This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/bc42480a-8e0f-477a-bd4a-aa8089927ba8/0/556F35148B9935659C1FE70B505B1D8D79838EFA.mft
File:                     556F35148B9935659C1FE70B505B1D8D79838EFA.mft (raw, json)
Hash identifier:          Qh0KAOyf+upaYqQ0LtbO70CLG+VoBN9t4/fBup+M7EU=
Subject key identifier:   B1:EC:72:12:E9:82:83:F6:17:0F:FE:95:E8:16:DA:B1:97:F4:67:FE
Authority key identifier: 55:6F:35:14:8B:99:35:65:9C:1F:E7:0B:50:5B:1D:8D:79:83:8E:FA
Certificate issuer:       /CN=556F35148B9935659C1FE70B505B1D8D79838EFA
Certificate serial:       5899F8265D6F369166817F883EFFC768F49D1B71
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/556F35148B9935659C1FE70B505B1D8D79838EFA.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/bc42480a-8e0f-477a-bd4a-aa8089927ba8/0/556F35148B9935659C1FE70B505B1D8D79838EFA.mft
Manifest number:          01F7
Signing time:             Sun 25 Jan 2026 07:11:28 +0000
Manifest this update:     Sun 25 Jan 2026 07:06:28 +0000
Manifest next update:     Wed 28 Jan 2026 07:39:28 +0000
Files and hashes:         1: 3130332e3130312e3139332e302f32342d3234203d3e20313530343638.roa (hash: Rw+pxwTJP+hvGj9PdU0j+wE54RfccGnIIDVVcYYdmUc=)
                          2: 556F35148B9935659C1FE70B505B1D8D79838EFA.crl (hash: Sd1D4y6/ofFP+cHylT7p+0fpekyHk8EcNtdJmGGc7nI=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/bc42480a-8e0f-477a-bd4a-aa8089927ba8/0/556F35148B9935659C1FE70B505B1D8D79838EFA.crl
                          rsync://repo-rpki.idnic.net/repo/bc42480a-8e0f-477a-bd4a-aa8089927ba8/0/556F35148B9935659C1FE70B505B1D8D79838EFA.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/556F35148B9935659C1FE70B505B1D8D79838EFA.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 28 Jan 2026 07:39:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:99:f8:26:5d:6f:36:91:66:81:7f:88:3e:ff:c7:68:f4:9d:1b:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=556F35148B9935659C1FE70B505B1D8D79838EFA
        Validity
            Not Before: Jan 25 07:06:28 2026 GMT
            Not After : Jan 28 07:39:28 2026 GMT
        Subject: CN=B1EC7212E98283F6170FFE95E816DAB197F467FE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:1c:e3:5b:af:c4:73:5c:16:02:88:74:7b:e9:
                    8f:58:ef:84:c3:3b:35:71:fe:29:4e:d9:d0:f9:df:
                    71:62:bf:d9:1f:1a:cc:a3:fb:54:47:de:94:7b:b9:
                    5a:50:09:34:63:31:28:40:93:e6:22:f6:f1:b9:55:
                    40:44:9f:39:51:09:5e:dc:34:ad:e8:7e:ec:80:bb:
                    29:0a:84:68:f3:4e:cf:14:4a:c1:eb:0e:16:ad:c9:
                    97:69:13:4d:0e:7e:be:44:5a:de:33:38:2f:dc:12:
                    2a:e5:70:b6:7e:f1:d3:f3:9c:1d:5b:f4:1e:d6:aa:
                    39:fe:56:b9:b8:82:cb:4d:25:47:cb:cf:1d:e6:5f:
                    8d:70:0d:cc:7b:98:6b:75:1a:ca:5b:b2:76:88:d6:
                    9c:25:8b:12:38:eb:cd:a8:a4:0e:27:98:d6:16:d1:
                    26:22:ca:34:48:96:d5:5a:96:00:2f:02:0f:03:ea:
                    c1:07:c6:e7:97:e4:7e:5e:e0:a7:77:56:ad:4b:4b:
                    72:74:8f:85:77:53:e8:da:f1:a2:fe:80:5e:99:4d:
                    6c:6e:69:4f:4c:8e:64:f9:f1:48:a2:58:5e:2f:cd:
                    78:07:6e:4e:6a:17:0f:c0:94:21:d9:49:a0:aa:a1:
                    db:d4:45:78:c5:b6:e3:c4:bd:ca:12:4f:f6:64:47:
                    78:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:EC:72:12:E9:82:83:F6:17:0F:FE:95:E8:16:DA:B1:97:F4:67:FE
            X509v3 Authority Key Identifier:
                keyid:55:6F:35:14:8B:99:35:65:9C:1F:E7:0B:50:5B:1D:8D:79:83:8E:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/bc42480a-8e0f-477a-bd4a-aa8089927ba8/0/556F35148B9935659C1FE70B505B1D8D79838EFA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/556F35148B9935659C1FE70B505B1D8D79838EFA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bc42480a-8e0f-477a-bd4a-aa8089927ba8/0/556F35148B9935659C1FE70B505B1D8D79838EFA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:14:3f:9f:fc:8d:d6:0e:a0:37:69:0c:a6:1e:51:97:26:96:
         f6:43:45:92:ba:5b:87:ca:99:b0:a4:79:e0:fd:0b:67:a1:69:
         8a:2f:06:1e:00:1b:34:1c:73:4b:55:88:38:df:45:f7:8a:4b:
         b1:e6:dc:fa:56:fa:ff:85:62:4a:12:94:79:fe:0d:2f:fd:c2:
         2e:68:34:f1:a2:c0:2f:df:1a:0a:67:28:a6:a4:1a:6c:c7:d2:
         36:76:4a:d1:43:37:ed:86:99:81:3c:36:d2:e3:50:2d:87:5d:
         f1:82:a5:23:38:f3:09:2e:98:5e:5f:13:b8:48:e2:0d:17:58:
         ae:eb:66:90:4a:d0:b0:4c:55:85:44:23:24:d2:50:b8:4f:56:
         2f:0f:12:c5:1d:3c:f9:ee:2d:21:f3:9f:4d:7d:c1:51:e5:2d:
         ff:b2:12:98:a1:2b:ad:a7:74:3d:f5:cb:78:b7:16:54:68:80:
         28:09:55:81:ac:f2:ad:42:54:1e:f8:b6:0a:02:25:35:95:52:
         ac:ed:98:c3:d0:0a:cf:03:53:d8:65:c0:a0:22:39:a3:2b:d2:
         32:15:fc:25:9f:76:4e:7d:9c:68:f1:89:d6:5a:bf:c5:5f:36:
         3d:c0:29:6a:03:33:19:16:54:58:a7:9a:18:16:1b:2e:95:ca:
         27:97:de:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 02:42:30 2026 by rpki-client