This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/f735e15f-d449-46d8-be0e-85e389bedc5e/0/542851974B72056B3D43792A5ED83E94DA8583CF.mft
File:                     542851974B72056B3D43792A5ED83E94DA8583CF.mft (raw, json)
Hash identifier:          /ATuTNY1mZwjn5uQvuxkZEp7U3jW6qXQIi9TkYfoAwY=
Subject key identifier:   33:DA:25:87:E8:5F:3B:68:02:5D:92:DC:35:66:6A:F4:CE:99:2B:4D
Authority key identifier: 54:28:51:97:4B:72:05:6B:3D:43:79:2A:5E:D8:3E:94:DA:85:83:CF
Certificate issuer:       /CN=542851974B72056B3D43792A5ED83E94DA8583CF
Certificate serial:       59B071E36B850A01B15A9633C3BDB3A1D136AF15
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/542851974B72056B3D43792A5ED83E94DA8583CF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/f735e15f-d449-46d8-be0e-85e389bedc5e/0/542851974B72056B3D43792A5ED83E94DA8583CF.mft
Manifest number:          0175
Signing time:             Sat 24 Jan 2026 00:10:50 +0000
Manifest this update:     Sat 24 Jan 2026 00:05:50 +0000
Manifest next update:     Tue 27 Jan 2026 07:26:50 +0000
Files and hashes:         1: 542851974B72056B3D43792A5ED83E94DA8583CF.crl (hash: XS38pE62tNdEeSM88wdgNYIRPg620h4phoXQX67BOJI=)
                          2: 3130332e3137372e36302e302f32342d3234203d3e20313437313432.roa (hash: 698jR3jKZ8pHoaDchjQqCam2SnsQK52skK3UhMYukls=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/f735e15f-d449-46d8-be0e-85e389bedc5e/0/542851974B72056B3D43792A5ED83E94DA8583CF.crl
                          rsync://repo-rpki.idnic.net/repo/f735e15f-d449-46d8-be0e-85e389bedc5e/0/542851974B72056B3D43792A5ED83E94DA8583CF.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/542851974B72056B3D43792A5ED83E94DA8583CF.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 27 Jan 2026 07:26:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:b0:71:e3:6b:85:0a:01:b1:5a:96:33:c3:bd:b3:a1:d1:36:af:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=542851974B72056B3D43792A5ED83E94DA8583CF
        Validity
            Not Before: Jan 24 00:05:50 2026 GMT
            Not After : Jan 27 07:26:50 2026 GMT
        Subject: CN=33DA2587E85F3B68025D92DC35666AF4CE992B4D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:8e:4d:74:b3:35:e7:cd:20:5a:01:f4:9b:a5:
                    30:38:74:f1:b7:d8:85:04:68:31:7a:33:3e:29:b7:
                    7d:b2:d7:9c:00:5b:4f:1e:cb:60:81:c4:3c:3e:51:
                    26:88:ee:1f:d5:ac:c8:b3:df:1c:74:ef:92:26:06:
                    fc:df:25:96:5f:23:d4:12:c5:2e:09:a9:62:94:5b:
                    41:85:15:03:1e:83:f1:bd:42:61:b1:fa:c3:50:1c:
                    a6:bb:40:f5:34:42:f8:f5:d4:97:7a:11:6b:65:66:
                    36:8b:e4:38:a7:0e:bc:8f:88:1d:62:88:c5:61:91:
                    27:4b:9c:8e:de:39:f8:45:61:eb:33:57:cf:84:7d:
                    e2:aa:5d:7f:ff:94:f6:4d:22:d6:47:b7:9e:97:78:
                    84:99:64:21:ee:b4:47:fe:07:2d:e3:e4:87:90:12:
                    04:49:82:05:39:f4:2d:13:87:78:c6:34:47:de:9b:
                    ea:9e:cc:fa:c6:c2:e4:4b:f6:d6:16:fd:0e:01:ac:
                    a2:6c:c5:ee:85:93:86:58:2c:c9:41:b8:84:f8:94:
                    a5:9f:fc:0b:1e:77:f8:9e:f8:03:aa:66:b5:63:a1:
                    47:a4:b0:cd:39:10:04:12:82:53:77:40:fe:27:7a:
                    e3:e6:fc:8f:cd:dc:cb:9a:eb:fa:0f:38:bb:b4:5a:
                    b5:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:DA:25:87:E8:5F:3B:68:02:5D:92:DC:35:66:6A:F4:CE:99:2B:4D
            X509v3 Authority Key Identifier:
                keyid:54:28:51:97:4B:72:05:6B:3D:43:79:2A:5E:D8:3E:94:DA:85:83:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/f735e15f-d449-46d8-be0e-85e389bedc5e/0/542851974B72056B3D43792A5ED83E94DA8583CF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/542851974B72056B3D43792A5ED83E94DA8583CF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f735e15f-d449-46d8-be0e-85e389bedc5e/0/542851974B72056B3D43792A5ED83E94DA8583CF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:83:6b:07:74:73:09:66:38:ed:42:20:38:03:80:7d:75:fe:
         4e:3e:bb:41:8f:30:10:e5:f7:4f:b0:ae:80:6b:c0:3e:71:10:
         61:84:81:20:4b:5b:4e:28:35:f8:3e:c8:d7:5b:17:2c:1b:80:
         4b:ee:63:d7:8e:f5:77:37:02:48:a5:e0:59:7b:c7:99:c8:23:
         ad:a0:eb:79:e8:33:14:8e:8c:24:39:28:42:86:b8:4b:6d:44:
         90:38:87:1d:24:8b:2d:37:7f:b6:5c:26:91:6c:c0:98:7d:4a:
         c0:67:db:b6:3e:83:ff:37:7d:a2:be:3a:20:f0:a4:d3:4e:eb:
         6c:ea:b9:a9:d1:22:a5:87:a9:24:db:03:31:29:1e:dc:fd:f9:
         a5:a2:22:46:5f:c7:63:87:78:d9:88:40:5b:3f:ff:d6:53:37:
         b3:6d:e3:e8:91:01:16:47:40:f8:ef:5a:58:aa:f8:93:ad:05:
         22:fe:0f:30:61:b5:14:1b:af:73:0c:0e:ab:3e:69:d4:18:b2:
         e5:b2:be:f1:71:d8:93:75:09:cf:60:e0:83:f4:c0:b2:30:ec:
         3b:19:05:1b:a7:1d:c0:e8:4c:d0:90:95:e6:4e:33:c9:cd:96:
         f4:f7:e1:26:a7:db:c7:e7:89:eb:f0:83:ec:6c:a3:1a:8b:66:
         03:73:a5:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:47:23 2026 by rpki-client