbc88b2c169/0/36058F001B4EB8C36AC0C178096CB2C2CB5D6223.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/36058F001B4EB8C36AC0C178096CB2C2CB5D6223.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 05 Feb 2026 05:24:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:c9:e5:ad:24:13:59:ce:39:51:e9:94:69:b2:ba:5b:db:30:7c:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36058F001B4EB8C36AC0C178096CB2C2CB5D6223
        Validity
            Not Before: Feb  2 02:47:27 2026 GMT
            Not After : Feb  5 14:04:27 2026 GMT
        Subject: CN=94ABC754573C105D3C4044CDDA147ECDA782ACC6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:23:e2:3e:fa:09:45:81:31:4c:17:44:8d:1c:
                    0a:f4:08:dc:f1:d6:51:04:c6:18:87:45:3f:5a:47:
                    4a:5a:9d:6d:34:74:62:69:33:6b:57:d4:93:4c:dd:
                    89:c9:ae:3c:42:8a:0d:16:fb:f4:6f:c3:6f:dd:d6:
                    2c:81:0f:03:40:f9:a1:23:0b:ae:74:6c:53:f0:7e:
                    09:d7:71:44:8e:b5:9b:f8:da:7a:77:df:05:5a:4d:
                    80:db:be:0c:28:e1:2d:73:87:ce:f3:95:0d:0e:52:
                    f0:34:82:e9:6c:2d:3c:22:3d:e1:ac:3d:f4:e9:31:
                    60:c0:35:e9:0f:9e:43:cb:51:7a:6c:0a:c0:b6:41:
                    bc:36:57:ee:b8:d7:52:39:97:be:6d:88:90:82:70:
                    99:88:68:15:e0:8a:66:b6:6f:e7:1d:cd:11:74:ff:
                    d3:7b:1b:5b:47:a1:b5:c3:60:36:46:f0:5f:77:02:
                    56:8e:1e:ee:f3:a8:b3:16:74:00:82:3e:b7:36:e2:
                    a5:55:4c:c6:55:70:75:61:80:0a:81:da:16:e9:04:
                    48:c1:8a:19:a7:b4:7c:94:5f:97:61:7f:4d:6b:2f:
                    68:b7:0d:0b:17:79:68:b1:4a:56:41:14:71:87:c1:
                    df:1a:7b:a0:b2:29:76:29:7d:27:9e:fd:15:96:dc:
                    60:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:AB:C7:54:57:3C:10:5D:3C:40:44:CD:DA:14:7E:CD:A7:82:AC:C6
            X509v3 Authority Key Identifier:
                keyid:36:05:8F:00:1B:4E:B8:C3:6A:C0:C1:78:09:6C:B2:C2:CB:5D:62:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/ff5dd0aa-fa7a-4da4-a1c7-1dbc88b2c169/0/36058F001B4EB8C36AC0C178096CB2C2CB5D6223.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/36058F001B4EB8C36AC0C178096CB2C2CB5D6223.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ff5dd0aa-fa7a-4da4-a1c7-1dbc88b2c169/0/36058F001B4EB8C36AC0C178096CB2C2CB5D6223.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:4e:7c:a8:a1:9f:5b:bf:1c:ad:7a:63:65:5b:7a:c4:b9:e9:
         76:ae:01:ad:83:c1:60:81:40:2d:2b:5a:9c:73:2d:a4:16:ae:
         63:e1:8b:37:d2:bd:80:64:94:1a:56:d1:b4:e2:8d:d8:8b:20:
         c3:83:cb:6f:97:b1:ff:46:18:8d:2f:a5:bd:a1:3f:20:33:3f:
         34:1e:3f:aa:dc:48:2b:ce:6d:b1:95:f2:d6:f7:61:a9:ed:00:
         c6:87:ed:e9:fe:0d:b0:da:4a:6f:51:86:34:41:dd:e1:17:15:
         75:0b:70:2e:c3:ac:2b:92:6f:ee:84:08:a6:69:36:66:e3:cf:
         46:7b:19:f9:44:dc:9a:db:f9:ef:18:1a:f5:c0:92:d9:e2:f9:
         86:57:8f:49:d1:c2:e7:fc:09:19:55:4f:8a:c4:f2:99:21:9d:
         7e:b8:84:07:70:20:00:80:e5:32:e2:9a:f8:4e:6e:09:21:09:
         2f:c5:cc:2a:8e:d0:ed:fd:21:f1:0e:25:ac:31:57:5c:43:65:
         42:51:90:c2:46:9e:65:a9:df:0c:94:b1:09:28:c2:b3:f2:91:
         d7:03:28:09:fc:a6:bb:03:89:f2:38:bf:72:81:0e:31:7b:a0:
         c0:00:a0:d9:3f:55:5c:47:54:43:70:cd:b9:90:8a:94:de:4f:
         c2:ae:08:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 09:43:18 2026 by rpki-client