This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/5b8c543c-de1f-4ef4-92b1-68556ff131a3/0/13BAA0DF960A8AD207C380328B5666205D55F24C.mft
File:                     13BAA0DF960A8AD207C380328B5666205D55F24C.mft (raw, json)
Hash identifier:          hGcwXYoq5QB7uAGOP31XQshJ0bjywxzvpVWHYMB4VnM=
Subject key identifier:   44:99:F3:7A:33:E5:37:41:3B:58:57:E0:51:40:68:E7:9A:A7:87:8D
Authority key identifier: 13:BA:A0:DF:96:0A:8A:D2:07:C3:80:32:8B:56:66:20:5D:55:F2:4C
Certificate issuer:       /CN=13BAA0DF960A8AD207C380328B5666205D55F24C
Certificate serial:       2554E03B975687661E48672471E60210D0CECB39
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/13BAA0DF960A8AD207C380328B5666205D55F24C.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/5b8c543c-de1f-4ef4-92b1-68556ff131a3/0/13BAA0DF960A8AD207C380328B5666205D55F24C.mft
Manifest number:          03BE
Signing time:             Mon 02 Feb 2026 07:11:02 +0000
Manifest this update:     Mon 02 Feb 2026 07:06:02 +0000
Manifest next update:     Thu 05 Feb 2026 10:57:02 +0000
Files and hashes:         1: 13BAA0DF960A8AD207C380328B5666205D55F24C.crl (hash: 80/lXI+EuVcyOO6bPZWeNAqLcgqGcPDX6IXyLwcRs8g=)
                          2: 3130332e3136392e3235322e302f32332d3234203d3e203137393935.roa (hash: pJiq9ojTyK7ZZqOiMbF+1PX7W4BwHy5wyU1KAl8QMPg=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/5b8c543c-de1f-4ef4-92b1-68556ff131a3/0/13BAA0DF960A8AD207C380328B5666205D55F24C.crl
                          rsync://repo-rpki.idnic.net/repo/5b8c543c-de1f-4ef4-92b1-68556ff131a3/0/13BAA0DF960A8AD207C380328B5666205D55F24C.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/13BAA0DF960A8AD207C380328B5666205D55F24C.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 05 Feb 2026 05:24:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:54:e0:3b:97:56:87:66:1e:48:67:24:71:e6:02:10:d0:ce:cb:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13BAA0DF960A8AD207C380328B5666205D55F24C
        Validity
            Not Before: Feb  2 07:06:02 2026 GMT
            Not After : Feb  5 10:57:02 2026 GMT
        Subject: CN=4499F37A33E537413B5857E0514068E79AA7878D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:de:ef:f7:ea:77:d5:79:69:16:ef:db:c1:46:
                    63:dd:80:ca:de:1f:84:af:5b:6a:ba:f7:2c:ad:af:
                    96:14:16:7f:3f:91:99:c4:23:08:8b:e1:4a:2c:b1:
                    4a:62:37:2f:8b:29:a4:da:6c:96:21:16:81:6f:27:
                    71:0b:08:6b:e5:c2:eb:e7:37:ad:09:b2:9b:bf:d8:
                    fd:91:c2:78:47:c8:5d:73:42:cc:d9:35:aa:74:03:
                    8c:17:df:bd:8d:f9:55:44:41:2a:b8:1d:ba:a7:a9:
                    9b:3d:c1:0a:ad:c0:5e:1d:2d:40:53:75:d6:2b:d7:
                    ac:c0:5a:9d:f2:ae:2e:6b:8e:9a:04:a4:a5:dc:10:
                    df:10:1b:25:48:98:a2:75:1a:9b:46:70:f6:9c:a8:
                    6d:ba:3c:1e:d0:e4:b6:c7:ee:95:b3:f9:67:7f:ef:
                    01:8d:1e:b2:1e:11:73:51:27:76:11:b6:cc:50:2b:
                    ef:78:93:bd:5d:56:b6:ec:7e:b4:a3:3b:45:2a:c8:
                    f7:73:77:96:df:76:70:1d:08:e2:47:c5:9a:bc:61:
                    d6:3d:62:f3:2d:df:1e:ae:1a:b9:d2:eb:6b:9c:63:
                    16:3a:f7:b9:85:c1:f2:74:dd:f6:45:1e:a1:84:45:
                    49:97:1d:69:50:29:32:87:39:d9:c6:16:04:c4:ce:
                    57:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:99:F3:7A:33:E5:37:41:3B:58:57:E0:51:40:68:E7:9A:A7:87:8D
            X509v3 Authority Key Identifier:
                keyid:13:BA:A0:DF:96:0A:8A:D2:07:C3:80:32:8B:56:66:20:5D:55:F2:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/5b8c543c-de1f-4ef4-92b1-68556ff131a3/0/13BAA0DF960A8AD207C380328B5666205D55F24C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/13BAA0DF960A8AD207C380328B5666205D55F24C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5b8c543c-de1f-4ef4-92b1-68556ff131a3/0/13BAA0DF960A8AD207C380328B5666205D55F24C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ba:a1:19:f4:79:d2:65:19:24:67:d9:c2:f4:05:dc:fd:68:24:
         b3:c7:f7:31:d2:9a:11:b8:2a:80:65:17:8c:be:bb:fc:5c:56:
         79:ad:b2:4b:bd:4d:ca:24:31:3c:91:7d:63:0b:b0:83:de:d6:
         f9:15:25:e6:8d:20:62:35:21:59:b2:a8:c1:75:cc:91:84:ba:
         85:9a:d4:db:19:45:c1:70:0b:f4:e9:15:f6:c7:49:15:d6:11:
         16:74:24:8b:49:03:96:92:63:6a:3b:f9:f8:53:fd:f3:a8:28:
         91:3e:a5:7f:40:94:a5:54:70:6b:f4:d3:c6:60:83:82:e2:d3:
         a7:d3:88:4d:e6:03:77:80:5f:be:80:7a:8a:77:9a:f7:df:d4:
         fc:18:47:b0:ac:98:46:f8:5f:b0:e6:bb:05:02:dc:71:f9:3e:
         c9:9f:87:85:d0:e4:19:e6:8e:c2:4f:02:71:d2:85:89:ec:d5:
         ba:02:8b:90:3a:78:65:dd:e9:7e:49:18:ef:df:a8:ff:89:37:
         93:b2:95:b3:9f:75:6e:78:32:c7:1c:8b:89:11:56:10:6f:e6:
         48:a5:77:96:02:fb:1e:f3:ef:f2:b4:00:e9:c0:86:9d:ea:db:
         21:21:48:70:a5:a0:50:c7:d8:bd:5e:57:68:fb:d0:c0:c0:eb:
         72:ae:e7:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 09:44:00 2026 by rpki-client