This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/150d1aa1-4c7f-448b-b2bb-02c57151f210/0/732F46D74C7A8C5D888A7091A706F3A09EFE96A3.mft
File:                     732F46D74C7A8C5D888A7091A706F3A09EFE96A3.mft (raw, json)
Hash identifier:          8o5p9tY1IRVIJGZDyZ1l7QHa7wWpTqintDOlB0zgUnc=
Subject key identifier:   FF:B9:97:3E:FA:C7:5E:69:D4:0E:72:E9:B0:81:8F:A5:4E:E4:FA:7C
Authority key identifier: 73:2F:46:D7:4C:7A:8C:5D:88:8A:70:91:A7:06:F3:A0:9E:FE:96:A3
Certificate issuer:       /CN=732F46D74C7A8C5D888A7091A706F3A09EFE96A3
Certificate serial:       05866427FE473908C7D4601728DF0DF1DE1DAD28
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/732F46D74C7A8C5D888A7091A706F3A09EFE96A3.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/150d1aa1-4c7f-448b-b2bb-02c57151f210/0/732F46D74C7A8C5D888A7091A706F3A09EFE96A3.mft
Manifest number:          02C6
Signing time:             Sun 01 Feb 2026 14:31:09 +0000
Manifest this update:     Sun 01 Feb 2026 14:26:09 +0000
Manifest next update:     Thu 05 Feb 2026 01:47:09 +0000
Files and hashes:         1: 732F46D74C7A8C5D888A7091A706F3A09EFE96A3.crl (hash: MJuLZYgxc4uCwI8dLEJcLvl74O5bbZ0RsatCOYcPlDE=)
                          2: 3230322e3138332e302e302f31392d3139203d3e203338313630.roa (hash: MEztuZqZgD3unDvE9UbT7j2miLRVC0ZWnvrCm6yOt54=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/150d1aa1-4c7f-448b-b2bb-02c57151f210/0/732F46D74C7A8C5D888A7091A706F3A09EFE96A3.crl
                          rsync://repo-rpki.idnic.net/repo/150d1aa1-4c7f-448b-b2bb-02c57151f210/0/732F46D74C7A8C5D888A7091A706F3A09EFE96A3.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/732F46D74C7A8C5D888A7091A706F3A09EFE96A3.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 05 Feb 2026 01:47:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:86:64:27:fe:47:39:08:c7:d4:60:17:28:df:0d:f1:de:1d:ad:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=732F46D74C7A8C5D888A7091A706F3A09EFE96A3
        Validity
            Not Before: Feb  1 14:26:09 2026 GMT
            Not After : Feb  5 01:47:09 2026 GMT
        Subject: CN=FFB9973EFAC75E69D40E72E9B0818FA54EE4FA7C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:58:5b:93:47:6c:7f:54:11:28:ed:bf:2a:71:
                    d1:09:69:db:4f:19:ea:fd:44:23:19:d2:64:3b:94:
                    64:71:a9:74:39:35:53:06:cf:64:d3:0f:35:c2:be:
                    4c:b4:36:e1:07:ac:8f:c8:50:f4:ad:73:20:b8:20:
                    23:f7:28:3f:22:72:8f:7e:32:63:34:f7:4a:26:75:
                    8a:ec:70:80:08:70:6f:b8:5f:b5:c4:9f:34:10:72:
                    26:26:ba:fe:11:ee:64:75:d7:97:aa:71:c0:45:f4:
                    e7:d9:95:4a:57:4b:66:13:6b:38:56:d2:f8:23:ee:
                    38:82:28:9c:5e:a1:7b:08:d0:62:65:73:b7:df:18:
                    dd:b5:37:0c:a3:af:55:b3:c3:47:f0:33:33:73:6e:
                    42:9a:fa:09:55:08:92:c7:d0:48:75:ed:fa:67:b8:
                    65:e1:32:84:7a:e4:3c:d9:45:0e:de:56:db:e6:d1:
                    aa:0c:f2:60:b2:ec:eb:da:c8:50:e4:43:15:d6:7d:
                    15:1e:e7:c2:17:93:b0:89:ab:1d:a5:69:c2:d7:ba:
                    50:98:bd:c1:34:29:46:9f:98:b6:39:49:a5:47:1a:
                    43:dd:3d:0d:4f:00:0c:84:72:54:d9:0d:04:0e:2a:
                    d8:01:4d:b7:52:1d:6c:a9:17:61:a8:e5:8d:aa:29:
                    5f:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:B9:97:3E:FA:C7:5E:69:D4:0E:72:E9:B0:81:8F:A5:4E:E4:FA:7C
            X509v3 Authority Key Identifier:
                keyid:73:2F:46:D7:4C:7A:8C:5D:88:8A:70:91:A7:06:F3:A0:9E:FE:96:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/150d1aa1-4c7f-448b-b2bb-02c57151f210/0/732F46D74C7A8C5D888A7091A706F3A09EFE96A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/732F46D74C7A8C5D888A7091A706F3A09EFE96A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/150d1aa1-4c7f-448b-b2bb-02c57151f210/0/732F46D74C7A8C5D888A7091A706F3A09EFE96A3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:08:8c:52:08:a8:fe:35:01:96:09:ae:8f:1c:30:ce:8e:5e:
         6e:05:b9:1b:a0:94:ec:ef:6a:36:5b:64:de:93:a3:f5:0f:27:
         5e:13:22:80:ba:84:bc:4b:8f:8a:d9:5c:d6:92:3b:fa:86:b9:
         e2:72:c4:c9:7b:f8:da:ab:07:a1:36:a8:7f:85:ac:04:d3:86:
         02:0e:a4:c4:c6:8a:95:5f:8c:5e:19:de:f7:51:93:40:9b:61:
         de:95:10:e1:25:26:2a:d8:fb:ee:de:8f:13:73:a0:85:b1:ed:
         55:bf:6e:18:3b:04:4a:4d:d5:04:e8:70:39:6f:30:14:61:9e:
         1f:a0:91:5a:71:b0:c7:8b:a5:c2:fa:3c:5e:20:40:88:1a:21:
         90:b8:38:e0:9a:d1:ef:17:0c:85:8d:98:73:a4:5d:6c:01:4b:
         09:92:90:01:dc:d6:b3:39:fb:a0:ae:3d:87:49:25:f5:ad:13:
         5b:88:09:5a:bd:d3:75:e7:7f:1f:7e:11:a2:4c:94:ea:e5:ef:
         a5:0d:32:08:60:d8:35:2e:a6:c4:91:e4:83:2d:ca:b3:72:6a:
         93:0c:e1:2c:a1:d8:bd:5a:f9:c6:d0:82:d6:05:46:7a:9b:79:
         6a:80:33:ee:ca:a4:c8:8f:df:4c:26:fa:29:95:7f:19:11:58:
         0d:a8:30:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 09:43:47 2026 by rpki-client