This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/7770feeb-2caa-476a-ab43-f652a11fd08c/0/3D7EA7788E025E12DEFD18EEB278AF6D47B034C2.mft
File:                     3D7EA7788E025E12DEFD18EEB278AF6D47B034C2.mft (raw, json)
Hash identifier:          K5+/aaN8RHlcYjwH+yd6Hr0H6LY1E27A3jWKCTDXviA=
Subject key identifier:   F8:50:2A:EE:7E:FA:E9:B0:D5:FA:C6:CD:47:61:34:1A:62:FE:4B:63
Authority key identifier: 3D:7E:A7:78:8E:02:5E:12:DE:FD:18:EE:B2:78:AF:6D:47:B0:34:C2
Certificate issuer:       /CN=3D7EA7788E025E12DEFD18EEB278AF6D47B034C2
Certificate serial:       2586D04F21C1BE244AC330EFA468FA462A49AE12
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D7EA7788E025E12DEFD18EEB278AF6D47B034C2.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/7770feeb-2caa-476a-ab43-f652a11fd08c/0/3D7EA7788E025E12DEFD18EEB278AF6D47B034C2.mft
Manifest number:          0246
Signing time:             Sun 01 Feb 2026 09:01:41 +0000
Manifest this update:     Sun 01 Feb 2026 08:56:41 +0000
Manifest next update:     Wed 04 Feb 2026 18:31:41 +0000
Files and hashes:         1: 3D7EA7788E025E12DEFD18EEB278AF6D47B034C2.crl (hash: 6Om4sXTD1I9OcmEFUBwHUgHBPAV80FUOHnp/jmqwe2o=)
                          2: 3130332e3134332e3232342e302f32332d3233203d3e20313339343132.roa (hash: Zm0hpNa3KzjUY5ugGNSToALOnFgESrmbArm+FZK1Qzs=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/7770feeb-2caa-476a-ab43-f652a11fd08c/0/3D7EA7788E025E12DEFD18EEB278AF6D47B034C2.crl
                          rsync://repo-rpki.idnic.net/repo/7770feeb-2caa-476a-ab43-f652a11fd08c/0/3D7EA7788E025E12DEFD18EEB278AF6D47B034C2.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D7EA7788E025E12DEFD18EEB278AF6D47B034C2.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 04 Feb 2026 18:31:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:86:d0:4f:21:c1:be:24:4a:c3:30:ef:a4:68:fa:46:2a:49:ae:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3D7EA7788E025E12DEFD18EEB278AF6D47B034C2
        Validity
            Not Before: Feb  1 08:56:41 2026 GMT
            Not After : Feb  4 18:31:41 2026 GMT
        Subject: CN=F8502AEE7EFAE9B0D5FAC6CD4761341A62FE4B63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:c1:19:6c:b5:f9:80:9a:5e:4c:da:71:a2:b6:
                    be:4f:70:1e:17:d4:ad:20:14:db:75:b7:27:f9:2c:
                    a5:57:b6:f7:d0:40:50:3b:29:5e:74:ea:a2:40:d1:
                    2e:c7:e8:20:ff:27:70:5f:bc:3c:33:99:b6:e4:4b:
                    11:af:42:c5:b5:80:96:7f:56:f4:95:68:42:aa:d8:
                    89:70:dd:81:b0:f2:b6:6b:d1:93:a7:a8:c2:41:d9:
                    67:99:13:a6:b2:c9:ad:35:c8:17:b8:16:83:ff:a2:
                    aa:da:4e:f8:e9:5d:07:0a:64:86:69:e3:37:3a:76:
                    e3:9b:bf:45:b0:97:1a:d1:29:53:ad:c5:29:51:3b:
                    e1:9a:41:1a:51:42:41:d6:e2:ad:63:21:b4:20:52:
                    ac:12:09:ba:f7:a3:49:de:05:d6:13:f3:9e:73:75:
                    91:5c:e8:82:8f:52:14:49:85:f1:bc:77:51:d2:b4:
                    bf:78:c4:24:3f:a6:c2:d7:9f:c2:71:ce:a7:9f:13:
                    18:c2:e2:90:b0:c2:f6:9b:f5:36:8a:5a:5e:fa:52:
                    cb:bc:26:59:70:65:1a:09:c6:92:f5:9a:46:1a:d3:
                    91:56:3d:d0:a5:2a:0b:5f:bd:cd:7a:02:55:f9:f3:
                    d4:ab:d3:46:2d:64:87:45:b6:64:25:25:29:d3:7b:
                    bd:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:50:2A:EE:7E:FA:E9:B0:D5:FA:C6:CD:47:61:34:1A:62:FE:4B:63
            X509v3 Authority Key Identifier:
                keyid:3D:7E:A7:78:8E:02:5E:12:DE:FD:18:EE:B2:78:AF:6D:47:B0:34:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/7770feeb-2caa-476a-ab43-f652a11fd08c/0/3D7EA7788E025E12DEFD18EEB278AF6D47B034C2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D7EA7788E025E12DEFD18EEB278AF6D47B034C2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7770feeb-2caa-476a-ab43-f652a11fd08c/0/3D7EA7788E025E12DEFD18EEB278AF6D47B034C2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:e0:45:81:6f:db:d6:f8:ea:8b:c8:1a:a5:35:54:b4:dd:db:
         74:55:9f:f8:f2:a7:4b:33:6d:c7:ae:04:66:05:35:b4:23:f6:
         9e:03:b7:3a:bd:c1:9e:94:76:db:c1:84:8b:c9:fb:65:c1:d2:
         75:7f:f1:eb:b1:39:21:ab:98:05:df:8b:27:0e:77:b8:a8:d9:
         6c:55:11:29:0d:16:7f:27:dc:3e:9b:55:54:e4:0a:ad:a4:4a:
         c5:35:fd:d4:a1:e8:4e:3f:54:fe:2c:f0:5c:9c:f0:11:5e:65:
         05:16:23:54:f1:3d:e3:67:cd:59:db:09:05:89:60:eb:69:1f:
         e5:4f:db:33:e8:ab:1b:f4:bb:ea:b9:fd:f3:52:8a:7e:be:72:
         2d:ca:66:4f:e3:1e:99:d7:ca:ac:2a:46:74:57:7b:c5:bb:9e:
         ab:13:a4:d3:98:50:82:d4:3d:e9:40:0e:49:20:7a:c3:dd:af:
         6d:3d:15:ac:14:12:7e:51:a0:59:47:39:dc:27:9f:96:1e:8d:
         54:a5:8d:82:34:b1:d7:eb:1c:b6:fa:d3:c2:a0:8d:7b:65:01:
         1d:9e:f7:78:b7:0e:61:02:8c:45:22:93:65:9b:a5:be:f2:02:
         47:f8:3c:e7:b1:4c:56:68:01:f6:50:d7:7d:c7:b6:23:e6:88:
         b4:a7:6f:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 12:51:45 2026 by rpki-client