This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/7c074cd8-2830-4eab-bdd4-a807ec5115da/0/66A6B60CE00F39D3D3C228024C87D2799BE570E7.mft
File:                     66A6B60CE00F39D3D3C228024C87D2799BE570E7.mft (raw, json)
Hash identifier:          ixJM3a731eaCHb45w51U/F8aOohKoy31Oh6v0YryyZI=
Subject key identifier:   B7:66:A9:51:2E:07:2A:53:0A:C0:52:E6:49:88:1A:51:61:23:B2:C1
Authority key identifier: 66:A6:B6:0C:E0:0F:39:D3:D3:C2:28:02:4C:87:D2:79:9B:E5:70:E7
Certificate issuer:       /CN=66A6B60CE00F39D3D3C228024C87D2799BE570E7
Certificate serial:       63F9492CAD438A59194C5DDB37F67D8BBE1911D8
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/66A6B60CE00F39D3D3C228024C87D2799BE570E7.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/7c074cd8-2830-4eab-bdd4-a807ec5115da/0/66A6B60CE00F39D3D3C228024C87D2799BE570E7.mft
Manifest number:          029F
Signing time:             Fri 30 Jan 2026 22:52:22 +0000
Manifest this update:     Fri 30 Jan 2026 22:47:22 +0000
Manifest next update:     Tue 03 Feb 2026 10:38:22 +0000
Files and hashes:         1: 3130332e3230392e3235302e302f32332d3233203d3e203137343430.roa (hash: x8Z7hSmFA0UmwFhQsexxF7M1z59ksll1UR5BKgdWN7E=)
                          2: 3130332e3230392e3235312e302f32342d3234203d3e203137343430.roa (hash: Gie+V/qqRH9iPBwHDwRPMdTeAqtNMn5puCXKH9q6nKw=)
                          3: 66A6B60CE00F39D3D3C228024C87D2799BE570E7.crl (hash: UfKDYPCBKZApWcsiL8cvVpFPIgW35GX0T0l41pN1zEg=)
                          4: 3130332e3230392e3235302e302f32342d3234203d3e203137343430.roa (hash: RQhESrqk9sDgcqCVUy8oW9NMjzE0L0awTCgQpHQVDjo=)
                          5: 3130332e3230392e3234382e302f32342d3234203d3e203137343430.roa (hash: V0Wtlqwgd3N2wadygfl0BT/vHIEsa1IABsrNseLIv4A=)
                          6: 3130332e3230392e3234392e302f32342d3234203d3e203137343430.roa (hash: 7Dr6u9PA6uyt0AqS+Q9EmLTfz/wKmQK5b4NV05Q8hho=)
                          7: 3130332e3230392e3234382e302f32322d3232203d3e203137343430.roa (hash: FBKftcy5u8WLMlpAhKDN3+/qY75MgpkD76kkG1AgdUE=)
                          8: 3130332e3230392e3234382e302f32332d3233203d3e203137343430.roa (hash: egRehn4LjgjKySUKQkpl6SKgh3Imbo4d57t3tIaiJf4=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/7c074cd8-2830-4eab-bdd4-a807ec5115da/0/66A6B60CE00F39D3D3C228024C87D2799BE570E7.crl
                          rsync://repo-rpki.idnic.net/repo/7c074cd8-2830-4eab-bdd4-a807ec5115da/0/66A6B60CE00F39D3D3C228024C87D2799BE570E7.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/66A6B60CE00F39D3D3C228024C87D2799BE570E7.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 03 Feb 2026 10:38:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:f9:49:2c:ad:43:8a:59:19:4c:5d:db:37:f6:7d:8b:be:19:11:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66A6B60CE00F39D3D3C228024C87D2799BE570E7
        Validity
            Not Before: Jan 30 22:47:22 2026 GMT
