This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/993895e2-4020-4c3f-987f-dacdf8e8ea29/0/28341CFDB2B23F14923DA4A736C08A8C17C00046.mft
File:                     28341CFDB2B23F14923DA4A736C08A8C17C00046.mft (raw, json)
Hash identifier:          mJv0Eg5G72c4JRezzlWVmoO3DnklP6HOuUFbNArsuq0=
Subject key identifier:   FF:3D:1F:64:90:A8:3A:61:96:56:8D:5A:CB:93:B4:10:B1:79:81:D3
Authority key identifier: 28:34:1C:FD:B2:B2:3F:14:92:3D:A4:A7:36:C0:8A:8C:17:C0:00:46
Certificate issuer:       /CN=28341CFDB2B23F14923DA4A736C08A8C17C00046
Certificate serial:       3B0D576C6D60B496BB09F25E5B63E24DF7E4E392
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28341CFDB2B23F14923DA4A736C08A8C17C00046.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/993895e2-4020-4c3f-987f-dacdf8e8ea29/0/28341CFDB2B23F14923DA4A736C08A8C17C00046.mft
Manifest number:          34
Signing time:             Sat 24 Jan 2026 04:51:12 +0000
Manifest this update:     Sat 24 Jan 2026 04:46:12 +0000
Manifest next update:     Tue 27 Jan 2026 13:38:12 +0000
Files and hashes:         1: 28341CFDB2B23F14923DA4A736C08A8C17C00046.crl (hash: Cx3bpPHM4bJFrICKFk2XNmcMz2SzLb9+2AjRANv4XsU=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/993895e2-4020-4c3f-987f-dacdf8e8ea29/0/28341CFDB2B23F14923DA4A736C08A8C17C00046.crl
                          rsync://repo-rpki.idnic.net/repo/993895e2-4020-4c3f-987f-dacdf8e8ea29/0/28341CFDB2B23F14923DA4A736C08A8C17C00046.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28341CFDB2B23F14923DA4A736C08A8C17C00046.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 27 Jan 2026 13:38:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:0d:57:6c:6d:60:b4:96:bb:09:f2:5e:5b:63:e2:4d:f7:e4:e3:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28341CFDB2B23F14923DA4A736C08A8C17C00046
        Validity
            Not Before: Jan 24 04:46:12 2026 GMT
            Not After : Jan 27 13:38:12 2026 GMT
        Subject: CN=FF3D1F6490A83A6196568D5ACB93B410B17981D3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:10:4f:56:57:04:83:10:d7:a0:6b:e3:fc:99:
                    d0:8a:53:e7:76:34:a2:59:dc:aa:48:66:52:7f:87:
                    b7:35:c0:46:2a:c9:f4:2d:8c:19:69:e1:86:9c:da:
                    69:4d:5d:f1:af:5b:51:b8:d1:a9:d1:d7:1d:11:67:
                    fe:44:46:1f:8f:66:47:fe:78:92:58:f5:f9:36:8c:
                    5b:c7:bf:cb:83:ac:07:5b:77:7f:7a:09:d7:d9:b9:
                    7b:39:66:51:61:e6:0b:0d:7a:26:88:54:9d:51:71:
                    4f:80:23:3d:29:52:6f:27:74:79:3d:d1:67:a7:0e:
                    31:79:e2:f6:f2:99:c6:6e:0a:48:46:ee:a6:68:18:
                    4a:9e:56:ea:cc:58:57:81:b5:25:f7:7b:d3:d7:98:
                    2a:b6:68:20:07:14:80:36:fc:06:9c:57:a2:58:d6:
                    a1:9f:76:4c:35:8b:9a:62:15:20:55:d9:c9:20:57:
                    09:57:eb:10:a5:7f:42:c8:1b:4b:1e:70:73:ce:d5:
                    a1:75:36:b4:75:a7:5b:f9:b6:98:9f:5a:cb:c6:ef:
                    b2:50:e7:7b:cf:ab:33:32:df:6f:a4:bf:85:22:e1:
                    3c:fb:48:9b:86:cd:0d:d0:03:25:5f:c3:f9:ac:3c:
                    d5:74:a4:0b:3d:a0:be:06:43:7f:f9:07:74:25:18:
                    e7:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:3D:1F:64:90:A8:3A:61:96:56:8D:5A:CB:93:B4:10:B1:79:81:D3
            X509v3 Authority Key Identifier:
                keyid:28:34:1C:FD:B2:B2:3F:14:92:3D:A4:A7:36:C0:8A:8C:17:C0:00:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/993895e2-4020-4c3f-987f-dacdf8e8ea29/0/28341CFDB2B23F14923DA4A736C08A8C17C00046.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28341CFDB2B23F14923DA4A736C08A8C17C00046.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/993895e2-4020-4c3f-987f-dacdf8e8ea29/0/28341CFDB2B23F14923DA4A736C08A8C17C00046.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:2e:bd:81:70:61:92:39:b5:c4:52:aa:a1:bb:e4:ac:31:b2:
         b6:13:f4:4d:55:6a:1d:2c:27:5b:3c:41:68:14:d6:88:f9:a9:
         d1:d6:5b:41:10:c7:97:d1:aa:f4:7d:1f:e9:13:d9:67:da:d8:
         6e:f1:c1:da:d5:aa:58:ea:a5:61:12:5b:73:16:79:94:9a:20:
         78:8a:e8:29:eb:81:a8:07:90:23:41:f6:c3:85:59:d7:66:21:
         f2:71:44:e9:0a:46:56:d6:17:97:33:d9:32:eb:37:99:81:62:
         1d:de:ff:e5:99:1d:fc:42:2c:fa:63:c8:69:76:64:51:dd:02:
         80:ad:66:d4:e4:61:63:23:9b:93:19:50:94:a5:d0:ea:84:e5:
         fd:b9:cb:93:bf:cc:8e:3f:36:5f:ba:49:75:b1:64:6c:77:02:
         c3:05:ea:9a:11:a3:42:db:89:84:62:a3:62:52:7a:71:23:cb:
         fc:26:66:e3:6b:fb:8d:6f:a8:82:7b:06:e7:ba:55:be:cd:5c:
         36:93:24:42:68:ba:9f:91:68:91:20:4a:5e:4e:87:2e:9a:64:
         18:62:b6:43:13:fb:37:09:45:2b:17:fe:c8:75:58:51:b3:7b:
         2b:cc:f6:0f:f2:7a:b7:7f:54:39:81:32:c2:82:5d:7b:25:22:
         0a:18:13:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 20:32:17 2026 by rpki-client