This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/52880dee-7aa2-4be4-bf35-cdbd11d79507/0/B3F1DAA67709A06561DC9EAC5A8721035EEAAB5B.mft
File:                     B3F1DAA67709A06561DC9EAC5A8721035EEAAB5B.mft (raw, json)
Hash identifier:          w570BCWGjrLGgyEjc1IYCKR/6vNJCeGLC+2oSDjZTV8=
Subject key identifier:   94:CB:5F:19:19:EE:E7:9B:46:64:FC:F0:F9:4A:CA:A8:15:9B:D2:67
Authority key identifier: B3:F1:DA:A6:77:09:A0:65:61:DC:9E:AC:5A:87:21:03:5E:EA:AB:5B
Certificate issuer:       /CN=B3F1DAA67709A06561DC9EAC5A8721035EEAAB5B
Certificate serial:       3354A1F9E69297B81C93703238C257F1D27C9127
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B3F1DAA67709A06561DC9EAC5A8721035EEAAB5B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/52880dee-7aa2-4be4-bf35-cdbd11d79507/0/B3F1DAA67709A06561DC9EAC5A8721035EEAAB5B.mft
Manifest number:          01EA
Signing time:             Sun 01 Feb 2026 09:01:47 +0000
Manifest this update:     Sun 01 Feb 2026 08:56:47 +0000
Manifest next update:     Wed 04 Feb 2026 15:36:47 +0000
Files and hashes:         1: 3230322e35302e3230312e302f32342d3234203d3e203535363936.roa (hash: MNHUQ7QT81FBqRqnX9kj5dwQrczKIpvm9q0UEC4tGfo=)
                          2: 3230322e35302e3230332e302f32342d3234203d3e203535363936.roa (hash: zWOcqVMAcvdgybeg3tAerJss4NCbaURqCYKirXQIAUM=)
                          3: 3230322e35302e3230322e302f32342d3234203d3e203535363936.roa (hash: vBCBJKS7aCOhRSPKU9s9qcUQlRWVnHv7lYT5zRKMFaM=)
                          4: 3230322e35302e3230302e302f32342d3234203d3e203535363936.roa (hash: xDKJWikIXrjRI36b2TRMfKejTlJpDCcq9wjDc5XqCoc=)
                          5: B3F1DAA67709A06561DC9EAC5A8721035EEAAB5B.crl (hash: XAQmzSJ/pdhIy9CZ3xrAVLKxQNMUQAEF6IAs/3evo4Q=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/52880dee-7aa2-4be4-bf35-cdbd11d79507/0/B3F1DAA67709A06561DC9EAC5A8721035EEAAB5B.crl
                          rsync://repo-rpki.idnic.net/repo/52880dee-7aa2-4be4-bf35-cdbd11d79507/0/B3F1DAA67709A06561DC9EAC5A8721035EEAAB5B.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B3F1DAA67709A06561DC9EAC5A8721035EEAAB5B.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 04 Feb 2026 15:36:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:54:a1:f9:e6:92:97:b8:1c:93:70:32:38:c2:57:f1:d2:7c:91:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B3F1DAA67709A06561DC9EAC5A8721035EEAAB5B
        Validity
            Not Before: Feb  1 08:56:47 2026 GMT
            Not After : Feb  4 15:36:47 2026 GMT
        Subject: CN=94CB5F1919EEE79B4664FCF0F94ACAA8159BD267
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:e4:f0:a7:51:8b:e1:f0:f9:a0:eb:9f:49:98:
                    f6:43:ae:b4:1a:06:d6:b0:80:9c:85:83:8e:33:e2:
                    89:a0:5f:b2:81:62:d1:b0:5c:f7:dc:d2:b7:bc:e3:
                    6b:d2:93:96:2f:a1:74:7e:2e:be:96:bb:d1:b3:1e:
                    75:83:63:89:02:e3:27:bb:2e:ea:bc:8e:00:c1:d0:
                    41:da:dd:8d:e2:f9:e8:fe:18:dc:56:ac:fc:4d:03:
                    8a:99:d5:55:42:bf:6f:e2:f6:00:86:d7:d8:5c:36:
                    d2:2f:84:dc:c9:f7:34:e5:5d:94:85:a6:02:14:18:
                    d9:88:e5:7d:cb:59:a7:fc:7e:e5:1e:4c:a6:28:fb:
                    31:04:cf:ca:5d:a0:d0:fc:0a:11:a0:1e:84:fe:e0:
                    51:2b:39:79:3b:cc:0f:a7:07:87:ed:9a:bc:3f:d4:
                    07:01:8c:3b:6c:fb:6f:29:b2:d0:7e:5e:f5:b5:22:
                    8e:0e:9c:ef:14:12:97:e7:1a:f8:1e:34:10:90:0a:
                    fd:1a:e9:47:f1:f6:f7:3f:62:7f:98:d2:50:54:4c:
                    dc:3e:14:c5:69:0d:86:3a:16:19:4d:91:6c:f0:0d:
                    31:7b:71:94:d9:aa:1f:04:6d:b6:34:98:db:d2:a4:
                    82:33:32:12:8d:67:2e:f2:21:8e:7b:ea:ca:01:64:
                    ae:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:CB:5F:19:19:EE:E7:9B:46:64:FC:F0:F9:4A:CA:A8:15:9B:D2:67
            X509v3 Authority Key Identifier:
                keyid:B3:F1:DA:A6:77:09:A0:65:61:DC:9E:AC:5A:87:21:03:5E:EA:AB:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/52880dee-7aa2-4be4-bf35-cdbd11d79507/0/B3F1DAA67709A06561DC9EAC5A8721035EEAAB5B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B3F1DAA67709A06561DC9EAC5A8721035EEAAB5B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/52880dee-7aa2-4be4-bf35-cdbd11d79507/0/B3F1DAA67709A06561DC9EAC5A8721035EEAAB5B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:2a:e1:59:2f:bb:6b:f9:71:5c:0c:3d:7d:55:28:cb:11:e1:
         48:4b:6c:c2:1a:7d:2d:a0:08:c9:46:10:20:83:84:50:53:99:
         1b:8a:b2:18:e0:ff:04:1f:b9:00:5f:96:20:9b:aa:1e:65:74:
         3c:fe:95:1e:9b:b7:2d:47:c9:b7:24:c6:fa:e3:94:12:98:b7:
         3e:97:cb:5d:39:1f:f2:e5:17:1a:4f:67:97:ae:ee:81:23:7d:
         74:0b:9a:fc:40:b3:47:38:65:07:a0:4d:d9:81:68:3e:a9:dd:
         a8:50:25:f3:f4:c1:e0:11:0f:c3:45:11:7a:b9:04:9a:5f:38:
         26:0d:fa:01:b4:6f:c2:44:51:28:41:d1:7c:9c:06:12:0f:d5:
         58:0a:bf:33:78:f7:a3:30:4f:45:b3:9b:1c:44:94:bc:d9:c7:
         6b:5c:0d:f0:f8:5f:b4:0f:bb:c5:cc:a7:f6:89:e9:aa:d5:0b:
         c8:40:33:09:4a:a8:7e:50:a5:0c:65:5e:d7:93:22:58:24:9f:
         2d:6e:55:f8:8f:b4:12:28:11:78:5c:85:1b:e5:e1:8c:dc:b4:
         65:07:80:46:fd:85:50:75:02:50:59:16:98:36:77:b3:e1:3e:
         c9:60:b9:60:80:4d:0b:e3:a5:2e:e7:11:ac:b6:71:84:97:cc:
         47:cb:d0:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 10:03:44 2026 by rpki-client