This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/76599474-f6b6-4087-a97e-788b5949d57b/0/5EF007981390128F8F14B087123454D686E41CB8.mft
File:                     5EF007981390128F8F14B087123454D686E41CB8.mft (raw, json)
Hash identifier:          NnX9OVIHDH7oY4T31j+a4qTeekzyRtc3NvGNcXIs/mk=
Subject key identifier:   2D:6A:E1:1B:4D:92:D2:21:58:AA:12:27:10:15:26:17:6E:4D:D8:C9
Authority key identifier: 5E:F0:07:98:13:90:12:8F:8F:14:B0:87:12:34:54:D6:86:E4:1C:B8
Certificate issuer:       /CN=5EF007981390128F8F14B087123454D686E41CB8
Certificate serial:       35A41DF7D30D6108EB41B0D4E65363D578AE1F41
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5EF007981390128F8F14B087123454D686E41CB8.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/76599474-f6b6-4087-a97e-788b5949d57b/0/5EF007981390128F8F14B087123454D686E41CB8.mft
Manifest number:          021E
Signing time:             Sun 25 Jan 2026 15:31:57 +0000
Manifest this update:     Sun 25 Jan 2026 15:26:57 +0000
Manifest next update:     Wed 28 Jan 2026 21:21:57 +0000
Files and hashes:         1: 5EF007981390128F8F14B087123454D686E41CB8.crl (hash: Q5eaGYL6TOYsANUZ6VpXKkUXl0BUXNTfE9o2xVC+Yy4=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/76599474-f6b6-4087-a97e-788b5949d57b/0/5EF007981390128F8F14B087123454D686E41CB8.crl
                          rsync://repo-rpki.idnic.net/repo/76599474-f6b6-4087-a97e-788b5949d57b/0/5EF007981390128F8F14B087123454D686E41CB8.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5EF007981390128F8F14B087123454D686E41CB8.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 28 Jan 2026 14:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:a4:1d:f7:d3:0d:61:08:eb:41:b0:d4:e6:53:63:d5:78:ae:1f:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5EF007981390128F8F14B087123454D686E41CB8
        Validity
            Not Before: Jan 25 15:26:57 2026 GMT
            Not After : Jan 28 21:21:57 2026 GMT
        Subject: CN=2D6AE11B4D92D22158AA1227101526176E4DD8C9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:f0:85:40:5d:fd:9d:c4:fe:9f:c3:b1:9a:1f:
                    9c:01:1b:35:56:f6:13:1e:e6:0b:cc:4f:02:aa:43:
                    85:e6:75:dc:89:e0:03:f4:8f:71:2f:ca:98:59:7b:
                    46:d2:e8:c3:f2:67:fb:25:1e:af:a0:68:79:af:e8:
                    5e:b1:07:a0:72:16:18:85:0f:17:df:3a:f5:c5:dd:
                    45:90:4a:b3:d0:60:58:c9:d3:c9:5f:c2:10:32:4c:
                    94:19:37:53:f5:69:3d:51:be:cd:d0:26:a7:03:19:
                    a0:8a:95:ce:ff:f3:97:a2:3a:2e:25:86:57:ca:5c:
                    30:94:1e:a1:17:df:7a:75:ba:07:04:5f:2f:b2:7e:
                    ab:d1:7a:13:4b:f3:82:87:7a:9b:23:e6:39:0e:76:
                    bc:e6:e1:a5:4b:26:b9:65:88:be:b9:cb:99:ba:d0:
                    c5:f2:dc:ed:51:57:b3:4a:06:f6:6b:74:24:10:ad:
                    77:d9:9d:42:7d:31:38:5d:7d:50:bc:70:08:b4:99:
                    4f:f8:2c:49:2a:f9:12:eb:02:a0:da:59:7b:07:db:
                    c9:d8:1b:52:39:ec:03:7f:46:36:d3:f7:c9:24:92:
                    3e:b5:4f:b1:3d:d0:e8:f7:17:18:74:31:24:5e:09:
                    a6:61:bc:b3:d0:8b:2f:ca:c4:c0:11:9d:21:be:58:
                    05:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:6A:E1:1B:4D:92:D2:21:58:AA:12:27:10:15:26:17:6E:4D:D8:C9
            X509v3 Authority Key Identifier:
                keyid:5E:F0:07:98:13:90:12:8F:8F:14:B0:87:12:34:54:D6:86:E4:1C:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/76599474-f6b6-4087-a97e-788b5949d57b/0/5EF007981390128F8F14B087123454D686E41CB8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5EF007981390128F8F14B087123454D686E41CB8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/76599474-f6b6-4087-a97e-788b5949d57b/0/5EF007981390128F8F14B087123454D686E41CB8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:50:a3:c8:73:25:4e:52:d6:1b:2d:be:48:44:80:27:de:14:
         dc:93:d4:2b:aa:c6:7d:55:40:02:05:3a:14:e0:c1:9c:11:88:
         f3:af:d6:78:8e:bf:b5:6a:79:ac:50:de:f6:fe:c6:25:2a:1b:
         6e:13:3b:24:95:64:4c:3f:14:80:20:b8:af:db:26:82:7e:a1:
         84:e0:85:6b:d7:8c:bf:ce:43:b1:c4:41:0e:3d:57:e5:04:e4:
         4d:90:d7:55:32:d7:32:2a:72:a4:88:82:cb:3a:37:05:d2:bc:
         c9:e6:70:36:54:17:9e:be:d5:d1:79:25:88:ae:2d:9e:6c:22:
         f3:fb:cb:5f:03:a7:37:4a:8e:26:55:01:96:08:c9:6d:95:37:
         a5:b3:0a:24:a2:68:6c:ed:97:34:23:8a:a1:eb:84:1c:ec:99:
         1d:b4:63:24:f7:86:1e:3f:aa:38:18:36:8e:eb:7e:96:8d:21:
         14:1e:69:ed:bc:da:2a:08:a3:6a:15:3e:5c:68:a4:3c:bf:1f:
         8e:35:b8:2d:a8:1f:6c:44:ae:c2:0c:89:83:29:a7:82:e8:1b:
         e5:a1:30:6f:5e:4e:58:42:8c:f3:c0:de:91:22:5d:5e:ce:81:
         ff:a3:a2:66:e3:99:8f:83:e2:54:ee:19:d8:25:4d:a0:56:5b:
         58:9e:53:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 01:23:59 2026 by rpki-client