This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/2c326f4e-6605-496a-b9f8-d6e77b29bcc6/0/667078BDA093F84040F3016D179CABA67F68A647.mft
File:                     667078BDA093F84040F3016D179CABA67F68A647.mft (raw, json)
Hash identifier:          sfBiF8vNHb9999agAer2sjluIyKqNs1uYQIxhpAFqzg=
Subject key identifier:   16:F8:02:E5:E9:72:EE:D3:C4:0A:48:68:D3:60:FF:9F:B4:97:95:46
Authority key identifier: 66:70:78:BD:A0:93:F8:40:40:F3:01:6D:17:9C:AB:A6:7F:68:A6:47
Certificate issuer:       /CN=667078BDA093F84040F3016D179CABA67F68A647
Certificate serial:       04EA6486AE6C99F6CD6B82E2F5E066D585059962
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/667078BDA093F84040F3016D179CABA67F68A647.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/2c326f4e-6605-496a-b9f8-d6e77b29bcc6/0/667078BDA093F84040F3016D179CABA67F68A647.mft
Manifest number:          02F2
Signing time:             Sun 01 Feb 2026 10:01:34 +0000
Manifest this update:     Sun 01 Feb 2026 09:56:34 +0000
Manifest next update:     Wed 04 Feb 2026 20:22:34 +0000
Files and hashes:         1: 3230322e35322e3134302e302f32332d3233203d3e203436303631.roa (hash: OsKe0Kd5H+cGfVTzKHXPxDzQtoqEpS1qzPCWtVfHK8o=)
                          2: 3230322e35322e3134302e302f32342d3234203d3e203436303631.roa (hash: IHCCAgl8I2RtthVlx/101ymvDPNvq6bpd64iBZCpSWQ=)
                          3: 3130332e32342e37322e302f32342d3234203d3e203436303631.roa (hash: HbKwsuQgYC8kyv50M23w4h1WaGyYUtMgukyV/PzUlcs=)
                          4: 3230322e35322e3134312e302f32342d3234203d3e203436303631.roa (hash: Rpp4YpehQ1M+h6emtzM5wkYph2BpAIpQDGT9zp1ts2M=)
                          5: 3130332e32342e37332e302f32342d3234203d3e203436303631.roa (hash: CFm8UxOFUNv/+ECnjHOC47sfC3C4NJroGuyfEm+9/Ds=)
                          6: 3130332e32342e37352e302f32342d3234203d3e203436303631.roa (hash: Ix+R/yfCu9YeIQiklNVMKU4ccTsIM4M8qCqs+sb4ZL0=)
                          7: 3130332e32342e37342e302f32342d3234203d3e203436303631.roa (hash: p1IlE+POO9hCFBImJs4SWaLDjBIhdLsxh8yaBGtXhAg=)
                          8: 3130332e32342e37342e302f32332d3233203d3e203436303631.roa (hash: W5Ot0BBUNk5NFwRYk7ap1jPaT+1meSB0kfyCkhd5n7I=)
                          9: 323430303a656134303a3a2f33322d3332203d3e203436303631.roa (hash: 2pAFw4pCfgppnXNzn4U9fVaUZRHA5FxGk6QsaeCqBJY=)
                          10: 667078BDA093F84040F3016D179CABA67F68A647.crl (hash: jk4vLfy9EMzXzjkP9fIo7bs0xGL/Ha0H3CPZCAHQfic=)
                          11: 3130332e32342e37322e302f32332d3233203d3e203436303631.roa (hash: 4EhIBVtTUnA2NsufqUE56qVJQ8W9fy5ksrwQzL7c16E=)
                          12: 3130332e32342e37322e302f32322d3232203d3e203436303631.roa (hash: yr0MNMuQ/IlUxBG9BJkWSvncA4WzNuZMrgeTlRsfQrw=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/2c326f4e-6605-496a-b9f8-d6e77b29bcc6/0/667078BDA093F84040F3016D179CABA67F68A647.crl
                          rsync://repo-rpki.idnic.net/repo/2c326f4e-6605-496a-b9f8-d6e77b29bcc6/0/667078BDA093F84040F3016D179CABA67F68A647.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/667078BDA093F84040F3016D179CABA67F68A647.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 04 Feb 2026 20:22:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:ea:64:86:ae:6c:99:f6:cd:6b:82:e2:f5:e0:66:d5:85:05:99:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=667078BDA093F84040F3016D179CABA67F68A647
