This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/84da415b-5f17-4602-9bd9-fd84ac2cae86/1/88E12887FF4C1BDD31B6A1B22A293CB91F465AA9.mft
File:                     88E12887FF4C1BDD31B6A1B22A293CB91F465AA9.mft (raw, json)
Hash identifier:          4iYGq74M/yPpSo4D9IFJWszp5QX5oONDnGBT899+7kQ=
Subject key identifier:   EA:70:AD:9D:CF:0B:16:BF:30:10:3A:76:CB:C9:ED:93:C1:66:D6:85
Authority key identifier: 88:E1:28:87:FF:4C:1B:DD:31:B6:A1:B2:2A:29:3C:B9:1F:46:5A:A9
Certificate issuer:       /CN=88E12887FF4C1BDD31B6A1B22A293CB91F465AA9
Certificate serial:       0B723B3C66354F4ADC1BB2EF186F0C44F585C414
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/88E12887FF4C1BDD31B6A1B22A293CB91F465AA9.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/84da415b-5f17-4602-9bd9-fd84ac2cae86/1/88E12887FF4C1BDD31B6A1B22A293CB91F465AA9.mft
Manifest number:          010C
Signing time:             Fri 30 Jan 2026 22:01:32 +0000
Manifest this update:     Fri 30 Jan 2026 21:56:32 +0000
Manifest next update:     Tue 03 Feb 2026 08:51:32 +0000
Files and hashes:         1: 88E12887FF4C1BDD31B6A1B22A293CB91F465AA9.crl (hash: l/K/ZsT0U2P+ENHMhgh9vRkCIG9jx8OML3QvZTmrg9o=)
                          2: 3130332e3137322e3137322e302f32342d3234203d3e20313437303838.roa (hash: JKkCiBj1Ft4d/bxCb4U2iXHDOP8sJDEhV8ZeubcbaQE=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/84da415b-5f17-4602-9bd9-fd84ac2cae86/1/88E12887FF4C1BDD31B6A1B22A293CB91F465AA9.crl
                          rsync://repo-rpki.idnic.net/repo/84da415b-5f17-4602-9bd9-fd84ac2cae86/1/88E12887FF4C1BDD31B6A1B22A293CB91F465AA9.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/88E12887FF4C1BDD31B6A1B22A293CB91F465AA9.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 03 Feb 2026 08:51:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:72:3b:3c:66:35:4f:4a:dc:1b:b2:ef:18:6f:0c:44:f5:85:c4:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88E12887FF4C1BDD31B6A1B22A293CB91F465AA9
        Validity
            Not Before: Jan 30 21:56:32 2026 GMT
            Not After : Feb  3 08:51:32 2026 GMT
        Subject: CN=EA70AD9DCF0B16BF30103A76CBC9ED93C166D685
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:f5:60:fc:23:5f:22:7b:18:5a:75:93:57:b8:
                    1f:a1:4b:2f:4b:d7:24:39:90:44:f0:3a:b1:3b:e0:
                    e7:e1:d1:0c:de:b2:9a:f9:8c:08:94:b9:8b:30:ea:
                    9a:8c:3e:36:6a:40:20:8d:3b:6f:0d:5b:f2:b5:0e:
                    94:35:c3:02:ee:f4:61:05:20:6b:4a:fa:a8:f6:7a:
                    e5:59:c6:45:91:99:2c:db:65:80:dc:80:ec:6d:e9:
                    58:33:21:ca:59:d0:be:42:41:73:10:8d:01:13:29:
                    9f:40:b8:8d:30:ee:37:e2:45:85:0b:f1:b6:3a:da:
                    5c:1c:d6:9f:de:42:8b:7c:85:a6:04:c0:8d:80:05:
                    60:6d:a4:da:94:49:45:60:9b:b9:1e:b5:6c:5b:43:
                    f6:fa:73:36:3b:47:89:8b:85:52:0b:11:9c:f4:ce:
                    50:b2:c9:35:cb:83:a8:f1:d0:94:cc:bc:6e:cd:43:
                    8a:d5:47:5f:a4:b6:fa:24:ac:36:0a:6d:a4:50:8b:
                    a3:ff:42:c4:a0:ae:6b:5b:66:a4:97:dc:d5:89:2d:
                    99:d6:34:84:e6:1b:fb:e2:5e:e9:2b:f0:1d:43:a6:
                    ab:8c:11:86:ee:94:70:7a:80:30:df:b1:c4:73:fc:
                    ca:a7:24:79:6e:8f:5d:2d:3a:6a:23:0f:75:4f:bb:
                    f4:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:70:AD:9D:CF:0B:16:BF:30:10:3A:76:CB:C9:ED:93:C1:66:D6:85
            X509v3 Authority Key Identifier:
                keyid:88:E1:28:87:FF:4C:1B:DD:31:B6:A1:B2:2A:29:3C:B9:1F:46:5A:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/84da415b-5f17-4602-9bd9-fd84ac2cae86/1/88E12887FF4C1BDD31B6A1B22A293CB91F465AA9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/88E12887FF4C1BDD31B6A1B22A293CB91F465AA9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/84da415b-5f17-4602-9bd9-fd84ac2cae86/1/88E12887FF4C1BDD31B6A1B22A293CB91F465AA9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:6e:47:ac:02:b3:bc:3b:0d:20:7b:f2:01:f6:18:31:de:74:
         de:c4:32:cb:bf:39:af:0c:3d:7f:81:20:60:4a:9c:18:55:bb:
         99:03:14:fa:51:23:fe:d4:52:a6:3b:a6:a3:26:95:f0:91:94:
         46:36:b2:02:25:92:98:be:3a:b5:99:9c:31:2a:ff:c0:a2:55:
         12:1f:ce:2b:db:4b:28:56:cb:00:94:63:ea:29:64:05:c6:39:
         10:59:47:8b:06:14:6f:60:52:3f:be:bb:d2:75:98:f7:9c:10:
         73:46:f8:08:60:4f:21:89:fc:64:b4:9c:53:19:45:6c:66:58:
         f5:13:84:52:35:46:14:40:9f:24:18:5d:51:3d:15:89:02:db:
         16:0c:fa:d5:a7:bc:a9:ce:54:c3:47:e1:f5:b3:31:63:09:fd:
         34:3d:a6:08:38:2d:91:68:e6:c5:77:ab:52:1e:4f:87:09:c6:
         06:36:ee:c2:42:32:b9:cf:b3:22:06:0b:96:ee:14:a0:c8:73:
         dd:70:11:2c:05:45:7e:7d:a6:00:68:6c:02:c0:73:07:1b:b6:
         d5:43:10:dd:2a:6c:e3:be:f0:a6:e1:d8:05:65:bd:f5:e5:99:
         a9:8a:e0:99:1e:dc:aa:fc:52:7c:9f:6f:5d:66:bf:8b:c7:df:
         2f:3c:15:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 09:52:05 2026 by rpki-client