This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/8b36e88d-d573-4cbb-b460-a0b969aa84d5/0/B3263D687D5BDFB2FB4E802AB3B003FCFD266B5C.mft
File:                     B3263D687D5BDFB2FB4E802AB3B003FCFD266B5C.mft (raw, json)
Hash identifier:          tfso9f2TnpmmZh6mB4wOFuzOf3S7I6an7ofyQyRxSKg=
Subject key identifier:   BC:C7:FC:20:AB:06:53:99:CF:AA:49:72:7D:39:F9:E0:08:A8:A5:EA
Authority key identifier: B3:26:3D:68:7D:5B:DF:B2:FB:4E:80:2A:B3:B0:03:FC:FD:26:6B:5C
Certificate issuer:       /CN=B3263D687D5BDFB2FB4E802AB3B003FCFD266B5C
Certificate serial:       1298B5BEFB8A0A2CC0541CCFCC8D658D2C0F7AFD
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B3263D687D5BDFB2FB4E802AB3B003FCFD266B5C.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/8b36e88d-d573-4cbb-b460-a0b969aa84d5/0/B3263D687D5BDFB2FB4E802AB3B003FCFD266B5C.mft
Manifest number:          054A
Signing time:             Fri 09 Jan 2026 08:31:07 +0000
Manifest this update:     Fri 09 Jan 2026 08:26:07 +0000
Manifest next update:     Mon 12 Jan 2026 18:18:07 +0000
Files and hashes:         1: B3263D687D5BDFB2FB4E802AB3B003FCFD266B5C.crl (hash: 1ldH2lBTc3y6pg2EjRgkUz+YuVWpbEIjHvrxl6xS0+4=)
                          2: 323430343a366434303a3a2f33322d3438203d3e20313338383130.roa (hash: f1EdJawAFE33t1rxrdKPcs3d9VEItcNJb2cJ7vIPk2M=)
                          3: 3130332e3133342e3232332e302f32342d3234203d3e203435333035.roa (hash: dZSB/gSxOY7UKqB6f6AoUZuRdwpTE/RXX5o4gj8yNrA=)
                          4: 3130332e3133342e3232302e302f32342d3234203d3e20313338383130.roa (hash: B9YgdbWic7qXvAvHz1n/3UtrpjolL03glGipzRrFEzY=)
                          5: 3130332e3133342e3232312e302f32342d3234203d3e20313338383130.roa (hash: cmv59nNsRTRKeMV0c4HuiujTHOVfbugS8maMc0aBwq0=)
                          6: 3130332e3133342e3232302e302f32322d3234203d3e20313338383130.roa (hash: XcqISTFOM7Q9TbfcoALleQWh8kdaQumXVURloov1uL4=)
                          7: 3130332e3133342e3232322e302f32342d3234203d3e20313338383130.roa (hash: 3PZFIN0jiG1liVNOYS5bc8JkLCWSH93e9B5ZRAydDG8=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/8b36e88d-d573-4cbb-b460-a0b969aa84d5/0/B3263D687D5BDFB2FB4E802AB3B003FCFD266B5C.crl
                          rsync://repo-rpki.idnic.net/repo/8b36e88d-d573-4cbb-b460-a0b969aa84d5/0/B3263D687D5BDFB2FB4E802AB3B003FCFD266B5C.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B3263D687D5BDFB2FB4E802AB3B003FCFD266B5C.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 12 Jan 2026 18:18:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:98:b5:be:fb:8a:0a:2c:c0:54:1c:cf:cc:8d:65:8d:2c:0f:7a:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B3263D687D5BDFB2FB4E802AB3B003FCFD266B5C
        Validity
            Not Before: Jan  9 08:26:07 2026 GMT
            Not After : Jan 12 18:18:07 2026 GMT
