This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/3cb3b00b-ad7b-4849-b0b2-e249a2fa604a/0/6D3440FA38B51321C8A8FD8136BA70597A8686E0.mft
File:                     6D3440FA38B51321C8A8FD8136BA70597A8686E0.mft (raw, json)
Hash identifier:          ViZGuFbRTyiqygYmVQM6pKobcOTWrw/IShq98ZH8I2s=
Subject key identifier:   F8:A3:EB:68:F0:01:6C:3B:F4:51:9F:3D:E7:23:17:7D:BF:C3:F2:26
Authority key identifier: 6D:34:40:FA:38:B5:13:21:C8:A8:FD:81:36:BA:70:59:7A:86:86:E0
Certificate issuer:       /CN=6D3440FA38B51321C8A8FD8136BA70597A8686E0
Certificate serial:       598CE5676A1A68A315470F1ECE6207F75041BA20
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6D3440FA38B51321C8A8FD8136BA70597A8686E0.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3cb3b00b-ad7b-4849-b0b2-e249a2fa604a/0/6D3440FA38B51321C8A8FD8136BA70597A8686E0.mft
Manifest number:          01BE
Signing time:             Sun 01 Feb 2026 12:40:41 +0000
Manifest this update:     Sun 01 Feb 2026 12:35:41 +0000
Manifest next update:     Wed 04 Feb 2026 21:02:41 +0000
Files and hashes:         1: 3130332e3136302e3139332e302f32342d3234203d3e20313530353433.roa (hash: 4Rc4ZkmdbbdveQiTO9ywjy41ILEiG5tUChzvFR34zXM=)
                          2: 6D3440FA38B51321C8A8FD8136BA70597A8686E0.crl (hash: TU98pU3WjiHVXbK1SZITic3fVQIz4MFT+3Ep3JPos1A=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/3cb3b00b-ad7b-4849-b0b2-e249a2fa604a/0/6D3440FA38B51321C8A8FD8136BA70597A8686E0.crl
                          rsync://repo-rpki.idnic.net/repo/3cb3b00b-ad7b-4849-b0b2-e249a2fa604a/0/6D3440FA38B51321C8A8FD8136BA70597A8686E0.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6D3440FA38B51321C8A8FD8136BA70597A8686E0.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 04 Feb 2026 21:02:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:8c:e5:67:6a:1a:68:a3:15:47:0f:1e:ce:62:07:f7:50:41:ba:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6D3440FA38B51321C8A8FD8136BA70597A8686E0
        Validity
            Not Before: Feb  1 12:35:41 2026 GMT
            Not After : Feb  4 21:02:41 2026 GMT
        Subject: CN=F8A3EB68F0016C3BF4519F3DE723177DBFC3F226
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:62:5c:be:40:f5:e5:6a:b2:a6:60:83:a2:71:
                    e3:ba:46:99:25:99:07:2a:6c:7b:aa:01:d3:0a:22:
                    9a:06:bd:d9:35:d0:7a:79:2d:e9:5e:78:d8:96:be:
                    a4:ce:dd:1f:3e:d0:6e:4d:ce:b6:ec:db:0c:ad:2f:
                    f7:6d:a5:ca:03:9b:a7:16:0f:05:05:42:09:e5:ee:
                    2d:84:87:e5:2e:e9:8b:55:8d:ed:ee:94:69:19:2c:
                    79:c4:68:ec:02:f1:d5:0c:bf:81:80:e7:e7:a4:50:
                    a7:82:65:c0:4a:c8:cc:8b:72:d1:f7:b1:b2:49:1c:
                    0c:54:5c:b5:f9:97:2b:1d:80:f3:4e:94:c3:d2:06:
                    3a:ac:e0:83:6b:cd:c8:02:11:8f:07:13:5a:d5:b7:
                    ca:22:f7:1e:7b:f7:57:45:33:75:0d:8e:98:3a:28:
                    70:34:b9:0a:67:bf:1d:d6:92:98:85:9a:51:26:99:
                    1b:3c:28:f1:ba:d4:d0:78:e4:ac:bc:4f:fa:08:10:
                    3c:7a:2a:90:38:0f:4a:53:67:66:05:bd:57:8f:da:
                    aa:42:de:4b:c9:08:59:58:b6:bb:4a:c6:de:70:69:
                    73:62:78:bf:34:f5:3f:f5:7a:fc:98:22:fa:64:4d:
                    d8:40:9b:ab:d7:77:4d:8a:db:23:ad:25:b6:64:bc:
                    91:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:A3:EB:68:F0:01:6C:3B:F4:51:9F:3D:E7:23:17:7D:BF:C3:F2:26
            X509v3 Authority Key Identifier:
                keyid:6D:34:40:FA:38:B5:13:21:C8:A8:FD:81:36:BA:70:59:7A:86:86:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3cb3b00b-ad7b-4849-b0b2-e249a2fa604a/0/6D3440FA38B51321C8A8FD8136BA70597A8686E0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6D3440FA38B51321C8A8FD8136BA70597A8686E0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3cb3b00b-ad7b-4849-b0b2-e249a2fa604a/0/6D3440FA38B51321C8A8FD8136BA70597A8686E0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:36:29:da:6f:3b:98:b9:4c:d0:39:8c:ac:53:2a:f5:27:c9:
         0b:94:84:1b:8e:8f:02:6d:39:e4:35:48:3a:51:cd:82:4a:5e:
         dc:e8:b7:f0:0f:93:c7:89:a7:8e:e8:ac:8d:88:2f:c4:55:75:
         6c:25:1c:42:2a:1b:a5:04:de:3f:9d:e2:f3:92:bb:55:a2:b7:
         37:97:a9:03:c9:ef:41:ec:bd:95:2c:fd:0f:40:cd:5a:5c:75:
         be:35:1e:33:56:55:db:77:25:96:e1:7a:07:c3:5a:a5:77:70:
         77:5b:40:0b:08:35:7c:b5:b0:25:dc:fb:8e:06:f2:f6:cc:1a:
         32:10:7a:03:80:79:e1:f2:e3:d1:ed:9e:74:6e:2a:f9:12:36:
         d2:72:59:5c:3e:b2:41:cd:e8:fd:37:2e:74:99:4d:67:54:73:
         87:14:93:cf:72:9a:5f:61:ba:7a:e9:9a:6b:1c:f0:b1:2f:4d:
         70:f3:68:6b:6c:51:ba:2e:62:6a:67:8c:a6:18:e7:dd:8c:c5:
         d2:9a:4f:d4:97:ba:bf:65:25:c2:c6:f0:ac:56:94:f3:21:13:
         6c:8c:c0:5e:6b:08:f1:02:2d:fe:ff:c8:38:df:b9:75:15:74:
         2c:61:21:55:3f:f7:e5:98:95:b3:07:99:bb:65:d7:2e:da:de:
         9c:be:65:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 09:55:13 2026 by rpki-client