This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/5bf2cf03-f9f9-4bca-8c2c-6073280dfea8/0/B392381083372148D0977D0066CFF38FD5A32CDB.mft
File:                     B392381083372148D0977D0066CFF38FD5A32CDB.mft (raw, json)
Hash identifier:          5+r7lo+DrG5cknwkPgXkPK+7SMh50SjcegRn7oqnFZM=
Subject key identifier:   88:F2:4B:01:BA:EA:2E:22:57:21:57:F1:E6:C7:DF:A4:8F:78:70:74
Authority key identifier: B3:92:38:10:83:37:21:48:D0:97:7D:00:66:CF:F3:8F:D5:A3:2C:DB
Certificate issuer:       /CN=B392381083372148D0977D0066CFF38FD5A32CDB
Certificate serial:       7FC1AA582630D282A184A9A82B7045046499D634
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B392381083372148D0977D0066CFF38FD5A32CDB.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/5bf2cf03-f9f9-4bca-8c2c-6073280dfea8/0/B392381083372148D0977D0066CFF38FD5A32CDB.mft
Manifest number:          0271
Signing time:             Sat 31 Jan 2026 21:52:06 +0000
Manifest this update:     Sat 31 Jan 2026 21:47:06 +0000
Manifest next update:     Wed 04 Feb 2026 07:24:06 +0000
Files and hashes:         1: B392381083372148D0977D0066CFF38FD5A32CDB.crl (hash: DrAoE7FIKNqkE0u+vG9SxjSxn425IfsimliflKe9Jig=)
                          2: 3130332e3138352e38322e302f32332d3234203d3e203538383230.roa (hash: KYSy/nRpWJvgJOx3JwwIgJ7/nxfWqKSbFEYRVqxBqWw=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/5bf2cf03-f9f9-4bca-8c2c-6073280dfea8/0/B392381083372148D0977D0066CFF38FD5A32CDB.crl
                          rsync://repo-rpki.idnic.net/repo/5bf2cf03-f9f9-4bca-8c2c-6073280dfea8/0/B392381083372148D0977D0066CFF38FD5A32CDB.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B392381083372148D0977D0066CFF38FD5A32CDB.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 04 Feb 2026 07:24:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:c1:aa:58:26:30:d2:82:a1:84:a9:a8:2b:70:45:04:64:99:d6:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B392381083372148D0977D0066CFF38FD5A32CDB
        Validity
            Not Before: Jan 31 21:47:06 2026 GMT
            Not After : Feb  4 07:24:06 2026 GMT
        Subject: CN=88F24B01BAEA2E22572157F1E6C7DFA48F787074
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:f1:c4:d8:cd:16:43:26:f9:46:ee:d9:a2:0b:
                    eb:56:9c:f7:ec:af:30:c6:06:4a:09:6a:f5:02:7c:
                    d2:6f:3c:ea:b6:fa:2c:af:72:ed:52:dc:93:02:3b:
                    d9:1b:a2:df:65:ec:ed:6c:8c:39:1c:48:fd:69:47:
                    40:d1:d7:c7:51:d1:14:d2:6c:1d:e2:c2:36:a7:c5:
                    98:68:07:c9:a9:5f:0a:06:ef:b1:5a:52:fa:08:1c:
                    6a:9c:b9:b4:a6:ed:6f:ca:f6:08:2b:4e:a3:1e:6a:
                    40:40:d8:20:1f:e1:25:64:12:0d:60:f5:dc:5e:60:
                    4e:b7:47:a7:1d:ab:a5:bb:6e:5f:39:19:21:82:28:
                    60:e0:86:9e:16:58:6a:42:41:72:fe:7b:6b:b3:8e:
                    b5:ec:c3:de:ff:59:67:26:15:77:37:6d:29:0e:88:
                    78:d8:ea:49:65:bd:c1:b0:9e:43:39:a9:97:07:d6:
                    4d:51:ba:79:9a:2f:f1:e8:e1:51:3d:db:fa:d0:cf:
                    c1:39:2c:c7:ff:4d:02:e5:07:91:4b:9b:9c:9f:cd:
                    8e:7f:6a:68:d5:e3:5d:3e:1a:9e:89:27:e0:06:1c:
                    ef:8b:1d:e3:3b:98:01:fa:6a:69:d3:96:6d:88:c5:
                    8d:d6:de:b5:62:71:63:8d:75:b1:e6:78:84:89:0e:
                    a4:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:F2:4B:01:BA:EA:2E:22:57:21:57:F1:E6:C7:DF:A4:8F:78:70:74
            X509v3 Authority Key Identifier:
                keyid:B3:92:38:10:83:37:21:48:D0:97:7D:00:66:CF:F3:8F:D5:A3:2C:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/5bf2cf03-f9f9-4bca-8c2c-6073280dfea8/0/B392381083372148D0977D0066CFF38FD5A32CDB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B392381083372148D0977D0066CFF38FD5A32CDB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5bf2cf03-f9f9-4bca-8c2c-6073280dfea8/0/B392381083372148D0977D0066CFF38FD5A32CDB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:e3:3e:a6:01:49:26:26:ae:ce:30:f5:2b:36:66:a4:50:07:
         83:62:93:c0:b8:67:82:6f:bb:e3:2f:1f:a6:e4:aa:8b:01:83:
         c1:2a:10:b7:41:c4:b2:85:88:36:60:3a:4a:1e:5b:a5:8a:5f:
         89:de:ad:ac:d9:27:63:01:9e:65:35:39:da:5d:77:63:de:f8:
         9d:63:28:cd:b1:21:5b:74:ad:d3:21:64:be:87:57:99:67:df:
         fe:fb:3f:72:78:b1:66:f1:23:7f:f2:34:e6:1a:d6:c0:af:10:
         99:01:26:8c:47:0b:a8:f2:7a:63:2a:3b:fd:3e:b5:ae:6d:17:
         ee:22:aa:55:5b:03:12:61:d3:b0:c4:5f:f4:08:82:16:5b:ca:
         db:47:2f:71:f9:17:26:97:d4:33:5d:4c:ee:25:b3:2d:ac:8e:
         43:51:ce:1d:61:34:5c:81:ac:ef:3d:44:72:b2:2d:1b:fa:e0:
         75:37:f7:3d:5c:f3:e4:1c:20:c3:47:cc:7a:e2:f4:3e:e9:87:
         12:9a:51:54:25:22:2a:0b:b2:4a:7e:ac:2b:99:34:eb:47:a4:
         7e:f2:80:e1:fa:bf:b6:a1:d5:36:90:a8:c9:ce:a1:3b:43:d4:
         11:c8:49:7a:23:ab:79:10:fe:f2:b1:a9:f8:98:4c:2c:b9:8d:
         20:01:de:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 09:43:43 2026 by rpki-client