This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/4455cb29-5276-4a79-b33a-cc51517bdd18/0/6886844AB176920850E0984917E9713667D0A025.mft
File:                     6886844AB176920850E0984917E9713667D0A025.mft (raw, json)
Hash identifier:          hL58uQzLzAw90F0oHtvt3W76stgZAKBgSBRJsl0+Q0w=
Subject key identifier:   B5:3F:00:95:F5:A7:97:D3:F7:96:95:77:BA:68:2B:C4:12:F2:C1:7E
Authority key identifier: 68:86:84:4A:B1:76:92:08:50:E0:98:49:17:E9:71:36:67:D0:A0:25
Certificate issuer:       /CN=6886844AB176920850E0984917E9713667D0A025
Certificate serial:       6ABF1D6724C3556C9EA4A42D015CAAF0737C6F4A
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6886844AB176920850E0984917E9713667D0A025.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/4455cb29-5276-4a79-b33a-cc51517bdd18/0/6886844AB176920850E0984917E9713667D0A025.mft
Manifest number:          0201
Signing time:             Sat 31 Jan 2026 23:02:25 +0000
Manifest this update:     Sat 31 Jan 2026 22:57:25 +0000
Manifest next update:     Wed 04 Feb 2026 03:12:25 +0000
Files and hashes:         1: 6886844AB176920850E0984917E9713667D0A025.crl (hash: IsGH1xLQa471drA8wUyQf/J79blR/Mke6QbGiF93ljE=)
                          2: 3130332e35312e3130372e302f32342d3234203d3e20313337323839.roa (hash: 9EmMFN9j1NU/nvOY8wiv0XwdZICwg892ouExOsJJt8g=)
                          3: 3130332e35312e3130362e302f32332d3233203d3e20313337323839.roa (hash: DIUdo24NgyOlqJkMr4yBSWfhyJtglfGHEA0tVVMrxoY=)
                          4: 3130332e35312e3130362e302f32342d3234203d3e20313337323839.roa (hash: oHaPvJW9wiPw6s3g8J+9ty85JMlTJ8ChGgOpurTLBaY=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/4455cb29-5276-4a79-b33a-cc51517bdd18/0/6886844AB176920850E0984917E9713667D0A025.crl
                          rsync://repo-rpki.idnic.net/repo/4455cb29-5276-4a79-b33a-cc51517bdd18/0/6886844AB176920850E0984917E9713667D0A025.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6886844AB176920850E0984917E9713667D0A025.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 04 Feb 2026 03:12:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:bf:1d:67:24:c3:55:6c:9e:a4:a4:2d:01:5c:aa:f0:73:7c:6f:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6886844AB176920850E0984917E9713667D0A025
        Validity
            Not Before: Jan 31 22:57:25 2026 GMT
            Not After : Feb  4 03:12:25 2026 GMT
        Subject: CN=B53F0095F5A797D3F7969577BA682BC412F2C17E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:a3:d6:c1:6d:6a:6b:64:c6:81:03:b1:65:69:
                    b7:d0:19:c4:8a:e4:62:01:88:c1:c8:0d:77:67:59:
                    17:27:b6:eb:3f:5b:7e:1b:ef:2c:91:54:cb:68:66:
                    fd:4a:0d:ed:7a:4a:4e:49:3c:6c:f1:c9:f4:e1:1f:
                    33:33:3b:b2:35:e9:bf:32:19:b2:77:3c:05:51:05:
                    3d:7f:6d:24:ae:ba:a3:dd:75:96:78:8b:1d:f3:e2:
                    de:e3:05:d4:16:d6:01:0e:0c:6b:cd:aa:82:d1:e4:
                    9c:80:b4:7e:cb:b2:f8:9b:7d:ad:d1:e7:b3:ed:92:
                    c5:5a:95:07:eb:d9:1d:98:e5:57:b8:26:de:6f:8c:
                    5b:ca:4c:a0:bb:53:66:b0:82:d2:e6:51:0c:79:6b:
                    05:31:59:2d:e0:51:d6:38:38:63:72:06:11:a3:31:
                    42:8f:59:fd:7d:17:29:34:06:c6:de:52:85:12:1f:
                    83:67:d0:49:49:13:23:5a:03:de:38:27:4b:f5:54:
                    d4:ea:34:95:a7:60:1a:7e:4b:ce:9a:76:e4:d4:47:
                    bd:48:62:96:2d:9a:cd:22:2c:87:fd:83:1e:6b:ab:
