This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/902b78ad-df23-43e2-a94d-3b454cbc7fc5/0/2A865CA2F4F70CCCB03F98C2B6E17E893AB87D0C.mft
File:                     2A865CA2F4F70CCCB03F98C2B6E17E893AB87D0C.mft (raw, json)
Hash identifier:          N6HrvgU4a5LS9zsyhzNQ4aq70KMcOQP8YOZvUkSUo8Q=
Subject key identifier:   63:CB:C5:1B:90:6B:32:FF:8C:46:57:85:72:5F:20:A8:75:34:B6:37
Authority key identifier: 2A:86:5C:A2:F4:F7:0C:CC:B0:3F:98:C2:B6:E1:7E:89:3A:B8:7D:0C
Certificate issuer:       /CN=2A865CA2F4F70CCCB03F98C2B6E17E893AB87D0C
Certificate serial:       4FE125394C0BC4A78FEA236C325F525D242CDBFD
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2A865CA2F4F70CCCB03F98C2B6E17E893AB87D0C.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/902b78ad-df23-43e2-a94d-3b454cbc7fc5/0/2A865CA2F4F70CCCB03F98C2B6E17E893AB87D0C.mft
Manifest number:          0245
Signing time:             Sun 01 Feb 2026 07:51:58 +0000
Manifest this update:     Sun 01 Feb 2026 07:46:58 +0000
Manifest next update:     Wed 04 Feb 2026 19:48:58 +0000
Files and hashes:         1: 2A865CA2F4F70CCCB03F98C2B6E17E893AB87D0C.crl (hash: YROpsEkjpoJcEOr+cm1yJUfhzF8Rued3unRxQZKsp74=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/902b78ad-df23-43e2-a94d-3b454cbc7fc5/0/2A865CA2F4F70CCCB03F98C2B6E17E893AB87D0C.crl
                          rsync://repo-rpki.idnic.net/repo/902b78ad-df23-43e2-a94d-3b454cbc7fc5/0/2A865CA2F4F70CCCB03F98C2B6E17E893AB87D0C.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2A865CA2F4F70CCCB03F98C2B6E17E893AB87D0C.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 04 Feb 2026 19:48:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:e1:25:39:4c:0b:c4:a7:8f:ea:23:6c:32:5f:52:5d:24:2c:db:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A865CA2F4F70CCCB03F98C2B6E17E893AB87D0C
        Validity
            Not Before: Feb  1 07:46:58 2026 GMT
            Not After : Feb  4 19:48:58 2026 GMT
        Subject: CN=63CBC51B906B32FF8C465785725F20A87534B637
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:b3:61:63:20:7d:6f:d2:f4:ea:c0:2a:8e:fa:
                    42:25:3f:17:97:9d:d6:5b:fa:63:d7:0f:62:f6:ca:
                    91:5d:66:7b:e3:ce:23:d8:cf:64:ec:51:04:74:6b:
                    20:0e:9e:e9:23:5a:92:40:4d:9a:f6:93:e1:b1:bc:
                    07:39:18:88:f4:90:0f:82:3c:28:fe:7c:b5:b7:cb:
                    60:12:66:0d:27:73:ab:3e:01:3d:e5:29:34:37:7b:
                    d6:fa:2e:d5:81:50:7f:38:2d:df:a2:c3:57:10:29:
                    65:89:39:31:dc:5d:f4:b7:6a:cf:ca:a4:6e:21:20:
                    f4:3e:d3:e8:07:b8:f8:4e:97:5b:29:2b:ba:70:b5:
                    b3:c5:4a:20:10:b3:e1:88:d7:9b:ec:7f:36:87:5b:
                    76:70:9b:3f:6f:f8:bf:9d:c8:ac:6d:fb:70:28:24:
                    6c:fb:f4:7a:82:ce:6e:01:04:df:42:6f:0b:15:6e:
                    85:80:c9:3b:cc:ec:f2:cc:51:db:e3:4f:73:54:25:
                    5d:4a:02:5b:f6:81:f9:8f:c6:5e:13:93:29:0e:f3:
                    10:b6:2f:db:8a:2f:f7:33:12:35:01:0c:4d:61:67:
                    02:79:65:d5:87:ab:52:65:bf:25:17:c8:f4:6e:e1:
                    52:b3:e9:14:53:ff:a3:5b:03:cc:fb:dd:80:d5:05:
                    1d:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:CB:C5:1B:90:6B:32:FF:8C:46:57:85:72:5F:20:A8:75:34:B6:37
            X509v3 Authority Key Identifier:
                keyid:2A:86:5C:A2:F4:F7:0C:CC:B0:3F:98:C2:B6:E1:7E:89:3A:B8:7D:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/902b78ad-df23-43e2-a94d-3b454cbc7fc5/0/2A865CA2F4F70CCCB03F98C2B6E17E893AB87D0C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2A865CA2F4F70CCCB03F98C2B6E17E893AB87D0C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/902b78ad-df23-43e2-a94d-3b454cbc7fc5/0/2A865CA2F4F70CCCB03F98C2B6E17E893AB87D0C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:bd:b3:8f:5c:7f:7f:9f:60:85:6d:5b:7f:55:79:77:20:d3:
         26:62:8c:95:35:21:b7:67:58:17:1f:d6:da:aa:e2:55:21:18:
         4e:81:d3:0a:bd:88:48:00:9b:26:15:b4:7a:7a:93:c9:39:e4:
         72:2d:61:b7:16:83:14:94:ed:e0:d0:c9:bd:fa:64:5a:36:eb:
         d0:92:1f:b6:16:dd:99:07:c8:c5:f4:1c:0f:61:99:9b:33:2f:
         cd:33:a0:26:87:d9:2a:f0:b1:d6:e9:2c:55:24:70:d0:77:45:
         78:6f:a8:1b:06:12:4c:c1:96:ca:e0:ba:54:3b:ba:80:bf:c2:
         b3:07:3d:2c:60:f6:f2:12:34:72:db:5a:ad:42:68:37:22:b1:
         17:6d:be:74:18:94:bc:e8:af:ef:6d:38:14:3d:91:9c:53:c8:
         ad:63:0e:db:e1:27:28:00:f6:3d:cc:49:e8:7b:5c:df:31:63:
         2f:e9:77:4c:cc:da:e1:35:d7:63:da:35:e7:3e:c4:8b:a0:b5:
         11:8e:e2:46:7d:34:02:97:d1:2c:8c:e0:d7:38:ef:15:a9:57:
         e1:50:f9:54:23:3d:72:93:fe:e3:2a:4b:75:a8:83:aa:24:c9:
         da:f3:16:94:79:46:10:36:da:28:96:5d:04:cc:60:fb:08:78:
         2a:c4:a0:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 09:43:08 2026 by rpki-client