This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/14ef1920-8523-4ed4-b357-9de9a0c91710/0/65AE765288A08C9301DB21B4DDDD966B2F23A7EB.mft
File:                     65AE765288A08C9301DB21B4DDDD966B2F23A7EB.mft (raw, json)
Hash identifier:          1wyvrEhpIi8IZbkqe4bmksL4DVXkTJTOJzn9ixqhzq0=
Subject key identifier:   D7:BF:FE:BF:45:F1:B0:DB:40:6E:7A:CC:99:A0:29:56:AF:B9:57:32
Authority key identifier: 65:AE:76:52:88:A0:8C:93:01:DB:21:B4:DD:DD:96:6B:2F:23:A7:EB
Certificate issuer:       /CN=65AE765288A08C9301DB21B4DDDD966B2F23A7EB
Certificate serial:       33A766DDA11384166E21B7329B190C207AC95E97
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/65AE765288A08C9301DB21B4DDDD966B2F23A7EB.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/14ef1920-8523-4ed4-b357-9de9a0c91710/0/65AE765288A08C9301DB21B4DDDD966B2F23A7EB.mft
Manifest number:          0544
Signing time:             Sat 31 Jan 2026 20:51:36 +0000
Manifest this update:     Sat 31 Jan 2026 20:46:36 +0000
Manifest next update:     Tue 03 Feb 2026 23:51:36 +0000
Files and hashes:         1: 65AE765288A08C9301DB21B4DDDD966B2F23A7EB.crl (hash: AOaZoIEaaxEFhZFWmDpuTCcFlKRyUSBdC9r3LjiHOIQ=)
                          2: 323030313a6466363a353930303a3a2f34382d3438203d3e20313338303536.roa (hash: LgOYiZeIIYet155UBAg0l2uIirVSZ4M3B9DiKsyKUTo=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/14ef1920-8523-4ed4-b357-9de9a0c91710/0/65AE765288A08C9301DB21B4DDDD966B2F23A7EB.crl
                          rsync://repo-rpki.idnic.net/repo/14ef1920-8523-4ed4-b357-9de9a0c91710/0/65AE765288A08C9301DB21B4DDDD966B2F23A7EB.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/65AE765288A08C9301DB21B4DDDD966B2F23A7EB.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 03 Feb 2026 23:51:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:a7:66:dd:a1:13:84:16:6e:21:b7:32:9b:19:0c:20:7a:c9:5e:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65AE765288A08C9301DB21B4DDDD966B2F23A7EB
        Validity
            Not Before: Jan 31 20:46:36 2026 GMT
            Not After : Feb  3 23:51:36 2026 GMT
        Subject: CN=D7BFFEBF45F1B0DB406E7ACC99A02956AFB95732
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:e2:bf:6a:02:dc:f6:f3:ff:26:5a:52:89:1e:
                    46:a3:5d:f0:83:15:d6:cb:0e:11:75:53:0a:b0:9a:
                    65:65:4d:9d:e8:47:32:f9:81:22:4b:ad:e1:3d:df:
                    fe:6c:79:36:4b:5e:7b:30:32:d4:a0:a0:92:a5:e5:
                    8f:d4:f4:8a:8d:2e:ba:9a:17:df:f8:c0:7e:68:cc:
                    69:ca:0d:69:78:32:db:2c:60:89:8b:2d:09:2d:ac:
                    b9:6e:fa:88:90:03:ba:d2:aa:a7:e8:70:be:a0:1a:
                    b0:d9:4b:86:25:b7:db:62:11:2a:66:7a:03:d9:bb:
                    5b:ab:a8:89:d8:3a:0a:56:31:9c:6b:d5:c0:37:6f:
                    40:29:7b:0b:c8:2a:76:ef:15:e7:72:39:60:6b:dd:
                    f2:6e:0d:3b:72:f6:be:77:66:d7:a2:3c:cd:74:d5:
                    32:0f:93:0a:4e:41:ec:4f:15:0f:6f:b4:bc:39:58:
                    ad:bc:6a:10:43:42:9a:92:31:8d:df:4f:05:7b:ac:
                    87:1d:ca:59:dc:40:f5:bc:59:95:9e:61:80:ab:a4:
                    0c:26:41:18:3f:2b:b9:f5:04:22:e9:c3:5b:37:4d:
                    87:60:f6:9a:5a:a7:e3:62:92:9d:22:55:b5:35:fa:
                    fd:2a:c5:ec:86:41:a8:33:8e:44:97:8e:c6:fa:07:
                    08:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:BF:FE:BF:45:F1:B0:DB:40:6E:7A:CC:99:A0:29:56:AF:B9:57:32
            X509v3 Authority Key Identifier:
                keyid:65:AE:76:52:88:A0:8C:93:01:DB:21:B4:DD:DD:96:6B:2F:23:A7:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/14ef1920-8523-4ed4-b357-9de9a0c91710/0/65AE765288A08C9301DB21B4DDDD966B2F23A7EB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/65AE765288A08C9301DB21B4DDDD966B2F23A7EB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/14ef1920-8523-4ed4-b357-9de9a0c91710/0/65AE765288A08C9301DB21B4DDDD966B2F23A7EB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:56:45:47:0e:c9:3a:24:18:c7:21:10:6e:e2:d9:f1:8b:57:
         c1:c5:4a:9a:dd:94:d8:1a:8d:26:08:81:d3:50:2b:b4:cc:ce:
         b6:9e:20:bd:27:56:82:7d:56:20:04:fe:54:36:2b:cb:15:44:
         f8:31:2c:f7:03:3f:5a:75:66:5c:99:cb:ae:72:3a:36:b7:d4:
         11:2f:94:76:c6:df:d2:fd:cd:8c:f8:ca:21:c7:90:11:39:60:
         31:95:09:b2:c2:00:e4:af:ec:f6:55:be:2e:b5:d5:53:3c:8d:
         99:57:ba:1d:3b:79:54:48:71:3b:7e:d9:eb:3c:60:0b:7b:d6:
         f7:c1:d4:94:c7:11:86:6e:11:54:6c:6f:10:b3:02:43:4c:be:
         05:a9:b9:39:27:ee:ac:eb:ad:01:c5:c2:e3:7e:5d:f0:a9:9a:
         cd:e6:bc:ca:de:6b:52:70:a8:34:72:92:99:f1:07:c7:48:80:
         05:90:93:a4:6d:32:bd:60:4b:2b:70:52:39:84:32:36:47:f0:
         f0:14:00:de:3a:7f:6a:2a:89:d8:7c:9f:94:6e:5c:53:60:15:
         52:4b:24:1b:09:be:4d:37:19:20:68:84:4e:e8:0b:f9:ee:40:
         58:fb:05:6f:5b:02:3c:26:35:21:88:e6:64:70:5b:b2:3c:6d:
         ec:0e:ad:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 10:02:53 2026 by rpki-client