This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/4d79e7a7-1aae-4e52-bac3-8f7c67ae0a04/0/A9CC42A05B0D6CA37960F7C2ABE4B464DB56ACAC.mft
File:                     A9CC42A05B0D6CA37960F7C2ABE4B464DB56ACAC.mft (raw, json)
Hash identifier:          KdWgtqfA7k6ylytSN3dvvDF7gxv6jqkYGaZm5/X8bqE=
Subject key identifier:   AB:B3:64:C7:3D:30:B5:68:F4:52:B0:FF:CB:8C:D1:E8:30:BE:88:17
Authority key identifier: A9:CC:42:A0:5B:0D:6C:A3:79:60:F7:C2:AB:E4:B4:64:DB:56:AC:AC
Certificate issuer:       /CN=A9CC42A05B0D6CA37960F7C2ABE4B464DB56ACAC
Certificate serial:       315D6712AA5D9999E6D4B9FDDC1156D7A6789815
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9CC42A05B0D6CA37960F7C2ABE4B464DB56ACAC.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/4d79e7a7-1aae-4e52-bac3-8f7c67ae0a04/0/A9CC42A05B0D6CA37960F7C2ABE4B464DB56ACAC.mft
Manifest number:          01A9
Signing time:             Mon 02 Feb 2026 04:10:54 +0000
Manifest this update:     Mon 02 Feb 2026 04:05:54 +0000
Manifest next update:     Thu 05 Feb 2026 12:03:54 +0000
Files and hashes:         1: 3130332e3137382e3132352e302f32342d3234203d3e20313432333839.roa (hash: ilMD0aviEA5kSo/dnNu6/R96mI+Z9NJcdnN/AEMlT/M=)
                          2: A9CC42A05B0D6CA37960F7C2ABE4B464DB56ACAC.crl (hash: KK2zULP63WxXh07Jisb5Xhrj1h2NgaImYNlUsCP5nIg=)
                          3: 3130332e3137322e3134342e302f32342d3234203d3e20313432333839.roa (hash: qBrcbMMaUPDoizuNAU1KWwXnEqXPWGKnlLdZXE+PUUw=)
                          4: 323030313a6466323a383163303a3a2f34382d3438203d3e20313432333839.roa (hash: DlmZqT9cRSAGh3ZKnjImJtnnzdBwP1WDpr4Ot8v2wkw=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/4d79e7a7-1aae-4e52-bac3-8f7c67ae0a04/0/A9CC42A05B0D6CA37960F7C2ABE4B464DB56ACAC.crl
                          rsync://repo-rpki.idnic.net/repo/4d79e7a7-1aae-4e52-bac3-8f7c67ae0a04/0/A9CC42A05B0D6CA37960F7C2ABE4B464DB56ACAC.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9CC42A05B0D6CA37960F7C2ABE4B464DB56ACAC.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 05 Feb 2026 05:24:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:5d:67:12:aa:5d:99:99:e6:d4:b9:fd:dc:11:56:d7:a6:78:98:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9CC42A05B0D6CA37960F7C2ABE4B464DB56ACAC
        Validity
            Not Before: Feb  2 04:05:54 2026 GMT
            Not After : Feb  5 12:03:54 2026 GMT
        Subject: CN=ABB364C73D30B568F452B0FFCB8CD1E830BE8817
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:4a:e3:91:9d:25:b3:e6:97:51:e5:6c:10:99:
                    96:f0:0f:37:bd:d2:84:fb:74:55:15:84:3f:ad:d4:
                    81:16:52:c5:45:55:ff:58:90:d8:f5:36:74:14:53:
                    df:1c:fa:55:6d:73:fc:82:bd:b7:3e:69:26:0f:b5:
                    35:b4:86:02:60:f4:9f:56:9b:77:2f:a1:b3:85:e2:
                    2e:f0:54:08:4d:e6:9a:53:50:16:e5:47:28:f2:35:
                    00:9b:dd:40:a0:75:3b:52:e0:b8:73:c2:5b:ae:ef:
                    8a:99:8d:de:8f:b9:d1:da:20:f1:48:61:ec:5f:a3:
                    60:40:71:70:73:d8:9b:97:80:9a:c7:3d:b7:d4:cf:
                    39:f2:48:2e:85:e1:50:6e:5d:4d:f7:4e:63:9e:af:
                    50:45:7f:dc:cb:41:3c:cb:c3:3f:15:cc:ac:36:5b:
                    93:af:87:a8:63:3b:e7:1e:ab:de:00:15:b6:eb:1e:
                    77:eb:32:d8:b3:36:e1:7c:a6:d1:bd:a2:1a:49:42:
                    68:59:62:75:c6:24:5f:50:cb:47:4f:27:57:63:40:
                    75:a9:b9:7e:87:3e:00:13:32:5f:4a:aa:fb:cf:79:
                    cb:bc:50:bc:5e:b0:9b:78:d4:58:72:5d:1c:aa:aa:
                    c5:f4:2a:f5:bb:c7:e4:bc:28:65:0a:43:b6:1f:21:
                    8f:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:B3:64:C7:3D:30:B5:68:F4:52:B0:FF:CB:8C:D1:E8:30:BE:88:17
            X509v3 Authority Key Identifier:
                keyid:A9:CC:42:A0:5B:0D:6C:A3:79:60:F7:C2:AB:E4:B4:64:DB:56:AC:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/4d79e7a7-1aae-4e52-bac3-8f7c67ae0a04/0/A9CC42A05B0D6CA37960F7C2ABE4B464DB56ACAC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9CC42A05B0D6CA37960F7C2ABE4B464DB56ACAC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4d79e7a7-1aae-4e52-bac3-8f7c67ae0a04/0/A9CC42A05B0D6CA37960F7C2ABE4B464DB56ACAC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:50:53:16:3e:a5:33:9f:0a:5c:92:eb:25:4f:59:f7:66:f7:
         bf:02:e7:f0:c2:03:35:c8:69:21:ca:61:ac:18:6f:1b:31:80:
         7a:0c:11:72:b1:4a:8e:7a:12:56:90:8f:7e:29:cc:1c:07:a0:
         e5:d9:62:ff:27:9a:7d:0d:0c:37:d8:ac:ae:a7:5c:88:87:93:
         bd:45:ed:da:4d:20:ff:2d:c3:30:8a:ea:8a:b2:3c:60:d1:bc:
         26:be:7f:bb:43:86:4f:97:30:a1:ee:be:6c:10:45:aa:23:50:
         45:c5:6e:dc:19:e5:a5:ed:c1:d2:7c:a9:de:ba:32:90:8b:fd:
         d8:1f:18:e3:eb:bd:e0:df:a1:5f:64:f2:aa:3e:a7:55:90:1d:
         ad:ae:9c:49:99:e9:2f:4f:89:30:2a:e2:1f:e8:71:56:f0:8d:
         64:5d:32:21:97:05:27:0d:8c:a0:e9:f4:07:7f:b0:68:b3:40:
         b9:69:e3:31:2e:66:48:49:f7:4d:e8:e7:c2:44:03:c5:cc:1c:
         88:91:07:09:db:31:92:b7:7f:22:6c:d0:8f:4d:86:c3:3b:09:
         fb:90:28:f9:05:4f:d7:7f:00:0b:03:76:56:2c:e6:5a:24:d3:
         f2:63:69:d6:fb:3a:15:74:20:8f:ba:c6:46:bc:dd:dd:16:51:
         e5:b6:11:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 09:42:22 2026 by rpki-client