This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/89ad314a-7657-4901-b7dd-3b9a9bfc6e9c/0/D018BF43793F56145B87233DD668DE3BDEEFFE13.mft
File:                     D018BF43793F56145B87233DD668DE3BDEEFFE13.mft (raw, json)
Hash identifier:          3EHbvzzl0uevlrt9ttPnKPbxpKSWR+OFA3GnPjYoce0=
Subject key identifier:   86:95:2C:F3:C9:21:63:E3:58:DA:63:42:1A:B4:D5:D7:F0:44:37:5C
Authority key identifier: D0:18:BF:43:79:3F:56:14:5B:87:23:3D:D6:68:DE:3B:DE:EF:FE:13
Certificate issuer:       /CN=D018BF43793F56145B87233DD668DE3BDEEFFE13
Certificate serial:       782AF7D43C0DA3E835EB6179955CAD77CCCDE58B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D018BF43793F56145B87233DD668DE3BDEEFFE13.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/89ad314a-7657-4901-b7dd-3b9a9bfc6e9c/0/D018BF43793F56145B87233DD668DE3BDEEFFE13.mft
Manifest number:          9B
Signing time:             Mon 02 Feb 2026 03:51:19 +0000
Manifest this update:     Mon 02 Feb 2026 03:46:19 +0000
Manifest next update:     Thu 05 Feb 2026 09:24:19 +0000
Files and hashes:         1: D018BF43793F56145B87233DD668DE3BDEEFFE13.crl (hash: TBFs/jgMz4jLaJI/Ia9JC3DWnFYSJEI9oKU5HL02J5M=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/89ad314a-7657-4901-b7dd-3b9a9bfc6e9c/0/D018BF43793F56145B87233DD668DE3BDEEFFE13.crl
                          rsync://repo-rpki.idnic.net/repo/89ad314a-7657-4901-b7dd-3b9a9bfc6e9c/0/D018BF43793F56145B87233DD668DE3BDEEFFE13.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D018BF43793F56145B87233DD668DE3BDEEFFE13.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 05 Feb 2026 05:24:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:2a:f7:d4:3c:0d:a3:e8:35:eb:61:79:95:5c:ad:77:cc:cd:e5:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D018BF43793F56145B87233DD668DE3BDEEFFE13
        Validity
            Not Before: Feb  2 03:46:19 2026 GMT
            Not After : Feb  5 09:24:19 2026 GMT
        Subject: CN=86952CF3C92163E358DA63421AB4D5D7F044375C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:94:3e:47:de:68:37:33:03:1a:2c:99:c7:9e:
                    f2:ea:34:72:c0:4d:77:cf:3b:bd:2d:e8:d9:30:0b:
                    41:fe:62:a3:72:d1:3b:c8:c2:48:b3:e6:e4:b4:1a:
                    3c:64:4f:b0:6d:45:ae:90:fe:bd:e2:7f:33:e4:9e:
                    2c:e8:af:a4:4c:25:61:29:87:ae:eb:fb:04:17:ae:
                    c8:58:b9:ca:a4:61:2a:ef:52:f8:8a:22:af:1a:0b:
                    e3:00:a9:28:7e:f0:7b:65:68:3d:a5:9c:2f:6e:87:
                    67:a6:9d:82:c7:de:22:65:26:9a:b3:03:c7:a2:71:
                    87:50:f2:bf:db:9c:29:2f:a8:9f:c0:5b:dd:31:3e:
                    fa:33:9e:6c:c4:f6:c2:8d:4e:6a:5c:6b:f7:1b:6f:
                    70:f2:d4:26:02:ee:50:86:3d:8d:ca:0c:51:30:a9:
                    d3:8f:8f:4e:14:ab:b0:00:20:d0:e3:2c:f6:26:bb:
                    b1:7f:f5:fe:9b:58:84:a6:dd:0c:ff:f2:a9:b1:90:
                    c9:99:03:fc:7e:c6:cd:44:9c:09:5d:90:bf:3c:6e:
                    43:62:96:ff:6b:04:a7:cf:1a:b9:f9:e0:62:98:2d:
                    f2:33:71:52:8c:79:e5:b7:cb:1f:33:ce:05:ed:67:
                    4a:5b:59:42:34:39:31:b7:2a:d0:e5:98:7d:54:90:
                    e1:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:95:2C:F3:C9:21:63:E3:58:DA:63:42:1A:B4:D5:D7:F0:44:37:5C
            X509v3 Authority Key Identifier:
                keyid:D0:18:BF:43:79:3F:56:14:5B:87:23:3D:D6:68:DE:3B:DE:EF:FE:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/89ad314a-7657-4901-b7dd-3b9a9bfc6e9c/0/D018BF43793F56145B87233DD668DE3BDEEFFE13.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D018BF43793F56145B87233DD668DE3BDEEFFE13.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/89ad314a-7657-4901-b7dd-3b9a9bfc6e9c/0/D018BF43793F56145B87233DD668DE3BDEEFFE13.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:d3:06:e1:63:99:d4:d2:a1:8b:a4:9c:03:f9:fa:01:a6:f3:
         9f:ba:3d:37:19:54:c6:7c:6e:b0:d7:1d:09:71:e7:b6:00:99:
         b2:fb:e2:f5:da:b8:69:74:d8:55:e5:4e:2a:d9:6a:7b:39:e4:
         70:0a:d0:53:40:a6:6a:81:78:97:e0:56:a3:43:b1:5c:9a:92:
         24:07:85:42:33:44:e1:48:1d:bb:c0:0f:e0:e5:ac:52:d0:58:
         88:44:ad:47:b8:7b:99:7a:07:46:7d:2d:0d:9c:c8:e6:ed:2c:
         af:bb:9f:dd:02:e4:83:99:f7:90:aa:d5:ec:03:a6:58:25:6a:
         ac:a4:04:a9:de:01:65:b0:ee:23:c7:5e:79:b0:13:6c:45:9e:
         e7:f1:fe:4e:ca:fe:3e:0e:ce:f8:68:1f:5c:4c:25:b1:23:e9:
         1c:f2:9c:3b:aa:f3:88:29:e1:ab:f3:6d:4e:87:a4:e5:a7:c1:
         6d:e4:0c:a5:64:39:fd:48:68:8e:1f:1f:38:8c:2e:d2:31:34:
         c3:9e:27:1c:19:3a:52:ac:f6:02:ce:29:8c:a9:ca:b8:25:e3:
         86:4a:15:62:8d:ac:f9:92:f5:8b:8e:be:5a:f6:cd:e4:93:bc:
         54:1a:6e:9b:8f:c6:87:3c:01:23:2a:f3:a2:88:b5:8a:36:3f:
         8e:dc:9b:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 10:05:28 2026 by rpki-client