This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/2144252b-d30e-4bdc-832f-b38b05c7a035/0/1B42B2BB5674F23468744614CDF9B0B00D510190.mft
File:                     1B42B2BB5674F23468744614CDF9B0B00D510190.mft (raw, json)
Hash identifier:          6F2vl21s8DJzFLC/b7crazmZ++xhTAJNNLfa42sYVIg=
Subject key identifier:   D7:FE:60:C4:69:63:A8:85:19:E7:3F:A1:A5:2C:38:58:03:79:FB:38
Authority key identifier: 1B:42:B2:BB:56:74:F2:34:68:74:46:14:CD:F9:B0:B0:0D:51:01:90
Certificate issuer:       /CN=1B42B2BB5674F23468744614CDF9B0B00D510190
Certificate serial:       6B4CE7D708CC9F77D6BBADDBDD596705E5169733
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1B42B2BB5674F23468744614CDF9B0B00D510190.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/2144252b-d30e-4bdc-832f-b38b05c7a035/0/1B42B2BB5674F23468744614CDF9B0B00D510190.mft
Manifest number:          0210
Signing time:             Sat 31 Jan 2026 16:22:08 +0000
Manifest this update:     Sat 31 Jan 2026 16:17:08 +0000
Manifest next update:     Wed 04 Feb 2026 00:51:08 +0000
Files and hashes:         1: 1B42B2BB5674F23468744614CDF9B0B00D510190.crl (hash: NQlCFoLRoBGtrvp66I6HEtH8VXN/Un6rRPg2M9vMGWc=)
                          2: 3130332e31392e3135372e302f32342d3234203d3e20313530323334.roa (hash: Czzvj4vJQSB2KKayEoKqCf4S1sGvCeEbVuyOD7N/uO0=)
                          3: 3130332e31392e3135362e302f32342d3234203d3e20313530323334.roa (hash: 7jDOzKEybqHgosjfCyx4hqCz0tcDh6a5dAdb4UBUTOc=)
                          4: 3130332e31392e3135362e302f32332d3233203d3e20313530323334.roa (hash: oFFK8blgpeKf9LD5SV2KXd2JEMT+aIlFev67ub7lEjE=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/2144252b-d30e-4bdc-832f-b38b05c7a035/0/1B42B2BB5674F23468744614CDF9B0B00D510190.crl
                          rsync://repo-rpki.idnic.net/repo/2144252b-d30e-4bdc-832f-b38b05c7a035/0/1B42B2BB5674F23468744614CDF9B0B00D510190.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1B42B2BB5674F23468744614CDF9B0B00D510190.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 04 Feb 2026 00:51:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:4c:e7:d7:08:cc:9f:77:d6:bb:ad:db:dd:59:67:05:e5:16:97:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1B42B2BB5674F23468744614CDF9B0B00D510190
        Validity
            Not Before: Jan 31 16:17:08 2026 GMT
            Not After : Feb  4 00:51:08 2026 GMT
        Subject: CN=D7FE60C46963A88519E73FA1A52C38580379FB38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:84:8b:68:96:1a:c1:07:54:39:d2:26:71:09:
                    75:c1:c1:e8:b0:8d:4e:9a:4b:56:79:6b:73:d8:ce:
                    36:c7:fb:80:dd:c6:d4:2e:8e:7b:b6:21:42:a7:b7:
                    3e:dc:3f:a2:10:23:49:d5:ab:a5:b1:02:f1:b1:76:
                    69:5a:11:80:24:97:db:96:57:29:58:0c:9b:1a:04:
                    fa:9d:fc:15:70:a9:98:1a:2b:4f:e3:40:00:b5:c3:
                    a8:e2:73:d9:88:7c:cc:5e:b2:57:a9:fe:8c:6a:79:
                    64:bf:c5:ab:0a:1b:9f:6f:2a:fb:cb:a8:b9:13:ed:
                    36:ac:28:28:f6:28:00:e2:f9:96:9b:45:9f:be:c4:
                    1e:0e:89:f2:e2:e1:08:e2:b7:43:9f:5c:2c:c1:ea:
                    50:81:79:7d:4d:50:89:a8:31:81:60:66:53:37:99:
                    99:75:e2:f1:e3:0b:94:5c:99:8f:9f:87:e5:18:33:
                    8a:0d:88:b3:0e:48:63:a4:2f:90:20:44:26:e6:ad:
                    f0:b1:e7:27:f5:14:f7:71:05:1a:4b:84:7f:23:3a:
                    7a:ee:37:d3:ba:32:f3:04:33:fa:b9:a6:75:d9:fd:
                    39:55:69:a1:19:93:1f:55:2f:31:77:c0:0d:f1:76:
                    6f:6d:01:39:71:17:0c:00:48:f8:a3:54:24:ec:d4:
                    69:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:FE:60:C4:69:63:A8:85:19:E7:3F:A1:A5:2C:38:58:03:79:FB:38
            X509v3 Authority Key Identifier:
                keyid:1B:42:B2:BB:56:74:F2:34:68:74:46:14:CD:F9:B0:B0:0D:51:01:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/2144252b-d30e-4bdc-832f-b38b05c7a035/0/1B42B2BB5674F23468744614CDF9B0B00D510190.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1B42B2BB5674F23468744614CDF9B0B00D510190.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2144252b-d30e-4bdc-832f-b38b05c7a035/0/1B42B2BB5674F23468744614CDF9B0B00D510190.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:bc:c9:20:1c:37:8a:63:a9:f4:c4:ab:73:cd:c5:4f:fb:52:
         90:e1:f9:c5:87:4c:19:67:11:a8:70:44:e7:a6:0c:fa:0e:0d:
         e5:63:76:54:65:ec:be:12:9b:0b:68:2a:8d:a6:01:41:53:4d:
         f4:2c:88:c2:09:e7:46:dc:87:73:17:7a:95:af:ed:23:6d:66:
         99:83:39:c7:5e:07:24:60:5b:d6:f0:0a:ea:26:f2:42:25:ed:
         bd:7d:ca:4e:20:22:d8:83:96:ba:92:93:d8:da:2b:24:dd:68:
         be:4d:11:3f:0e:9c:ed:52:9a:24:b5:28:60:28:a7:86:37:ea:
         1b:32:87:43:75:a8:ba:e1:50:19:35:57:33:c1:be:ea:44:b9:
         df:d5:13:32:fc:5f:c5:13:89:0a:34:c4:92:0b:2e:99:14:d4:
         21:98:83:48:76:6e:27:a9:98:7f:44:bd:84:8a:ca:68:52:b7:
         9d:68:20:6a:40:56:b5:a4:9a:f2:16:fb:2f:56:60:82:2a:f0:
         a0:15:3f:61:3e:a7:5d:24:7d:1e:c4:95:83:94:77:d9:b8:cb:
         f3:a6:3b:c6:2d:55:93:16:f3:14:28:aa:8b:8f:2a:8e:05:0a:
         f9:1f:78:de:b6:1e:4f:c0:01:52:8f:fa:7f:d2:28:f2:22:b2:
         0e:ce:a2:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 10:04:18 2026 by rpki-client