This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/7d738314-a975-4fd1-9bc9-52138f83b56e/0/A62202F88CE61D6BD47195FB36103CDD061D7D27.mft
File:                     A62202F88CE61D6BD47195FB36103CDD061D7D27.mft (raw, json)
Hash identifier:          OybAvGqcl77GTyckVwVcwTgIrbPMeeFe0Q6OrhPJQYw=
Subject key identifier:   C0:E4:D7:70:29:0E:33:9F:67:F2:09:E2:57:D5:D8:13:6A:9F:61:0E
Authority key identifier: A6:22:02:F8:8C:E6:1D:6B:D4:71:95:FB:36:10:3C:DD:06:1D:7D:27
Certificate issuer:       /CN=A62202F88CE61D6BD47195FB36103CDD061D7D27
Certificate serial:       6C89BBCEEDB613FC8AFF54EE53F08F25049282EB
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A62202F88CE61D6BD47195FB36103CDD061D7D27.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/7d738314-a975-4fd1-9bc9-52138f83b56e/0/A62202F88CE61D6BD47195FB36103CDD061D7D27.mft
Manifest number:          0203
Signing time:             Sun 01 Feb 2026 16:22:17 +0000
Manifest this update:     Sun 01 Feb 2026 16:17:17 +0000
Manifest next update:     Wed 04 Feb 2026 20:23:17 +0000
Files and hashes:         1: A62202F88CE61D6BD47195FB36103CDD061D7D27.crl (hash: c/HyHgEqEBH7yChqMzKMsko+zm9lV7Vf2LM2bomN49E=)
                          2: 3130332e3137382e38362e302f32332d3233203d3e20313439333230.roa (hash: kHcDvJb/DgVTvuuABJZolA65opC22Ih0u8COwgg0FLM=)
                          3: 3130332e3137382e38372e302f32342d3234203d3e20313439333230.roa (hash: ocoZWOXebE29PM9wf4GH+eYs09gSTcPRxglrbyGrg6Y=)
                          4: 3130332e3137382e38362e302f32342d3234203d3e20313439333230.roa (hash: 1bNdVmfT+djOhZ89RO79L01jzFp6ENRtflXpl+KJhHY=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/7d738314-a975-4fd1-9bc9-52138f83b56e/0/A62202F88CE61D6BD47195FB36103CDD061D7D27.crl
                          rsync://repo-rpki.idnic.net/repo/7d738314-a975-4fd1-9bc9-52138f83b56e/0/A62202F88CE61D6BD47195FB36103CDD061D7D27.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A62202F88CE61D6BD47195FB36103CDD061D7D27.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 04 Feb 2026 20:23:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:89:bb:ce:ed:b6:13:fc:8a:ff:54:ee:53:f0:8f:25:04:92:82:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A62202F88CE61D6BD47195FB36103CDD061D7D27
        Validity
            Not Before: Feb  1 16:17:17 2026 GMT
            Not After : Feb  4 20:23:17 2026 GMT
        Subject: CN=C0E4D770290E339F67F209E257D5D8136A9F610E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:df:4e:f5:79:95:c6:78:1c:61:c2:db:6c:74:
                    c5:ac:74:54:d1:ce:9e:a4:fa:c8:d2:12:7f:08:87:
                    99:1f:0d:c7:ba:96:f7:a1:6b:03:9f:b5:3c:d1:49:
                    6b:b4:73:79:d9:f7:27:32:2c:73:fa:94:57:eb:38:
                    c1:b5:9b:8d:c1:76:9e:ff:83:a1:bf:52:15:b5:c5:
                    d0:9c:5f:9e:08:c8:5f:f1:61:bc:2b:5f:b1:58:20:
                    5d:ca:8b:6b:50:1c:75:30:5d:ec:b5:ef:6f:0e:c3:
                    73:f7:23:8f:81:73:64:3a:f2:23:52:87:63:bc:e5:
                    09:b2:58:dd:6a:be:22:4b:f4:66:63:72:0b:61:0a:
                    d1:c8:d7:30:ec:40:ab:f6:2a:b7:c8:f4:6e:01:be:
                    e1:6f:57:9b:04:75:3b:9a:9e:d5:f3:31:60:c2:b5:
                    1d:11:5a:57:03:b8:00:4f:c1:1d:1f:d0:0c:2d:95:
                    5c:1e:72:65:79:cf:2a:6a:35:a6:85:22:25:3a:b2:
                    53:9c:b2:50:b1:32:6b:a4:9c:b8:40:47:7c:6e:78:
                    5c:82:7a:77:7d:a2:72:38:36:58:e5:fd:93:0c:0f:
                    fa:dc:77:b9:a3:f6:5d:a2:1a:a8:90:7f:71:a3:a5:
                    e1:50:5d:a9:8c:23:af:8c:47:54:5c:46:2d:ca:62:
                    8e:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:E4:D7:70:29:0E:33:9F:67:F2:09:E2:57:D5:D8:13:6A:9F:61:0E
            X509v3 Authority Key Identifier:
                keyid:A6:22:02:F8:8C:E6:1D:6B:D4:71:95:FB:36:10:3C:DD:06:1D:7D:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/7d738314-a975-4fd1-9bc9-52138f83b56e/0/A62202F88CE61D6BD47195FB36103CDD061D7D27.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A62202F88CE61D6BD47195FB36103CDD061D7D27.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7d738314-a975-4fd1-9bc9-52138f83b56e/0/A62202F88CE61D6BD47195FB36103CDD061D7D27.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:6f:52:5e:bd:36:bb:2a:40:c1:48:ff:1c:46:e7:45:ec:7c:
         b5:42:bb:8d:4c:c0:b5:f5:70:2a:39:8f:82:c8:8f:01:1e:e4:
         fc:e1:ea:c7:a7:8c:4b:53:9f:99:a5:3d:5e:d2:91:d0:eb:99:
         6a:95:0e:95:68:87:6f:b0:20:87:65:f8:be:28:2d:9a:4e:68:
         13:62:4b:99:2d:f9:0a:f5:31:97:fb:a6:26:d5:71:36:91:68:
         46:f7:6d:af:27:f8:e3:7b:b8:68:94:cc:f7:0d:e5:fb:bd:d5:
         f0:81:0d:ca:58:74:64:91:48:ad:08:53:a4:42:51:90:7c:1a:
         e2:e0:2a:82:bc:48:96:e7:d0:37:2f:a5:92:1b:81:55:02:41:
         28:fb:7f:d8:11:53:3b:50:fc:d9:2e:45:ef:f4:5e:1e:2f:cd:
         16:b7:90:9b:e9:e7:28:b6:53:34:08:e5:14:4c:88:fc:e7:2a:
         23:1c:0d:75:a3:67:cd:1d:7b:fd:47:5c:ff:c1:a9:b2:83:47:
         ad:d8:db:93:57:42:25:26:79:cb:d2:96:aa:59:f0:b7:fc:ad:
         38:ef:2f:9c:5a:c7:86:18:8d:1e:63:34:6c:ca:92:45:4d:d1:
         78:16:ca:41:cc:2a:6d:6d:38:ed:5c:3f:14:34:af:34:f9:1b:
         9a:20:a5:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 12:51:43 2026 by rpki-client