This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/76d70346-5bdf-4961-a74f-55ae855672a1/0/6FB4DAE76B12CA00E07344A4DD2F933232EC2187.mft
File:                     6FB4DAE76B12CA00E07344A4DD2F933232EC2187.mft (raw, json)
Hash identifier:          0rNbHk9+NKubNV54DBPfRCNBqJvj1JXyaLmgaKltK80=
Subject key identifier:   3C:72:5F:B5:BC:52:14:FC:E3:CE:F8:5D:46:79:F6:B3:63:2B:5D:20
Authority key identifier: 6F:B4:DA:E7:6B:12:CA:00:E0:73:44:A4:DD:2F:93:32:32:EC:21:87
Certificate issuer:       /CN=6FB4DAE76B12CA00E07344A4DD2F933232EC2187
Certificate serial:       7D3E85B89A09E9CEFBA63DD40C2B4488674B393D
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6FB4DAE76B12CA00E07344A4DD2F933232EC2187.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/76d70346-5bdf-4961-a74f-55ae855672a1/0/6FB4DAE76B12CA00E07344A4DD2F933232EC2187.mft
Manifest number:          01C9
Signing time:             Sun 01 Feb 2026 09:01:14 +0000
Manifest this update:     Sun 01 Feb 2026 08:56:14 +0000
Manifest next update:     Wed 04 Feb 2026 16:21:14 +0000
Files and hashes:         1: 3130332e37372e3138352e302f32342d3234203d3e20313331373635.roa (hash: /JnF9ntQ1zhi5AvVex5MT/29rhLCl1+fBFP+3yAKjbQ=)
                          2: 6FB4DAE76B12CA00E07344A4DD2F933232EC2187.crl (hash: Mn9LgFKJNf8SdCvj4XCL6xdJZ5dKBHUGINb+8rnVGXM=)
                          3: 3130332e3234352e3232352e302f32342d3234203d3e20313331373635.roa (hash: u1ZCBaEvzWoXZcuQFB7bwDokShFYSVBKQyrrnHALGmM=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/76d70346-5bdf-4961-a74f-55ae855672a1/0/6FB4DAE76B12CA00E07344A4DD2F933232EC2187.crl
                          rsync://repo-rpki.idnic.net/repo/76d70346-5bdf-4961-a74f-55ae855672a1/0/6FB4DAE76B12CA00E07344A4DD2F933232EC2187.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6FB4DAE76B12CA00E07344A4DD2F933232EC2187.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 04 Feb 2026 16:21:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:3e:85:b8:9a:09:e9:ce:fb:a6:3d:d4:0c:2b:44:88:67:4b:39:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6FB4DAE76B12CA00E07344A4DD2F933232EC2187
        Validity
            Not Before: Feb  1 08:56:14 2026 GMT
            Not After : Feb  4 16:21:14 2026 GMT
        Subject: CN=3C725FB5BC5214FCE3CEF85D4679F6B3632B5D20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:22:89:8d:ad:c8:3f:48:6a:1b:6e:da:92:a0:
                    7c:4a:0b:f6:fa:29:52:2f:ca:8b:04:20:c8:39:b1:
                    ec:93:6b:5d:5d:4f:a8:b0:71:24:b3:e9:1c:3a:69:
                    7f:6f:3b:ad:fa:32:ab:a9:2a:08:cf:2f:f5:36:74:
                    fa:99:d1:4e:c5:07:a5:72:28:0c:ae:79:a2:33:fb:
                    fe:2b:5c:26:62:81:6a:9f:87:9c:9b:5a:eb:50:67:
                    e3:e6:35:19:f2:d6:57:86:b3:68:02:63:77:8d:43:
                    1c:4e:1d:e0:ef:15:b6:79:67:46:e2:c7:46:e6:2d:
                    be:8d:84:66:f5:00:0a:16:66:21:ce:d4:63:0c:b7:
                    36:f1:4b:ab:cd:e1:28:fd:55:af:91:b2:f5:fe:7e:
                    3a:d6:2c:02:8e:b5:f5:bd:f7:65:05:9b:76:41:47:
                    c7:42:52:69:b6:79:3f:88:7a:6b:af:21:81:d5:cb:
                    dd:23:81:47:b7:be:8a:0a:3e:ea:c5:86:cf:3a:7a:
                    eb:5d:1b:6e:cd:57:e6:7e:24:06:d0:f9:e0:26:22:
                    72:0b:b6:15:41:d7:86:dd:ee:17:d1:08:52:44:68:
                    d4:ee:8e:7d:43:2c:3c:88:b9:2b:d6:8e:97:89:ce:
                    92:a3:34:d7:f0:0e:3f:7f:54:3a:c8:68:95:5d:62:
                    91:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:72:5F:B5:BC:52:14:FC:E3:CE:F8:5D:46:79:F6:B3:63:2B:5D:20
            X509v3 Authority Key Identifier:
                keyid:6F:B4:DA:E7:6B:12:CA:00:E0:73:44:A4:DD:2F:93:32:32:EC:21:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/76d70346-5bdf-4961-a74f-55ae855672a1/0/6FB4DAE76B12CA00E07344A4DD2F933232EC2187.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6FB4DAE76B12CA00E07344A4DD2F933232EC2187.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/76d70346-5bdf-4961-a74f-55ae855672a1/0/6FB4DAE76B12CA00E07344A4DD2F933232EC2187.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:1f:1e:87:48:88:ab:ec:df:10:41:72:a9:85:97:54:6b:fc:
         46:e5:7c:9b:e0:11:c8:2f:a9:f2:4b:18:06:95:47:ef:d1:36:
         32:0c:ab:f7:c9:5a:1b:db:33:b8:19:f5:1a:5d:f9:25:bc:7d:
         34:b3:b1:9f:c2:0f:14:04:cd:0f:48:db:b2:4a:a0:cf:28:ff:
         ae:57:02:de:4d:6b:40:dc:7c:bd:09:dd:bf:eb:1a:70:04:a7:
         3b:c7:95:e8:74:25:63:40:63:41:73:ff:b2:a6:56:33:38:d1:
         31:e0:b5:e4:3c:09:cb:01:ee:b0:5f:43:86:fd:f4:9b:70:30:
         b5:28:87:84:7f:af:75:ae:e7:96:8a:0d:b1:fe:20:0c:55:7b:
         df:1d:f1:98:4a:65:37:60:c5:61:30:04:3e:8e:f0:1b:03:05:
         24:c4:84:5d:78:94:c3:be:6a:39:57:b2:09:fd:8a:bb:ae:b5:
         05:5e:8e:d4:6f:27:c6:43:e2:80:84:8f:d3:3b:27:e8:8c:49:
         3d:89:3a:39:69:5b:74:f1:ee:60:01:e1:27:d4:46:08:dc:38:
         8c:66:8f:49:75:11:df:a6:e2:b3:df:36:82:a6:3e:23:ad:17:
         4e:f9:d7:a3:52:6f:51:5a:fc:8d:e3:c1:ee:46:51:74:d8:91:
         68:0c:cf:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 09:43:22 2026 by rpki-client