This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/7d02a58d-b958-4219-86d3-61e43cee319a/0/AA90F6A6378710CD695B4CC742651F235E503C5B.mft
File:                     AA90F6A6378710CD695B4CC742651F235E503C5B.mft (raw, json)
Hash identifier:          GODHKeUAaQOb8MONr5tqzoll+j9DmEG9E2yxGVDLnL8=
Subject key identifier:   43:28:AA:15:C4:A3:A2:F5:1A:71:D2:A7:4E:15:A4:03:0F:39:30:C3
Authority key identifier: AA:90:F6:A6:37:87:10:CD:69:5B:4C:C7:42:65:1F:23:5E:50:3C:5B
Certificate issuer:       /CN=AA90F6A6378710CD695B4CC742651F235E503C5B
Certificate serial:       11307DB55F7E26CF0C52D561DCD95ADFF40424ED
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AA90F6A6378710CD695B4CC742651F235E503C5B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/7d02a58d-b958-4219-86d3-61e43cee319a/0/AA90F6A6378710CD695B4CC742651F235E503C5B.mft
Manifest number:          0165
Signing time:             Sun 01 Feb 2026 11:40:48 +0000
Manifest this update:     Sun 01 Feb 2026 11:35:48 +0000
Manifest next update:     Wed 04 Feb 2026 21:18:48 +0000
Files and hashes:         1: 3138302e3133312e3132382e302f32342d3234203d3e20313532303136.roa (hash: VFWMiazWmoGEVLtcrf1dTJMRZzx900Rx4cZwTnY4Hao=)
                          2: AA90F6A6378710CD695B4CC742651F235E503C5B.crl (hash: Pcwntyuz5/z1ZnzwHTmKY/yGLG8+Q0PihdIqcLj6WRw=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/7d02a58d-b958-4219-86d3-61e43cee319a/0/AA90F6A6378710CD695B4CC742651F235E503C5B.crl
                          rsync://repo-rpki.idnic.net/repo/7d02a58d-b958-4219-86d3-61e43cee319a/0/AA90F6A6378710CD695B4CC742651F235E503C5B.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AA90F6A6378710CD695B4CC742651F235E503C5B.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 04 Feb 2026 21:18:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:30:7d:b5:5f:7e:26:cf:0c:52:d5:61:dc:d9:5a:df:f4:04:24:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AA90F6A6378710CD695B4CC742651F235E503C5B
        Validity
            Not Before: Feb  1 11:35:48 2026 GMT
            Not After : Feb  4 21:18:48 2026 GMT
        Subject: CN=4328AA15C4A3A2F51A71D2A74E15A4030F3930C3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:27:60:24:4b:4c:95:7b:07:84:da:10:11:65:
                    7b:8a:7e:09:f7:d3:49:55:53:68:d2:23:10:9b:c8:
                    04:50:75:e8:50:f4:24:9d:24:e7:ca:1f:a5:42:d4:
                    22:36:91:0e:1d:cb:b0:f5:3c:ab:47:ce:78:7b:48:
                    80:99:d2:53:dd:f1:4e:08:7a:73:e5:0a:46:79:39:
                    49:12:3a:8d:dd:69:e2:8a:1e:30:2c:55:6a:bc:3e:
                    c4:2d:10:67:56:ae:fc:c4:4d:9f:04:b2:95:55:90:
                    b3:c1:c3:f0:65:9c:61:0c:5a:00:a3:b5:4d:d1:d1:
                    6b:30:c0:c9:96:aa:6e:20:53:c4:bc:ae:ab:97:d6:
                    8e:26:b2:47:d2:8e:80:98:03:33:1d:ae:2c:4d:92:
                    cf:80:5a:9b:74:c5:4a:78:05:09:c9:3e:fe:3d:34:
                    06:87:69:6c:4b:12:f9:0c:e7:4d:e6:87:1a:e0:25:
                    a0:39:7f:9d:fe:6b:af:43:db:26:15:eb:46:a3:e9:
                    8f:39:82:84:45:d2:89:fe:d0:2c:98:8e:fb:c0:bc:
                    73:6c:a3:a2:4e:2f:ed:9f:98:e4:ea:65:58:88:1a:
                    3e:2e:81:8d:61:77:ef:a3:af:20:50:53:83:69:81:
                    15:da:9f:f7:f7:8b:6a:9d:57:50:81:cf:59:c5:fa:
                    46:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:28:AA:15:C4:A3:A2:F5:1A:71:D2:A7:4E:15:A4:03:0F:39:30:C3
            X509v3 Authority Key Identifier:
                keyid:AA:90:F6:A6:37:87:10:CD:69:5B:4C:C7:42:65:1F:23:5E:50:3C:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/7d02a58d-b958-4219-86d3-61e43cee319a/0/AA90F6A6378710CD695B4CC742651F235E503C5B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AA90F6A6378710CD695B4CC742651F235E503C5B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7d02a58d-b958-4219-86d3-61e43cee319a/0/AA90F6A6378710CD695B4CC742651F235E503C5B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:4f:b5:2f:84:c2:16:bd:d4:4c:40:b1:47:79:a7:4b:84:a0:
         96:7b:80:c2:41:78:2c:e1:05:15:1c:22:99:90:84:b1:c7:64:
         b6:e9:4e:2e:93:07:54:07:ef:ac:6e:e6:c4:c3:f3:74:65:0c:
         25:fd:8c:e1:ff:6a:4a:b4:ce:0f:fd:6b:c9:c7:e6:b5:eb:87:
         26:09:a0:23:7f:83:09:c6:11:50:c7:bb:b3:16:a0:b9:4e:a8:
         7f:2e:3c:e2:dd:ec:66:c8:25:e2:27:75:e5:f0:6e:37:e7:d7:
         9c:3e:36:a4:0a:46:13:8d:98:79:8d:e9:8a:1e:4f:57:d1:9e:
         98:c9:d1:d2:14:49:69:15:cc:1b:a0:af:fb:84:91:22:c9:cf:
         ab:c2:b6:6a:fd:35:ee:71:b4:4f:30:14:a5:45:cb:9d:42:94:
         0b:8e:ac:8c:05:48:4a:b8:31:18:ba:4e:e1:dc:33:cb:c4:91:
         8d:40:24:eb:ea:6f:74:c3:ae:c1:cc:c1:2c:36:55:7a:c7:9c:
         29:62:64:4c:c8:cc:b0:1f:ce:c0:3d:b5:00:1d:62:b2:49:77:
         a2:66:73:8c:5f:1e:fd:2c:1e:c6:4b:90:96:5e:9f:17:0d:b2:
         d5:6d:56:8a:a9:e7:f9:cc:db:1e:93:be:74:34:3c:69:69:fc:
         a7:5c:11:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 10:03:48 2026 by rpki-client