This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/3b632a2c-406e-45d7-a028-260474c77038/0/2E19B97405D498D3B067A9A1009CDC1E02FB11CF.mft
File:                     2E19B97405D498D3B067A9A1009CDC1E02FB11CF.mft (raw, json)
Hash identifier:          RrCkbi1yywa9aWefIWp5C7cNo4F+bENxSzYzZFMdhVo=
Subject key identifier:   A8:E2:9D:37:84:89:07:97:06:48:B6:DF:87:7B:6A:98:69:10:BA:D7
Authority key identifier: 2E:19:B9:74:05:D4:98:D3:B0:67:A9:A1:00:9C:DC:1E:02:FB:11:CF
Certificate issuer:       /CN=2E19B97405D498D3B067A9A1009CDC1E02FB11CF
Certificate serial:       2250CA2E49493962D7602D713A63A8C6F1EEEC00
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E19B97405D498D3B067A9A1009CDC1E02FB11CF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3b632a2c-406e-45d7-a028-260474c77038/0/2E19B97405D498D3B067A9A1009CDC1E02FB11CF.mft
Manifest number:          0340
Signing time:             Sat 24 Jan 2026 13:42:04 +0000
Manifest this update:     Sat 24 Jan 2026 13:37:04 +0000
Manifest next update:     Tue 27 Jan 2026 22:19:04 +0000
Files and hashes:         1: 323430313a313363303a3a2f33322d3336203d3e20313332363532.roa (hash: Zp5MkPoy+mcmuZyHWWPJeYcS5LhdUDlPA4O7bCCb+jQ=)
                          2: 2E19B97405D498D3B067A9A1009CDC1E02FB11CF.crl (hash: fOaodC/tSHzIVUMTpvEKD+FuEep21E+LFOfNruw+1Qk=)
                          3: 3134362e3139362e34302e302f32322d3234203d3e20313332363532.roa (hash: n+xUq9a7n5f6ndT7big4scouCH78ut4B4QszfPAlm80=)
                          4: 3130332e32352e3139322e302f32322d3234203d3e20313332363532.roa (hash: d+MQp3eqG/C/hSPziIw4OmNz4U3nA5FN+ZaHxiNIjvo=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/3b632a2c-406e-45d7-a028-260474c77038/0/2E19B97405D498D3B067A9A1009CDC1E02FB11CF.crl
                          rsync://repo-rpki.idnic.net/repo/3b632a2c-406e-45d7-a028-260474c77038/0/2E19B97405D498D3B067A9A1009CDC1E02FB11CF.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E19B97405D498D3B067A9A1009CDC1E02FB11CF.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 27 Jan 2026 22:19:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:50:ca:2e:49:49:39:62:d7:60:2d:71:3a:63:a8:c6:f1:ee:ec:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E19B97405D498D3B067A9A1009CDC1E02FB11CF
        Validity
            Not Before: Jan 24 13:37:04 2026 GMT
            Not After : Jan 27 22:19:04 2026 GMT
        Subject: CN=A8E29D37848907970648B6DF877B6A986910BAD7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:b7:56:d6:a3:e1:a8:17:fb:29:e0:4b:ca:17:
                    8c:4e:22:98:21:21:36:60:81:25:94:4a:c3:05:04:
                    25:d0:01:f5:db:55:c9:fa:ec:67:39:a1:c2:d2:38:
                    d7:da:36:91:ba:5e:13:fc:79:cf:b5:65:f4:5b:b9:
                    7a:ac:25:41:64:65:e2:16:b5:07:c8:32:bb:8f:cf:
                    cf:17:4d:f4:8e:29:bc:73:5b:3e:ba:7e:91:b4:a2:
                    6a:eb:5b:77:db:dc:5a:d6:3b:9d:74:27:af:f5:ae:
                    73:5a:41:e9:23:9a:d3:b3:1b:15:44:ed:96:1f:10:
                    f7:d9:c3:5d:e5:9c:ce:30:4b:ae:b0:4a:50:9a:5b:
                    bf:3b:ff:15:13:a4:05:b0:ab:31:2d:5e:68:2b:ed:
                    87:58:ac:aa:4c:13:72:57:82:1e:63:26:ac:e4:0f:
                    a5:e1:0e:aa:09:31:fe:bc:66:91:51:59:82:d1:79:
                    e5:c9:55:ac:6f:0a:83:e6:7d:a3:f5:b4:93:8d:54:
                    d0:7a:e7:d5:60:73:15:ce:56:34:52:dd:4a:ec:af:
                    c8:f8:5a:8b:00:84:de:b9:b7:d8:43:b3:1e:23:44:
                    23:d9:fe:22:5c:41:f9:54:eb:b3:1c:30:ab:25:91:
                    b0:a6:04:f8:b0:b0:5b:52:b3:99:42:87:58:de:9f:
                    cf:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:E2:9D:37:84:89:07:97:06:48:B6:DF:87:7B:6A:98:69:10:BA:D7
            X509v3 Authority Key Identifier:
                keyid:2E:19:B9:74:05:D4:98:D3:B0:67:A9:A1:00:9C:DC:1E:02:FB:11:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3b632a2c-406e-45d7-a028-260474c77038/0/2E19B97405D498D3B067A9A1009CDC1E02FB11CF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E19B97405D498D3B067A9A1009CDC1E02FB11CF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3b632a2c-406e-45d7-a028-260474c77038/0/2E19B97405D498D3B067A9A1009CDC1E02FB11CF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:4e:fc:f0:c7:89:61:dd:1b:26:b1:2b:b5:be:e8:7a:2a:a1:
         a5:a2:fe:13:7c:c4:0d:db:b0:d2:08:c7:d3:31:60:4c:17:6e:
         9b:b0:11:d5:16:e8:73:8c:c8:9c:c2:05:41:0f:e5:fa:c4:a4:
         1a:af:74:d8:b6:09:5a:4b:78:2c:67:c2:81:e6:36:f1:d2:c3:
         7b:d5:36:62:29:28:00:27:d0:44:b7:1f:b8:8d:fa:ea:48:7d:
         64:42:e1:53:e1:a8:2d:67:57:8f:e8:ce:00:4c:07:b3:6e:10:
         85:6a:5f:0d:43:f1:33:a1:55:0d:7f:03:4a:8a:86:40:aa:fe:
         4c:c0:5a:e6:af:c4:96:94:ab:52:fb:af:c8:bf:f4:26:0d:29:
         04:f3:53:db:0a:ca:0b:dc:4f:72:85:ed:0c:13:0a:47:01:a7:
         e4:d7:8f:0c:b6:e8:22:60:d6:c7:88:91:95:d8:b0:26:4f:3d:
         60:8e:a9:47:e9:fb:2c:e4:a8:22:12:20:65:64:02:7e:44:d8:
         23:e9:58:18:02:cf:6f:94:3d:76:77:be:4e:3f:68:88:2d:7c:
         ee:a9:8f:bb:2a:b4:a9:72:6b:d4:78:ad:82:b0:d5:1a:81:80:
         fe:c2:32:b1:8f:39:31:09:37:07:60:05:8a:9d:bf:c7:6f:c4:
         48:4f:1c:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 01:22:39 2026 by rpki-client