This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/7d0f99c3-e567-41ae-aa00-26cb9781fbe9/0/6DA2B28F4391C01434B7229FD4D68E661BF13061.mft
File:                     6DA2B28F4391C01434B7229FD4D68E661BF13061.mft (raw, json)
Hash identifier:          E7kTvM0xxaFjQ8PNPbzw63NMq6lFZkyDhe2SaNjnXV0=
Subject key identifier:   F2:1C:19:37:D7:55:90:5C:71:3F:2C:73:4F:0A:1C:27:80:E0:20:6D
Authority key identifier: 6D:A2:B2:8F:43:91:C0:14:34:B7:22:9F:D4:D6:8E:66:1B:F1:30:61
Certificate issuer:       /CN=6DA2B28F4391C01434B7229FD4D68E661BF13061
Certificate serial:       68AE5008107CC1CB412DA2DBBE7D6A0D43DA7C85
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6DA2B28F4391C01434B7229FD4D68E661BF13061.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/7d0f99c3-e567-41ae-aa00-26cb9781fbe9/0/6DA2B28F4391C01434B7229FD4D68E661BF13061.mft
Manifest number:          02B8
Signing time:             Sun 01 Feb 2026 04:21:33 +0000
Manifest this update:     Sun 01 Feb 2026 04:16:33 +0000
Manifest next update:     Wed 04 Feb 2026 06:03:33 +0000
Files and hashes:         1: 34392e3233362e3232332e302f32342d3234203d3e203535363638.roa (hash: fJ4g0K772WVp53tZH6Cr6nPqsZvGnVS3VfLvicif+Ms=)
                          2: 6DA2B28F4391C01434B7229FD4D68E661BF13061.crl (hash: UveGioTs9Trz/JvPMw9z1x4j5SqnuRPu079W/n0ORIQ=)
                          3: 34392e3233362e3232322e302f32342d3234203d3e203535363638.roa (hash: kIaQGWL5YUwAplbYF3rxqdRNmuWMqoQK88/zSxpS0Qk=)
                          4: 34392e3233362e3231372e302f32342d3234203d3e203535363638.roa (hash: +1/NKTo1zjk1P1ZAkPLDaaCsjoolxhbaib5j0otnVl8=)
                          5: 34392e3233362e3231362e302f32342d3234203d3e203535363638.roa (hash: PpAfKuTLC2LZflDGFc6yX8hZy8hNL9DWJF0ArhdPsJs=)
                          6: 34392e3233362e3231392e302f32342d3234203d3e203535363638.roa (hash: WONaTaogHxZR78zw31IvprtisGRNqNJsbh6kYGrgZG4=)
                          7: 34392e3233362e3232302e302f32342d3234203d3e203535363638.roa (hash: 7skPXD0GcBP0y8K0CJN6k0vAhi8+IRcH6Kcm8uU8vVs=)
                          8: 34392e3233362e3231382e302f32342d3234203d3e203535363638.roa (hash: IuWeKhHtePe16+Mo0GNe9sNi8Di/hp1hWH17ol9RuOY=)
                          9: 34392e3233362e3232312e302f32342d3234203d3e203535363638.roa (hash: M2pyi/IMF/9bDLHyO64naWXcT6UxKr+6hMI7b6iDcRY=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/7d0f99c3-e567-41ae-aa00-26cb9781fbe9/0/6DA2B28F4391C01434B7229FD4D68E661BF13061.crl
                          rsync://repo-rpki.idnic.net/repo/7d0f99c3-e567-41ae-aa00-26cb9781fbe9/0/6DA2B28F4391C01434B7229FD4D68E661BF13061.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6DA2B28F4391C01434B7229FD4D68E661BF13061.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 04 Feb 2026 06:03:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:ae:50:08:10:7c:c1:cb:41:2d:a2:db:be:7d:6a:0d:43:da:7c:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6DA2B28F4391C01434B7229FD4D68E661BF13061
        Validity