        Validity
            Not Before: Feb  1 09:56:34 2026 GMT
            Not After : Feb  4 20:22:34 2026 GMT
        Subject: CN=16F802E5E972EED3C40A4868D360FF9FB4979546
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:13:7b:e1:30:16:c7:ae:a4:9d:f0:b7:e0:5b:
                    b7:c6:ec:99:cd:a0:89:1c:c0:8f:e9:a5:b8:7f:b1:
                    26:5b:07:8d:91:cd:46:3a:8b:28:e2:f2:e1:77:0e:
                    37:18:a4:83:98:5d:07:0f:d8:77:dc:a4:f4:61:12:
                    98:3c:ec:68:82:14:56:2d:d4:64:61:fe:74:6f:04:
                    d9:17:d0:ac:64:14:b2:bd:66:ff:7f:25:e4:9e:d7:
                    7b:71:78:9e:61:50:78:31:a6:91:fa:83:69:cc:c6:
                    b2:e6:42:57:22:93:8f:22:d5:05:6e:fe:7f:47:3b:
                    0d:9d:d5:1f:b3:7f:26:42:9e:4b:c4:8e:49:61:27:
                    f1:e3:45:ac:81:81:b1:c6:b8:1e:f2:d8:85:4f:2c:
                    4a:d9:91:2e:99:8a:b1:61:98:dc:7f:02:c5:96:7a:
                    5c:3b:a2:d9:23:6c:a9:e0:b0:b5:e3:bb:b4:55:28:
                    ca:cd:a4:7b:c3:1c:ba:e4:73:2f:60:b9:e0:94:a7:
                    08:a6:1b:cc:b5:b8:59:bc:a1:cb:10:3b:9d:c8:84:
                    80:f1:40:f1:00:47:7f:f5:8b:97:ff:ba:e4:6b:41:
                    16:8d:7a:10:fa:d4:91:30:bb:f6:8f:aa:c2:df:a3:
                    95:c5:5b:25:d3:ea:a1:c3:78:c2:13:29:fe:44:2e:
                    c5:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:F8:02:E5:E9:72:EE:D3:C4:0A:48:68:D3:60:FF:9F:B4:97:95:46
            X509v3 Authority Key Identifier:
                keyid:66:70:78:BD:A0:93:F8:40:40:F3:01:6D:17:9C:AB:A6:7F:68:A6:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/2c326f4e-6605-496a-b9f8-d6e77b29bcc6/0/667078BDA093F84040F3016D179CABA67F68A647.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/667078BDA093F84040F3016D179CABA67F68A647.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2c326f4e-6605-496a-b9f8-d6e77b29bcc6/0/667078BDA093F84040F3016D179CABA67F68A647.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:93:3b:73:3b:16:cb:b9:39:24:40:f5:c8:92:3a:0a:41:23:
         1c:e2:87:f6:67:b1:1a:51:54:f0:f0:aa:1c:21:d7:81:37:d9:
         e4:c2:b7:57:61:c4:67:f1:e5:aa:a0:1a:ae:bf:12:63:2e:f7:
         eb:27:d9:e6:3b:0f:8b:a6:c1:ab:cf:cf:95:24:a8:14:58:5e:
         76:f7:93:07:36:43:ac:3b:62:29:6c:3f:0c:53:7a:25:01:ea:
         6b:16:5b:c4:b5:cf:c0:2b:1e:5f:ea:ff:8d:44:2e:84:62:c9:
         e4:15:48:71:67:54:b1:8e:b8:e9:aa:2c:22:50:49:ef:fc:e2:
         f8:01:92:93:1d:ca:09:b6:fe:ab:c4:de:99:e9:9f:75:cf:e1:
         89:22:94:0d:08:bc:ed:20:80:ad:9d:b7:78:47:e0:8b:04:0a:
         02:eb:41:ae:8b:c4:a8:99:73:9b:b6:39:18:7b:18:10:8f:bf:
         6e:7e:ef:1e:6a:6d:db:1c:b0:5e:b5:a6:73:6f:f2:55:f8:72:
         f9:b4:f9:c7:83:bd:8b:b1:a8:59:cc:ce:3e:de:e3:6e:38:b9:
         99:4d:2e:7d:d7:ca:44:1c:94:29:3d:8d:09:63:46:82:9b:58:
         18:5d:95:36:83:b7:89:66:1e:49:0e:7d:b6:66:45:3e:f6:29:
         bc:cd:55:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 12:48:57 2026 by rpki-client