This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/337e094c-c93b-4d72-b9f2-75b252ab83f9/0/83AA9F8209933310C87D9F85BD2379EACC6108B2.mft
File:                     83AA9F8209933310C87D9F85BD2379EACC6108B2.mft (raw, json)
Hash identifier:          Ro1S+XImjQULeFr89dx0GmALp+Rgd0RetBe3imMrPJY=
Subject key identifier:   CF:87:23:29:18:78:CF:09:03:EA:44:AE:CB:6E:C7:B3:90:7A:B8:7F
Authority key identifier: 83:AA:9F:82:09:93:33:10:C8:7D:9F:85:BD:23:79:EA:CC:61:08:B2
Certificate issuer:       /CN=83AA9F8209933310C87D9F85BD2379EACC6108B2
Certificate serial:       49BD118B45A01C56A58A4D63CA5F153E223022F6
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/83AA9F8209933310C87D9F85BD2379EACC6108B2.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/337e094c-c93b-4d72-b9f2-75b252ab83f9/0/83AA9F8209933310C87D9F85BD2379EACC6108B2.mft
Manifest number:          0171
Signing time:             Sun 01 Feb 2026 21:31:14 +0000
Manifest this update:     Sun 01 Feb 2026 21:26:14 +0000
Manifest next update:     Thu 05 Feb 2026 01:44:14 +0000
Files and hashes:         1: 83AA9F8209933310C87D9F85BD2379EACC6108B2.crl (hash: GyZ1e1URGoOUfGZe/7dD+g1f2IX+as//Q9U1qBLNO/8=)
                          2: 3130332e3138392e3139372e302f32342d3234203d3e20313439393132.roa (hash: /9PZtxYTnuYAjZ8V+irC2Dshf64qaJaF9/SVuE03VjY=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/337e094c-c93b-4d72-b9f2-75b252ab83f9/0/83AA9F8209933310C87D9F85BD2379EACC6108B2.crl
                          rsync://repo-rpki.idnic.net/repo/337e094c-c93b-4d72-b9f2-75b252ab83f9/0/83AA9F8209933310C87D9F85BD2379EACC6108B2.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/83AA9F8209933310C87D9F85BD2379EACC6108B2.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 05 Feb 2026 01:44:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:bd:11:8b:45:a0:1c:56:a5:8a:4d:63:ca:5f:15:3e:22:30:22:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83AA9F8209933310C87D9F85BD2379EACC6108B2
        Validity
            Not Before: Feb  1 21:26:14 2026 GMT
            Not After : Feb  5 01:44:14 2026 GMT
        Subject: CN=CF8723291878CF0903EA44AECB6EC7B3907AB87F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:2f:9b:16:22:c6:34:7a:8b:eb:8f:37:13:db:
                    96:af:42:c8:93:45:57:78:a7:73:29:88:fa:34:2d:
                    b6:56:c2:78:cf:57:5d:fc:f8:ed:2d:cc:94:9c:2a:
                    5e:cc:d6:e1:01:89:b6:6c:74:46:6d:b2:0b:5e:d6:
                    6c:ed:d8:da:0b:f2:8a:cc:9c:35:cd:3d:f7:09:d9:
                    75:08:a4:ed:09:41:e1:6c:d8:0d:5e:3b:6e:6f:ea:
                    a3:f1:91:23:f9:67:7b:fc:58:83:0c:1f:41:eb:ad:
                    94:76:fe:84:a9:b0:62:4b:5c:82:0f:3f:84:9c:db:
                    4f:1b:d9:35:1d:4d:d9:4f:7c:94:90:d2:4c:e1:dd:
                    98:7e:2f:96:18:fd:dc:7e:c3:4d:ee:55:8e:8b:23:
                    40:05:b7:5e:e6:66:ec:22:16:1a:c5:d2:a9:85:64:
                    e7:9e:3d:d9:60:59:30:4c:b2:0a:0d:8d:00:a8:35:
                    9c:68:bf:76:0c:2a:7d:0b:76:2b:bf:91:bd:b8:12:
                    02:8f:fb:69:c8:91:6f:1c:03:a7:f0:dd:85:66:b9:
                    c7:c2:f0:ff:91:0d:aa:00:a5:d2:a3:85:5b:da:06:
                    0a:d2:78:09:dd:0d:d0:07:3d:10:43:4a:8f:0f:b7:
                    70:86:fc:81:34:c0:fa:6f:35:ac:83:dc:f4:a1:7d:
                    51:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:87:23:29:18:78:CF:09:03:EA:44:AE:CB:6E:C7:B3:90:7A:B8:7F
            X509v3 Authority Key Identifier:
                keyid:83:AA:9F:82:09:93:33:10:C8:7D:9F:85:BD:23:79:EA:CC:61:08:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/337e094c-c93b-4d72-b9f2-75b252ab83f9/0/83AA9F8209933310C87D9F85BD2379EACC6108B2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/83AA9F8209933310C87D9F85BD2379EACC6108B2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/337e094c-c93b-4d72-b9f2-75b252ab83f9/0/83AA9F8209933310C87D9F85BD2379EACC6108B2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:82:1a:02:5c:84:18:ca:f7:02:dc:d3:4f:e8:84:e8:b9:42:
         fb:ae:14:af:23:e0:26:cc:04:52:b0:85:eb:b8:4e:c9:34:1c:
         e3:06:7e:49:b2:af:11:b0:48:a5:4e:2f:fe:86:07:92:10:6d:
         82:d2:a8:24:f5:8d:05:ea:30:4f:2e:e5:05:34:27:e5:83:3c:
         71:d0:4d:f5:31:93:88:3c:ca:eb:cd:64:e8:80:b3:93:60:a3:
         54:90:c1:d8:0e:c5:53:4a:e3:12:d5:ae:24:48:64:72:5e:61:
         6a:f9:64:55:22:ff:ff:b4:50:a4:c6:62:3e:30:c2:65:a1:e5:
         a7:d8:fe:f6:51:08:da:7e:72:1c:1d:1d:c2:d3:93:38:06:a1:
         3b:cb:99:10:68:26:8c:b5:f6:7e:53:8f:2d:ec:88:8c:c1:4a:
         d9:08:a9:bc:9c:5d:ef:82:9f:1d:4e:94:8d:cc:d1:37:31:b6:
         e5:89:97:75:cb:19:c6:f3:17:22:ac:c0:0e:44:97:49:10:5d:
         89:70:0e:92:43:c9:73:b5:2a:1f:2d:2c:c7:af:b1:fc:60:9a:
         dd:93:e4:31:e8:e0:3f:d1:6c:2b:0d:b2:29:a1:b4:cb:b8:d6:
         9e:6d:77:a5:e4:a7:82:66:3f:78:18:e4:0c:63:89:e8:e8:94:
         65:6c:8c:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 10:05:08 2026 by rpki-client