This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/337506c5-5ef1-4294-8902-a4114fdf3b00/0/348D53D52081AB75C21BE292C2A5077DF4B75308.mft
File:                     348D53D52081AB75C21BE292C2A5077DF4B75308.mft (raw, json)
Hash identifier:          vFXXXKKaEaaHE+ZXqoPMgjTFjiT2tjPz6ljTb8JedeA=
Subject key identifier:   3D:1F:C3:20:18:7E:1D:B8:80:4B:ED:EF:A0:4D:14:21:73:70:2D:F4
Authority key identifier: 34:8D:53:D5:20:81:AB:75:C2:1B:E2:92:C2:A5:07:7D:F4:B7:53:08
Certificate issuer:       /CN=348D53D52081AB75C21BE292C2A5077DF4B75308
Certificate serial:       4C4EC0824100736DD20486DF0F93D2610F0CE67B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/348D53D52081AB75C21BE292C2A5077DF4B75308.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/337506c5-5ef1-4294-8902-a4114fdf3b00/0/348D53D52081AB75C21BE292C2A5077DF4B75308.mft
Manifest number:          0543
Signing time:             Fri 23 Jan 2026 19:22:17 +0000
Manifest this update:     Fri 23 Jan 2026 19:17:17 +0000
Manifest next update:     Mon 26 Jan 2026 22:55:17 +0000
Files and hashes:         1: 348D53D52081AB75C21BE292C2A5077DF4B75308.crl (hash: aibxXziBsNW9Wt6lLoU5EKiPCBwufPRJ8WybEbRdzns=)
                          2: 323430353a326334303a3a2f33322d3438203d3e203435373035.roa (hash: KkRsmKRK4mlUrgr5jp8mQgdKGzQ8ZNOBefrXTXHhBQY=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/337506c5-5ef1-4294-8902-a4114fdf3b00/0/348D53D52081AB75C21BE292C2A5077DF4B75308.crl
                          rsync://repo-rpki.idnic.net/repo/337506c5-5ef1-4294-8902-a4114fdf3b00/0/348D53D52081AB75C21BE292C2A5077DF4B75308.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/348D53D52081AB75C21BE292C2A5077DF4B75308.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 26 Jan 2026 22:55:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:4e:c0:82:41:00:73:6d:d2:04:86:df:0f:93:d2:61:0f:0c:e6:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=348D53D52081AB75C21BE292C2A5077DF4B75308
        Validity
            Not Before: Jan 23 19:17:17 2026 GMT
            Not After : Jan 26 22:55:17 2026 GMT
        Subject: CN=3D1FC320187E1DB8804BEDEFA04D142173702DF4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:9b:a8:19:1f:b2:77:25:30:ba:8c:fa:d9:36:
                    82:49:33:10:ea:40:26:fc:4b:f6:b6:e5:c7:a1:52:
                    48:3e:3d:ca:27:51:66:29:50:3d:41:78:a4:e2:44:
                    db:31:ad:9d:0a:b8:cb:ae:ab:78:43:85:31:24:c4:
                    cb:0c:e7:d0:ea:de:e0:a5:b9:dc:18:bf:37:79:54:
                    e7:22:b9:5a:cd:4a:a7:48:83:c8:cd:08:cd:2e:b7:
                    0d:1f:67:3c:30:f8:43:3b:d4:be:68:49:55:07:50:
                    08:46:40:55:db:65:7f:92:19:52:d3:6e:05:d0:e7:
                    89:25:08:47:9b:0f:a3:9a:bf:0b:19:27:7f:49:6b:
                    6a:48:19:27:78:9f:19:61:00:6f:5b:bb:e4:af:db:
                    52:ba:2a:df:87:94:51:14:46:5e:b5:2d:0f:17:0c:
                    78:2d:76:98:32:58:ef:b0:d4:ed:f7:5b:41:12:e1:
                    b9:c1:0e:de:01:1a:69:08:a3:eb:66:a2:08:19:17:
                    3a:f8:69:b9:69:cf:78:77:ec:6b:60:36:29:a0:f0:
                    97:04:d7:a4:59:63:bd:9b:35:09:ca:f6:34:fb:43:
                    15:a8:92:19:4b:33:75:30:1b:09:ba:9f:2f:40:8b:
                    f3:48:88:1c:3d:c3:64:9b:6c:a3:bf:7c:d4:bd:a9:
                    63:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:1F:C3:20:18:7E:1D:B8:80:4B:ED:EF:A0:4D:14:21:73:70:2D:F4
            X509v3 Authority Key Identifier:
                keyid:34:8D:53:D5:20:81:AB:75:C2:1B:E2:92:C2:A5:07:7D:F4:B7:53:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/337506c5-5ef1-4294-8902-a4114fdf3b00/0/348D53D52081AB75C21BE292C2A5077DF4B75308.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/348D53D52081AB75C21BE292C2A5077DF4B75308.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/337506c5-5ef1-4294-8902-a4114fdf3b00/0/348D53D52081AB75C21BE292C2A5077DF4B75308.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:b1:ee:fe:a3:7b:d7:28:63:5c:03:06:08:07:6b:14:13:91:
         7c:90:d5:58:d7:e0:15:5f:bf:0f:c0:d8:09:49:63:64:0c:a7:
         95:14:cd:31:f7:0b:30:4e:97:9f:35:81:c0:4e:17:32:92:3e:
         8b:1d:72:63:92:e1:0d:73:38:e2:40:7e:ef:b7:5c:f1:db:cc:
         d0:90:6c:32:21:0f:89:0a:ca:12:a0:c6:02:ce:c0:56:b9:26:
         01:08:a4:13:68:8d:9e:32:7f:4a:c1:f1:37:c3:4e:a4:65:aa:
         58:ce:29:9c:3c:2e:47:64:f7:28:52:27:aa:74:a5:37:eb:af:
         4f:28:45:16:ac:b7:b9:bd:4b:9a:a6:2a:bf:98:bb:a4:23:76:
         0f:03:0d:4d:c2:ca:34:bd:04:96:3d:a3:34:b9:1b:8a:3b:df:
         27:3d:0f:9b:8f:af:72:e5:67:44:39:45:95:b2:c7:f3:45:88:
         4f:2b:70:34:8c:24:9b:15:18:e9:af:1b:f5:a9:c6:58:72:dd:
         8d:a6:f5:3c:78:b2:cb:83:16:ee:95:03:58:d2:5d:93:00:4d:
         4f:a6:7c:76:85:a1:52:f7:1b:22:6d:62:24:d7:18:d1:61:8d:
         c8:47:99:b5:f2:52:80:e0:92:ad:3e:9c:fc:bc:92:d4:c4:7e:
         c1:e5:79:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 19:00:49 2026 by rpki-client