            Not After : Feb  3 10:38:22 2026 GMT
        Subject: CN=B766A9512E072A530AC052E649881A516123B2C1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:cd:56:db:ac:f4:9e:87:de:62:ba:67:59:0c:
                    d8:a3:08:06:ab:a1:0c:85:7c:e6:f8:1f:0b:dc:60:
                    91:b1:19:c7:02:2d:f1:1e:bb:9b:24:72:29:25:c1:
                    71:46:0d:72:7e:ba:37:ee:21:2a:76:5e:0d:1e:6e:
                    5b:ea:ee:7b:f8:4e:a4:f2:a9:ed:4f:f7:34:4b:b1:
                    44:eb:3a:33:2f:9b:ca:1e:2d:1c:90:9e:9d:71:19:
                    ed:a5:87:f9:03:f4:12:d5:2e:10:20:94:2b:4e:aa:
                    76:01:d5:5c:c0:0f:ce:fc:cd:bf:b4:72:9d:8b:d9:
                    52:6c:b0:0d:5c:ec:36:b6:e9:cd:75:65:58:c2:f0:
                    1c:af:e7:b0:12:c1:39:da:9e:1d:0c:d5:b1:c5:38:
                    5f:14:30:89:3d:78:3d:28:e0:f7:91:43:bf:47:95:
                    39:ef:27:8e:e3:cb:1d:f1:d4:eb:2c:64:f6:eb:d8:
                    ec:30:4f:21:ad:7f:99:c2:3a:06:39:d2:57:cf:be:
                    31:73:1a:29:53:d0:19:79:ee:41:0a:72:af:27:3c:
                    7e:f4:25:49:2c:55:bb:3b:11:ee:31:f8:d2:bd:52:
                    2e:9d:02:1a:82:3c:a9:f4:0b:41:e6:ef:e8:b3:92:
                    14:a7:be:0f:17:16:78:a4:46:3c:5d:a7:91:33:ca:
                    dd:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:66:A9:51:2E:07:2A:53:0A:C0:52:E6:49:88:1A:51:61:23:B2:C1
            X509v3 Authority Key Identifier:
                keyid:66:A6:B6:0C:E0:0F:39:D3:D3:C2:28:02:4C:87:D2:79:9B:E5:70:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/7c074cd8-2830-4eab-bdd4-a807ec5115da/0/66A6B60CE00F39D3D3C228024C87D2799BE570E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/66A6B60CE00F39D3D3C228024C87D2799BE570E7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7c074cd8-2830-4eab-bdd4-a807ec5115da/0/66A6B60CE00F39D3D3C228024C87D2799BE570E7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b7:d2:ac:8d:40:e4:05:97:71:00:46:c3:2d:a5:83:5e:b1:9c:
         24:a0:b9:5b:00:58:a9:59:b9:b3:89:0d:84:67:d2:bd:25:3c:
         95:59:aa:cb:4d:ab:ee:78:e2:3a:e3:87:c5:45:f2:b5:07:bd:
         ab:42:71:d7:f7:ac:62:38:ce:0d:64:32:f6:1e:4e:83:2f:c5:
         da:db:fe:ae:43:7f:c8:ed:a9:7c:38:e2:a4:5a:ae:a4:2e:11:
         95:86:d1:b7:a0:d4:1b:72:ce:cc:73:83:5f:9d:2e:1c:63:33:
         11:f2:f2:fa:30:31:a4:c2:e9:75:71:84:cb:6e:9a:9a:7a:f3:
         67:a4:3a:1e:4c:4e:2c:a1:99:f3:11:97:55:85:39:c8:5d:2a:
         50:aa:01:21:ec:0c:fe:43:46:d8:06:82:df:c2:0f:89:49:23:
         18:e0:07:1d:98:00:52:98:5b:3e:d1:be:fb:74:3a:23:d1:95:
         0e:35:e5:1d:9b:ec:2a:19:3c:03:e0:87:48:f7:e5:e4:b7:19:
         43:d1:7f:32:94:7d:35:7e:d9:56:e6:a6:44:ad:e4:ae:7e:c6:
         a9:3f:49:20:82:51:07:74:d3:8d:aa:ec:51:10:18:c0:a2:49:
         39:3e:a1:5b:fa:aa:18:4a:b3:d9:c9:eb:b1:eb:ff:8b:df:10:
         cd:34:e7:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 09:43:20 2026 by rpki-client