This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/f438c195-494a-46a2-b93c-8e15668f05b2/0/358F4D417A1317CB220BBDC982D7F35D1540D51A.mft
File:                     358F4D417A1317CB220BBDC982D7F35D1540D51A.mft (raw, json)
Hash identifier:          uWjgeQRfTGx3rd7qRIShzaNjwI49WV6h6rts4WpYVYM=
Subject key identifier:   F8:6E:E6:F0:D8:E5:B7:2C:4C:A5:B5:94:64:25:28:22:D4:14:29:59
Authority key identifier: 35:8F:4D:41:7A:13:17:CB:22:0B:BD:C9:82:D7:F3:5D:15:40:D5:1A
Certificate issuer:       /CN=358F4D417A1317CB220BBDC982D7F35D1540D51A
Certificate serial:       2FC1C3938EB91356D5F64B43F47E506842A92D21
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/358F4D417A1317CB220BBDC982D7F35D1540D51A.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/f438c195-494a-46a2-b93c-8e15668f05b2/0/358F4D417A1317CB220BBDC982D7F35D1540D51A.mft
Manifest number:          01B5
Signing time:             Mon 26 Jan 2026 02:02:13 +0000
Manifest this update:     Mon 26 Jan 2026 01:57:13 +0000
Manifest next update:     Thu 29 Jan 2026 06:03:13 +0000
Files and hashes:         1: 3130332e3231302e36382e302f32332d3234203d3e20313431313037.roa (hash: DvNJ8H1CJLvMIn5Y34NSV0YQmp6wM1aq7OtPFufJmPg=)
                          2: 358F4D417A1317CB220BBDC982D7F35D1540D51A.crl (hash: OxJd6A6E5xO1MaNIyCZUofWIDAZGTspnG/IG+6u0hTI=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/f438c195-494a-46a2-b93c-8e15668f05b2/0/358F4D417A1317CB220BBDC982D7F35D1540D51A.crl
                          rsync://repo-rpki.idnic.net/repo/f438c195-494a-46a2-b93c-8e15668f05b2/0/358F4D417A1317CB220BBDC982D7F35D1540D51A.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/358F4D417A1317CB220BBDC982D7F35D1540D51A.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 28 Jan 2026 14:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:c1:c3:93:8e:b9:13:56:d5:f6:4b:43:f4:7e:50:68:42:a9:2d:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=358F4D417A1317CB220BBDC982D7F35D1540D51A
        Validity
            Not Before: Jan 26 01:57:13 2026 GMT
            Not After : Jan 29 06:03:13 2026 GMT
        Subject: CN=F86EE6F0D8E5B72C4CA5B59464252822D4142959
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:f2:0f:c8:93:2f:46:48:3a:f8:a0:c8:26:fc:
                    ff:4d:a5:87:78:98:3b:b4:fd:24:4e:78:f1:06:8b:
                    8a:26:6f:5f:10:09:cd:82:51:04:21:c4:7a:1b:7c:
                    74:bf:2b:a7:9b:ca:2a:3c:72:18:c5:b0:c9:e7:74:
                    89:ac:e0:aa:30:af:d6:ea:19:e7:07:c2:d6:53:5d:
                    b0:ab:99:ae:0f:96:67:8e:7a:e2:10:22:56:00:d5:
                    05:7e:cb:5c:dc:25:38:2d:34:1e:24:cb:a4:04:1d:
                    6b:15:da:50:e3:e5:3a:94:1f:44:ba:9e:fd:35:df:
                    cf:18:57:a4:b6:ca:1e:a7:d9:85:6d:16:52:27:0d:
                    89:57:ca:78:99:05:03:42:ee:28:72:46:fe:7f:98:
                    7b:28:21:c9:a9:df:df:8c:e4:69:3c:bd:3b:82:35:
                    6b:4d:60:3e:ca:aa:b2:b6:c4:38:b1:66:8f:ca:c6:
                    24:1b:42:5d:fc:bf:6f:da:9e:90:de:4a:08:06:a7:
                    04:6c:d6:c7:09:61:f3:d3:bb:a1:d2:c3:9f:fe:9b:
                    1c:71:e9:32:c2:9f:89:5e:09:ea:d3:70:77:7d:f7:
                    49:ad:90:07:0a:b9:3d:89:a1:cd:c1:64:9f:71:a8:
                    df:48:26:d9:10:99:64:cf:11:62:b6:db:92:65:60:
                    ea:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:6E:E6:F0:D8:E5:B7:2C:4C:A5:B5:94:64:25:28:22:D4:14:29:59
            X509v3 Authority Key Identifier:
                keyid:35:8F:4D:41:7A:13:17:CB:22:0B:BD:C9:82:D7:F3:5D:15:40:D5:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/f438c195-494a-46a2-b93c-8e15668f05b2/0/358F4D417A1317CB220BBDC982D7F35D1540D51A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/358F4D417A1317CB220BBDC982D7F35D1540D51A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f438c195-494a-46a2-b93c-8e15668f05b2/0/358F4D417A1317CB220BBDC982D7F35D1540D51A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:19:53:6d:ce:ab:22:fe:08:a7:c7:3f:25:bc:3b:fb:66:85:
         50:c4:89:11:92:39:4b:c9:45:1e:a0:86:6e:33:a5:17:77:75:
         bf:6a:99:24:e8:a1:49:87:9a:df:48:7c:2e:5a:56:86:d9:dd:
         b3:22:5d:75:e7:cd:11:64:df:b6:9c:d9:a7:ff:2b:4c:4d:66:
         55:0c:8d:48:27:cf:ba:f0:a4:fc:92:3d:59:34:36:c4:0a:3b:
         ca:d7:71:5b:4c:1e:c3:4f:fd:eb:5b:7d:b0:7b:79:03:a7:0f:
         d4:ab:8b:cd:f8:c6:1b:f0:b5:da:1a:b2:f5:81:ef:40:2d:73:
         59:6b:f1:8a:70:55:d6:09:b2:29:a9:ce:25:95:ef:a6:4b:ff:
         dd:1f:0d:1f:29:84:8f:c3:70:23:3a:2c:64:7c:03:cc:3d:33:
         e8:01:80:ed:81:b6:69:44:93:1c:b9:8a:ef:55:63:e0:35:58:
         cb:85:43:ea:40:ad:bd:2d:f0:95:82:90:eb:d2:6a:77:8d:bd:
         1c:08:4e:f5:b2:fb:ea:7d:27:9f:e8:94:b7:50:75:68:8d:ef:
         51:f8:99:c1:42:ee:2e:b1:5b:bb:44:5e:9c:43:78:bb:43:81:
         f9:01:33:d9:62:36:a7:44:05:1e:3a:3d:1e:10:34:29:38:f8:
         6d:ee:80:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 05:38:34 2026 by rpki-client