This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/8226b3e1-d7f6-465e-8302-7d52f5c340ff/0/E5B2AB049E75667C8F00ECB0EBF617859558571D.mft
File:                     E5B2AB049E75667C8F00ECB0EBF617859558571D.mft (raw, json)
Hash identifier:          +UyQYN33oH3zvSKcZtpnZt02xKDCb0Zw+7LxXqMCbPc=
Subject key identifier:   A1:9B:AD:0D:B0:E1:27:B7:41:FE:A8:33:D5:D9:F1:63:6C:E9:B1:C9
Authority key identifier: E5:B2:AB:04:9E:75:66:7C:8F:00:EC:B0:EB:F6:17:85:95:58:57:1D
Certificate issuer:       /CN=E5B2AB049E75667C8F00ECB0EBF617859558571D
Certificate serial:       5E23BD5CC68BF1DBB9E34C0551244DB171C1C557
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E5B2AB049E75667C8F00ECB0EBF617859558571D.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/8226b3e1-d7f6-465e-8302-7d52f5c340ff/0/E5B2AB049E75667C8F00ECB0EBF617859558571D.mft
Manifest number:          0176
Signing time:             Fri 23 Jan 2026 12:20:40 +0000
Manifest this update:     Fri 23 Jan 2026 12:15:40 +0000
Manifest next update:     Mon 26 Jan 2026 23:27:40 +0000
Files and hashes:         1: 3130332e3232342e37372e302f32342d3234203d3e203536323535.roa (hash: p909d8VjhDkob+UXRoZRxJtZcS/lf4G9yDRtU4iVWWk=)
                          2: 3130332e3232342e37362e302f32342d3234203d3e203536323535.roa (hash: pWyEMJB2NECQjGD21jXFIhV6AewDgUPpxcuSNxlavYI=)
                          3: E5B2AB049E75667C8F00ECB0EBF617859558571D.crl (hash: N9uEZ0F1OsEJDzb9euhzJY3rGhtlLlMHbab8UKgMybY=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/8226b3e1-d7f6-465e-8302-7d52f5c340ff/0/E5B2AB049E75667C8F00ECB0EBF617859558571D.crl
                          rsync://repo-rpki.idnic.net/repo/8226b3e1-d7f6-465e-8302-7d52f5c340ff/0/E5B2AB049E75667C8F00ECB0EBF617859558571D.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E5B2AB049E75667C8F00ECB0EBF617859558571D.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 26 Jan 2026 23:27:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:23:bd:5c:c6:8b:f1:db:b9:e3:4c:05:51:24:4d:b1:71:c1:c5:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E5B2AB049E75667C8F00ECB0EBF617859558571D
        Validity
            Not Before: Jan 23 12:15:40 2026 GMT
            Not After : Jan 26 23:27:40 2026 GMT
        Subject: CN=A19BAD0DB0E127B741FEA833D5D9F1636CE9B1C9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:37:a8:a2:c3:3d:ae:dd:1e:b9:52:cd:ac:75:
                    ee:8b:fc:e4:c2:e8:73:f3:d6:f7:be:1d:09:3f:1e:
                    1b:1e:b3:1c:58:83:15:08:f1:a3:f0:cb:a7:c8:21:
                    14:53:66:43:41:9d:f5:5a:1a:34:ba:d7:d3:c6:ab:
                    a2:53:48:c6:82:6e:1f:ae:66:f9:eb:81:ae:18:8a:
                    90:9a:b6:3d:da:b5:b7:1d:e8:fd:30:24:ed:cf:ba:
                    0f:86:e4:2d:95:ee:ba:1a:b5:75:54:a6:a0:a0:45:
                    4d:48:0b:b2:fd:4e:00:57:5f:79:96:40:cb:20:de:
                    a6:8c:ab:e2:2e:e2:65:38:c9:75:8c:b2:4b:71:f3:
                    93:52:59:15:80:97:40:9c:4a:40:a4:5c:22:cb:fa:
                    90:1a:77:c5:42:9e:0b:83:f0:8b:21:a0:03:c9:53:
                    75:2a:d5:e3:f1:78:f9:7b:e6:33:b9:bd:1f:84:b4:
                    cf:1a:b0:8d:be:b6:78:ec:60:af:4c:72:d1:ae:38:
                    f4:e9:c2:18:dd:fe:b8:2a:50:6d:e0:be:9e:78:89:
                    9d:59:c9:64:cf:5f:8f:d4:98:cb:e4:9d:64:d6:32:
                    88:ed:f6:7b:82:f8:6d:e0:01:f9:99:11:74:a2:a2:
                    6b:47:f8:be:1c:30:15:42:cc:15:bd:10:8c:93:33:
                    97:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:9B:AD:0D:B0:E1:27:B7:41:FE:A8:33:D5:D9:F1:63:6C:E9:B1:C9
            X509v3 Authority Key Identifier:
                keyid:E5:B2:AB:04:9E:75:66:7C:8F:00:EC:B0:EB:F6:17:85:95:58:57:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/8226b3e1-d7f6-465e-8302-7d52f5c340ff/0/E5B2AB049E75667C8F00ECB0EBF617859558571D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E5B2AB049E75667C8F00ECB0EBF617859558571D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8226b3e1-d7f6-465e-8302-7d52f5c340ff/0/E5B2AB049E75667C8F00ECB0EBF617859558571D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:df:1c:34:17:d6:29:a5:46:46:68:86:32:d7:c3:b2:49:72:
         e9:74:c6:d9:a6:f3:7d:2b:3e:71:89:c5:b6:0c:28:d5:24:a7:
         6f:2e:6e:dc:fa:55:86:11:1a:23:37:1f:90:85:eb:26:c7:55:
         47:ea:d4:80:20:0c:3b:c4:e9:96:71:c0:b4:b1:72:b2:db:31:
         d0:24:f6:a2:d5:71:ce:c6:b3:0c:e7:bf:8f:93:e8:a3:01:f3:
         98:db:d7:76:7d:03:16:dd:b0:af:0c:c5:b6:6f:29:a0:ae:07:
         33:c0:fb:16:e8:04:1b:36:00:0c:d7:a6:a2:9c:d1:1b:48:1f:
         2c:21:89:66:aa:64:69:2a:a2:3f:18:9a:ea:35:d6:17:71:cd:
         a1:0e:3e:aa:bb:26:de:fa:4f:b9:44:67:01:83:5d:0d:f7:ea:
         6d:05:c0:39:81:0f:80:41:f6:ba:6c:4f:d8:50:3e:26:7e:ef:
         68:f5:93:e8:a6:4c:77:8b:5f:ca:98:5b:64:c6:0a:ce:7c:23:
         56:6a:ad:e0:01:02:c1:bd:c3:ff:35:b1:68:a5:04:ab:5a:3c:
         ce:73:62:f7:05:9c:95:d2:76:ec:d0:66:5b:84:9a:89:66:f3:
         18:64:fe:43:af:53:7b:61:e6:1d:2b:55:b1:7b:92:03:01:8c:
         c6:2d:a1:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 20:32:28 2026 by rpki-client