This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/e13eed2b-955e-4093-88a4-f4de3cc9b9cd/0/5ACB0F96C2B1255EABAAEBC1426ECD9E6DF6C4AD.mft
File:                     5ACB0F96C2B1255EABAAEBC1426ECD9E6DF6C4AD.mft (raw, json)
Hash identifier:          jWUb6MPv1BcX9hBa7PDWWLKXcKWU8StGHc4jeBCQ31w=
Subject key identifier:   92:9F:29:0C:3D:F5:7D:50:61:3B:A5:CA:D9:7C:5B:C9:9F:8F:F8:40
Authority key identifier: 5A:CB:0F:96:C2:B1:25:5E:AB:AA:EB:C1:42:6E:CD:9E:6D:F6:C4:AD
Certificate issuer:       /CN=5ACB0F96C2B1255EABAAEBC1426ECD9E6DF6C4AD
Certificate serial:       107FC764DC442B29D0A4A821E332EB173EF6362D
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5ACB0F96C2B1255EABAAEBC1426ECD9E6DF6C4AD.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/e13eed2b-955e-4093-88a4-f4de3cc9b9cd/0/5ACB0F96C2B1255EABAAEBC1426ECD9E6DF6C4AD.mft
Manifest number:          01B5
Signing time:             Sat 24 Jan 2026 04:11:03 +0000
Manifest this update:     Sat 24 Jan 2026 04:06:03 +0000
Manifest next update:     Tue 27 Jan 2026 09:49:03 +0000
Files and hashes:         1: 5ACB0F96C2B1255EABAAEBC1426ECD9E6DF6C4AD.crl (hash: LSDTYGTHY41t+xCC39X7jyifXI2EMm6yk2hY8BOhPh4=)
                          2: 3130332e3235322e34382e302f32342d3234203d3e20313530393931.roa (hash: 3eXzK+GorV6w9BT+6P2VQObNrkmn7G3kB6eMdcv66zE=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/e13eed2b-955e-4093-88a4-f4de3cc9b9cd/0/5ACB0F96C2B1255EABAAEBC1426ECD9E6DF6C4AD.crl
                          rsync://repo-rpki.idnic.net/repo/e13eed2b-955e-4093-88a4-f4de3cc9b9cd/0/5ACB0F96C2B1255EABAAEBC1426ECD9E6DF6C4AD.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5ACB0F96C2B1255EABAAEBC1426ECD9E6DF6C4AD.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 27 Jan 2026 09:49:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:7f:c7:64:dc:44:2b:29:d0:a4:a8:21:e3:32:eb:17:3e:f6:36:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ACB0F96C2B1255EABAAEBC1426ECD9E6DF6C4AD
        Validity
            Not Before: Jan 24 04:06:03 2026 GMT
            Not After : Jan 27 09:49:03 2026 GMT
        Subject: CN=929F290C3DF57D50613BA5CAD97C5BC99F8FF840
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:86:04:f3:73:58:ad:4b:c9:56:5b:d9:df:3a:
                    30:82:e9:cc:c4:4d:36:a8:26:30:c5:f9:e2:b1:86:
                    3b:22:21:89:fb:62:b3:2d:5a:1e:ff:24:14:7d:b8:
                    b7:86:ce:ed:99:0c:99:20:81:0c:3f:51:8c:67:91:
                    4c:09:06:da:c3:74:2f:ea:12:f7:87:6d:c5:d2:6f:
                    8f:87:11:95:8a:bc:0e:e4:57:80:9a:b2:4c:1a:1f:
                    83:01:92:7d:cb:94:9d:2b:67:5d:96:91:20:ac:78:
                    cc:e1:26:6c:4a:c6:2e:11:a9:9f:7c:9d:b3:3a:bb:
                    18:24:d2:b5:5e:21:d9:1b:aa:fb:50:e2:32:c0:a0:
                    ab:17:b9:5b:8f:f1:4a:a7:64:2e:e2:ae:c3:31:26:
                    ed:cf:3b:4e:13:6f:29:de:00:ab:db:ec:27:57:fa:
                    85:ed:1b:8a:9c:59:3b:d8:90:25:b6:c5:bf:53:1d:
                    a6:f8:19:f1:85:b0:c5:84:d9:e2:cf:da:08:4e:15:
                    ff:22:05:a8:53:24:08:9f:4f:93:b3:e9:63:14:9b:
                    18:b0:18:f8:1f:76:59:d8:dc:99:94:24:7d:04:03:
                    f1:90:2a:f9:d3:5a:c8:24:69:40:1c:aa:97:c4:e8:
                    eb:d7:b2:29:c7:99:40:ad:03:9b:e5:e0:a0:53:b3:
                    90:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:9F:29:0C:3D:F5:7D:50:61:3B:A5:CA:D9:7C:5B:C9:9F:8F:F8:40
            X509v3 Authority Key Identifier:
                keyid:5A:CB:0F:96:C2:B1:25:5E:AB:AA:EB:C1:42:6E:CD:9E:6D:F6:C4:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/e13eed2b-955e-4093-88a4-f4de3cc9b9cd/0/5ACB0F96C2B1255EABAAEBC1426ECD9E6DF6C4AD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5ACB0F96C2B1255EABAAEBC1426ECD9E6DF6C4AD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e13eed2b-955e-4093-88a4-f4de3cc9b9cd/0/5ACB0F96C2B1255EABAAEBC1426ECD9E6DF6C4AD.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:3e:1b:5d:0a:e7:91:5a:71:fd:6a:b1:06:60:59:94:b6:ac:
         7e:2a:88:08:cf:ff:75:86:d9:3b:e4:9b:a1:95:38:b4:c5:a5:
         45:2b:e2:5a:4a:9b:9d:2e:a3:52:85:f7:d3:08:63:52:90:b0:
         9f:be:a2:2a:81:a7:74:2b:09:1b:76:88:63:37:a1:39:11:c8:
         4c:57:f6:db:83:72:66:25:42:88:cc:f3:0b:de:55:3e:42:47:
         52:62:26:3d:9d:da:42:db:be:ac:60:b1:01:31:9d:35:b5:0c:
         7c:f4:33:da:79:a8:0f:62:35:30:59:41:c1:94:89:d6:6f:21:
         d8:71:c4:0d:e1:ba:22:fe:32:1d:76:50:02:ea:ee:bf:d4:37:
         4c:35:d4:d1:69:bf:cb:a5:a7:56:99:29:90:1d:e3:91:c8:a3:
         19:53:30:c4:22:c5:a9:6b:ec:13:73:6c:89:46:8f:9c:3a:c4:
         77:91:3f:4f:d8:a1:a3:c9:c7:a8:71:8b:05:6c:57:a8:ea:06:
         38:66:77:52:b5:2d:95:79:33:1c:ae:6b:f0:d9:1e:93:c0:bc:
         9c:f8:43:5c:51:da:eb:c4:c7:e3:84:67:0c:82:31:78:25:fc:
         95:f2:37:57:a8:33:6b:40:f8:e9:f6:59:b6:c8:a3:71:14:4f:
         db:8c:f1:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 01:14:15 2026 by rpki-client