This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/46c06455-15c0-4f3d-813b-c07bef78f025/0/7CE8AFBA81B9A4E0B167449B4A9CA69B8873C32C.mft
File:                     7CE8AFBA81B9A4E0B167449B4A9CA69B8873C32C.mft (raw, json)
Hash identifier:          YXlkwjuiKNaO0vup81aohFmPLl5KI06u8R4wU4gVau4=
Subject key identifier:   14:8B:80:BA:75:80:CF:CE:71:38:C8:9E:5F:BB:6D:59:4D:40:B4:CF
Authority key identifier: 7C:E8:AF:BA:81:B9:A4:E0:B1:67:44:9B:4A:9C:A6:9B:88:73:C3:2C
Certificate issuer:       /CN=7CE8AFBA81B9A4E0B167449B4A9CA69B8873C32C
Certificate serial:       677F7672EC07BBCA96377E938EB61DE07757E209
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7CE8AFBA81B9A4E0B167449B4A9CA69B8873C32C.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/46c06455-15c0-4f3d-813b-c07bef78f025/0/7CE8AFBA81B9A4E0B167449B4A9CA69B8873C32C.mft
Manifest number:          77
Signing time:             Sun 01 Feb 2026 18:22:20 +0000
Manifest this update:     Sun 01 Feb 2026 18:17:20 +0000
Manifest next update:     Thu 05 Feb 2026 02:07:20 +0000
Files and hashes:         1: 7CE8AFBA81B9A4E0B167449B4A9CA69B8873C32C.crl (hash: MZ2+YFDSkJhJBhnOkiUYM21dbjQmch0lwqTXpyZc7Uk=)
                          2: 3130332e38332e3130302e302f32332d3234203d3e20313336303633.roa (hash: tP6gwHOQztpWiI7KNt68kDqlO1nwIWP+n+KVb4rQ1p0=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/46c06455-15c0-4f3d-813b-c07bef78f025/0/7CE8AFBA81B9A4E0B167449B4A9CA69B8873C32C.crl
                          rsync://repo-rpki.idnic.net/repo/46c06455-15c0-4f3d-813b-c07bef78f025/0/7CE8AFBA81B9A4E0B167449B4A9CA69B8873C32C.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7CE8AFBA81B9A4E0B167449B4A9CA69B8873C32C.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 05 Feb 2026 02:07:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:7f:76:72:ec:07:bb:ca:96:37:7e:93:8e:b6:1d:e0:77:57:e2:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CE8AFBA81B9A4E0B167449B4A9CA69B8873C32C
        Validity
            Not Before: Feb  1 18:17:20 2026 GMT
            Not After : Feb  5 02:07:20 2026 GMT
        Subject: CN=148B80BA7580CFCE7138C89E5FBB6D594D40B4CF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:a8:fd:71:a6:9d:cf:60:41:8c:1a:b9:b8:58:
                    ec:18:e2:03:1b:74:51:67:5b:f3:07:38:b9:04:d0:
                    32:8d:2b:c2:28:b4:66:76:d3:29:04:5b:5f:52:3f:
                    ff:c8:b2:dc:bb:c4:8d:7c:b1:ae:b3:e6:b7:07:aa:
                    93:72:0a:d7:2e:f8:70:ff:bb:ed:80:db:89:46:71:
                    df:5d:48:2e:42:c0:eb:d7:a9:be:97:15:a6:40:a5:
                    2a:9f:38:3f:1d:d7:af:12:71:15:38:19:55:43:3d:
                    e7:42:5f:43:cb:0f:3e:62:87:77:0d:7b:5d:b6:cb:
                    4f:c1:74:44:f1:96:51:7c:72:4f:10:49:8d:af:64:
                    70:28:73:35:70:c2:95:a9:e3:bf:15:b7:5d:3d:6e:
                    af:ef:b8:f6:6a:b8:ea:8a:4c:4f:88:2b:01:e5:d4:
                    5a:3c:ec:3c:15:75:c2:83:2c:38:00:dc:0b:05:18:
                    67:4f:a2:97:1f:c4:29:19:a9:62:48:11:d4:bb:86:
                    7d:da:70:b5:67:58:b5:00:99:5f:23:d4:48:b5:c8:
                    cb:ce:df:07:4e:c7:ff:1c:60:c1:79:64:60:2f:e4:
                    50:cb:fb:97:98:8a:27:a8:1f:c0:ad:75:e9:4a:15:
                    de:9e:35:f9:bc:83:2d:64:17:a5:6d:33:14:c6:96:
                    39:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:8B:80:BA:75:80:CF:CE:71:38:C8:9E:5F:BB:6D:59:4D:40:B4:CF
            X509v3 Authority Key Identifier:
                keyid:7C:E8:AF:BA:81:B9:A4:E0:B1:67:44:9B:4A:9C:A6:9B:88:73:C3:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/46c06455-15c0-4f3d-813b-c07bef78f025/0/7CE8AFBA81B9A4E0B167449B4A9CA69B8873C32C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7CE8AFBA81B9A4E0B167449B4A9CA69B8873C32C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/46c06455-15c0-4f3d-813b-c07bef78f025/0/7CE8AFBA81B9A4E0B167449B4A9CA69B8873C32C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:8a:8e:c9:e2:6e:9a:ad:fc:f2:33:e8:a5:d6:36:db:66:37:
         d6:69:43:e4:ba:85:12:05:94:7b:93:df:9e:85:99:ae:b7:68:
         9c:58:5b:b6:24:19:67:89:6f:08:c6:53:74:39:06:6d:8a:cd:
         e6:16:4c:27:81:81:d9:31:82:5c:5c:f7:f4:89:7f:9c:b6:f0:
         be:5b:e2:a8:c1:17:ca:60:f8:b5:52:bb:0c:9d:b5:9f:4a:0e:
         fe:1a:b9:61:13:13:4a:8f:71:81:f8:97:19:4d:e6:9e:9b:53:
         fb:94:04:60:e6:f9:cc:a7:3b:c6:82:45:bd:41:fb:fc:22:40:
         1b:c8:ed:bb:8e:bb:da:8e:8c:0b:86:8f:e1:d4:1a:58:aa:e8:
         f0:f3:1b:fb:94:e7:79:50:8d:26:29:7e:0d:80:8a:3c:35:2f:
         d6:54:d1:fd:e0:a4:fe:21:52:76:94:5e:45:bd:fd:2d:70:d8:
         0a:32:07:fd:61:af:e2:db:ca:5f:2f:f0:b6:f0:42:7e:8d:ad:
         92:68:69:2a:8a:c5:55:94:60:66:46:91:d1:d6:c6:a7:2a:77:
         e4:f5:4b:05:58:16:ea:5d:c3:61:9d:20:b9:31:25:50:c1:f2:
         9c:be:fb:57:68:67:cc:0a:8d:32:08:5c:99:03:62:2f:c8:5b:
         57:d9:05:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 10:05:28 2026 by rpki-client