        Subject: CN=BCC7FC20AB065399CFAA49727D39F9E008A8A5EA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:a6:df:2b:b0:74:ab:1e:20:cd:ab:19:b2:5f:
                    ad:8c:04:87:c8:ac:bf:ec:0e:89:85:64:01:66:1d:
                    fe:d3:eb:41:e7:8a:58:40:23:cb:cb:5d:8d:aa:fc:
                    70:46:8b:cd:ab:be:b7:37:51:5a:d7:a1:82:da:f0:
                    62:bd:1d:de:54:18:f4:a3:8d:bf:f7:36:6a:57:e8:
                    2a:69:0c:5e:80:3a:29:43:2c:68:9d:6e:d4:be:f9:
                    58:8d:81:54:a4:50:61:38:28:95:27:17:b2:05:b6:
                    ed:5a:9a:6c:bf:e5:9a:13:30:ec:c5:1a:89:88:f9:
                    50:2a:bd:0d:f6:93:8b:3b:fc:26:79:fb:de:21:5b:
                    7c:22:9b:68:8b:b2:71:a8:8d:44:76:94:c8:a7:cb:
                    82:39:e6:b8:76:1f:1a:cd:ac:20:a3:31:dd:25:3b:
                    58:cb:65:96:09:9b:10:6c:b5:77:e3:fb:47:ba:09:
                    eb:2f:32:95:e7:95:54:f4:c2:1a:db:1a:32:83:9a:
                    d4:3b:ad:a8:57:03:10:a7:28:dd:a5:18:41:c6:5f:
                    ad:54:d1:a5:9a:43:b8:01:4b:58:3f:e6:d8:84:d9:
                    6c:1a:a5:a4:ac:2a:24:cb:37:b2:f5:cc:8f:42:10:
                    46:3f:63:12:f7:72:63:f5:d2:53:b2:7a:5e:82:2d:
                    bf:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:C7:FC:20:AB:06:53:99:CF:AA:49:72:7D:39:F9:E0:08:A8:A5:EA
            X509v3 Authority Key Identifier:
                keyid:B3:26:3D:68:7D:5B:DF:B2:FB:4E:80:2A:B3:B0:03:FC:FD:26:6B:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/8b36e88d-d573-4cbb-b460-a0b969aa84d5/0/B3263D687D5BDFB2FB4E802AB3B003FCFD266B5C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B3263D687D5BDFB2FB4E802AB3B003FCFD266B5C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8b36e88d-d573-4cbb-b460-a0b969aa84d5/0/B3263D687D5BDFB2FB4E802AB3B003FCFD266B5C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:1b:de:47:9e:87:7f:b6:ea:9d:27:02:13:54:7e:a9:50:b2:
         1a:4d:86:d5:fd:fd:21:d6:e5:8c:04:1e:74:d7:58:cd:96:e1:
         26:04:05:89:27:c1:04:10:15:57:14:b7:fb:94:0b:d4:1b:80:
         f8:c0:97:95:d3:a8:b4:60:9c:e2:9b:9f:e1:58:e2:e5:2c:f4:
         58:ef:dc:5f:44:9a:12:73:1d:0a:78:ca:71:8f:86:ad:6f:ea:
         bf:16:83:01:17:06:77:82:27:fb:65:3e:50:30:ca:8e:99:31:
         9b:3b:26:8c:fc:01:17:c2:dd:d1:b5:82:68:79:b4:f2:b2:cb:
         4b:33:a8:a9:41:30:38:8e:4c:73:91:9d:f1:a2:0c:88:d7:3c:
         ec:a8:a5:f3:f2:de:fd:7f:eb:35:d9:56:ef:b4:42:f1:e7:8a:
         66:98:60:e9:37:3f:3c:a0:d6:1d:05:50:56:f8:99:9c:d9:7c:
         58:3c:26:25:ba:ea:1c:91:8c:7a:9e:44:46:7a:8c:70:83:9c:
         da:27:83:0b:6e:86:ce:3c:fb:20:96:3c:c1:3e:9c:8e:e8:a5:
         16:da:af:9a:45:ee:df:09:a6:ef:7d:fd:8f:15:ec:69:c5:d0:
         0a:05:79:41:2f:26:90:a8:c0:7f:e9:04:cc:19:d8:a4:d2:ba:
         8f:b9:15:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 9 18:45:34 2026 by rpki-client