            Not Before: Feb  1 04:16:33 2026 GMT
            Not After : Feb  4 06:03:33 2026 GMT
        Subject: CN=F21C1937D755905C713F2C734F0A1C2780E0206D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:14:4a:e0:b0:9b:ce:27:36:c9:60:be:53:54:
                    41:34:e9:a1:20:d3:71:ef:f4:5c:3a:2e:f4:27:8d:
                    ea:48:33:d9:46:2d:bb:98:9f:1a:7a:23:70:47:37:
                    ba:3f:65:b6:a3:c2:b3:48:30:0f:50:be:f9:69:85:
                    97:cd:70:1f:0d:a5:83:23:cd:8f:09:9d:de:21:bf:
                    33:4d:e9:96:f4:06:ef:28:a3:f1:06:c5:3a:78:b9:
                    48:a7:d8:9e:eb:c1:56:0b:c3:94:02:31:f1:fa:4d:
                    47:c9:59:19:19:8c:b1:80:93:35:5f:f5:91:0e:bc:
                    b7:cb:4a:07:71:c8:fd:e3:35:42:78:9d:7c:f2:00:
                    3c:b4:58:50:8e:3c:76:fa:2a:27:43:be:33:cc:35:
                    d0:a2:45:a0:c3:e3:ab:fd:9c:66:af:11:90:17:87:
                    d2:66:32:5e:7b:e4:37:4b:56:90:d4:d7:d7:5d:fb:
                    8f:9a:2d:79:e9:2d:c1:70:07:0e:8c:78:d4:8a:23:
                    04:4e:be:84:81:c3:03:ab:b7:33:91:72:9c:f8:11:
                    5f:e9:81:77:d5:d0:e4:92:78:3a:03:52:53:16:a8:
                    93:6b:81:94:52:63:1f:a9:0a:c6:52:08:c1:66:4a:
                    6b:ce:2c:58:87:d1:85:e8:58:71:97:22:31:bf:78:
                    16:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:1C:19:37:D7:55:90:5C:71:3F:2C:73:4F:0A:1C:27:80:E0:20:6D
            X509v3 Authority Key Identifier:
                keyid:6D:A2:B2:8F:43:91:C0:14:34:B7:22:9F:D4:D6:8E:66:1B:F1:30:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/7d0f99c3-e567-41ae-aa00-26cb9781fbe9/0/6DA2B28F4391C01434B7229FD4D68E661BF13061.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6DA2B28F4391C01434B7229FD4D68E661BF13061.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7d0f99c3-e567-41ae-aa00-26cb9781fbe9/0/6DA2B28F4391C01434B7229FD4D68E661BF13061.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:87:28:ca:a7:c6:f4:13:bd:49:ee:88:a3:e1:e4:1b:41:99:
         f2:a8:16:14:8f:0b:47:ea:65:49:8e:a2:1d:c0:f7:b0:7b:6e:
         fa:a7:fc:1f:12:81:5f:b7:15:83:87:85:dd:da:e8:36:86:1b:
         a3:ae:6b:39:ae:7d:19:ae:05:b6:5d:52:e8:ad:6c:9d:63:d6:
         2f:56:72:8c:0c:76:3e:14:92:f2:b6:81:a5:11:6a:96:57:13:
         3e:ca:db:99:e9:81:87:5d:70:b7:4e:f9:0a:35:c3:66:74:99:
         9e:28:13:4d:44:2d:63:0a:3e:ec:fb:4d:87:33:f0:8a:a5:6c:
         c0:e2:d7:70:6d:5f:6e:e8:7e:1e:10:6a:35:cc:40:e4:66:bc:
         ba:fb:e4:66:6b:45:35:6a:1b:b4:24:ee:6f:b2:26:41:de:e9:
         40:e7:d9:5e:bc:45:11:73:f3:f7:09:6d:2e:fb:8a:90:e7:71:
         69:55:b3:6f:81:ec:33:d8:96:48:6f:08:9e:17:e0:ef:e1:31:
         0c:db:b5:33:2f:d5:5c:d0:69:dd:cc:a0:ed:6c:5a:de:37:a1:
         d7:90:21:98:1b:c4:6c:f7:f6:08:3d:77:2d:a7:88:67:e7:08:
         ac:ba:ac:8b:44:90:c6:2c:fd:92:58:ee:bc:d8:a4:e0:41:47:
         e4:3f:ba:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 09:43:18 2026 by rpki-client