This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/70e6fd81-b877-4f7c-abc6-082fcbea189f/0/1BD753D8CEFFB0C4CBB19A2E15765EC32333A873.mft
File:                     1BD753D8CEFFB0C4CBB19A2E15765EC32333A873.mft (raw, json)
Hash identifier:          g8p3o5YTT43cxFLSDeCJnsJatQ4WeXeul0xy6ZwYpyw=
Subject key identifier:   DD:EE:31:D4:F7:0C:E5:A8:F6:F7:DC:99:F3:05:17:B6:32:F5:24:F9
Authority key identifier: 1B:D7:53:D8:CE:FF:B0:C4:CB:B1:9A:2E:15:76:5E:C3:23:33:A8:73
Certificate issuer:       /CN=1BD753D8CEFFB0C4CBB19A2E15765EC32333A873
Certificate serial:       34663435A3132194FF430B8311C50DEDBF9B12B8
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BD753D8CEFFB0C4CBB19A2E15765EC32333A873.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/70e6fd81-b877-4f7c-abc6-082fcbea189f/0/1BD753D8CEFFB0C4CBB19A2E15765EC32333A873.mft
Manifest number:          02A6
Signing time:             Mon 02 Feb 2026 00:52:09 +0000
Manifest this update:     Mon 02 Feb 2026 00:47:09 +0000
Manifest next update:     Thu 05 Feb 2026 01:39:09 +0000
Files and hashes:         1: 1BD753D8CEFFB0C4CBB19A2E15765EC32333A873.crl (hash: vJmunpWnADngl87l28Gm3d6qr459u1TFfU2h5TRCr18=)
                          2: 3130332e3137362e3138322e302f32332d3234203d3e20313437313332.roa (hash: 3b02tyVyXZeMs6y0uPPq0P29J4NxhIV9FAqBTSQpOwg=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/70e6fd81-b877-4f7c-abc6-082fcbea189f/0/1BD753D8CEFFB0C4CBB19A2E15765EC32333A873.crl
                          rsync://repo-rpki.idnic.net/repo/70e6fd81-b877-4f7c-abc6-082fcbea189f/0/1BD753D8CEFFB0C4CBB19A2E15765EC32333A873.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BD753D8CEFFB0C4CBB19A2E15765EC32333A873.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 05 Feb 2026 01:39:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:66:34:35:a3:13:21:94:ff:43:0b:83:11:c5:0d:ed:bf:9b:12:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1BD753D8CEFFB0C4CBB19A2E15765EC32333A873
        Validity
            Not Before: Feb  2 00:47:09 2026 GMT
            Not After : Feb  5 01:39:09 2026 GMT
        Subject: CN=DDEE31D4F70CE5A8F6F7DC99F30517B632F524F9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:45:05:9e:9e:6f:6e:67:7d:60:39:c1:d2:9a:
                    09:04:15:dc:fe:80:99:95:18:d7:c5:6a:55:91:65:
                    ae:35:67:39:68:22:3c:c9:b0:d2:5f:fb:ab:53:a9:
                    f7:80:24:cb:91:26:db:51:0c:3c:06:2c:36:16:da:
                    c4:69:ea:a5:5a:9f:25:60:22:c9:95:50:d9:75:07:
                    b2:aa:31:89:57:af:8b:1c:4f:76:16:68:43:76:07:
                    27:91:95:11:c6:3b:7f:df:d5:ea:42:8c:47:fe:e0:
                    6d:9b:54:a9:c7:64:89:18:f4:82:f8:f8:4d:1c:0a:
                    61:21:01:b4:c9:ac:29:93:72:1d:17:e7:63:80:15:
                    37:eb:ef:f8:3e:3e:bd:cc:93:59:b6:b6:fe:66:2d:
                    45:8d:a7:05:a6:c9:72:b4:1b:24:6a:a6:73:4d:73:
                    c4:69:34:1c:e7:3f:cc:99:e2:35:35:0d:a9:1e:96:
                    75:57:ac:da:75:c1:a5:0e:5b:2b:4e:71:a5:ad:6c:
                    2b:9b:d8:07:31:ef:46:61:7c:ed:87:c0:0f:b9:5f:
                    e6:40:be:ec:73:a2:5b:fd:eb:6a:f0:ce:c3:ea:51:
                    ea:a7:ab:d2:de:0b:a4:45:3e:d8:67:fb:dc:bb:7f:
                    5b:02:1e:71:32:2d:d7:aa:e1:23:81:62:9c:d6:1e:
                    99:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:EE:31:D4:F7:0C:E5:A8:F6:F7:DC:99:F3:05:17:B6:32:F5:24:F9
            X509v3 Authority Key Identifier:
                keyid:1B:D7:53:D8:CE:FF:B0:C4:CB:B1:9A:2E:15:76:5E:C3:23:33:A8:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/70e6fd81-b877-4f7c-abc6-082fcbea189f/0/1BD753D8CEFFB0C4CBB19A2E15765EC32333A873.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BD753D8CEFFB0C4CBB19A2E15765EC32333A873.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/70e6fd81-b877-4f7c-abc6-082fcbea189f/0/1BD753D8CEFFB0C4CBB19A2E15765EC32333A873.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:df:b5:45:7c:89:5b:04:d6:99:41:0f:2b:99:15:ba:d3:96:
         47:4d:40:b5:03:54:fe:6e:ee:6d:e1:da:a2:33:fe:39:e9:15:
         e3:af:15:c0:6c:ad:46:07:a2:ae:c9:68:18:75:c3:7c:31:7e:
         2c:5d:6b:4d:f6:28:ef:c4:3d:67:5d:3a:f5:f8:b0:ca:b2:93:
         99:ed:2c:cc:29:8d:8f:1a:8d:ca:92:42:3a:4d:47:80:d6:2e:
         19:f6:37:ba:d0:bc:50:b7:80:4b:b8:58:4b:00:3c:f4:61:38:
         41:06:e3:34:14:9d:c6:fb:50:77:78:62:88:79:8a:1c:38:79:
         d2:bf:6f:e0:2d:36:16:7e:bd:0f:3f:db:e8:4e:21:38:0a:e9:
         e2:38:e7:54:65:89:01:54:44:15:49:38:dd:1a:bf:99:f5:f3:
         e3:ad:3d:b3:f7:82:51:28:44:b7:21:dd:c7:0a:a4:1f:20:b8:
         6c:19:58:d3:e3:fb:12:dd:12:10:a5:50:02:df:ec:a8:46:ec:
         1e:dc:ac:28:e6:37:6f:24:85:08:52:ae:6b:26:f6:0e:dd:6e:
         06:e9:23:f3:1e:83:7d:69:70:c1:64:1b:7c:ed:33:c5:53:68:
         64:67:18:7d:ae:dc:ca:c7:59:19:c2:89:b9:66:1c:eb:b1:de:
         51:ae:31:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 10:05:05 2026 by rpki-client