This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/8f3151db-1330-4e70-9cc4-9b8fcd5ed2d2/0/01A283E5CA4698591C4AA0127AA71B68D6B8C690.mft
File:                     01A283E5CA4698591C4AA0127AA71B68D6B8C690.mft (raw, json)
Hash identifier:          sixdsSLzfedvvUwwmMGS0W5C6ppQ2rcpx0oTCLE/7Pw=
Subject key identifier:   BC:85:AA:18:93:B8:F3:18:23:8A:3F:23:8B:F7:B5:EA:7D:3E:42:1C
Authority key identifier: 01:A2:83:E5:CA:46:98:59:1C:4A:A0:12:7A:A7:1B:68:D6:B8:C6:90
Certificate issuer:       /CN=01A283E5CA4698591C4AA0127AA71B68D6B8C690
Certificate serial:       2ECC718CD6DFDB897D2F918998461BF93C439B96
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/01A283E5CA4698591C4AA0127AA71B68D6B8C690.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/8f3151db-1330-4e70-9cc4-9b8fcd5ed2d2/0/01A283E5CA4698591C4AA0127AA71B68D6B8C690.mft
Manifest number:          04A6
Signing time:             Sun 01 Feb 2026 04:02:23 +0000
Manifest this update:     Sun 01 Feb 2026 03:57:23 +0000
Manifest next update:     Wed 04 Feb 2026 09:45:23 +0000
Files and hashes:         1: 3130332e3136322e31362e302f32332d3234203d3e20313431363336.roa (hash: x0J0SWYdQITQpgISzoI/wH0SDCf243P4/o0ZHJotSPU=)
                          2: 01A283E5CA4698591C4AA0127AA71B68D6B8C690.crl (hash: l5RxMxYwdoFMXWJOzidGHq/WyjfTqAydFp/8bQgLaak=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/8f3151db-1330-4e70-9cc4-9b8fcd5ed2d2/0/01A283E5CA4698591C4AA0127AA71B68D6B8C690.crl
                          rsync://repo-rpki.idnic.net/repo/8f3151db-1330-4e70-9cc4-9b8fcd5ed2d2/0/01A283E5CA4698591C4AA0127AA71B68D6B8C690.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/01A283E5CA4698591C4AA0127AA71B68D6B8C690.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 04 Feb 2026 09:45:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:cc:71:8c:d6:df:db:89:7d:2f:91:89:98:46:1b:f9:3c:43:9b:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01A283E5CA4698591C4AA0127AA71B68D6B8C690
        Validity
            Not Before: Feb  1 03:57:23 2026 GMT
            Not After : Feb  4 09:45:23 2026 GMT
        Subject: CN=BC85AA1893B8F318238A3F238BF7B5EA7D3E421C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:8a:eb:56:1a:7f:af:10:96:01:af:2a:9f:cb:
                    04:aa:a8:64:72:df:6c:05:ab:9e:06:b8:14:67:0b:
                    f8:9c:53:35:06:83:d8:b9:e1:b1:2d:41:52:8a:37:
                    3c:50:98:62:c8:3a:b6:8d:d6:d2:51:3f:9b:0f:64:
                    e1:07:c5:6e:7e:c3:de:44:99:73:35:68:d4:9e:9d:
                    73:67:8b:0f:88:98:3f:b3:0c:9d:e6:d1:61:e3:49:
                    7d:0a:c4:c0:31:7d:74:d2:07:fb:87:ca:b7:55:16:
                    ca:07:57:be:de:e5:a5:51:8e:60:c0:ad:32:f9:f8:
                    91:ab:b5:8e:e9:f3:a8:2f:f2:37:48:11:18:0a:f7:
                    87:5e:51:f7:43:a4:9d:6b:f9:ab:4c:8b:cf:3a:79:
                    b0:03:1b:44:d5:b2:ed:13:95:a4:2a:3e:03:7f:e9:
                    03:e0:f2:d7:41:bf:53:4c:e4:87:ff:b6:d7:16:9e:
                    c9:6d:ed:39:ff:0a:13:35:0e:f7:15:11:cb:16:82:
                    17:30:37:6c:e3:19:3d:b6:82:ba:5f:c5:2f:ce:b3:
                    30:3c:76:f3:5c:cd:5d:0d:da:38:22:0d:33:15:c5:
                    4c:f9:54:79:5e:f2:63:2c:45:1c:58:e7:8a:b7:12:
                    46:5b:3d:78:ab:3f:f4:7c:2f:c9:37:1a:5f:50:fe:
                    14:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:85:AA:18:93:B8:F3:18:23:8A:3F:23:8B:F7:B5:EA:7D:3E:42:1C
            X509v3 Authority Key Identifier:
                keyid:01:A2:83:E5:CA:46:98:59:1C:4A:A0:12:7A:A7:1B:68:D6:B8:C6:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/8f3151db-1330-4e70-9cc4-9b8fcd5ed2d2/0/01A283E5CA4698591C4AA0127AA71B68D6B8C690.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/01A283E5CA4698591C4AA0127AA71B68D6B8C690.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8f3151db-1330-4e70-9cc4-9b8fcd5ed2d2/0/01A283E5CA4698591C4AA0127AA71B68D6B8C690.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:38:69:97:4d:6c:23:24:0c:06:cc:9d:fb:98:48:90:e6:eb:
         d6:84:e3:86:86:71:de:20:4e:e3:5d:bf:60:6a:f7:43:66:71:
         a3:1b:b9:41:eb:14:ec:a9:52:af:f8:a7:9e:87:88:e0:ac:d6:
         de:38:42:d5:b9:74:2a:af:e7:34:d2:33:c6:92:b1:97:9f:bb:
         c0:fb:bb:fe:b5:36:65:c4:4a:d7:bb:3d:ec:26:87:2b:56:b4:
         a7:a7:f5:50:b7:5f:3d:ac:68:72:6c:06:4c:be:11:37:84:1a:
         a3:ba:ee:39:02:67:9c:9b:0a:ff:af:da:61:91:51:8b:05:5e:
         c9:59:a6:ee:85:ab:de:05:d0:30:ec:8e:8a:9a:e2:b9:e2:98:
         21:4b:40:f4:6e:f6:26:37:32:78:4e:e3:84:3f:71:3f:e1:42:
         0f:b3:85:97:db:a7:a7:bb:a6:14:d5:b7:61:06:6d:82:e6:12:
         ff:8b:da:a6:6f:02:6a:5c:37:25:ef:8b:2a:02:4b:9b:f4:85:
         d9:9d:ba:3d:07:f1:cb:29:64:38:bc:40:58:dc:62:03:6e:5e:
         7a:b8:8d:31:cc:3d:fa:d6:fe:7d:08:e7:ee:d4:67:46:e9:ab:
         59:4a:6a:91:52:e8:bf:d7:1d:08:03:e2:e8:7d:c7:61:7a:f5:
         51:1a:ce:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 10:02:53 2026 by rpki-client