This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/3c9941a4-28d2-47d1-91e7-acab59084462/0/B16C4772F3D77045BBA997F94CEACA9E0DCC2865.mft
File:                     B16C4772F3D77045BBA997F94CEACA9E0DCC2865.mft (raw, json)
Hash identifier:          rGFvtcmFR1KcUpGALadz7LQcciDagklCuEI9HCizNus=
Subject key identifier:   44:61:E1:9C:BF:69:D1:53:C2:EB:C8:BD:62:43:DA:FF:14:6F:81:5E
Authority key identifier: B1:6C:47:72:F3:D7:70:45:BB:A9:97:F9:4C:EA:CA:9E:0D:CC:28:65
Certificate issuer:       /CN=B16C4772F3D77045BBA997F94CEACA9E0DCC2865
Certificate serial:       1FA9D9ECE3C9212B20B2E5D555E41718F87CD370
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B16C4772F3D77045BBA997F94CEACA9E0DCC2865.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3c9941a4-28d2-47d1-91e7-acab59084462/0/B16C4772F3D77045BBA997F94CEACA9E0DCC2865.mft
Manifest number:          0165
Signing time:             Mon 02 Feb 2026 06:22:04 +0000
Manifest this update:     Mon 02 Feb 2026 06:17:04 +0000
Manifest next update:     Thu 05 Feb 2026 10:47:04 +0000
Files and hashes:         1: B16C4772F3D77045BBA997F94CEACA9E0DCC2865.crl (hash: J2BEOBddc7Z6fm6Bmvn/LCYHD3dqhPSQVTea3qOPvSE=)
                          2: 3138302e3133312e3132392e302f32342d3234203d3e20313532303238.roa (hash: IK3NBrk/iQNskIBya+kx1CnPloRzYziR32FnB/WUNZ4=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/3c9941a4-28d2-47d1-91e7-acab59084462/0/B16C4772F3D77045BBA997F94CEACA9E0DCC2865.crl
                          rsync://repo-rpki.idnic.net/repo/3c9941a4-28d2-47d1-91e7-acab59084462/0/B16C4772F3D77045BBA997F94CEACA9E0DCC2865.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B16C4772F3D77045BBA997F94CEACA9E0DCC2865.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 05 Feb 2026 05:24:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:a9:d9:ec:e3:c9:21:2b:20:b2:e5:d5:55:e4:17:18:f8:7c:d3:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B16C4772F3D77045BBA997F94CEACA9E0DCC2865
        Validity
            Not Before: Feb  2 06:17:04 2026 GMT
            Not After : Feb  5 10:47:04 2026 GMT
        Subject: CN=4461E19CBF69D153C2EBC8BD6243DAFF146F815E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:2f:aa:7e:92:af:4e:ff:08:68:0f:a9:23:77:
                    25:a0:58:b1:87:f7:0a:d9:0c:59:27:4c:51:b3:70:
                    13:03:18:47:52:07:fc:81:51:35:de:c4:23:cb:2b:
                    a4:8c:34:59:1e:67:9a:0f:1a:c8:d6:5c:0b:02:cb:
                    66:38:db:f4:a3:32:41:2f:3c:a2:ee:3f:0a:12:05:
                    53:de:72:9b:8b:aa:03:e3:2e:81:67:58:9e:47:b8:
                    07:77:e5:17:18:4a:e9:68:49:72:1c:8a:70:3b:23:
                    99:40:7e:17:ff:e2:ee:53:5a:af:db:c9:d6:03:5f:
                    89:64:49:d9:17:0c:aa:25:fe:d0:dd:8e:4e:fa:59:
                    bb:ca:bb:e1:ad:ea:fc:ff:a8:23:c5:09:57:6f:0a:
                    47:55:22:49:24:28:a5:dc:2e:07:cc:1e:62:7d:a1:
                    d9:c6:85:9d:73:b4:3f:b6:da:96:5d:c7:9a:dc:7c:
                    1b:31:de:fb:a5:ab:93:39:a8:81:85:7a:12:7c:75:
                    1c:27:7a:6a:32:a7:b9:70:dc:af:ec:e3:c9:41:38:
                    5a:d8:cd:43:4d:d2:8f:a5:92:d6:d0:c3:0d:b4:18:
                    b0:c5:c0:12:7e:4b:aa:69:b8:25:60:48:53:20:0d:
                    63:fd:64:d5:52:5b:b5:02:5c:80:ab:0b:c4:e3:ce:
                    3d:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:61:E1:9C:BF:69:D1:53:C2:EB:C8:BD:62:43:DA:FF:14:6F:81:5E
            X509v3 Authority Key Identifier:
                keyid:B1:6C:47:72:F3:D7:70:45:BB:A9:97:F9:4C:EA:CA:9E:0D:CC:28:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3c9941a4-28d2-47d1-91e7-acab59084462/0/B16C4772F3D77045BBA997F94CEACA9E0DCC2865.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B16C4772F3D77045BBA997F94CEACA9E0DCC2865.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3c9941a4-28d2-47d1-91e7-acab59084462/0/B16C4772F3D77045BBA997F94CEACA9E0DCC2865.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:38:44:ec:00:af:6c:ac:b8:4a:58:0e:13:e0:5f:5e:8a:23:
         f9:00:be:2b:1a:59:96:29:7b:d1:49:1e:0b:36:07:68:51:1f:
         34:90:9d:28:72:2c:e3:6f:27:47:44:f1:d9:5d:0f:37:62:ce:
         d4:60:87:70:0f:2c:c1:d5:6f:90:cb:3f:25:fe:ad:0b:39:5c:
         aa:a0:04:a9:c4:c3:a9:91:5b:1c:67:83:fb:9e:25:23:ef:11:
         cb:88:21:b3:88:a7:96:eb:e4:f2:9a:0a:79:46:a7:a6:7e:d2:
         7b:b0:78:42:85:21:11:e0:0f:52:5f:1f:2f:47:a1:d2:d4:30:
         32:d7:49:be:c0:d2:94:07:5f:47:40:d1:f5:e2:88:24:34:72:
         60:22:4b:bb:fe:7c:14:ea:51:26:0b:2f:1f:48:64:9a:15:25:
         bb:77:d3:6d:fc:ef:b7:7b:31:bd:bc:f3:63:23:fe:66:84:f0:
         68:e4:8a:04:56:b2:f2:84:c7:fa:87:ce:83:4b:69:39:fa:89:
         a6:04:5f:60:63:1e:01:33:67:07:a2:52:e5:d2:4f:33:74:61:
         2d:18:a8:25:3c:74:66:b3:47:77:7d:3f:91:dd:c0:29:7f:98:
         46:71:fc:c3:21:a4:db:79:36:00:d9:93:40:6a:79:ff:48:af:
         5d:5e:53:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 09:44:02 2026 by rpki-client