                    95:b6:74:51:d3:df:46:4a:e2:90:63:d4:91:91:b5:
                    1f:75:cc:1e:1f:78:e2:4c:fd:fb:93:ee:52:87:c9:
                    f5:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:3F:00:95:F5:A7:97:D3:F7:96:95:77:BA:68:2B:C4:12:F2:C1:7E
            X509v3 Authority Key Identifier:
                keyid:68:86:84:4A:B1:76:92:08:50:E0:98:49:17:E9:71:36:67:D0:A0:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/4455cb29-5276-4a79-b33a-cc51517bdd18/0/6886844AB176920850E0984917E9713667D0A025.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6886844AB176920850E0984917E9713667D0A025.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4455cb29-5276-4a79-b33a-cc51517bdd18/0/6886844AB176920850E0984917E9713667D0A025.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:ad:a1:bd:8f:c5:87:4f:aa:35:e9:c4:6f:f8:e9:3f:b6:02:
         18:ba:09:01:c8:d9:fd:7c:cb:58:c4:18:68:14:58:8e:3d:b4:
         a9:c5:b9:37:e3:05:06:95:be:99:85:c8:7f:9a:23:84:ef:1c:
         c1:7f:f9:2a:45:24:8a:d3:2c:7c:cd:eb:bd:88:06:41:54:d5:
         b3:83:1f:4f:ec:ea:08:0d:f3:5a:f8:f0:3b:b3:1e:67:b6:ac:
         c5:96:65:d2:05:63:13:a6:aa:4c:f3:6e:4d:1d:87:08:29:71:
         28:5e:9f:a0:bf:ab:41:f7:22:0e:60:29:93:49:f5:ea:56:4c:
         e8:8a:5a:c8:73:75:02:9c:aa:98:b5:1c:0d:34:23:8f:f0:16:
         d1:8c:bf:0a:d4:82:d6:00:ad:ac:c8:ca:8d:99:95:ef:29:3d:
         2c:2b:13:df:fb:3a:58:09:34:b0:84:2e:86:47:a7:b6:31:31:
         42:70:49:85:89:ee:f2:86:8b:cc:e7:76:b6:8d:c0:0b:25:87:
         0e:32:d9:6c:28:16:8a:50:91:38:1e:e8:e8:d3:53:bd:12:3e:
         ec:1f:9b:9b:b5:2d:cb:57:9b:bb:81:21:ee:7f:8d:1c:e8:6f:
         78:e4:0b:93:fa:50:91:ec:16:d6:e7:65:65:0e:51:0a:01:58:
         87:ca:6f:c1
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUar8dZyTDVWyepKQtAVyq8HN8b0owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjg4Njg0NEFCMTc2OTIwODUwRTA5ODQ5MTdFOTcxMzY2
N0QwQTAyNTAeFw0yNjAxMzEyMjU3MjVaFw0yNjAyMDQwMzEyMjVaMDMxMTAvBgNV
BAMTKEI1M0YwMDk1RjVBNzk3RDNGNzk2OTU3N0JBNjgyQkM0MTJGMkMxN0UwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuo9bBbWprZMaBA7FlabfQGcSK
5GIBiMHIDXdnWRcntus/W34b7yyRVMtoZv1KDe16Sk5JPGzxyfThHzMzO7I16b8y
GbJ3PAVRBT1/bSSuuqPddZZ4ix3z4t7jBdQW1gEODGvNqoLR5JyAtH7Lsvibfa3R
57PtksValQfr2R2Y5Ve4Jt5vjFvKTKC7U2awgtLmUQx5awUxWS3gUdY4OGNyBhGj
MUKPWf19Fyk0BsbeUoUSH4Nn0ElJEyNaA944J0v1VNTqNJWnYBp+S86aduTUR71I
YpYtms0iLIf9gx5rq5W2dFHT30ZK4pBj1JGRtR91zB4feOJM/fuT7lKHyfVLAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUtT8AlfWnl9P3lpV3umgrxBLywX4wHwYDVR0j
BBgwFoAUaIaESrF2kghQ4JhJF+lxNmfQoCUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80
NDU1Y2IyOS01Mjc2LTRhNzktYjMzYS1jYzUxNTE3YmRkMTgvMC82ODg2ODQ0QUIx
NzY5MjA4NTBFMDk4NDkxN0U5NzEzNjY3RDBBMDI1LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNjg4Njg0NEFCMTc2OTIwODUwRTA5ODQ5MTdFOTcxMzY2N0Qw
QTAyNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDQ1NWNiMjktNTI3Ni00YTc5LWIz
M2EtY2M1MTUxN2JkZDE4LzAvNjg4Njg0NEFCMTc2OTIwODUwRTA5ODQ5MTdFOTcx
MzY2N0QwQTAyNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAHutob2PxYdPqjXpxG/46T+2Ahi6CQHI2f18
y1jEGGgUWI49tKnFuTfjBQaVvpmFyH+aI4TvHMF/+SpFJIrTLHzN672IBkFU1bOD
H0/s6ggN81r48DuzHme2rMWWZdIFYxOmqkzzbk0dhwgpcShen6C/q0H3Ig5gKZNJ
9epWTOiKWshzdQKcqpi1HA00I4/wFtGMvwrUgtYArazIyo2Zle8pPSwrE9/7OlgJ
NLCELoZHp7YxMUJwSYWJ7vKGi8zndraNwAslhw4y2WwoFopQkTge6OjTU70SPuwf
m5u1LctXm7uBIe5/jRzob3jkC5P6UJHsFtbnZWUOUQoBWIfKb8E=
-----END CERTIFICATE-----
Generated at Mon Feb 2 10:06:56 2026 by rpki-client