This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/2d3ed012-afdb-42fb-971a-e162a9dec46d/0/64848BA7A76415C6458AAC267B0A57658022C3C5.mft
File:                     64848BA7A76415C6458AAC267B0A57658022C3C5.mft (raw, json)
Hash identifier:          VD2iEpbQ7Q1+FVOLIVajNm3IH94JPQa72j4kJ4ma+DY=
Subject key identifier:   AA:C3:62:28:D6:9A:FC:47:52:8F:13:12:65:41:85:E4:D4:A2:24:19
Authority key identifier: 64:84:8B:A7:A7:64:15:C6:45:8A:AC:26:7B:0A:57:65:80:22:C3:C5
Certificate issuer:       /CN=64848BA7A76415C6458AAC267B0A57658022C3C5
Certificate serial:       6DF3894159BB868B2D29C3E614E64CC869E433E9
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/64848BA7A76415C6458AAC267B0A57658022C3C5.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/2d3ed012-afdb-42fb-971a-e162a9dec46d/0/64848BA7A76415C6458AAC267B0A57658022C3C5.mft
Manifest number:          02AB
Signing time:             Sun 01 Feb 2026 20:32:20 +0000
Manifest this update:     Sun 01 Feb 2026 20:27:20 +0000
Manifest next update:     Wed 04 Feb 2026 23:30:20 +0000
Files and hashes:         1: 3130332e3137392e36382e302f32342d3234203d3e20313439333337.roa (hash: 3XMqr1SbGGTOsdpLnGk2+GvSMvPb+++c1PWx8+UbJng=)
                          2: 64848BA7A76415C6458AAC267B0A57658022C3C5.crl (hash: g3JPr/ZxiJRfbt8W4y410J49w1y5WYPR3hN9sUeavAY=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/2d3ed012-afdb-42fb-971a-e162a9dec46d/0/64848BA7A76415C6458AAC267B0A57658022C3C5.crl
                          rsync://repo-rpki.idnic.net/repo/2d3ed012-afdb-42fb-971a-e162a9dec46d/0/64848BA7A76415C6458AAC267B0A57658022C3C5.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/64848BA7A76415C6458AAC267B0A57658022C3C5.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 04 Feb 2026 23:30:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:f3:89:41:59:bb:86:8b:2d:29:c3:e6:14:e6:4c:c8:69:e4:33:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64848BA7A76415C6458AAC267B0A57658022C3C5
        Validity
            Not Before: Feb  1 20:27:20 2026 GMT
            Not After : Feb  4 23:30:20 2026 GMT
        Subject: CN=AAC36228D69AFC47528F1312654185E4D4A22419
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:de:80:8a:60:3a:5e:05:c5:e1:ab:a3:9a:86:
                    f1:01:fa:1d:41:09:23:4d:95:ca:08:54:62:5f:7f:
                    de:7b:c6:5f:68:82:07:d3:64:40:46:b2:27:ea:20:
                    e7:75:2a:32:95:b3:f0:3b:af:a7:57:17:64:84:d7:
                    a9:01:42:9b:b7:18:f0:0b:b8:8c:ac:09:42:bf:8a:
                    3f:86:c5:21:7d:d8:8b:9f:3a:62:3b:46:04:1f:4a:
                    64:7e:0c:d5:aa:68:5a:15:8c:3b:a6:71:66:25:a8:
                    28:01:f2:2a:93:20:00:ca:4d:73:7d:a5:ee:a1:28:
                    31:8c:50:d8:b1:cc:06:2d:c0:26:f7:bb:43:1b:a0:
                    24:58:51:f8:3f:c3:70:33:be:53:b3:c9:22:42:b1:
                    e6:18:e1:fe:a1:4f:02:8d:b9:9f:db:84:66:f5:3b:
                    a0:65:0d:84:b8:0d:b8:fe:6b:c7:ba:1c:60:19:8c:
                    4b:4e:80:0c:70:47:de:9a:c4:be:71:81:71:d8:dc:
                    de:59:81:58:35:d7:18:4f:51:37:6d:fb:61:be:25:
                    5e:a7:b3:3c:2b:a3:86:47:f3:72:27:cf:41:7a:24:
                    2f:b5:47:13:ea:61:8f:af:3a:42:77:69:23:28:18:
                    3e:d2:7e:e7:c7:ef:83:fb:fb:d4:5c:a2:27:c6:1d:
                    07:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:C3:62:28:D6:9A:FC:47:52:8F:13:12:65:41:85:E4:D4:A2:24:19
            X509v3 Authority Key Identifier:
                keyid:64:84:8B:A7:A7:64:15:C6:45:8A:AC:26:7B:0A:57:65:80:22:C3:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/2d3ed012-afdb-42fb-971a-e162a9dec46d/0/64848BA7A76415C6458AAC267B0A57658022C3C5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/64848BA7A76415C6458AAC267B0A57658022C3C5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2d3ed012-afdb-42fb-971a-e162a9dec46d/0/64848BA7A76415C6458AAC267B0A57658022C3C5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:87:53:06:40:75:da:a6:ff:ed:0b:49:fd:c2:b2:ee:65:66:
         6e:e9:49:fc:2e:10:53:2c:55:85:d8:56:ec:b6:e9:34:d8:72:
         80:46:b2:c2:e1:93:7a:20:07:88:a2:5b:04:e1:09:52:81:ec:
         7b:fb:22:07:c3:6f:db:ee:b8:d5:f9:bf:99:27:a1:27:9c:44:
         29:34:09:1a:70:fb:ec:7a:35:4c:03:82:02:cb:79:7a:e3:8f:
         b6:a4:2e:0e:3e:a7:e4:32:46:51:ce:71:f3:00:a4:18:c3:e5:
         cb:e3:9c:22:52:3e:a2:44:7d:74:0c:03:e7:12:19:7d:8f:a0:
         a3:0b:2b:3b:b3:95:d0:2f:c2:09:25:a1:0b:47:9d:27:9d:24:
         30:0b:28:00:16:d1:9e:4b:64:22:50:e3:93:8c:93:aa:55:88:
         9d:0b:c7:80:30:2a:49:d5:e1:52:6c:99:ec:3e:12:44:94:43:
         81:03:45:52:8d:56:9e:53:1b:90:15:b6:2f:3a:41:b6:bf:4e:
         2e:cb:f3:4c:11:d1:a0:20:bb:96:ec:c3:ad:40:20:8e:b4:86:
         00:3f:1f:4d:95:9e:e3:75:1f:f0:d3:d5:16:86:c5:d8:11:68:
         b2:98:12:aa:54:fd:e8:15:60:87:92:30:51:3f:bf:0a:01:49:
         d4:e2:e8:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 09:42:09 2026 by rpki-client